$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: FArskRAW8xKISRzpXF8uOll1Ff2/4/h/Tqlf03slyrI= Subject key identifier: E8:C9:3F:57:98:08:E9:9C:46:11:96:AE:FB:80:C5:C6:C3:05:45:9F Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 4304CB00FA06E5F2BD6E5F099FC98CCEC0ADBB9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 015C Signing time: Wed 15 Apr 2026 13:52:21 +0000 Manifest this update: Wed 15 Apr 2026 13:47:21 +0000 Manifest next update: Sun 19 Apr 2026 01:25:21 +0000 Files and hashes: 1: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: XFtwfm9N21PFMaLPIII5uNirsmGNQYK1aehY2XMU8MQ=) 2: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: 4wnS2sZH8ydQ2c5rMhV5ek/5VeknxLlLTX9L0btn8Ls=) 3: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: /uvYv6HXm75DxIAvpZkO8f6t2HrqKvSXY9kmVPmsLBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:04:cb:00:fa:06:e5:f2:bd:6e:5f:09:9f:c9:8c:ce:c0:ad:bb:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Apr 15 13:47:21 2026 GMT Not After : Apr 19 01:25:21 2026 GMT Subject: CN=E8C93F579808E99C461196AEFB80C5C6C305459F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:04:d6:89:61:77:63:e7:82:35:62:72:2b:3b: da:21:fe:35:a5:f8:ad:6d:62:2f:1e:19:c5:f0:2d: 38:29:39:0e:45:74:7a:ed:46:41:76:41:03:9d:f8: 63:c4:59:8c:e0:23:77:c4:12:ed:ec:7a:63:f8:a0: a7:a8:93:68:04:68:d8:ae:ca:74:a3:b2:1d:8c:63: 7e:70:5e:de:5c:4f:e4:73:2e:52:ec:ed:1a:19:ad: e2:28:d5:f1:42:59:bf:5a:f8:23:d1:90:59:2a:f4: d1:ac:94:30:ce:dd:8a:b4:aa:56:12:14:7e:82:3d: df:98:e9:f0:09:2c:57:a4:6b:23:69:86:1f:a6:2d: 1e:23:4f:fc:d8:c1:8f:f8:74:d3:20:17:f4:21:04: 9b:69:6b:51:d8:9a:db:15:22:6d:94:44:9f:11:0e: 22:3c:9a:d3:18:e0:11:e6:01:d1:43:21:a0:97:46: 01:36:30:ff:fa:0c:8d:07:32:fd:0f:fe:d2:b6:c1: 18:ae:e2:4f:36:44:4d:f7:eb:07:ab:fe:04:57:3d: e8:d2:a5:b1:d2:2c:c5:87:36:74:fe:68:22:ba:99: a6:38:2f:b9:d7:09:18:35:54:bf:56:da:e0:ef:ac: 4a:d1:61:0a:ef:d2:4b:be:24:cd:e7:2d:fa:1a:a6: 5d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C9:3F:57:98:08:E9:9C:46:11:96:AE:FB:80:C5:C6:C3:05:45:9F X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:99:38:92:26:3d:ee:36:0b:94:25:d7:fa:2d:c9:72:56:11: b8:c0:0c:b8:04:0b:f4:5c:d6:ee:8f:7f:c7:d4:e5:54:e1:ca: 23:ba:6e:23:30:09:03:90:27:08:7c:c9:73:25:27:d1:83:23: 45:fa:45:7f:72:c4:43:6e:59:7b:0f:83:09:90:c9:bf:0e:53: ff:2c:d2:01:1a:22:e0:68:a7:02:57:65:7b:2f:ca:3d:54:4c: e9:14:87:25:41:d6:b5:7a:c5:20:ac:b7:01:f9:f9:d0:4c:a6: cf:c9:61:4f:98:a0:ad:3d:fb:87:c7:39:62:07:5e:63:29:b3: c6:aa:bb:88:89:11:2c:f9:93:63:95:07:07:19:bf:ee:2d:d1: a0:dd:6d:e8:71:49:57:5c:11:26:f7:ee:0c:1f:c2:f0:dc:9d: a1:17:39:89:08:3a:0a:00:fb:cd:f1:2a:dd:2a:a5:80:7f:4c: 24:ec:d1:73:f3:87:f4:32:6c:8f:7c:2f:47:7e:2f:c5:07:ab: 34:5d:b0:38:42:dc:9b:05:57:73:b8:19:ac:55:3d:63:c2:27: 6d:4c:27:de:c3:57:8a:d7:b6:a3:89:cc:50:aa:32:5b:7f:81: 78:29:e8:89:93:5a:e9:33:3b:8a:f7:8f:3f:5a:45:42:99:8d: 87:58:51:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQwTLAPoG5fK9bl8Jn8mMzsCtu5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNjA0MTUxMzQ3MjFaFw0yNjA0MTkwMTI1MjFaMDMxMTAvBgNV BAMTKEU4QzkzRjU3OTgwOEU5OUM0NjExOTZBRUZCODBDNUM2QzMwNTQ1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqBNaJYXdj54I1YnIrO9oh/jWl +K1tYi8eGcXwLTgpOQ5FdHrtRkF2QQOd+GPEWYzgI3fEEu3semP4oKeok2gEaNiu ynSjsh2MY35wXt5cT+RzLlLs7RoZreIo1fFCWb9a+CPRkFkq9NGslDDO3Yq0qlYS FH6CPd+Y6fAJLFekayNphh+mLR4jT/zYwY/4dNMgF/QhBJtpa1HYmtsVIm2URJ8R DiI8mtMY4BHmAdFDIaCXRgE2MP/6DI0HMv0P/tK2wRiu4k82RE336wer/gRXPejS pbHSLMWHNnT+aCK6maY4L7nXCRg1VL9W2uDvrErRYQrv0ku+JM3nLfoapl09AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Mk/V5gI6ZxGEZau+4DFxsMFRZ8wHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiZOJImPe42C5Ql1/otyXJWEbjADLgEC/Rc 1u6Pf8fU5VThyiO6biMwCQOQJwh8yXMlJ9GDI0X6RX9yxENuWXsPgwmQyb8OU/8s 0gEaIuBopwJXZXsvyj1UTOkUhyVB1rV6xSCstwH5+dBMps/JYU+YoK09+4fHOWIH XmMps8aqu4iJESz5k2OVBwcZv+4t0aDdbehxSVdcESb37gwfwvDcnaEXOYkIOgoA +83xKt0qpYB/TCTs0XPzh/QybI98L0d+L8UHqzRdsDhC3JsFV3O4GaxVPWPCJ21M J97DV4rXtqOJzFCqMlt/gXgp6ImTWukzO4r3jz9aRUKZjYdYUe4= -----END CERTIFICATE-----Generated at Fri Apr 17 21:10:55 2026 by rpki-client