$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft File: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft (raw, json) Hash identifier: IRz989OrOFUB4UaZ6tlY6iEOR+9En23kPm9NOSnKCtk= Subject key identifier: B1:76:5D:44:67:30:E5:69:DD:F0:58:13:34:5C:70:BC:3F:BB:8E:59 Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Certificate serial: 6722218089B5700DF9D926E197E3502187D6EBDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft Manifest number: 026E Signing time: Fri 17 Apr 2026 09:42:11 +0000 Manifest this update: Fri 17 Apr 2026 09:37:11 +0000 Manifest next update: Mon 20 Apr 2026 16:52:11 +0000 Files and hashes: 1: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: 51ekgtNLYDLFINvFYDj/N8stn5dpVipAbdc9vPbRQ7I=) 2: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl (hash: I0x0XqKBvvteKLOBTwtZnjdmKuwYadXcjotx+cYkF1g=) 3: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: xOxv8Fz6Tpmz/YRUuUjQ79JRZubX1fq53E188IFgqko=) 4: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: 8e+1wP0igCl8ySWWw4cagUwBCAMaKEsf+lcRjBN0WSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:22:21:80:89:b5:70:0d:f9:d9:26:e1:97:e3:50:21:87:d6:eb:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Validity Not Before: Apr 17 09:37:11 2026 GMT Not After : Apr 20 16:52:11 2026 GMT Subject: CN=B1765D446730E569DDF05813345C70BC3FBB8E59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:2d:45:66:3c:9c:c9:91:d1:6c:76:ac:0f: 6b:c2:07:d8:23:49:14:98:a8:1a:8f:93:9c:ab:c1: f7:b7:c5:34:f0:9c:73:00:47:a6:dc:23:dd:be:ff: f8:aa:58:52:59:ff:8d:c2:70:12:ca:3a:be:aa:e8: 9a:d8:46:a2:fd:32:15:02:0a:3c:71:ee:1b:24:7b: 70:69:2a:a4:b0:4d:ec:11:0e:ba:b4:9c:b9:6a:a8: 4c:47:8c:e0:93:56:37:1c:f5:32:fd:3a:11:b7:30: 33:a3:86:cc:32:d5:9d:03:9e:2e:2b:c5:7a:46:8e: e7:9d:b4:36:a4:9c:fb:36:e2:12:9b:fa:f0:22:79: 54:f8:43:05:3b:f7:eb:6d:2b:f6:54:44:1d:87:ed: f5:5a:60:53:90:3e:90:f3:4c:de:8c:2d:37:62:36: 52:c1:c7:73:9a:39:06:0b:61:19:c7:e0:30:0d:12: 5d:df:20:46:ef:42:96:70:e3:e8:04:b5:3c:4f:0d: 48:a2:3e:7c:de:13:a9:ae:8b:40:4d:2a:88:b1:d8: 11:0c:1f:38:1d:fe:42:0f:62:4a:68:d6:c0:7f:6f: 87:05:fe:5e:0d:f8:6f:00:a6:3d:99:88:a9:8d:99: bc:ef:26:96:e9:7e:bd:0f:1b:b4:32:d3:0b:ef:2f: de:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:76:5D:44:67:30:E5:69:DD:F0:58:13:34:5C:70:BC:3F:BB:8E:59 X509v3 Authority Key Identifier: keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:79:1c:ce:48:4a:9e:1c:11:f1:45:27:9f:6d:9b:48:83:1c: a5:4b:c6:c7:8d:45:30:f6:2a:41:d4:67:0e:6d:83:b6:33:f0: 57:da:b4:2e:44:17:11:42:47:7d:c7:c1:cb:3e:bd:b4:48:d2: 44:64:40:8b:3d:fd:6e:63:b8:0d:3e:9f:5e:f8:6b:f7:20:c7: 3c:09:46:59:73:b2:9c:3d:74:4b:d5:2f:86:de:cc:be:09:40: ea:f1:fb:cc:7a:47:9c:9a:9e:48:7c:82:e5:4d:62:aa:42:24: 9b:4d:c5:0d:ac:7e:a6:1d:2b:86:5b:e0:70:2b:d5:9a:8a:c4: 8a:ef:e8:08:ee:25:4c:5c:ea:cb:fc:e7:1d:62:a1:62:eb:7c: ab:d7:84:0c:89:b8:d4:23:bc:94:85:4d:3f:3a:53:b7:12:19: 5d:24:f2:f5:1a:b3:50:c0:fa:e5:3f:33:f3:b7:5e:f0:61:59: c8:f4:9b:5c:6a:eb:c4:83:72:a0:52:35:b0:a9:7c:7d:62:1b: fd:59:b5:64:35:59:5f:f8:e4:1f:62:29:47:16:5c:38:52:f6: fe:c0:60:0c:8e:e4:47:ee:d4:6d:72:0b:9b:fe:bb:73:69:42: d1:77:77:4c:2e:c1:60:5f:36:c2:33:30:7a:20:4d:13:b0:3b: 7d:0d:0a:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZyIhgIm1cA352Sbhl+NQIYfW69wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy MkNCREVFOTAeFw0yNjA0MTcwOTM3MTFaFw0yNjA0MjAxNjUyMTFaMDMxMTAvBgNV BAMTKEIxNzY1RDQ0NjczMEU1NjlEREYwNTgxMzM0NUM3MEJDM0ZCQjhFNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+y1FZjycyZHRbHasD2vCB9gj SRSYqBqPk5yrwfe3xTTwnHMAR6bcI92+//iqWFJZ/43CcBLKOr6q6JrYRqL9MhUC Cjxx7hske3BpKqSwTewRDrq0nLlqqExHjOCTVjcc9TL9OhG3MDOjhswy1Z0Dni4r xXpGjuedtDaknPs24hKb+vAieVT4QwU79+ttK/ZURB2H7fVaYFOQPpDzTN6MLTdi NlLBx3OaOQYLYRnH4DANEl3fIEbvQpZw4+gEtTxPDUiiPnzeE6mui0BNKoix2BEM Hzgd/kIPYkpo1sB/b4cF/l4N+G8Apj2ZiKmNmbzvJpbpfr0PG7Qy0wvvL94fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsXZdRGcw5Wnd8FgTNFxwvD+7jlkwHwYDVR0j BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC REVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUzMTQ4NTgtYjMzYS00YjY1LTlh NTUtZGNlNDFlMjIzODczLzAvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1 NzAyMkNCREVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB5HM5ISp4cEfFFJ59tm0iDHKVLxseNRTD2 KkHUZw5tg7Yz8FfatC5EFxFCR33Hwcs+vbRI0kRkQIs9/W5juA0+n174a/cgxzwJ Rllzspw9dEvVL4bezL4JQOrx+8x6R5yankh8guVNYqpCJJtNxQ2sfqYdK4Zb4HAr 1ZqKxIrv6AjuJUxc6sv85x1ioWLrfKvXhAyJuNQjvJSFTT86U7cSGV0k8vUas1DA +uU/M/O3XvBhWcj0m1xq68SDcqBSNbCpfH1iG/1ZtWQ1WV/45B9iKUcWXDhS9v7A YAyO5Efu1G1yC5v+u3NpQtF3d0wuwWBfNsIzMHogTROwO30NCmM= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:58 2026 by rpki-client