$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: YDKSvuUpP+mQK0mr/GBaUBp28Y/T9J9s9iRP4HiUdT0= Subject key identifier: 93:CA:AE:C5:C5:D2:4F:83:56:79:66:BB:E6:A5:71:4C:AA:EA:63:D2 Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 4D7ACC8F6231BDD390F68672CB894102EBB61809 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 01EB Signing time: Sat 18 Apr 2026 01:31:58 +0000 Manifest this update: Sat 18 Apr 2026 01:26:58 +0000 Manifest next update: Tue 21 Apr 2026 06:04:58 +0000 Files and hashes: 1: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: SKukxQ79pDKG9sTP8P7RFVTK2iNUABU8DA3sUqU7E6U=) 2: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: Q7l9088g74cyAOX6H9IF5efU/M/VWIjoHRjpfnhFTJw=) 3: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: L/T+m/yJ1Buc0w1osVIInT5sZ71zV7/a+aiKjsgJiso=) 4: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: qmdGYePJd+wN/ivsAkmPcsWhCMrqFbcUBgTD/u1jg9I=) 5: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: fbB3f2zq5cTzq6UnpehfoFfaf8j4O+/TsjwlPCij1Cc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 06:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7a:cc:8f:62:31:bd:d3:90:f6:86:72:cb:89:41:02:eb:b6:18:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: Apr 18 01:26:58 2026 GMT Not After : Apr 21 06:04:58 2026 GMT Subject: CN=93CAAEC5C5D24F83567966BBE6A5714CAAEA63D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:81:4a:19:9f:06:d9:59:59:f6:ac:e9:d3:18: 53:0c:d0:19:f2:9a:34:03:74:f0:8e:92:9a:18:88: 3b:2c:85:08:21:f4:52:c2:cf:69:07:d4:07:68:e5: c9:56:ae:22:47:1d:3f:71:e4:b4:5b:97:f3:90:28: 65:60:ec:65:cb:9f:0a:7b:b5:01:5a:2b:fb:b6:c8: 89:57:20:2d:a9:46:01:af:9e:7e:d8:df:89:2a:64: de:45:6b:b3:ff:2f:ee:e3:13:89:ed:83:d3:c9:95: ce:29:28:68:31:e8:33:a7:e1:1f:3a:0b:35:d9:12: 87:88:89:dc:5d:ac:3d:97:e6:2d:8a:9b:f6:98:59: 41:84:19:8a:e9:b5:44:95:29:4b:b6:fe:fc:c3:c0: db:85:43:13:49:76:21:4c:4a:af:d5:f9:ad:4f:f4: 11:d0:be:75:e4:15:78:9d:c4:80:2f:3a:ae:22:9c: c1:c0:90:2b:5c:1a:40:bd:2b:39:f2:e4:f9:91:f4: 8b:23:bb:9d:ec:76:d7:75:de:e7:51:c7:a7:d3:79: 95:ba:b6:db:36:db:e3:5e:f3:76:04:60:a2:5f:48: 6a:db:04:18:b3:95:29:3f:30:b9:73:2b:60:07:b1: ab:96:c8:52:0b:38:ad:67:35:71:42:14:ea:bc:22: 74:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CA:AE:C5:C5:D2:4F:83:56:79:66:BB:E6:A5:71:4C:AA:EA:63:D2 X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:98:c8:b9:ba:b2:c6:bd:88:9b:a9:6f:bc:2d:9a:20:67:1a: 7a:21:cf:c4:22:ea:29:90:c3:f5:4f:5c:03:61:83:30:41:0c: bf:97:bf:07:5c:54:d9:76:ae:e2:6c:fe:3d:be:ab:6c:d2:af: 7d:da:b5:bd:c7:29:47:40:ec:4a:ac:f3:c5:ec:dc:dd:63:33: 6b:66:f0:e8:05:fc:42:4c:80:3b:3b:fb:09:33:9c:1f:12:02: f4:42:02:8b:b8:b8:ec:10:ec:a2:39:fe:a6:97:2e:dd:53:aa: cd:10:78:c9:66:54:e1:d7:6c:b4:b0:df:9a:e8:96:83:03:e7: 65:1c:e4:08:31:e6:5e:61:b8:6e:6d:c4:fd:42:af:69:ef:a5: be:1e:1b:7a:24:ca:71:d6:9a:d9:77:74:91:d3:c5:15:8e:29: ed:e2:fb:91:bd:e3:99:45:96:19:82:33:64:74:c6:85:c6:b6: c9:08:a0:f5:83:5c:bb:bc:28:e9:6e:c8:00:38:fc:8c:17:0a: 11:8f:9f:f8:5c:52:1d:01:c9:08:7b:d8:ec:97:35:89:87:90: e3:85:4d:38:3e:1c:a8:77:c5:d9:92:a9:30:84:1b:72:1c:7c: c4:dc:6a:af:62:d2:e4:67:fe:8b:6b:83:3a:7d:88:90:ab:10: d7:d6:bd:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXrMj2IxvdOQ9oZyy4lBAuu2GAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNjA0MTgwMTI2NThaFw0yNjA0MjEwNjA0NThaMDMxMTAvBgNV BAMTKDkzQ0FBRUM1QzVEMjRGODM1Njc5NjZCQkU2QTU3MTRDQUFFQTYzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDggUoZnwbZWVn2rOnTGFMM0Bny mjQDdPCOkpoYiDsshQgh9FLCz2kH1Ado5clWriJHHT9x5LRbl/OQKGVg7GXLnwp7 tQFaK/u2yIlXIC2pRgGvnn7Y34kqZN5Fa7P/L+7jE4ntg9PJlc4pKGgx6DOn4R86 CzXZEoeIidxdrD2X5i2Km/aYWUGEGYrptUSVKUu2/vzDwNuFQxNJdiFMSq/V+a1P 9BHQvnXkFXidxIAvOq4inMHAkCtcGkC9Kzny5PmR9Isju53sdtd13udRx6fTeZW6 tts22+Ne83YEYKJfSGrbBBizlSk/MLlzK2AHsauWyFILOK1nNXFCFOq8InRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk8quxcXST4NWeWa75qVxTKrqY9IwHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWYyLm6ssa9iJupb7wtmiBnGnohz8Qi6imQ w/VPXANhgzBBDL+XvwdcVNl2ruJs/j2+q2zSr33atb3HKUdA7Eqs88Xs3N1jM2tm 8OgF/EJMgDs7+wkznB8SAvRCAou4uOwQ7KI5/qaXLt1Tqs0QeMlmVOHXbLSw35ro loMD52Uc5Agx5l5huG5txP1Cr2nvpb4eG3okynHWmtl3dJHTxRWOKe3i+5G945lF lhmCM2R0xoXGtskIoPWDXLu8KOluyAA4/IwXChGPn/hcUh0ByQh72OyXNYmHkOOF TTg+HKh3xdmSqTCEG3IcfMTcaq9i0uRn/otrgzp9iJCrENfWvdM= -----END CERTIFICATE-----Generated at Sun Apr 19 10:58:49 2026 by rpki-client