$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft File: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft (raw, json) Hash identifier: bwiIQ0GV00e17C7zsCsUQm33gFy3ajxIPd/K7unhUOk= Subject key identifier: 4C:2C:40:CD:1A:9A:D0:41:0E:21:9C:2C:17:F2:FF:C1:4B:E7:1D:CE Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Certificate serial: 5F35549F8151653667E005A0341F03C97B71EF37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft Manifest number: 0264 Signing time: Fri 17 Apr 2026 17:41:07 +0000 Manifest this update: Fri 17 Apr 2026 17:36:07 +0000 Manifest next update: Mon 20 Apr 2026 21:54:07 +0000 Files and hashes: 1: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl (hash: byfNngfjUgt+t5mLRMSk1UH2TLJ6JAvT2oVrvD0o9As=) 2: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: 4X8Kz+hrvczZsab/uaMNm2DvsPE7IvXYSmEJwXv1W3g=) 3: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: 1Ri1ZJBh09re6NP+bhwgfUJY8sYHU8itfO+apymQ4g0=) 4: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: oupcLDUmMHLFoLDlfsFGLMKtLOlyWvfSlJ+uVUfUPvg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:35:54:9f:81:51:65:36:67:e0:05:a0:34:1f:03:c9:7b:71:ef:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Validity Not Before: Apr 17 17:36:07 2026 GMT Not After : Apr 20 21:54:07 2026 GMT Subject: CN=4C2C40CD1A9AD0410E219C2C17F2FFC14BE71DCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:81:60:4d:26:54:fe:81:bd:f6:96:ec:53: 40:73:79:7c:17:3d:47:95:83:a9:bc:37:bc:86:1c: 34:44:f9:42:9e:36:97:56:f4:08:55:db:b1:92:27: 04:25:44:58:1f:e7:68:29:8b:5d:cf:2c:09:54:64: 09:ba:27:0c:4f:be:59:a6:b8:0c:22:10:ae:32:35: 88:d7:db:7e:41:25:cc:b6:16:a8:03:14:6f:59:a3: 8f:26:d4:da:8d:c6:1f:fe:e2:fe:c0:4b:5c:96:c3: 16:cc:d8:2c:08:91:fb:7a:d8:15:f1:3f:bd:84:b2: c7:dc:f3:6c:f4:de:25:b3:54:a5:59:eb:20:0b:ed: 10:7f:de:6c:20:a6:d8:45:a3:27:71:1b:37:d0:4b: f7:bd:98:9e:b5:fe:ee:32:b0:37:55:6c:10:47:e5: 4c:5e:ec:89:ff:44:77:e3:9c:a0:21:b8:bd:6d:94: 3c:95:51:1d:ef:b9:1e:53:24:61:c8:46:33:8c:84: 46:4e:4d:ab:a9:f3:3d:95:25:52:58:ab:6b:5d:0e: fa:d4:db:b5:9c:9c:3d:c9:e9:e2:68:5e:2b:4e:5e: 0e:e0:1a:88:58:25:1a:f6:0d:a8:f6:62:bb:d7:f8: 3f:1a:d8:85:4b:16:ba:16:a7:01:d9:4e:ca:ca:d0: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2C:40:CD:1A:9A:D0:41:0E:21:9C:2C:17:F2:FF:C1:4B:E7:1D:CE X509v3 Authority Key Identifier: keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:37:86:7a:cd:49:a2:31:60:bf:4d:a7:40:32:52:49:f6:2c: 13:df:3c:10:8a:3f:81:21:33:43:37:1b:6a:c1:7c:a3:99:6a: dc:80:a8:5d:e4:45:a5:97:35:d5:8b:61:da:3b:eb:86:f9:6d: 7e:57:13:14:67:34:bb:4f:39:49:7e:86:81:9e:d7:66:d6:cd: 74:93:8e:62:09:0e:49:16:9c:6d:59:d2:9d:5c:f4:08:fc:43: d5:0c:42:89:19:73:47:50:64:3a:00:d0:3b:ad:eb:4c:07:14: 4f:8d:18:0b:95:b8:88:6f:88:97:6d:5c:e5:ce:2e:0e:04:a7: 5c:5c:ec:8a:d0:2c:64:1f:c8:94:ee:53:5a:df:10:f1:32:55: 14:a1:46:28:e5:48:53:ad:65:81:29:57:0f:89:90:9a:04:15: 3f:62:c0:c0:ec:c7:75:92:ca:5d:a8:bf:9e:e9:d2:9e:c3:f0: 2e:95:b9:18:8e:7b:1a:4a:a8:19:59:c5:02:87:3a:b6:02:37: 69:01:c4:8a:01:45:9e:c7:e3:e2:8b:45:b1:fc:35:53:5e:cf: f2:0b:1a:fe:1d:3c:20:68:d7:4d:d9:cb:40:41:57:3d:0c:59: 21:8d:61:c1:a7:34:51:53:e5:13:f4:cb:e5:b1:99:4e:fa:af: ce:a0:9b:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzVUn4FRZTZn4AWgNB8DyXtx7zcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC QTBCMzlCQjAeFw0yNjA0MTcxNzM2MDdaFw0yNjA0MjAyMTU0MDdaMDMxMTAvBgNV BAMTKDRDMkM0MENEMUE5QUQwNDEwRTIxOUMyQzE3RjJGRkMxNEJFNzFEQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP0YFgTSZU/oG99pbsU0BzeXwX PUeVg6m8N7yGHDRE+UKeNpdW9AhV27GSJwQlRFgf52gpi13PLAlUZAm6JwxPvlmm uAwiEK4yNYjX235BJcy2FqgDFG9Zo48m1NqNxh/+4v7AS1yWwxbM2CwIkft62BXx P72Essfc82z03iWzVKVZ6yAL7RB/3mwgpthFoydxGzfQS/e9mJ61/u4ysDdVbBBH 5Uxe7In/RHfjnKAhuL1tlDyVUR3vuR5TJGHIRjOMhEZOTaup8z2VJVJYq2tdDvrU 27WcnD3J6eJoXitOXg7gGohYJRr2Daj2YrvX+D8a2IVLFroWpwHZTsrK0EKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTCxAzRqa0EEOIZwsF/L/wUvnHc4wHwYDVR0j BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC MzlCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRC OUZCQTBCMzlCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI43hnrNSaIxYL9Np0AyUkn2LBPfPBCKP4Eh M0M3G2rBfKOZatyAqF3kRaWXNdWLYdo764b5bX5XExRnNLtPOUl+hoGe12bWzXST jmIJDkkWnG1Z0p1c9Aj8Q9UMQokZc0dQZDoA0Dut60wHFE+NGAuVuIhviJdtXOXO Lg4Ep1xc7IrQLGQfyJTuU1rfEPEyVRShRijlSFOtZYEpVw+JkJoEFT9iwMDsx3WS yl2ov57p0p7D8C6VuRiOexpKqBlZxQKHOrYCN2kBxIoBRZ7H4+KLRbH8NVNez/IL Gv4dPCBo103Zy0BBVz0MWSGNYcGnNFFT5RP0y+WxmU76r86gm4E= -----END CERTIFICATE-----Generated at Fri Apr 17 23:35:45 2026 by rpki-client