$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: cdIllJDHBo6lE5dLfX2wf9DBbvP61xidqLVmF1dPLIM= Subject key identifier: 66:37:E6:5F:04:8A:B3:92:21:B0:7F:A5:ED:72:67:2B:A0:B1:14:B5 Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 7FAD822A12F2A00E77E4C9CA8533F4047F5D59A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 0314 Signing time: Thu 16 Apr 2026 01:31:29 +0000 Manifest this update: Thu 16 Apr 2026 01:26:29 +0000 Manifest next update: Sun 19 Apr 2026 02:18:29 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: E+3c/7dEngszuFTr+gS/n3mkWVBq0a5U3e43Pc/uNNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ad:82:2a:12:f2:a0:0e:77:e4:c9:ca:85:33:f4:04:7f:5d:59:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Apr 16 01:26:29 2026 GMT Not After : Apr 19 02:18:29 2026 GMT Subject: CN=6637E65F048AB39221B07FA5ED72672BA0B114B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:d7:93:2e:0d:29:4d:fe:95:e7:f1:9a:6a: f1:fb:b5:42:4d:40:7a:d5:3f:69:32:88:9a:42:18: 01:2f:b7:c1:ea:3f:98:df:7f:da:bc:d7:d8:be:b2: cd:45:05:04:63:39:8b:92:c5:9c:12:f5:b2:1f:57: e2:43:b0:1e:00:88:36:bb:25:e5:bd:74:10:a7:9e: 9d:b4:8a:4b:b6:48:46:a3:46:c6:6e:bf:83:e5:da: a7:b9:6a:c4:27:9c:ba:78:34:eb:04:04:8c:60:c2: 18:ba:af:02:f4:57:26:50:39:ab:f5:58:42:b4:ba: a9:20:c6:8c:55:2d:bf:47:cf:8a:b9:d1:86:b8:f2: bd:13:b2:f3:26:d1:21:e3:5d:2c:fb:5c:ef:de:49: 02:df:81:f9:34:94:c0:67:f9:69:d8:08:bb:d4:aa: 20:f0:c4:36:31:55:da:92:02:c8:a4:84:21:5f:7f: 24:8f:1a:d2:a0:d8:12:05:17:ba:09:0c:3c:58:73: 76:da:66:7f:f4:01:8d:8d:83:00:9c:78:db:31:ef: bd:0c:5e:9b:4f:35:38:6a:8d:5d:b4:0b:e8:74:39: b4:b5:d1:e5:e7:25:6a:97:c0:b3:79:cc:a7:af:7c: 72:67:06:f8:42:55:31:5c:85:76:9a:b4:ba:14:43: 9b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:37:E6:5F:04:8A:B3:92:21:B0:7F:A5:ED:72:67:2B:A0:B1:14:B5 X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:20:3c:c5:37:99:c1:19:68:cf:84:47:40:89:ab:71:04:93: 70:f3:28:69:52:39:3c:51:18:8c:35:0e:80:c8:28:ee:6c:d4: 39:d2:fe:35:27:0c:af:ce:a6:9c:29:01:4a:4b:ff:3b:9f:da: c1:18:72:52:7c:0e:10:40:8a:53:9a:8c:ad:d0:8c:f1:04:ca: 20:12:c6:53:68:a8:18:12:db:79:d3:19:72:8a:1d:65:18:ad: 3e:5d:0d:0b:2d:f8:54:a2:18:e6:b7:2b:01:ac:9a:bf:6b:63: da:4f:fb:83:32:c8:f1:08:9c:e3:cd:98:5d:bb:f1:8a:96:28: 33:0c:a9:48:66:7b:6e:36:5f:b7:86:09:15:42:98:c4:34:cc: d2:46:d3:cb:db:e0:d5:a7:3c:e5:a2:e2:66:98:4c:95:b1:fd: 38:76:fc:8c:2d:e4:a4:36:9e:ef:c6:70:fc:e5:0d:03:cf:6a: 54:31:ed:8b:db:30:09:50:43:c7:7b:16:d3:19:d4:09:82:fd: 6f:dd:d7:a2:55:06:3d:18:0f:61:be:cd:88:21:9d:27:99:61: 8e:dd:22:cc:8c:67:b2:b2:44:64:fa:c7:dc:e9:43:94:e2:8b: 60:45:08:b7:12:99:92:a6:e0:fd:7a:dd:66:cf:a7:f9:93:b0: 61:40:7d:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf62CKhLyoA535MnKhTP0BH9dWaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNjA0MTYwMTI2MjlaFw0yNjA0MTkwMjE4MjlaMDMxMTAvBgNV BAMTKDY2MzdFNjVGMDQ4QUIzOTIyMUIwN0ZBNUVENzI2NzJCQTBCMTE0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2teTLg0pTf6V5/GaavH7tUJN QHrVP2kyiJpCGAEvt8HqP5jff9q819i+ss1FBQRjOYuSxZwS9bIfV+JDsB4AiDa7 JeW9dBCnnp20iku2SEajRsZuv4Pl2qe5asQnnLp4NOsEBIxgwhi6rwL0VyZQOav1 WEK0uqkgxoxVLb9Hz4q50Ya48r0TsvMm0SHjXSz7XO/eSQLfgfk0lMBn+WnYCLvU qiDwxDYxVdqSAsikhCFffySPGtKg2BIFF7oJDDxYc3baZn/0AY2NgwCceNsx770M XptPNThqjV20C+h0ObS10eXnJWqXwLN5zKevfHJnBvhCVTFchXaatLoUQ5tRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZjfmXwSKs5IhsH+l7XJnK6CxFLUwHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMgPMU3mcEZaM+ER0CJq3EEk3DzKGlSOTxR GIw1DoDIKO5s1DnS/jUnDK/OppwpAUpL/zuf2sEYclJ8DhBAilOajK3QjPEEyiAS xlNoqBgS23nTGXKKHWUYrT5dDQst+FSiGOa3KwGsmr9rY9pP+4MyyPEInOPNmF27 8YqWKDMMqUhme242X7eGCRVCmMQ0zNJG08vb4NWnPOWi4maYTJWx/Th2/Iwt5KQ2 nu/GcPzlDQPPalQx7YvbMAlQQ8d7FtMZ1AmC/W/d16JVBj0YD2G+zYghnSeZYY7d IsyMZ7KyRGT6x9zpQ5Tii2BFCLcSmZKm4P163WbPp/mTsGFAfVs= -----END CERTIFICATE-----Generated at Fri Apr 17 17:23:35 2026 by rpki-client