$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json) Hash identifier: Sk1Xe/CTz8itFuZn8AkmwU1O7Tbng93sKRKH7wAPRlc= Subject key identifier: 4E:00:78:0B:3D:6F:41:F0:1A:59:4F:24:F3:BB:5B:F1:03:97:3E:FE Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 7AD7D958810C540F5F1E342EF928EE904E9EA310 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft Manifest number: 0293 Signing time: Fri 17 Apr 2026 15:52:25 +0000 Manifest this update: Fri 17 Apr 2026 15:47:25 +0000 Manifest next update: Tue 21 Apr 2026 02:53:25 +0000 Files and hashes: 1: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=) 2: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=) 3: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=) 4: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=) 5: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=) 6: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: cJFNfS5UPmik4Tu/P1Y8olkkeC16bO4wOvGv71A6WXE=) 7: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=) 8: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=) 9: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: +4eRxaaPV2vRopS5XDVFPXvYPUaeAq1HrL9ZUI2kEKs=) 10: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: wr6UHliebQd7p9YyHhYQ444oA44R+pMzEhtNFNELTlg=) 11: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=) 12: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=) 13: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 02:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d7:d9:58:81:0c:54:0f:5f:1e:34:2e:f9:28:ee:90:4e:9e:a3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Apr 17 15:47:25 2026 GMT Not After : Apr 21 02:53:25 2026 GMT Subject: CN=4E00780B3D6F41F01A594F24F3BB5BF103973EFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:ef:30:c3:ae:dc:cd:66:54:2a:fd:c2:fa: 9a:3a:80:2f:c9:a8:2c:09:20:2f:41:3d:97:c5:e8: e8:78:e1:2e:b3:69:4a:2e:fe:77:e0:ae:bd:31:36: 37:a1:c0:fe:11:c1:75:69:a5:41:ab:ca:e9:d3:a2: 90:47:64:bd:54:35:23:f1:eb:8c:f3:30:67:56:a7: e3:28:ea:4d:bb:a6:e6:9a:ba:4c:13:23:60:a3:75: 41:b3:24:ec:f1:64:4e:e6:7d:da:5f:0e:54:e6:f9: 14:0a:f3:86:ac:ba:81:6e:32:be:96:b2:cb:35:82: c6:0b:3d:d2:62:7e:85:e2:89:1a:c6:f1:a6:cf:53: b4:7b:80:67:a2:0f:bc:94:06:e5:b3:1e:1c:47:f6: 11:10:d4:50:fe:d9:2b:80:bc:a0:ae:d7:d3:45:ad: a2:8e:72:17:b8:df:cf:d8:89:ec:fc:8b:94:d9:54: 0f:dc:f5:bc:d5:65:84:bb:c1:9d:93:4b:ed:7f:ae: d8:f4:c8:14:d0:cd:38:6c:e1:c3:4c:3a:eb:8c:78: 7f:e5:c8:5b:b3:1d:e9:6f:21:76:e2:79:a0:77:88: ae:55:c1:37:8e:5d:8d:cb:c0:b4:43:02:d7:3f:cd: 15:e1:c1:f8:7a:b9:b9:20:7f:c5:7d:2d:7e:66:72: 57:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:78:0B:3D:6F:41:F0:1A:59:4F:24:F3:BB:5B:F1:03:97:3E:FE X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:db:7c:ef:58:a4:8e:5b:99:48:04:4f:d7:1e:7d:c0:73:17: ec:5c:ea:a3:09:54:a0:e5:8c:55:4a:49:89:fc:c6:06:89:8b: 93:f0:41:e5:41:8a:c6:93:a5:a0:53:e2:13:27:1d:59:ad:14: 30:7b:cc:d0:46:94:90:d0:12:c6:43:a8:c5:43:55:e8:00:a7: fa:35:2f:51:46:f1:76:e6:89:64:c6:28:e9:ee:7d:93:ce:a1: 35:9b:8e:16:4b:89:7d:b3:5e:33:85:53:6c:e8:eb:9e:3c:fa: 50:6e:16:24:45:24:c3:4a:10:98:66:68:99:0b:bc:85:da:be: ec:3d:41:fb:d0:d9:ec:2b:32:f0:cb:2b:6a:54:ff:5d:fa:56: fb:34:73:4e:7e:b5:6c:48:ed:8c:c9:2a:bb:f8:d3:96:ab:49: 09:d8:75:1d:31:fd:67:88:a6:62:bf:a4:65:36:95:83:dc:1c: 8c:08:40:c5:60:59:87:45:90:9c:73:37:9e:ba:a2:be:8e:b1: a0:7b:bf:9a:0b:f3:bf:74:11:1a:d8:06:cc:98:ca:8d:fc:fd: 70:d9:6f:9a:b8:83:f9:24:38:81:bc:04:7f:bf:12:a6:65:aa: 59:5a:f2:75:8d:19:3e:7c:ae:8e:6b:a3:66:dc:b4:0a:83:f4: c7:07:15:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUetfZWIEMVA9fHjQu+SjukE6eoxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNjA0MTcxNTQ3MjVaFw0yNjA0MjEwMjUzMjVaMDMxMTAvBgNV BAMTKDRFMDA3ODBCM0Q2RjQxRjAxQTU5NEYyNEYzQkI1QkYxMDM5NzNFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKne8ww67czWZUKv3C+po6gC/J qCwJIC9BPZfF6Oh44S6zaUou/nfgrr0xNjehwP4RwXVppUGryunTopBHZL1UNSPx 64zzMGdWp+Mo6k27puaaukwTI2CjdUGzJOzxZE7mfdpfDlTm+RQK84asuoFuMr6W sss1gsYLPdJifoXiiRrG8abPU7R7gGeiD7yUBuWzHhxH9hEQ1FD+2SuAvKCu19NF raKOche438/Yiez8i5TZVA/c9bzVZYS7wZ2TS+1/rtj0yBTQzThs4cNMOuuMeH/l yFuzHelvIXbieaB3iK5VwTeOXY3LwLRDAtc/zRXhwfh6ubkgf8V9LX5mclefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTgB4Cz1vQfAaWU8k87tb8QOXPv4wHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0 YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3bfO9YpI5bmUgET9cefcBzF+xc6qMJVKDl jFVKSYn8xgaJi5PwQeVBisaTpaBT4hMnHVmtFDB7zNBGlJDQEsZDqMVDVegAp/o1 L1FG8XbmiWTGKOnufZPOoTWbjhZLiX2zXjOFU2zo6548+lBuFiRFJMNKEJhmaJkL vIXavuw9QfvQ2ewrMvDLK2pU/136Vvs0c05+tWxI7YzJKrv405arSQnYdR0x/WeI pmK/pGU2lYPcHIwIQMVgWYdFkJxzN566or6OsaB7v5oL8790ERrYBsyYyo38/XDZ b5q4g/kkOIG8BH+/EqZlqlla8nWNGT58ro5ro2bctAqD9McHFas= -----END CERTIFICATE-----Generated at Sat Apr 18 00:02:36 2026 by rpki-client