$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft File: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json) Hash identifier: l9zaHlv6DPFPvGBzLPJG3/Dvn/sevD7nz70rUsWRAYA= Subject key identifier: F3:E1:B6:86:0B:81:05:7E:AD:AA:03:17:09:4C:BB:A6:10:8F:94:A3 Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 Certificate issuer: /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Certificate serial: 2F23B181BF7E51AAD60B60E1F2A6243950FD0DA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft Manifest number: 023A Signing time: Sun 19 Apr 2026 09:00:05 +0000 Manifest this update: Sun 19 Apr 2026 08:55:05 +0000 Manifest next update: Wed 22 Apr 2026 09:35:05 +0000 Files and hashes: 1: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: LzKtzGuEbfDW0jtLTU7kT2DtH5a2AT6KWG3iMTEgjtw=) 2: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: 2pmnEjpV6xKfD9pUClZgIAGRZy9Yz1iTckvB+l+9+U4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 09:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:23:b1:81:bf:7e:51:aa:d6:0b:60:e1:f2:a6:24:39:50:fd:0d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Validity Not Before: Apr 19 08:55:05 2026 GMT Not After : Apr 22 09:35:05 2026 GMT Subject: CN=F3E1B6860B81057EADAA0317094CBBA6108F94A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:da:23:37:e1:48:e5:03:4c:fd:37:4d:87: 4b:84:f8:9d:08:9f:f8:1f:db:0d:fc:36:3a:fb:25: 53:f7:5d:d5:5e:4f:6f:a2:f9:95:aa:d4:99:be:fd: 7b:a8:7a:60:0c:76:42:b9:cc:38:4d:77:e2:b0:68: 9b:2d:e2:d6:bf:a3:43:17:e8:2b:34:fe:3f:43:b6: 4b:e5:92:a9:e0:a2:c8:43:b5:50:f1:1a:88:39:c6: 7d:a0:39:a6:01:e5:c3:77:61:65:21:6c:37:b7:97: 03:5a:03:45:62:42:b0:7c:7d:d7:57:77:b2:6a:88: bd:0d:e4:cd:bd:1a:fe:1c:6e:ea:41:2c:0a:96:51: 2e:5c:ba:3c:76:94:85:93:94:d7:a0:8e:bb:9f:52: ed:3b:d6:ae:a4:59:fe:17:27:55:97:de:c2:97:c2: 94:9a:d2:5e:7d:29:2d:8c:11:09:54:be:ac:45:63: 3f:31:16:12:64:98:c6:c3:ff:0d:1f:d7:7b:43:4d: 86:3b:20:91:5a:b3:c6:fd:0d:54:9b:41:9c:3d:22: 3f:20:47:25:e0:a8:e5:7c:cc:bc:d0:f1:f8:ad:bb: f6:7e:7c:f5:68:03:a1:c5:bf:a0:dc:10:9a:09:85: b2:5c:15:a4:ce:a0:51:fd:ef:f0:17:cf:01:e7:c4: 0a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E1:B6:86:0B:81:05:7E:AD:AA:03:17:09:4C:BB:A6:10:8F:94:A3 X509v3 Authority Key Identifier: keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b6:0b:8f:9b:88:45:f3:aa:d2:0f:4a:78:ff:55:3a:1f:f4: d6:56:e3:6d:98:10:73:45:f3:07:ce:12:4e:8b:9f:5d:37:8e: fa:d1:c6:0e:ec:47:4b:c8:7a:ea:95:bc:7d:49:82:f2:44:c1: a3:9a:97:ca:7e:70:73:f7:fd:22:28:f3:ce:eb:fc:54:22:81: fa:84:c9:ee:a1:aa:6f:fd:2b:fa:af:9f:9b:ab:80:c2:01:d9: c5:fc:24:77:10:80:86:66:6c:3b:2b:e0:ee:ff:36:62:a2:8c: 1a:ed:e9:02:6e:19:a6:e0:0f:51:b1:d2:35:3b:39:89:53:27: f2:bf:44:92:e1:28:1c:bf:83:4d:56:30:25:c6:b8:e5:f6:e6: fa:b1:38:bc:6f:8e:92:3f:21:ad:72:6a:63:74:7b:55:d8:fb: 50:26:a3:e8:a3:f4:dc:05:04:39:75:73:5e:37:d5:4a:96:1f: 9b:3f:16:8a:ce:d0:92:cc:c4:80:e8:8e:bd:eb:82:2d:24:3e: 99:06:52:4c:d7:2f:c8:97:1a:3c:13:71:b4:76:c9:ea:91:94: 3b:02:b8:b8:f3:86:b8:1e:2a:96:36:41:dc:61:53:38:0e:78: 3f:c6:4e:47:91:05:c2:a7:0b:6d:a5:6f:2d:d4:2c:61:c7:f3: da:ed:46:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyOxgb9+UarWC2Dh8qYkOVD9DaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4 QjQzRjcyNzAeFw0yNjA0MTkwODU1MDVaFw0yNjA0MjIwOTM1MDVaMDMxMTAvBgNV BAMTKEYzRTFCNjg2MEI4MTA1N0VBREFBMDMxNzA5NENCQkE2MTA4Rjk0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMdojN+FI5QNM/TdNh0uE+J0I n/gf2w38Njr7JVP3XdVeT2+i+ZWq1Jm+/XuoemAMdkK5zDhNd+KwaJst4ta/o0MX 6Cs0/j9DtkvlkqngoshDtVDxGog5xn2gOaYB5cN3YWUhbDe3lwNaA0ViQrB8fddX d7JqiL0N5M29Gv4cbupBLAqWUS5cujx2lIWTlNegjrufUu071q6kWf4XJ1WX3sKX wpSa0l59KS2MEQlUvqxFYz8xFhJkmMbD/w0f13tDTYY7IJFas8b9DVSbQZw9Ij8g RyXgqOV8zLzQ8fitu/Z+fPVoA6HFv6DcEJoJhbJcFaTOoFH97/AXzwHnxAodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8+G2hguBBX6tqgMXCUy7phCPlKMwHwYDVR0j BBgwFoAUPt3KQMPwz5ErADuxn5wD5ItD9ycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2RlOGVjZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMC8zRUREQ0E0MEMz RjBDRjkxMkIwMDNCQjE5RjlDMDNFNDhCNDNGNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4QjQz RjcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNkZThlY2UtOTdhMi00YjBkLWEw NjQtMTdjZWE2MWY0NWNjLzAvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAz RTQ4QjQzRjcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKG2C4+biEXzqtIPSnj/VTof9NZW422YEHNF 8wfOEk6Ln103jvrRxg7sR0vIeuqVvH1JgvJEwaOal8p+cHP3/SIo887r/FQigfqE ye6hqm/9K/qvn5urgMIB2cX8JHcQgIZmbDsr4O7/NmKijBrt6QJuGabgD1Gx0jU7 OYlTJ/K/RJLhKBy/g01WMCXGuOX25vqxOLxvjpI/Ia1yamN0e1XY+1Amo+ij9NwF BDl1c1431UqWH5s/ForO0JLMxIDojr3rgi0kPpkGUkzXL8iXGjwTcbR2yeqRlDsC uLjzhrgeKpY2QdxhUzgOeD/GTkeRBcKnC22lby3ULGHH89rtRsQ= -----END CERTIFICATE-----Generated at Sun Apr 19 11:37:44 2026 by rpki-client