$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: cXAKVFuCzzxUbOgXxXhcyVttdiJuSIcrqAhIEu6NPkQ= Subject key identifier: 5A:32:4C:CE:4D:D7:DF:34:21:93:CF:15:C2:14:62:B8:38:7D:4C:23 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 36830716C1A7740D2068CFA8EC639A7CA0A2D541 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 03C1 Signing time: Wed 15 Apr 2026 21:31:28 +0000 Manifest this update: Wed 15 Apr 2026 21:26:28 +0000 Manifest next update: Sun 19 Apr 2026 02:32:28 +0000 Files and hashes: 1: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: VIiYsiciQqUcEybdJzWc2/mfp8SJKq8E8uJ2ZasR81U=) 2: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: Bs5Awi2ROwKff4BLbS2KelsdGscmWwXl7Ms/+kA85eg=) 3: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: N+6V8uNUG191tHBLsJh7DmTMPNIkIriWywPcuQqpvb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:83:07:16:c1:a7:74:0d:20:68:cf:a8:ec:63:9a:7c:a0:a2:d5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Apr 15 21:26:28 2026 GMT Not After : Apr 19 02:32:28 2026 GMT Subject: CN=5A324CCE4DD7DF342193CF15C21462B8387D4C23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:dd:71:44:43:42:c5:ce:e6:7e:16:85:bf: 60:82:b2:ba:7f:42:59:a5:a3:fd:13:2f:ba:63:11: b4:75:57:ab:a8:19:5e:0c:00:6c:5b:a6:99:cb:21: 87:12:d2:8b:58:45:d7:cd:60:78:cb:32:ad:b1:f8: 15:bb:78:86:d7:ec:5a:23:70:9a:7b:ff:90:9c:a1: 96:6f:85:de:20:70:fb:33:b7:3a:73:58:1b:5b:58: 9e:0b:be:f9:9a:ee:60:1e:83:ff:72:4e:47:15:8b: e0:03:59:b5:49:36:0d:46:0c:f9:d4:09:34:9f:ae: e4:7c:74:f1:1c:22:46:ab:ed:a8:7b:9d:e7:31:a4: a8:96:48:e2:f2:f0:c1:d4:f5:b4:3c:30:41:3d:fb: cc:66:42:7e:37:b5:54:33:13:4a:85:d5:00:5f:c9: bd:74:53:c2:1a:cf:3d:81:3b:89:d1:9a:a8:99:c9: 76:45:09:6d:9c:9e:55:4d:b2:b9:1d:44:56:99:77: d2:77:f8:95:e6:a4:38:63:58:66:77:e8:c0:86:25: c8:3e:2f:df:b4:f0:b7:da:70:ff:31:12:af:d0:d9: 00:a5:e1:c3:9b:90:9b:13:6c:60:ec:71:9b:5d:33: 37:86:dd:47:dd:a8:c5:2d:9a:e3:fe:e4:e9:94:ed: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:32:4C:CE:4D:D7:DF:34:21:93:CF:15:C2:14:62:B8:38:7D:4C:23 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:bf:57:6b:83:78:4d:b8:e3:c9:98:3a:94:c0:94:42:35:80: dc:47:24:71:f6:fc:47:93:09:b0:b5:3d:4a:85:82:98:7a:e3: 23:33:57:f4:84:31:e8:aa:45:d7:3a:4e:08:a4:f0:7a:ce:11: 3a:cd:36:ce:9f:bd:1e:86:ef:34:3b:66:5b:47:cb:c1:95:30: 15:cc:de:05:b8:28:f5:a8:29:d0:cf:f3:04:fc:c9:a1:0e:b5: 5a:1e:9e:8a:ce:03:7a:d9:ae:04:3e:76:7e:85:28:5d:19:c8: 5a:34:ac:a8:df:18:00:e6:d5:54:d4:e8:46:0b:d5:3f:4d:b8: 26:01:bd:24:3d:8b:44:c4:0b:bc:fb:72:dc:4f:3d:13:26:13: 6e:fc:d7:b4:b1:af:4a:04:83:79:77:0c:92:c6:5f:39:82:16: 87:a6:11:7f:81:6c:df:f6:05:00:11:9a:52:a8:f7:f5:18:08: 02:41:3e:24:75:ab:4b:83:f3:25:e1:ed:23:b0:a1:dd:5b:35: 42:33:5b:61:9f:05:97:27:b1:12:f1:bd:c6:33:e8:71:31:84: 67:3e:1f:e9:5a:eb:c3:1d:8e:08:c7:d7:17:e8:92:6f:da:68: 51:93:05:c3:82:e1:43:1e:3b:0c:28:a3:59:0e:2d:c8:5e:86: eb:eb:0a:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNoMHFsGndA0gaM+o7GOafKCi1UEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNjA0MTUyMTI2MjhaFw0yNjA0MTkwMjMyMjhaMDMxMTAvBgNV BAMTKDVBMzI0Q0NFNEREN0RGMzQyMTkzQ0YxNUMyMTQ2MkI4Mzg3RDRDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktt1xRENCxc7mfhaFv2CCsrp/ Qlmlo/0TL7pjEbR1V6uoGV4MAGxbppnLIYcS0otYRdfNYHjLMq2x+BW7eIbX7Foj cJp7/5CcoZZvhd4gcPsztzpzWBtbWJ4Lvvma7mAeg/9yTkcVi+ADWbVJNg1GDPnU CTSfruR8dPEcIkar7ah7necxpKiWSOLy8MHU9bQ8MEE9+8xmQn43tVQzE0qF1QBf yb10U8Iazz2BO4nRmqiZyXZFCW2cnlVNsrkdRFaZd9J3+JXmpDhjWGZ36MCGJcg+ L9+08LfacP8xEq/Q2QCl4cObkJsTbGDscZtdMzeG3UfdqMUtmuP+5OmU7S/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjJMzk3X3zQhk88VwhRiuDh9TCMwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMC/V2uDeE2448mYOpTAlEI1gNxHJHH2/EeT CbC1PUqFgph64yMzV/SEMeiqRdc6Tgik8HrOETrNNs6fvR6G7zQ7ZltHy8GVMBXM 3gW4KPWoKdDP8wT8yaEOtVoenorOA3rZrgQ+dn6FKF0ZyFo0rKjfGADm1VTU6EYL 1T9NuCYBvSQ9i0TEC7z7ctxPPRMmE27817Sxr0oEg3l3DJLGXzmCFoemEX+BbN/2 BQARmlKo9/UYCAJBPiR1q0uD8yXh7SOwod1bNUIzW2GfBZcnsRLxvcYz6HExhGc+ H+la68MdjgjH1xfokm/aaFGTBcOC4UMeOwwoo1kOLchehuvrCuI= -----END CERTIFICATE-----Generated at Fri Apr 17 16:56:40 2026 by rpki-client