$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft File: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json) Hash identifier: 9LEtUbb72jLIhuCOj/rNbWLYqnOYWQGXcCugwyY9/kw= Subject key identifier: 3D:E6:2A:FC:1B:EB:28:46:27:90:44:FA:01:2D:2D:09:96:79:C7:8B Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 196F423E6DCCB408EB3682E09BFB3D960C1D26DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft Manifest number: 0575 Signing time: Thu 16 Apr 2026 00:41:11 +0000 Manifest this update: Thu 16 Apr 2026 00:36:11 +0000 Manifest next update: Sun 19 Apr 2026 01:59:11 +0000 Files and hashes: 1: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: B9YgdbWic7qXvAvHz1n/3UtrpjolL03glGipzRrFEzY=) 2: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: f1EdJawAFE33t1rxrdKPcs3d9VEItcNJb2cJ7vIPk2M=) 3: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: cmv59nNsRTRKeMV0c4HuiujTHOVfbugS8maMc0aBwq0=) 4: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: 3PZFIN0jiG1liVNOYS5bc8JkLCWSH93e9B5ZRAydDG8=) 5: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=) 6: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: lbjyY2T7pq2AhARpSAF78BnnkqHkbfsQPMfNOqEcmjE=) 7: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: dZSB/gSxOY7UKqB6f6AoUZuRdwpTE/RXX5o4gj8yNrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6f:42:3e:6d:cc:b4:08:eb:36:82:e0:9b:fb:3d:96:0c:1d:26:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Apr 16 00:36:11 2026 GMT Not After : Apr 19 01:59:11 2026 GMT Subject: CN=3DE62AFC1BEB2846279044FA012D2D099679C78B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:da:19:f1:7f:d6:20:18:9d:35:ef:94:3d: f6:9d:df:47:08:8f:94:d2:ea:f8:68:3c:ce:e9:51: d6:1b:93:0e:aa:e4:3e:87:5e:ab:1e:0d:af:79:d1: 01:d6:a2:ce:48:71:1b:d7:59:63:6b:12:50:aa:d6: 3d:96:78:80:35:f5:37:ec:65:4d:d7:23:77:24:54: 10:a7:fd:36:cd:de:35:d3:17:2f:28:3f:ec:f5:9d: 1c:31:7d:48:8c:56:77:0f:00:b3:7c:c9:bc:3a:93: fc:8f:18:7e:70:0c:c4:18:a3:6f:74:b2:ab:da:3e: f9:f3:4b:09:9f:56:d5:4b:42:4a:44:28:ce:24:d9: e8:2e:21:57:99:1e:fe:4c:bc:42:2f:6f:e4:2f:02: 32:18:5b:9b:3e:a3:f8:ae:61:1f:d4:37:99:12:dd: 9b:41:00:5b:e4:f8:c3:54:bc:d0:fb:d1:f3:0e:7d: fc:e0:20:a6:54:75:a4:d7:72:74:2e:b7:c1:41:1a: 4a:c8:c7:4f:b5:8a:17:99:ef:78:8b:4a:58:2c:f6: 24:ab:d6:21:fd:62:bd:9f:da:4f:1d:4c:5f:1a:f6: df:87:1a:bd:d4:21:f7:12:4a:a2:c5:a0:f1:c2:1d: b3:fd:cc:b7:5b:fb:29:12:82:4f:ec:8f:fe:b5:c3: 3e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E6:2A:FC:1B:EB:28:46:27:90:44:FA:01:2D:2D:09:96:79:C7:8B X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0d:ea:b8:01:85:9a:98:73:16:ed:88:ed:e6:60:b5:b8:6b: 97:86:56:3b:9a:bd:e8:71:41:f6:33:b6:94:89:04:e5:3e:15: 97:d6:a9:39:01:f6:94:20:36:6a:a8:d4:85:b2:02:1f:ca:fa: d8:57:d7:72:40:cf:00:6d:43:2d:40:e0:0c:5e:f1:cb:9c:4b: cc:f5:70:a1:e8:81:89:94:95:75:d7:1c:47:2e:78:bf:57:9e: 27:3c:5e:25:73:49:78:22:79:82:10:a1:0d:e8:01:d2:5a:0b: a1:f3:a1:a4:32:6a:e1:b0:a7:d2:55:5f:7c:aa:8b:2e:f7:d9: a0:0a:e5:bb:d3:91:db:1b:ac:75:ed:7f:6e:d7:1f:1b:a7:ad: 52:13:86:35:fc:a4:55:4b:57:91:49:b8:e3:13:3e:ec:d6:e2: 9a:b0:03:25:17:e9:da:7c:d8:69:f1:5a:a2:6e:2e:35:4f:de: dd:2d:81:c1:20:fd:10:38:3f:0e:60:4b:0d:c7:a1:b1:50:16: 0c:b8:ba:b1:8e:6f:11:fe:f9:5c:f1:8a:58:fa:92:53:0f:f3: cf:d6:22:70:33:f0:84:dd:9c:12:db:d4:b3:41:9d:06:55:3b: 31:d4:8b:26:20:9b:3c:ef:d0:80:14:50:c3:55:ca:1c:0b:b5: 5f:68:a2:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGW9CPm3MtAjrNoLgm/s9lgwdJtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yNjA0MTYwMDM2MTFaFw0yNjA0MTkwMTU5MTFaMDMxMTAvBgNV BAMTKDNERTYyQUZDMUJFQjI4NDYyNzkwNDRGQTAxMkQyRDA5OTY3OUM3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBdoZ8X/WIBidNe+UPfad30cI j5TS6vhoPM7pUdYbkw6q5D6HXqseDa950QHWos5IcRvXWWNrElCq1j2WeIA19Tfs ZU3XI3ckVBCn/TbN3jXTFy8oP+z1nRwxfUiMVncPALN8ybw6k/yPGH5wDMQYo290 sqvaPvnzSwmfVtVLQkpEKM4k2eguIVeZHv5MvEIvb+QvAjIYW5s+o/iuYR/UN5kS 3ZtBAFvk+MNUvND70fMOffzgIKZUdaTXcnQut8FBGkrIx0+1iheZ73iLSlgs9iSr 1iH9Yr2f2k8dTF8a9t+HGr3UIfcSSqLFoPHCHbP9zLdb+ykSgk/sj/61wz6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPeYq/BvrKEYnkET6AS0tCZZ5x4swHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAz RkNGRDI2NkI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0N6rgBhZqYcxbtiO3mYLW4a5eGVjuavehx QfYztpSJBOU+FZfWqTkB9pQgNmqo1IWyAh/K+thX13JAzwBtQy1A4Axe8cucS8z1 cKHogYmUlXXXHEcueL9Xnic8XiVzSXgieYIQoQ3oAdJaC6HzoaQyauGwp9JVX3yq iy732aAK5bvTkdsbrHXtf27XHxunrVIThjX8pFVLV5FJuOMTPuzW4pqwAyUX6dp8 2GnxWqJuLjVP3t0tgcEg/RA4Pw5gSw3HobFQFgy4urGObxH++Vzxilj6klMP88/W InAz8ITdnBLb1LNBnQZVOzHUiyYgmzzv0IAUUMNVyhwLtV9oogY= -----END CERTIFICATE-----Generated at Fri Apr 17 09:35:09 2026 by rpki-client