$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft File: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json) Hash identifier: NIZxkYWW+NqXHhRWTmSdarVbbYA9qBkG5we88GQCEnY= Subject key identifier: DD:DA:25:97:36:69:F8:87:19:EE:83:63:27:C4:C6:41:5D:83:6B:D1 Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 Certificate issuer: /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Certificate serial: 61F5E2639D1B80DA4813C5ED684086EBD177A55F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft Manifest number: 0308 Signing time: Fri 17 Apr 2026 08:05:05 +0000 Manifest this update: Fri 17 Apr 2026 08:00:05 +0000 Manifest next update: Mon 20 Apr 2026 17:42:05 +0000 Files and hashes: 1: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: +FiEMQn+bof+/ZdEFGp6Dq9/UIExpSElpnCjlOgif5Q=) 2: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: 9OAoWczmJPqSai15ZAPOgSohr4eVEGJzypq/J/xc2bI=) 3: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: awzq4/mMw0+F8D8Ec7jt9NF16p0YxovmBv0HUMZcxzA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f5:e2:63:9d:1b:80:da:48:13:c5:ed:68:40:86:eb:d1:77:a5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Validity Not Before: Apr 17 08:00:05 2026 GMT Not After : Apr 20 17:42:05 2026 GMT Subject: CN=DDDA25973669F88719EE836327C4C6415D836BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:92:e0:7d:c1:e6:5c:3d:96:c7:e5:a3:5d: 60:70:fa:82:80:cc:75:1d:e3:08:e1:64:9e:e1:ba: 46:6b:bc:d7:a3:8e:32:62:e6:b9:d2:d6:95:0a:3f: 40:96:7e:fa:49:62:a1:37:8f:2d:e3:77:62:6c:b9: b0:41:11:7e:45:0e:36:23:40:c6:ca:50:03:b6:ee: 00:96:67:72:08:69:00:c1:b5:f4:1d:c3:91:1e:2e: eb:6a:a0:04:5c:af:20:b9:69:dc:0f:3b:f2:a9:57: 99:98:d7:7e:d0:3d:ae:88:e5:9a:41:56:3b:ac:4a: 53:80:e1:27:2f:a8:56:6a:58:e6:e7:6e:f6:2e:0c: 7c:42:f7:81:d3:da:2a:8b:f4:89:78:58:76:21:68: 64:26:b2:28:dd:98:ff:33:65:03:40:f9:32:1c:79: 18:45:fc:69:01:be:5a:e2:e2:89:69:66:16:f9:ad: fa:d9:f4:85:e8:c5:b4:94:11:67:b6:60:45:4b:41: 69:8f:b9:ce:f8:a9:e9:c3:db:22:e1:e2:48:7f:df: d2:16:2e:8a:ed:20:9d:30:bd:0f:d2:80:5a:31:9d: 7d:86:9c:89:a2:52:38:0f:54:97:91:42:05:e5:e2: f2:bd:04:b6:9c:d9:7a:b6:31:a1:40:c9:4b:83:50: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DA:25:97:36:69:F8:87:19:EE:83:63:27:C4:C6:41:5D:83:6B:D1 X509v3 Authority Key Identifier: keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:94:65:3b:b0:90:30:e0:5d:7e:2c:2e:59:ad:11:48:97:fb: de:57:70:a3:23:bd:59:4f:11:06:52:08:e3:2b:c9:b1:26:33: 0a:e3:ae:00:64:79:41:c6:b9:16:21:94:c7:77:4f:4b:37:13: 88:6e:e6:70:66:50:c6:11:d7:4b:12:47:64:6a:88:68:83:06: 7e:cb:55:e9:a5:2e:28:f2:a8:df:6a:ad:0e:22:5e:c5:39:7a: 64:90:00:0b:ff:e4:39:85:1b:8e:7c:88:66:89:9f:d2:e9:9e: 04:29:6b:9c:f6:0e:bd:34:fa:3d:b4:fc:cb:b8:d6:5e:98:b2: 6d:f3:6b:a2:7c:a5:35:5f:05:79:9d:c2:05:fb:9a:cd:97:b1: 17:4c:d0:ff:6f:03:44:7e:4d:62:0e:4e:f2:01:77:c2:f8:cc: d9:aa:56:62:49:08:25:7a:47:21:4b:d7:b2:c3:40:9e:51:b4: ac:bb:cc:df:85:49:89:d4:d5:0a:a8:16:6f:b0:21:64:45:99: 42:b3:8f:38:e6:92:61:07:b4:b1:0b:e9:7a:09:60:9a:df:a2: 37:c5:d4:09:ef:3b:4c:31:65:8a:82:c0:ca:0c:c2:98:1c:58: ab:a5:59:8e:f4:c7:68:16:85:3a:e1:2c:d6:1a:db:96:0e:57: 2f:b6:66:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfXiY50bgNpIE8XtaECG69F3pV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2 Q0VGNzE1MTAeFw0yNjA0MTcwODAwMDVaFw0yNjA0MjAxNzQyMDVaMDMxMTAvBgNV BAMTKEREREEyNTk3MzY2OUY4ODcxOUVFODM2MzI3QzRDNjQxNUQ4MzZCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4JLgfcHmXD2Wx+WjXWBw+oKA zHUd4wjhZJ7hukZrvNejjjJi5rnS1pUKP0CWfvpJYqE3jy3jd2JsubBBEX5FDjYj QMbKUAO27gCWZ3IIaQDBtfQdw5EeLutqoARcryC5adwPO/KpV5mY137QPa6I5ZpB VjusSlOA4ScvqFZqWObnbvYuDHxC94HT2iqL9Il4WHYhaGQmsijdmP8zZQNA+TIc eRhF/GkBvlri4olpZhb5rfrZ9IXoxbSUEWe2YEVLQWmPuc74qenD2yLh4kh/39IW LortIJ0wvQ/SgFoxnX2GnImiUjgPVJeRQgXl4vK9BLac2Xq2MaFAyUuDUGExAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3dollzZp+IcZ7oNjJ8TGQV2Da9EwHwYDVR0j BBgwFoAUDDwRP5gNgA+tX8Rn7n8QgGzvcVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTU3YTNiZi00ODIzLTQ2MDktODVjZC03NzU3MGJmMTg1ODAvMC8wQzNDMTEzRjk4 MEQ4MDBGQUQ1RkM0NjdFRTdGMTA4MDZDRUY3MTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2Q0VG NzE1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEw ODA2Q0VGNzE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSUZTuwkDDgXX4sLlmtEUiX+95XcKMjvVlP EQZSCOMrybEmMwrjrgBkeUHGuRYhlMd3T0s3E4hu5nBmUMYR10sSR2RqiGiDBn7L VemlLijyqN9qrQ4iXsU5emSQAAv/5DmFG458iGaJn9LpngQpa5z2Dr00+j20/Mu4 1l6Ysm3za6J8pTVfBXmdwgX7ms2XsRdM0P9vA0R+TWIOTvIBd8L4zNmqVmJJCCV6 RyFL17LDQJ5RtKy7zN+FSYnU1QqoFm+wIWRFmUKzjzjmkmEHtLEL6XoJYJrfojfF 1AnvO0wxZYqCwMoMwpgcWKulWY70x2gWhTrhLNYa25YOVy+2Zl8= -----END CERTIFICATE-----Generated at Sun Apr 19 13:16:45 2026 by rpki-client