$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft File: 3E0D060F214DF8E6493243033EBD30ABD627ED36.mft (raw, json) Hash identifier: C+yMs4GSV+q6GkGceboWi2giT0tTu1EqNkiARy1td+I= Subject key identifier: 30:6E:6C:2F:43:6B:43:B3:B7:4F:29:6A:ED:E8:97:E9:E0:CD:BC:64 Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36 Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36 Certificate serial: 5A346D77B6E6ECFC58D7A50EB9404616FEFC387B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft Manifest number: 03B7 Signing time: Sun 19 Apr 2026 00:21:32 +0000 Manifest this update: Sun 19 Apr 2026 00:16:32 +0000 Manifest next update: Wed 22 Apr 2026 08:07:32 +0000 Files and hashes: 1: 3E0D060F214DF8E6493243033EBD30ABD627ED36.crl (hash: XSGh+UvJhNzPcdNdFs1XNOhcPVaGdAMkRj/axpyI8KU=) 2: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: NPw1Lo+YjKLvGNtWeZz9XqehI9DzH5RN06kVgFiciSk=) 3: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: KKvpOiZTS2PTbUSTAdq46vyVeUcn/vimA1z6gGllREA=) 4: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: kzVXOwazXJFN9fzfC6sWgiDyHm81pDht76pr6WC1zJY=) 5: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: rUzHPQC8rSGdW9E/HydLJJfVCcp4Cg41fMK32WaXBLQ=) 6: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: j4EirQozhD0lTmw+6xccoqveJNB1lQUKPEdQdwykqi0=) 7: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: D7dbL0hVkjDuz3HuH0Fpn/YO9/LOsGy9EAjzsWctv44=) 8: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: k1S7F23R8eG1LRhjTB3+I4onoSj++9fna5xIs5SQKrk=) 9: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: 2mLm97PKk/N/WXNzhaOaTxfsyhNhB+sw5XmUg9N2fSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:34:6d:77:b6:e6:ec:fc:58:d7:a5:0e:b9:40:46:16:fe:fc:38:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36 Validity Not Before: Apr 19 00:16:32 2026 GMT Not After : Apr 22 08:07:32 2026 GMT Subject: CN=306E6C2F436B43B3B74F296AEDE897E9E0CDBC64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:ce:ea:50:9b:df:02:13:f0:ad:7e:34:5a: 8d:8f:ca:d9:de:57:ed:50:36:09:28:2a:8f:4c:ce: ca:7e:13:b2:72:c9:52:d5:a1:70:ee:63:2b:6d:ef: 5a:8f:31:4b:cd:81:9f:e8:e6:4f:52:92:53:e4:f2: 70:ee:61:11:74:29:b3:8b:6f:41:6a:76:45:74:45: 72:04:19:02:da:a5:4b:d6:1a:75:46:6d:50:b7:0d: 94:aa:30:8d:b4:eb:31:01:40:a5:e5:70:96:94:83: 79:0f:98:a5:3b:8e:28:7e:82:2a:18:8b:48:b8:1c: 23:99:42:b5:89:c4:3b:38:b7:6d:49:d6:e4:d8:ef: 71:dd:1a:fd:c7:30:06:8e:72:76:93:2c:ce:fc:cb: e5:58:78:ef:06:03:60:e6:b9:a7:c8:65:bd:0a:b4: a0:0d:08:04:dd:48:0c:8b:58:44:1d:9d:32:81:cd: c6:17:13:57:4b:64:bb:48:f8:2c:a1:1f:10:61:b3: 5e:c6:9e:ad:c9:ad:9c:e6:2c:29:da:b2:ae:fb:a0: aa:29:74:4a:cb:1d:0a:b8:69:65:44:dd:81:b3:2a: 92:e2:78:8d:fa:70:74:ac:47:0e:b3:c7:2d:7e:ac: dd:d0:30:63:15:52:ae:e2:41:d8:02:0a:e9:09:53: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6E:6C:2F:43:6B:43:B3:B7:4F:29:6A:ED:E8:97:E9:E0:CD:BC:64 X509v3 Authority Key Identifier: keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f7:ac:31:bb:91:47:83:35:b7:8a:b9:e1:22:80:78:76:91: 14:7a:1e:d8:dc:92:5b:e9:17:73:fd:65:1f:96:9d:89:c5:29: 43:aa:4f:fa:9b:7c:c3:7e:98:08:e3:cc:df:cb:9e:28:5a:5f: c5:89:c2:7b:ec:7e:28:02:67:e3:b0:e3:41:59:12:36:a7:47: e9:60:aa:c4:69:cb:43:c2:f4:2c:df:d3:41:1b:af:06:04:13: a2:14:69:d7:23:cc:41:a5:86:4d:ef:df:83:38:e5:1a:a7:99: 34:6d:41:dc:31:d8:5c:12:43:24:a9:22:a0:89:ca:1b:58:b4: 83:44:15:f2:9a:ad:16:76:2c:29:4b:a0:e6:b8:3a:75:5a:0b: 4e:89:3d:e7:6d:42:4f:52:cc:2e:ae:b8:c2:18:2d:9b:db:b5: 01:a2:07:f2:ec:15:89:16:18:6c:40:c7:cb:16:8e:96:8b:5a: 73:af:64:65:00:c2:40:02:4f:ee:12:44:f5:ef:96:0f:b7:db: d4:ce:c7:e5:90:24:d9:c3:ab:17:63:2b:f8:8b:35:d7:80:d9: f6:ea:5b:e2:45:7b:02:3a:91:91:bd:28:bb:1a:12:a0:62:2d: 58:8f:f6:d2:1a:5c:e1:6f:e1:19:c6:0c:bc:e4:7c:64:3b:ea: 1f:93:06:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjRtd7bm7PxY16UOuUBGFv78OHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJE NjI3RUQzNjAeFw0yNjA0MTkwMDE2MzJaFw0yNjA0MjIwODA3MzJaMDMxMTAvBgNV BAMTKDMwNkU2QzJGNDM2QjQzQjNCNzRGMjk2QUVERTg5N0U5RTBDREJDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKs7qUJvfAhPwrX40Wo2Pytne V+1QNgkoKo9Mzsp+E7JyyVLVoXDuYytt71qPMUvNgZ/o5k9SklPk8nDuYRF0KbOL b0FqdkV0RXIEGQLapUvWGnVGbVC3DZSqMI206zEBQKXlcJaUg3kPmKU7jih+gioY i0i4HCOZQrWJxDs4t21J1uTY73HdGv3HMAaOcnaTLM78y+VYeO8GA2DmuafIZb0K tKANCATdSAyLWEQdnTKBzcYXE1dLZLtI+CyhHxBhs17Gnq3JrZzmLCnasq77oKop dErLHQq4aWVE3YGzKpLieI36cHSsRw6zxy1+rN3QMGMVUq7iQdgCCukJU+o1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMG5sL0NrQ7O3Tylq7eiX6eDNvGQwHwYDVR0j BBgwFoAUPg0GDyFN+OZJMkMDPr0wq9Yn7TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjRmODUxMS0wN2IzLTRhNjEtYmQwNC0yZTY2NWM5Mjc4ZmMvMC8zRTBEMDYwRjIx NERGOEU2NDkzMjQzMDMzRUJEMzBBQkQ2MjdFRDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJENjI3 RUQzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI0Zjg1MTEtMDdiMy00YTYxLWJk MDQtMmU2NjVjOTI3OGZjLzAvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMw QUJENjI3RUQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADr3rDG7kUeDNbeKueEigHh2kRR6Htjcklvp F3P9ZR+WnYnFKUOqT/qbfMN+mAjjzN/LnihaX8WJwnvsfigCZ+Ow40FZEjanR+lg qsRpy0PC9Czf00EbrwYEE6IUadcjzEGlhk3v34M45RqnmTRtQdwx2FwSQySpIqCJ yhtYtINEFfKarRZ2LClLoOa4OnVaC06JPedtQk9SzC6uuMIYLZvbtQGiB/LsFYkW GGxAx8sWjpaLWnOvZGUAwkACT+4SRPXvlg+329TOx+WQJNnDqxdjK/iLNdeA2fbq W+JFewI6kZG9KLsaEqBiLViP9tIaXOFv4RnGDLzkfGQ76h+TBhE= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:16 2026 by rpki-client