$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json) Hash identifier: XPdPdTi0re4TKVt+H2tMSAbOw6f2DWAx3R5MqKbMOP8= Subject key identifier: 67:95:1C:42:BF:42:A9:BE:A4:72:7D:15:30:9A:F4:CE:9D:1A:4E:0F Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D Certificate serial: 2DF9495AD13075AF597A6FEB2BC14084A8C508CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft Manifest number: 0456 Signing time: Thu 16 Apr 2026 13:42:17 +0000 Manifest this update: Thu 16 Apr 2026 13:37:17 +0000 Manifest next update: Sun 19 Apr 2026 22:29:17 +0000 Files and hashes: 1: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: tU9MQgnXWS85BiJDGgqr6b5nplvLfH4bLZzCkSyjtEk=) 2: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: RAP4Y3UNMM22dRDZbSXvZfkAeFFl21PNSif0XVosalM=) 3: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: KoXVL6WzAZujvpo00umxzYa6CA8boG1qF0govC2qVVE=) 4: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 2rrLsC09Wk5In+nn3fns2W2xhNn/o1UykNLInh2ZFNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 22:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f9:49:5a:d1:30:75:af:59:7a:6f:eb:2b:c1:40:84:a8:c5:08:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D Validity Not Before: Apr 16 13:37:17 2026 GMT Not After : Apr 19 22:29:17 2026 GMT Subject: CN=67951C42BF42A9BEA4727D15309AF4CE9D1A4E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:02:8d:7f:10:18:22:a8:d4:91:4c:94:9c: 2a:d5:28:d2:fd:eb:5b:38:4b:a6:d7:59:18:f7:92: 89:19:11:39:7c:e3:44:27:da:3d:fc:5c:d9:60:78: b7:11:30:91:ec:d8:30:a6:03:68:72:17:c9:35:71: 05:b2:3c:a1:08:0e:28:3c:e5:a7:35:8f:d7:2a:80: 89:25:8b:ac:c6:24:ca:38:2b:27:68:8d:1b:14:1f: 23:47:a7:ae:e6:5e:ab:d4:41:9f:dd:18:72:39:ba: 66:a8:03:4f:e2:b4:2f:70:ec:f6:ac:e2:bb:a9:3e: 0d:57:86:2e:c1:d0:fe:7c:a5:25:58:a5:7b:48:4f: 7a:07:9b:d4:b7:20:e7:52:42:bc:9a:41:21:fb:f5: f8:99:7d:31:4b:b3:d0:2e:26:e8:ea:79:2b:f9:86: 75:00:26:1f:62:bc:07:35:1a:79:75:c4:b0:11:2d: c6:f4:b2:82:3a:cf:29:d4:7f:c7:dd:36:09:2b:06: ed:b8:91:e4:e5:12:53:6c:26:1b:a5:2b:cb:cf:75: 79:0e:59:e5:1f:17:c1:86:c1:e2:85:0d:09:be:04: be:20:40:d1:f8:05:2c:da:e0:29:19:af:7f:cb:8d: 4f:da:4e:33:bb:2a:cf:61:97:bc:02:4c:58:1d:10: bf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:95:1C:42:BF:42:A9:BE:A4:72:7D:15:30:9A:F4:CE:9D:1A:4E:0F X509v3 Authority Key Identifier: keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:57:67:12:88:57:6f:f8:36:75:1f:69:06:85:49:d7:1c:6b: b5:f9:9f:fc:6f:02:a7:c6:39:fc:8d:f9:0e:a1:94:b8:ad:c9: b0:1c:25:d0:a2:82:b8:4e:78:be:a9:c6:32:bb:00:a3:68:9a: 9f:5b:33:09:22:b8:5c:92:99:13:72:20:5f:e5:2c:7b:15:53: 2b:4a:21:27:19:c5:ad:5e:10:10:d6:95:bf:18:a8:2f:3a:95: e7:11:c3:08:49:80:9f:82:db:94:6f:3b:2a:2e:0a:a7:02:c3: 41:29:d1:e7:18:22:67:9e:c0:c6:ac:3a:67:d7:20:06:ff:4b: 3e:ac:44:52:5c:f7:e3:c1:90:09:90:49:22:dc:5c:25:72:15: 9e:7d:7e:31:b1:9b:50:5b:ab:e1:be:7e:89:3b:7a:2b:a3:66: a1:10:d3:8d:fc:09:a4:cd:7c:2d:c3:b5:49:b0:e7:10:9c:60: 36:64:d0:4e:dc:ae:97:63:6c:c7:a1:e5:d5:fb:a2:79:0e:3f: 46:a0:29:9f:b3:3e:51:21:d8:12:1e:c8:ec:ed:bb:5a:51:ef: c6:48:48:2c:4b:e5:1c:85:e9:3c:c0:b8:a7:03:3c:a5:b0:77: 78:4b:81:c6:c3:9e:4e:a6:f1:62:56:85:da:4e:e9:dc:ca:ef: c4:0a:49:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULflJWtEwda9Zem/rK8FAhKjFCMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz MDdCOTIwRDAeFw0yNjA0MTYxMzM3MTdaFw0yNjA0MTkyMjI5MTdaMDMxMTAvBgNV BAMTKDY3OTUxQzQyQkY0MkE5QkVBNDcyN0QxNTMwOUFGNENFOUQxQTRFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XwKNfxAYIqjUkUyUnCrVKNL9 61s4S6bXWRj3kokZETl840Qn2j38XNlgeLcRMJHs2DCmA2hyF8k1cQWyPKEIDig8 5ac1j9cqgIkli6zGJMo4KydojRsUHyNHp67mXqvUQZ/dGHI5umaoA0/itC9w7Pas 4rupPg1Xhi7B0P58pSVYpXtIT3oHm9S3IOdSQryaQSH79fiZfTFLs9AuJujqeSv5 hnUAJh9ivAc1Gnl1xLARLcb0soI6zynUf8fdNgkrBu24keTlElNsJhulK8vPdXkO WeUfF8GGweKFDQm+BL4gQNH4BSza4CkZr3/LjU/aTjO7Ks9hl7wCTFgdEL/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ5UcQr9Cqb6kcn0VMJr0zp0aTg8wHwYDVR0j BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC OTIwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5 NEIzMDdCOTIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxXZxKIV2/4NnUfaQaFSdcca7X5n/xvAqfG OfyN+Q6hlLitybAcJdCigrhOeL6pxjK7AKNomp9bMwkiuFySmRNyIF/lLHsVUytK IScZxa1eEBDWlb8YqC86lecRwwhJgJ+C25RvOyouCqcCw0Ep0ecYImeewMasOmfX IAb/Sz6sRFJc9+PBkAmQSSLcXCVyFZ59fjGxm1Bbq+G+fok7eiujZqEQ0438CaTN fC3DtUmw5xCcYDZk0E7crpdjbMeh5dX7onkOP0agKZ+zPlEh2BIeyOztu1pR78ZI SCxL5RyF6TzAuKcDPKWwd3hLgcbDnk6m8WJWhdpO6dzK78QKSeU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:37 2026 by rpki-client