$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: lMqX9mcDkAFu7VHcH+CDa+N3YmmIcOejGlsfsnQBoco= Subject key identifier: 6D:1A:4A:37:8B:1C:48:CA:C4:4F:BB:5A:CB:F7:2A:82:66:BD:B4:D6 Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 3E078D79144619594BFD7B7AC08FC55DC09ACF3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 01F2 Signing time: Sat 18 Apr 2026 05:12:33 +0000 Manifest this update: Sat 18 Apr 2026 05:07:33 +0000 Manifest next update: Tue 21 Apr 2026 13:50:33 +0000 Files and hashes: 1: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: UR9esaRmlKufy2h6cocO3fORHKhAV4EyIrBWBnoaiXs=) 2: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: OZaXLB6WOsZ0iT1ekgvM7U/1Xm1GvHimP1k0atvZFXA=) 3: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: M4XvK4+KSlb81JlrVQsMEAe2ZSv8ZUvIs/IgDYzVWX8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 13:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:07:8d:79:14:46:19:59:4b:fd:7b:7a:c0:8f:c5:5d:c0:9a:cf:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Apr 18 05:07:33 2026 GMT Not After : Apr 21 13:50:33 2026 GMT Subject: CN=6D1A4A378B1C48CAC44FBB5ACBF72A8266BDB4D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:f2:c4:1c:a3:ec:d1:f7:f1:04:f8:e7:c9: a8:00:d2:06:d4:40:55:db:b8:44:86:5f:bb:0e:5a: 3e:12:81:d7:41:0f:73:1c:3f:50:83:6a:dc:37:1c: fd:18:eb:8e:aa:44:69:b7:16:64:2c:22:d3:32:fb: 9b:02:7a:18:ed:23:e8:a6:dc:4f:1c:0c:61:ce:83: 63:b3:b0:67:9e:f2:7c:ff:65:00:dd:d8:50:dd:a4: eb:a1:a2:64:01:79:73:c5:5c:d9:70:4b:66:93:36: f2:1c:7a:f9:80:51:b0:1a:33:e2:94:86:e0:49:16: ab:fe:0d:ba:54:a0:a3:23:49:38:b3:20:9e:f3:22: 4b:97:d1:5a:a8:e6:cd:89:b2:fa:b2:bc:18:65:fd: 81:8c:a5:91:c4:b6:a1:30:fc:13:e0:6e:58:77:29: 8a:7a:51:ca:6d:0f:da:7f:8b:1b:8e:97:9d:e0:14: a4:b8:4a:5c:3f:86:c9:6e:c2:bc:31:e8:57:f3:b5: 62:f8:db:76:29:31:f4:3b:be:b0:98:8a:af:48:32: cf:79:89:80:67:7d:e3:b1:3b:51:e2:02:f3:b0:6c: 6c:30:1c:a2:a0:7b:ff:e5:87:50:bb:f4:f8:19:0d: 2f:7e:5d:e7:e5:ec:3a:74:5b:cc:2c:c8:b8:e5:16: 83:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1A:4A:37:8B:1C:48:CA:C4:4F:BB:5A:CB:F7:2A:82:66:BD:B4:D6 X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:eb:57:72:d7:15:7c:1c:9c:9c:cf:72:89:f3:49:02:34:29: 84:47:85:83:66:30:05:21:35:b6:1f:a9:77:d2:65:ba:e1:8c: fb:31:be:4f:c0:80:ca:20:58:38:fc:4a:a7:d2:01:2f:07:41: ae:0d:62:6a:29:ee:d3:ba:e8:35:48:8e:d6:36:11:dd:4f:60: 09:e8:af:e0:c1:ae:85:ca:28:36:78:15:8a:76:a4:f8:be:78: ae:1c:20:f1:5a:5b:bb:b0:8c:72:65:fd:7a:d2:45:2b:11:1d: 35:23:eb:99:ca:92:38:4d:71:45:70:b4:17:02:9b:ab:09:a6: c0:3e:52:3a:03:cd:e9:39:8a:44:39:b0:d2:f8:78:47:d9:d2: 9a:72:b2:66:e5:e3:e7:86:4c:9f:ad:d6:a6:91:8f:3c:83:b2: 63:33:af:e8:7d:2d:74:aa:62:22:b3:2b:8c:df:3c:fa:04:16: 96:a4:01:fc:bc:d6:75:e5:da:9d:39:0a:42:0e:c5:4b:94:8a: 2a:e2:67:78:20:f3:52:68:03:98:4f:e7:91:c6:45:47:5c:6a: 29:78:33:65:83:94:49:83:6e:07:8c:2d:ef:c1:61:58:a9:b5: 81:a5:31:b5:fc:5a:9f:58:43:b9:3a:7e:14:26:4d:cf:9c:cf: 38:eb:d8:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgeNeRRGGVlL/Xt6wI/FXcCazzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNjA0MTgwNTA3MzNaFw0yNjA0MjExMzUwMzNaMDMxMTAvBgNV BAMTKDZEMUE0QTM3OEIxQzQ4Q0FDNDRGQkI1QUNCRjcyQTgyNjZCREI0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ffLEHKPs0ffxBPjnyagA0gbU QFXbuESGX7sOWj4SgddBD3McP1CDatw3HP0Y646qRGm3FmQsItMy+5sCehjtI+im 3E8cDGHOg2OzsGee8nz/ZQDd2FDdpOuhomQBeXPFXNlwS2aTNvIcevmAUbAaM+KU huBJFqv+DbpUoKMjSTizIJ7zIkuX0Vqo5s2JsvqyvBhl/YGMpZHEtqEw/BPgblh3 KYp6UcptD9p/ixuOl53gFKS4Slw/hsluwrwx6FfztWL423YpMfQ7vrCYiq9IMs95 iYBnfeOxO1HiAvOwbGwwHKKge//lh1C79PgZDS9+Xefl7Dp0W8wsyLjlFoNPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbRpKN4scSMrET7tay/cqgma9tNYwHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbrV3LXFXwcnJzPconzSQI0KYRHhYNmMAUh NbYfqXfSZbrhjPsxvk/AgMogWDj8SqfSAS8HQa4NYmop7tO66DVIjtY2Ed1PYAno r+DBroXKKDZ4FYp2pPi+eK4cIPFaW7uwjHJl/XrSRSsRHTUj65nKkjhNcUVwtBcC m6sJpsA+UjoDzek5ikQ5sNL4eEfZ0ppysmbl4+eGTJ+t1qaRjzyDsmMzr+h9LXSq YiKzK4zfPPoEFpakAfy81nXl2p05CkIOxUuUiiriZ3gg81JoA5hP55HGRUdcail4 M2WDlEmDbgeMLe/BYViptYGlMbX8Wp9YQ7k6fhQmTc+czzjr2Bs= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:59 2026 by rpki-client