$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: zGeL2dFdZtGBd1zWOEKinsKiv+gA9+Svr65YnnZiYYM= Subject key identifier: 70:F2:25:4B:DF:1A:48:44:1C:D9:CD:1C:86:B6:5F:50:B7:59:6A:D3 Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 1E2F5A67D1D15CBAA688BB85AED89CB4ED453E49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 0568 Signing time: Wed 15 Apr 2026 18:10:43 +0000 Manifest this update: Wed 15 Apr 2026 18:05:43 +0000 Manifest next update: Sun 19 Apr 2026 03:48:43 +0000 Files and hashes: 1: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: YJ0mYeD8uIdCbhZMWzmi0uDnpJS5M1d2fy1fVDu9EfM=) 2: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: zsg0MYUUul8ZWAz6HoeSnMP9CkNtx4CP6l+n2iyt5ns=) 3: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=) 4: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: VPDdfzNp/Tnip1mpiin5tv4VXeLj0MdK1eiLLlQll+Q=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 03:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2f:5a:67:d1:d1:5c:ba:a6:88:bb:85:ae:d8:9c:b4:ed:45:3e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Apr 15 18:05:43 2026 GMT Not After : Apr 19 03:48:43 2026 GMT Subject: CN=70F2254BDF1A48441CD9CD1C86B65F50B7596AD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3c:03:63:d4:40:f3:2e:e9:01:90:84:20:63: 87:99:59:fd:5e:a7:b5:f6:73:cc:13:61:39:26:56: c6:14:52:77:b8:c6:0b:08:18:ac:f0:92:7a:45:eb: e0:e2:aa:d3:16:34:d9:85:13:f4:76:28:9d:7c:77: db:54:d5:4d:88:f5:c9:7b:6a:c5:19:80:de:98:a0: 40:b4:85:6c:e6:ca:da:00:c8:e3:76:e8:bb:ff:47: 7f:df:37:d2:b2:92:e6:44:44:31:de:b9:66:e5:f0: e2:18:73:97:58:2c:ca:c9:11:b6:10:6a:c6:c4:01: 81:ba:c6:d3:52:f2:96:42:a8:1f:81:ae:23:ee:4a: cd:e0:4b:9a:5a:1f:01:82:aa:d8:0b:50:4d:be:51: 36:24:2b:ba:5d:fe:95:0f:e0:c7:64:c8:d2:4c:38: af:24:7b:65:9b:a8:bd:2a:31:ec:7e:3c:1c:82:3a: 02:5a:12:3a:5c:73:49:45:39:63:c9:10:1f:81:08: e1:87:79:fd:59:25:87:d5:3b:c1:fd:b3:f3:c0:87: 6d:c2:a5:c9:c2:3c:00:dc:6f:71:12:bd:4c:3b:e0: 89:39:f7:75:5b:0b:6d:87:6c:e5:db:39:1a:5a:38: e5:03:97:4b:9f:04:b6:76:b8:b0:e6:58:0a:2d:23: 9e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F2:25:4B:DF:1A:48:44:1C:D9:CD:1C:86:B6:5F:50:B7:59:6A:D3 X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:7b:cc:e5:4f:64:c2:bd:68:6f:e0:ae:70:eb:69:c4:41:fc: 93:1e:7e:cd:d6:e3:db:87:a7:21:20:c7:60:47:a0:ac:24:94: d1:e6:66:b4:47:f7:e8:6b:ba:78:43:fc:83:9f:12:a2:70:5e: a6:af:55:e9:b1:99:36:0f:36:13:d5:5a:ed:77:93:13:d5:4c: 99:92:19:19:4d:1c:09:db:3b:7c:35:30:fd:16:dd:87:1a:4f: fe:27:75:f0:69:53:bb:ed:0c:91:b1:c4:bc:34:57:db:a1:2b: db:63:8a:54:0c:e3:b5:cc:4f:b2:90:71:48:59:b4:80:c6:2f: 09:81:02:02:9d:7c:9c:e8:81:cd:fc:ca:7b:f0:cf:63:4b:9d: 46:44:64:aa:47:74:71:46:8e:6b:4b:8a:1f:46:43:19:53:25: 18:08:79:2a:a6:f1:dc:c8:8d:04:d7:fb:65:a8:24:63:e2:9c: 88:32:a2:a9:48:c8:93:77:2b:69:18:8e:8e:67:4c:a5:b5:f0: 6f:f1:6e:f7:d8:80:36:18:95:86:85:b7:98:0b:00:a5:48:14: b5:5c:7d:50:de:50:92:77:61:29:c4:d5:65:8c:b9:80:af:c5: 66:ed:7a:4e:24:74:cd:7c:61:41:6e:ee:4a:5e:c9:79:42:00: de:e3:13:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHi9aZ9HRXLqmiLuFrtictO1FPkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNjA0MTUxODA1NDNaFw0yNjA0MTkwMzQ4NDNaMDMxMTAvBgNV BAMTKDcwRjIyNTRCREYxQTQ4NDQxQ0Q5Q0QxQzg2QjY1RjUwQjc1OTZBRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPANj1EDzLukBkIQgY4eZWf1e p7X2c8wTYTkmVsYUUne4xgsIGKzwknpF6+DiqtMWNNmFE/R2KJ18d9tU1U2I9cl7 asUZgN6YoEC0hWzmytoAyON26Lv/R3/fN9KykuZERDHeuWbl8OIYc5dYLMrJEbYQ asbEAYG6xtNS8pZCqB+BriPuSs3gS5paHwGCqtgLUE2+UTYkK7pd/pUP4MdkyNJM OK8ke2WbqL0qMex+PByCOgJaEjpcc0lFOWPJEB+BCOGHef1ZJYfVO8H9s/PAh23C pcnCPADcb3ESvUw74Ik593VbC22HbOXbORpaOOUDl0ufBLZ2uLDmWAotI56zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcPIlS98aSEQc2c0chrZfULdZatMwHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJl7zOVPZMK9aG/grnDracRB/JMefs3W49uH pyEgx2BHoKwklNHmZrRH9+hrunhD/IOfEqJwXqavVemxmTYPNhPVWu13kxPVTJmS GRlNHAnbO3w1MP0W3YcaT/4ndfBpU7vtDJGxxLw0V9uhK9tjilQM47XMT7KQcUhZ tIDGLwmBAgKdfJzogc38ynvwz2NLnUZEZKpHdHFGjmtLih9GQxlTJRgIeSqm8dzI jQTX+2WoJGPinIgyoqlIyJN3K2kYjo5nTKW18G/xbvfYgDYYlYaFt5gLAKVIFLVc fVDeUJJ3YSnE1WWMuYCvxWbtek4kdM18YUFu7kpeyXlCAN7jE2I= -----END CERTIFICATE-----Generated at Fri Apr 17 16:33:48 2026 by rpki-client