$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: MEaF1h5gAxDFcycIaMimQyfdfsLhAoT8qZJYQlJT/Bw= Subject key identifier: 71:E1:26:8F:0B:8E:95:E9:DD:25:D1:A0:0D:17:0E:B6:71:7C:E9:9A Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 13080EC472F35039F7EC71582F8F98C61CD5105C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 0174 Signing time: Wed 15 Apr 2026 17:31:20 +0000 Manifest this update: Wed 15 Apr 2026 17:26:20 +0000 Manifest next update: Sun 19 Apr 2026 02:33:20 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: 9Uu6xPP9IYjg4G7wwR9VvYp8T3ZykP4drAVpugBeW30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:08:0e:c4:72:f3:50:39:f7:ec:71:58:2f:8f:98:c6:1c:d5:10:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Apr 15 17:26:20 2026 GMT Not After : Apr 19 02:33:20 2026 GMT Subject: CN=71E1268F0B8E95E9DD25D1A00D170EB6717CE99A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:a1:84:1e:12:c7:e8:96:3b:d4:98:16:f5: b3:97:22:90:0c:9e:25:b8:e1:a4:bf:4c:f3:34:84: c2:be:dc:eb:98:17:fb:f4:76:42:b9:6c:0b:ba:e9: d4:d4:c9:47:42:15:5f:f3:d0:31:bf:12:4e:d6:0c: 3e:48:19:de:9d:94:5d:df:dc:50:1c:77:ff:34:bc: 30:1e:39:41:f7:47:7d:b3:65:59:fd:3f:ee:4c:9f: be:c4:7b:60:e0:17:8a:72:78:5b:57:c9:c4:25:fa: 87:ac:a7:39:94:b2:f8:ca:ed:d4:9b:9b:fb:84:1b: 5f:b9:8f:01:9d:e8:7c:57:fa:a8:c0:0e:80:4e:fb: b9:be:25:21:19:02:f3:bb:d7:1f:0a:35:05:a8:2b: c6:9f:fd:60:eb:35:1d:48:4b:de:72:8a:f7:61:f4: 6a:f3:63:3e:c2:16:6d:4c:cb:70:ff:7e:e2:e3:4c: 71:85:1c:44:2d:f2:b1:e6:d4:d9:e6:8a:6d:9d:49: 66:bd:0b:69:71:7c:6e:b7:03:9c:58:69:1a:53:00: a1:8b:84:fc:c6:94:2a:0b:d9:20:6f:2e:d9:98:06: a9:e6:1f:73:15:1d:a2:ed:6b:96:4b:78:60:0d:92: 58:02:a9:02:89:f2:aa:31:a2:27:32:8f:ae:bf:24: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E1:26:8F:0B:8E:95:E9:DD:25:D1:A0:0D:17:0E:B6:71:7C:E9:9A X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d2:1e:a2:77:98:11:30:16:5c:8e:8b:1c:95:25:6e:5e:3e: 35:d8:5e:8f:8f:3f:9d:56:d3:74:b7:d1:ab:04:ce:11:86:24: b4:0f:ad:7f:5a:a0:04:62:28:81:29:4b:51:f4:17:de:fe:d2: 6c:5a:8a:37:83:44:88:39:e1:50:03:12:f7:f9:c1:fc:11:f1: b4:2e:83:36:d4:73:1e:55:ba:cd:b1:ab:d9:33:8e:be:24:11: ca:2a:af:78:0d:7f:bf:3c:e7:67:8d:c5:b9:97:30:65:7a:3c: b5:c5:39:07:86:5e:ca:55:b7:a1:69:42:39:94:35:c9:02:bf: 75:90:5c:19:dd:69:66:2c:7d:6f:47:7e:54:b0:34:a0:b6:3a: 3e:a0:98:bf:59:47:7a:5f:cb:e6:c6:0a:5d:ab:d3:2b:22:df: 32:1f:9d:a5:e0:96:d8:8c:55:97:04:8f:97:0a:79:b1:cf:1b: a3:9a:ac:5c:6e:c7:7b:b8:a0:48:48:65:0c:ee:ae:00:ef:88: 0c:00:fa:a4:22:ad:a8:0c:c8:0f:2b:e3:68:b8:9a:21:c9:9d: 24:d3:7b:53:fc:a3:f8:83:f0:46:7a:7d:92:ab:0e:e3:25:18: 4f:39:dd:d9:f4:74:fe:e1:1e:55:cd:15:86:a2:56:ea:46:09: 7d:5b:5d:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwgOxHLzUDn37HFYL4+YxhzVEFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNjA0MTUxNzI2MjBaFw0yNjA0MTkwMjMzMjBaMDMxMTAvBgNV BAMTKDcxRTEyNjhGMEI4RTk1RTlERDI1RDFBMDBEMTcwRUI2NzE3Q0U5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIKGEHhLH6JY71JgW9bOXIpAM niW44aS/TPM0hMK+3OuYF/v0dkK5bAu66dTUyUdCFV/z0DG/Ek7WDD5IGd6dlF3f 3FAcd/80vDAeOUH3R32zZVn9P+5Mn77Ee2DgF4pyeFtXycQl+oespzmUsvjK7dSb m/uEG1+5jwGd6HxX+qjADoBO+7m+JSEZAvO71x8KNQWoK8af/WDrNR1IS95yivdh 9GrzYz7CFm1My3D/fuLjTHGFHEQt8rHm1Nnmim2dSWa9C2lxfG63A5xYaRpTAKGL hPzGlCoL2SBvLtmYBqnmH3MVHaLta5ZLeGANklgCqQKJ8qoxoicyj66/JLD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUceEmjwuOlendJdGgDRcOtnF86ZowHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHSHqJ3mBEwFlyOixyVJW5ePjXYXo+PP51W 03S30asEzhGGJLQPrX9aoARiKIEpS1H0F97+0mxaijeDRIg54VADEvf5wfwR8bQu gzbUcx5Vus2xq9kzjr4kEcoqr3gNf78852eNxbmXMGV6PLXFOQeGXspVt6FpQjmU NckCv3WQXBndaWYsfW9HflSwNKC2Oj6gmL9ZR3pfy+bGCl2r0ysi3zIfnaXgltiM VZcEj5cKebHPG6OarFxux3u4oEhIZQzurgDviAwA+qQiragMyA8r42i4miHJnSTT e1P8o/iD8EZ6fZKrDuMlGE853dn0dP7hHlXNFYaiVupGCX1bXZ0= -----END CERTIFICATE-----Generated at Fri Apr 17 15:35:03 2026 by rpki-client