$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft File: 3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json) Hash identifier: GMBr5iZS3JB+206b4joTRg9j2quYGeQHZgI9CZ2Hba0= Subject key identifier: 70:9C:65:7C:8C:67:14:B0:E6:8D:17:17:77:99:86:BD:DD:00:E5:4D Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Certificate serial: 2C5FB16BE283A6E4087F91F22D6BF8E54B6FDFE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft Manifest number: 0149 Signing time: Fri 17 Apr 2026 14:52:36 +0000 Manifest this update: Fri 17 Apr 2026 14:47:36 +0000 Manifest next update: Mon 20 Apr 2026 17:25:36 +0000 Files and hashes: 1: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: 6Ozj0bnQCOOfsbCl5pz0EmWWOULaKdCGv4cZ3l8WpRo=) 2: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: 1R2O/r6j/Z2JIvpI1gj24JgeK9sd0xzW94a+KDUM1Bk=) 3: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: u43zTi9Bk1sJznU4k2t//pSN767UMyRsnCd0m+J61t0=) 4: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: t/PNdhAimXVY10CPtXNhPj7zhZ0aTYHgcrFrXGZksrU=) 5: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: flxUwmIBm5LywlVGg9yH6C9JGyBpXiBZMWw156cr79I=) 6: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: cAXi7QLRcU3xQealltM+krJDl+01MknkHHhrGkik9hw=) 7: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: /XDSaVsrSjwe2U97ABDcqea/xKaB2R3seZrfdL8XTtc=) 8: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: 3aPMWliHuSOoqhKRxMQIQrp1YkV2FZf9+95u6SJyxvc=) 9: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: kADPVhjKR2TSlyiLPxQ0miUTvXZPeeWVGY0lXhCRU+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5f:b1:6b:e2:83:a6:e4:08:7f:91:f2:2d:6b:f8:e5:4b:6f:df:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Validity Not Before: Apr 17 14:47:36 2026 GMT Not After : Apr 20 17:25:36 2026 GMT Subject: CN=709C657C8C6714B0E68D1717779986BDDD00E54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:89:43:42:04:df:af:31:81:b8:a0:40:11:42: 41:17:e0:fd:96:32:80:80:7b:0d:aa:30:5f:f6:7f: ff:3a:88:d3:6c:3f:e7:96:ec:ec:68:21:08:09:de: 9c:02:8b:75:95:f2:b5:a4:0a:90:fb:40:c2:f3:13: 78:6e:70:1e:4e:14:56:f9:ae:99:f7:db:b4:d9:99: 50:3e:19:52:87:f7:6b:9e:0b:3a:a0:58:e3:05:ef: e9:a7:92:c8:71:0b:96:9d:69:70:6e:f4:5c:9f:f3: d4:09:f0:a1:46:fd:f5:52:c8:ab:38:47:1d:8b:b3: c1:a4:bb:4f:28:c8:20:fd:84:7f:8d:a0:8e:2e:e9: c8:19:1b:58:20:2a:e1:98:0d:09:e9:e9:f0:67:e3: a2:9a:17:7c:b4:bb:a6:40:bd:f0:4b:5b:02:bb:7b: 45:2a:0f:bc:9b:2c:9a:55:9c:8f:da:b3:52:63:73: d1:0c:f9:b4:c5:13:92:ab:4c:04:1b:0f:37:0e:55: b3:be:f3:ba:83:44:9f:61:1b:3d:5b:96:4d:79:8a: 38:ea:d5:f8:61:ae:ce:7d:e7:5c:be:b7:b9:d9:9e: 9f:3a:0f:9a:39:73:3a:e5:af:43:01:68:63:0d:a8: 07:ee:69:c1:4d:0a:59:66:d0:93:ea:24:68:ef:75: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9C:65:7C:8C:67:14:B0:E6:8D:17:17:77:99:86:BD:DD:00:E5:4D X509v3 Authority Key Identifier: keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:6b:58:c6:78:22:53:f3:c2:a7:27:59:0e:42:2c:ff:71:4b: 63:49:a3:37:6c:f5:31:81:bb:74:d7:c3:65:d6:cb:3d:53:d3: 78:3d:6c:75:06:ad:c5:a4:16:c0:71:97:a1:f6:4e:5b:24:5a: 3a:82:52:29:5a:70:76:7b:be:44:2f:18:a2:6f:27:0e:35:05: f5:2d:c0:af:bb:17:2f:40:ac:4c:3c:5a:3a:d9:d2:2e:0a:93: 4e:0c:9e:b6:c9:e0:c6:d0:e6:2d:82:b1:c5:7a:eb:f3:56:3a: 6f:af:e3:ba:59:38:a7:d4:89:36:05:9d:23:95:49:0b:b8:19: 9e:ef:4e:34:f8:c5:43:a8:17:96:86:93:ca:ee:37:a2:85:9e: b7:35:26:a3:94:20:b3:85:20:08:fb:36:a1:45:d8:10:d9:b4: be:bd:cc:a9:35:0e:a9:e9:9c:c1:92:7d:a8:4a:db:36:45:f0: e4:3c:34:18:df:93:be:14:46:50:e2:cf:66:bc:cb:9b:80:81: 73:73:17:67:d7:21:9d:7f:b8:d4:ab:79:f5:6c:5b:2f:22:c7: a3:cb:fc:34:70:aa:08:df:dd:e8:4d:7f:0f:51:95:ac:24:26: ed:5a:55:f4:01:f6:1a:23:3e:27:a9:05:f1:09:c4:0e:3d:92: c5:fe:78:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULF+xa+KDpuQIf5HyLWv45Utv3+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0 Q0MyODE2NDAeFw0yNjA0MTcxNDQ3MzZaFw0yNjA0MjAxNzI1MzZaMDMxMTAvBgNV BAMTKDcwOUM2NTdDOEM2NzE0QjBFNjhEMTcxNzc3OTk4NkJEREQwMEU1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUiUNCBN+vMYG4oEARQkEX4P2W MoCAew2qMF/2f/86iNNsP+eW7OxoIQgJ3pwCi3WV8rWkCpD7QMLzE3hucB5OFFb5 rpn327TZmVA+GVKH92ueCzqgWOMF7+mnkshxC5adaXBu9Fyf89QJ8KFG/fVSyKs4 Rx2Ls8Gku08oyCD9hH+NoI4u6cgZG1ggKuGYDQnp6fBn46KaF3y0u6ZAvfBLWwK7 e0UqD7ybLJpVnI/as1Jjc9EM+bTFE5KrTAQbDzcOVbO+87qDRJ9hGz1blk15ijjq 1fhhrs5951y+t7nZnp86D5o5czrlr0MBaGMNqAfuacFNCllm0JPqJGjvdQBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcJxlfIxnFLDmjRcXd5mGvd0A5U0wHwYDVR0j BBgwFoAUMwig+9KfNZrWHKo4kgjh10zCgWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC8zMzA4QTBGQkQy OUYzNTlBRDYxQ0FBMzg5MjA4RTFENzRDQzI4MTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0Q0My ODE2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUx RDc0Q0MyODE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERrWMZ4IlPzwqcnWQ5CLP9xS2NJozds9TGB u3TXw2XWyz1T03g9bHUGrcWkFsBxl6H2TlskWjqCUilacHZ7vkQvGKJvJw41BfUt wK+7Fy9ArEw8WjrZ0i4Kk04MnrbJ4MbQ5i2CscV66/NWOm+v47pZOKfUiTYFnSOV SQu4GZ7vTjT4xUOoF5aGk8ruN6KFnrc1JqOUILOFIAj7NqFF2BDZtL69zKk1Dqnp nMGSfahK2zZF8OQ8NBjfk74URlDiz2a8y5uAgXNzF2fXIZ1/uNSrefVsWy8ix6PL /DRwqgjf3ehNfw9RlawkJu1aVfQB9hojPiepBfEJxA49ksX+eEk= -----END CERTIFICATE-----Generated at Fri Apr 17 19:49:01 2026 by rpki-client