$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: nQ1crVJJU7t87fsN2xcVcjWFQS/aU4NrkDvbcsO2gDk= Subject key identifier: 37:9D:FA:00:0F:DD:F7:F1:BF:D1:68:A7:1D:BE:D3:E0:11:E9:14:AE Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 607D344ADAB9E3F975D7AD64DDB20A6AA2851758 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: 011B Signing time: Wed 15 Apr 2026 12:02:47 +0000 Manifest this update: Wed 15 Apr 2026 11:57:47 +0000 Manifest next update: Sat 18 Apr 2026 17:31:47 +0000 Files and hashes: 1: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: NaC6OjHEbkMsjBRQmR8Tqmru4zPhSmsJN/hiJNkC18Y=) 2: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: DY3dCxuKc+4rQs1Yz8/2Joj5WXAt/lbb2AwYGw7PKdE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7d:34:4a:da:b9:e3:f9:75:d7:ad:64:dd:b2:0a:6a:a2:85:17:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Apr 15 11:57:47 2026 GMT Not After : Apr 18 17:31:47 2026 GMT Subject: CN=379DFA000FDDF7F1BFD168A71DBED3E011E914AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:42:c3:00:27:ba:b3:8d:cb:37:b2:8b:5c: 8e:c5:39:66:4b:d0:df:54:ac:ab:db:e9:35:07:d2: 6d:42:ad:f7:7a:7a:27:67:c4:47:50:1d:16:b3:0e: a9:bc:b3:c7:c1:f1:7e:9b:5c:a5:e4:86:0f:44:96: a4:4b:e6:1c:e1:35:ca:8f:8c:be:b9:50:a1:3b:ae: 4e:9e:16:ce:a3:50:de:a5:41:9b:5d:54:7b:7d:46: 14:8e:0a:04:da:c5:dc:bd:41:7c:2f:ee:a2:e4:8a: ea:05:ca:2f:0d:66:9d:e2:2e:01:85:7f:e7:4c:d8: b0:64:bb:db:6a:60:ff:c5:f1:27:59:73:94:ca:96: 27:49:98:68:40:fe:31:10:5b:d3:15:23:37:38:68: 13:15:d4:c8:60:49:4f:a2:2d:c1:37:ee:d2:48:26: 11:7a:41:b3:15:98:94:b8:8c:8b:86:3d:72:90:7e: 59:c0:95:94:f6:b7:d3:b0:d1:21:78:85:73:c5:40: f1:78:67:d9:ad:8d:2e:47:73:a8:3a:f7:79:73:23: 13:61:99:ae:df:97:13:10:eb:a7:9b:58:ef:50:8f: a7:cf:b4:b4:b6:99:06:16:1a:52:f0:f3:b9:fa:29: 98:a4:bb:31:39:1b:ce:b0:1e:74:23:60:af:63:e5: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9D:FA:00:0F:DD:F7:F1:BF:D1:68:A7:1D:BE:D3:E0:11:E9:14:AE X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:04:a1:9a:c4:c7:77:93:5d:6f:ca:b2:55:e2:df:64:0c:9d: 69:a8:1d:9d:6c:ab:db:89:5a:55:86:33:bf:4e:b8:21:43:12: 92:85:f6:59:2f:8f:53:e3:65:c4:18:e8:99:f5:e3:78:61:4d: d6:d6:68:cc:cd:7e:3d:be:2a:8f:a4:6f:45:18:1e:79:69:5c: 22:06:4d:35:fc:24:8c:27:ed:ea:2b:1c:b5:ca:ac:54:bd:b3: 35:b3:e8:7a:b9:29:5c:f3:06:24:b5:25:3e:26:97:a9:53:ab: 03:60:3f:ca:0a:59:27:65:4b:0d:5e:14:67:af:ae:09:bd:5b: 98:64:dd:16:1c:a5:bb:da:85:e0:1d:41:f3:49:54:7a:3e:cc: fa:bc:6c:eb:b9:14:13:cf:50:5d:d5:4e:97:b4:3e:ce:dd:2d: ba:96:c1:38:15:7a:bf:42:d6:8a:d5:0a:1b:84:44:07:4c:2c: d3:96:99:d0:2a:e6:ee:cd:ef:85:07:ea:04:a0:7b:b8:e8:de: 12:d5:63:14:95:ef:76:38:5d:b7:62:5f:75:4e:46:ad:c2:7a: 77:c9:95:c3:1b:68:0a:76:67:b4:d1:95:fd:be:b3:51:2a:a4: 71:d0:59:34:4d:71:9e:65:a0:a4:66:72:b2:20:04:95:82:09: c9:32:26:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYH00Stq54/l1161k3bIKaqKFF1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNjA0MTUxMTU3NDdaFw0yNjA0MTgxNzMxNDdaMDMxMTAvBgNV BAMTKDM3OURGQTAwMEZEREY3RjFCRkQxNjhBNzFEQkVEM0UwMTFFOTE0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSkLDACe6s43LN7KLXI7FOWZL 0N9UrKvb6TUH0m1Crfd6eidnxEdQHRazDqm8s8fB8X6bXKXkhg9ElqRL5hzhNcqP jL65UKE7rk6eFs6jUN6lQZtdVHt9RhSOCgTaxdy9QXwv7qLkiuoFyi8NZp3iLgGF f+dM2LBku9tqYP/F8SdZc5TKlidJmGhA/jEQW9MVIzc4aBMV1MhgSU+iLcE37tJI JhF6QbMVmJS4jIuGPXKQflnAlZT2t9Ow0SF4hXPFQPF4Z9mtjS5Hc6g693lzIxNh ma7flxMQ66ebWO9Qj6fPtLS2mQYWGlLw87n6KZikuzE5G86wHnQjYK9j5TjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN536AA/d9/G/0WinHb7T4BHpFK4wHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYEoZrEx3eTXW/KslXi32QMnWmoHZ1sq9uJ WlWGM79OuCFDEpKF9lkvj1PjZcQY6Jn143hhTdbWaMzNfj2+Ko+kb0UYHnlpXCIG TTX8JIwn7eorHLXKrFS9szWz6Hq5KVzzBiS1JT4ml6lTqwNgP8oKWSdlSw1eFGev rgm9W5hk3RYcpbvaheAdQfNJVHo+zPq8bOu5FBPPUF3VTpe0Ps7dLbqWwTgVer9C 1orVChuERAdMLNOWmdAq5u7N74UH6gSge7jo3hLVYxSV73Y4XbdiX3VORq3CenfJ lcMbaAp2Z7TRlf2+s1EqpHHQWTRNcZ5loKRmcrIgBJWCCckyJkg= -----END CERTIFICATE-----Generated at Fri Apr 17 18:04:39 2026 by rpki-client