$ rpki-client -vvf repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft File: B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft (raw, json) Hash identifier: 32eDuoTvyENBMxaknsx9hT/FiLMs2vBiXvxd5xZUaxU= Subject key identifier: 94:6A:A3:84:C0:E6:BD:01:80:6E:3C:D8:6A:AC:DE:5F:57:08:1B:46 Authority key identifier: B9:E3:DC:E7:FE:85:E4:83:47:D6:CA:E3:6C:83:DE:35:99:8C:FC:5E Certificate issuer: /CN=B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E Certificate serial: 0FA115E567776457324BDACC864443BADDF1672C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft Manifest number: 3C Signing time: Fri 17 Apr 2026 03:11:33 +0000 Manifest this update: Fri 17 Apr 2026 03:06:33 +0000 Manifest next update: Mon 20 Apr 2026 14:19:33 +0000 Files and hashes: 1: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: Kyu9bQtpDSvLwwsNNqwUqQbMYywTTXQyJkLm6NWbIzI=) 2: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: dIQVr4EU9vhVUlOy70LmMe/aV/AkNcRz6oJAaRY0RBk=) 3: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: KoQeDklma/MmavV82lm83EnfussemBPyB+je36QbhV4=) 4: B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl (hash: sjuO3QuODPBB/3JaLYoKCXM38HmgEmcz3VHmhkvBRvA=) 5: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: aUiV56swPp0i277EKeACkxB8KCq996e6HKIfY3dUZVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a1:15:e5:67:77:64:57:32:4b:da:cc:86:44:43:ba:dd:f1:67:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E Validity Not Before: Apr 17 03:06:33 2026 GMT Not After : Apr 20 14:19:33 2026 GMT Subject: CN=946AA384C0E6BD01806E3CD86AACDE5F57081B46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3f:bb:dc:e5:ab:2c:f2:21:cc:e8:ba:94:96: 2c:3a:8c:bd:ea:10:0b:43:57:8f:71:4f:45:0f:c7: 5b:63:50:f2:b0:7f:e5:5a:c3:89:ad:d4:36:2d:b0: 01:5b:cd:98:13:7d:b4:36:cb:0a:0c:c2:1e:bc:06: 92:cd:ca:38:c7:6c:c8:d7:95:39:7c:d0:b8:68:9d: 33:9b:60:59:df:29:13:ca:21:93:81:69:8a:21:bd: ac:21:0b:7d:47:a7:a2:9a:c4:92:c4:2f:61:ee:75: aa:20:d9:cc:32:d7:b5:72:2e:94:4d:49:d2:f0:37: 3e:a3:a6:f2:64:03:78:89:9d:30:78:02:f2:28:8a: 77:28:48:96:95:28:d9:68:f8:be:61:3d:19:a3:0d: b7:5a:60:5d:f2:74:86:4d:ea:3f:e7:e0:ac:2a:10: fc:ce:aa:28:53:d7:21:4e:0b:2e:cb:3b:72:68:0e: 7c:ed:ca:76:dd:95:f3:6d:15:9e:9e:5e:0f:27:5f: 18:82:60:d8:b3:7f:07:56:4b:0e:32:ee:9b:fa:3a: 5d:73:21:2d:51:7b:47:c3:00:ea:c7:b9:0c:52:e5: de:84:a0:08:97:d6:44:8c:23:77:cc:59:e7:5e:b5: 7b:4a:a0:df:8b:53:88:e4:41:ff:8e:ab:f5:45:40: 8b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6A:A3:84:C0:E6:BD:01:80:6E:3C:D8:6A:AC:DE:5F:57:08:1B:46 X509v3 Authority Key Identifier: keyid:B9:E3:DC:E7:FE:85:E4:83:47:D6:CA:E3:6C:83:DE:35:99:8C:FC:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3e:45:82:b2:6a:8b:b1:c4:87:58:5e:d6:75:f8:80:8b:cb: 1c:3c:47:f7:ff:fa:0e:55:29:89:1e:5b:ef:3b:9e:70:dd:f4: 96:f4:e4:63:a9:20:7d:5d:da:5d:5c:cf:71:eb:43:35:80:32: 3a:fa:eb:92:a5:3a:4d:b8:7f:7f:01:ec:64:87:52:3b:ba:40: 23:3e:fb:7b:65:f1:c5:88:09:9a:b4:d5:f0:ff:18:00:a7:5f: e7:d4:34:ad:ad:6e:a0:a5:f9:17:b1:c8:52:cf:fa:9c:3c:e8: 3e:b3:48:e1:6c:26:24:ff:11:40:f0:80:6a:62:fe:97:81:6f: 45:af:3a:39:1b:db:e7:d8:26:53:6d:6f:2f:7b:af:4b:82:4e: ec:28:e7:1f:19:95:a5:a0:31:75:50:cc:eb:9c:a9:9f:29:17: d1:3d:1b:a2:7a:58:21:05:f3:a9:14:5e:31:a9:30:b6:be:41: fb:ca:c3:a1:78:db:8f:4a:ef:19:36:c6:0c:ab:eb:26:66:4c: d5:d0:20:4e:60:9a:bc:6d:72:c9:4a:17:35:2a:d5:28:1b:f4: 35:9b:89:4c:31:38:99:3c:f1:70:b1:f7:f8:19:10:41:ab:33: 18:9e:c5:35:0e:f3:95:95:db:3b:02:28:17:18:78:85:b3:0c: 19:c3:1b:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD6EV5Wd3ZFcyS9rMhkRDut3xZywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RFMzU5 OThDRkM1RTAeFw0yNjA0MTcwMzA2MzNaFw0yNjA0MjAxNDE5MzNaMDMxMTAvBgNV BAMTKDk0NkFBMzg0QzBFNkJEMDE4MDZFM0NEODZBQUNERTVGNTcwODFCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNP7vc5ass8iHM6LqUliw6jL3q EAtDV49xT0UPx1tjUPKwf+Vaw4mt1DYtsAFbzZgTfbQ2ywoMwh68BpLNyjjHbMjX lTl80LhonTObYFnfKRPKIZOBaYohvawhC31Hp6KaxJLEL2Hudaog2cwy17VyLpRN SdLwNz6jpvJkA3iJnTB4AvIoincoSJaVKNlo+L5hPRmjDbdaYF3ydIZN6j/n4Kwq EPzOqihT1yFOCy7LO3JoDnztynbdlfNtFZ6eXg8nXxiCYNizfwdWSw4y7pv6Ol1z IS1Re0fDAOrHuQxS5d6EoAiX1kSMI3fMWedetXtKoN+LU4jkQf+Oq/VFQIspAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlGqjhMDmvQGAbjzYaqzeX1cIG0YwHwYDVR0j BBgwFoAUuePc5/6F5INH1srjbIPeNZmM/F4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDg4NjgwNS0zYjg1LTRjNWItOWI2YS1kNjJhZDU2YTY2YWMvMC9COUUzRENFN0ZF ODVFNDgzNDdENkNBRTM2QzgzREUzNTk5OENGQzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RFMzU5OThD RkM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA4ODY4MDUtM2I4NS00YzViLTli NmEtZDYyYWQ1NmE2NmFjLzAvQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RF MzU5OThDRkM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0+RYKyaouxxIdYXtZ1+ICLyxw8R/f/+g5V KYkeW+87nnDd9Jb05GOpIH1d2l1cz3HrQzWAMjr665KlOk24f38B7GSHUju6QCM+ +3tl8cWICZq01fD/GACnX+fUNK2tbqCl+RexyFLP+pw86D6zSOFsJiT/EUDwgGpi /peBb0WvOjkb2+fYJlNtby97r0uCTuwo5x8ZlaWgMXVQzOucqZ8pF9E9G6J6WCEF 86kUXjGpMLa+QfvKw6F4249K7xk2xgyr6yZmTNXQIE5gmrxtcslKFzUq1Sgb9DWb iUwxOJk88XCx9/gZEEGrMxiexTUO85WV2zsCKBcYeIWzDBnDG1g= -----END CERTIFICATE-----Generated at Sat Apr 18 00:07:09 2026 by rpki-client