$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: vuoMFWBpg5cVgGiBhH4cY9oo9qCbT2LSBwayLbsSVbM= Subject key identifier: 98:8A:50:90:E0:02:64:7A:92:30:14:C0:FE:2C:CD:46:F2:BD:51:E5 Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 7D3C847E4D4D2762D9BA86A35013E2C60076D741 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 0228 Signing time: Fri 17 Apr 2026 08:10:48 +0000 Manifest this update: Fri 17 Apr 2026 08:05:48 +0000 Manifest next update: Mon 20 Apr 2026 18:39:48 +0000 Files and hashes: 1: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: cVFaX5vsSnlCiBXiYi7VFBsU8ifDtbmqTWAW0Jfdf/M=) 2: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: Eenr0UKPk3/F3uJ5X79Hoh193m7YOvGDOu/oGwPonDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:3c:84:7e:4d:4d:27:62:d9:ba:86:a3:50:13:e2:c6:00:76:d7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Apr 17 08:05:48 2026 GMT Not After : Apr 20 18:39:48 2026 GMT Subject: CN=988A5090E002647A923014C0FE2CCD46F2BD51E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:c0:ac:d6:62:4f:45:b2:42:43:7b:a3:49: f3:10:a2:1e:65:54:bf:3e:02:b8:41:60:9c:5f:0a: e3:7c:c5:9d:c6:08:6e:51:fb:cc:4a:f2:b6:e6:23: 39:aa:97:c2:33:5e:33:24:e9:a5:f7:c7:b3:1b:51: 1f:0a:6e:2b:5e:47:9b:5d:35:33:da:ea:00:a8:ff: 5d:02:9e:f1:e3:e8:97:51:85:a8:33:6a:1b:ff:f6: 70:f7:3a:f0:57:f1:50:45:db:d6:97:54:c0:be:95: 17:81:d1:3f:de:3d:15:06:af:6b:fe:f9:db:20:24: 28:29:2b:57:01:df:82:a6:bf:5e:82:23:93:bd:7a: 18:c0:cd:9a:0b:23:e3:d7:ed:d7:ab:29:7a:2b:63: 1e:06:11:36:f6:e7:8e:13:36:86:93:18:5e:1b:42: 06:66:70:74:c8:ff:f1:fe:e5:61:04:a4:20:8b:c4: fa:58:80:82:bf:14:e2:d7:7f:73:4a:57:8c:b5:a5: f7:84:21:c1:af:d1:88:22:01:06:0e:a0:11:f9:89: c2:69:58:b6:68:44:39:93:1c:bd:28:ea:03:57:4e: 58:76:88:fe:f9:24:a7:b9:12:85:5b:12:4e:a0:17: 5f:bc:03:30:f2:e3:a9:be:b0:d1:74:e0:15:15:c0: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8A:50:90:E0:02:64:7A:92:30:14:C0:FE:2C:CD:46:F2:BD:51:E5 X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:ac:50:e8:47:5a:15:de:e8:64:55:6b:a7:85:65:6d:cd:37: 21:c8:f4:f2:2f:4c:a1:62:e4:ad:ea:01:58:af:b0:d4:d8:c0: e2:f6:0e:63:7e:2d:25:6b:25:66:d6:f3:2a:6a:db:db:93:ff: 99:db:99:8b:28:04:c2:81:01:cc:e6:ba:d1:6c:4d:0e:8e:4f: a7:00:eb:bb:ee:30:52:b1:1e:97:5a:f5:88:a4:9c:2b:af:39: 43:cc:f5:44:5c:f8:b5:58:65:84:80:de:c7:87:be:b2:5d:cb: 95:ea:f5:64:8d:ea:8a:21:cf:fd:9b:72:3d:c5:f8:6a:24:55: b4:48:d8:d5:93:77:7d:f4:b4:c1:9f:fb:9a:37:d2:6d:9f:0c: a2:e3:82:ef:e9:c5:7a:c7:91:eb:cf:b0:79:29:81:3f:9e:d2: f3:e5:10:2e:f1:84:7c:08:d5:e0:f2:7c:c8:85:a4:99:d9:f8: f3:48:71:a2:b7:f0:4d:a1:f7:5b:46:c7:5d:39:56:9b:79:ac: 5e:fe:c3:41:d6:f8:e1:8e:da:51:e6:d4:34:c6:3f:70:e3:54: 5a:66:cc:62:f3:83:ef:a1:bd:ee:9d:60:13:78:e6:6f:28:b1: cc:35:98:93:b4:cb:ef:94:d9:d4:a5:2a:3b:2f:b3:53:63:2e: 85:7d:9a:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfTyEfk1NJ2LZuoajUBPixgB210EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNjA0MTcwODA1NDhaFw0yNjA0MjAxODM5NDhaMDMxMTAvBgNV BAMTKDk4OEE1MDkwRTAwMjY0N0E5MjMwMTRDMEZFMkNDRDQ2RjJCRDUxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CMCs1mJPRbJCQ3ujSfMQoh5l VL8+ArhBYJxfCuN8xZ3GCG5R+8xK8rbmIzmql8IzXjMk6aX3x7MbUR8KbiteR5td NTPa6gCo/10CnvHj6JdRhagzahv/9nD3OvBX8VBF29aXVMC+lReB0T/ePRUGr2v+ +dsgJCgpK1cB34Kmv16CI5O9ehjAzZoLI+PX7derKXorYx4GETb2544TNoaTGF4b QgZmcHTI//H+5WEEpCCLxPpYgIK/FOLXf3NKV4y1pfeEIcGv0YgiAQYOoBH5icJp WLZoRDmTHL0o6gNXTlh2iP75JKe5EoVbEk6gF1+8AzDy46m+sNF04BUVwJVPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmIpQkOACZHqSMBTA/izNRvK9UeUwHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALusUOhHWhXe6GRVa6eFZW3NNyHI9PIvTKFi 5K3qAVivsNTYwOL2DmN+LSVrJWbW8ypq29uT/5nbmYsoBMKBAczmutFsTQ6OT6cA 67vuMFKxHpda9YiknCuvOUPM9URc+LVYZYSA3seHvrJdy5Xq9WSN6oohz/2bcj3F +GokVbRI2NWTd330tMGf+5o30m2fDKLjgu/pxXrHkevPsHkpgT+e0vPlEC7xhHwI 1eDyfMiFpJnZ+PNIcaK38E2h91tGx105Vpt5rF7+w0HW+OGO2lHm1DTGP3DjVFpm zGLzg++hve6dYBN45m8oscw1mJO0y++U2dSlKjsvs1NjLoV9mkU= -----END CERTIFICATE-----Generated at Fri Apr 17 16:18:15 2026 by rpki-client