$ rpki-client -vvf repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft File: 3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft (raw, json) Hash identifier: xrJjPd3XQFjNXEMkcGjn4OdCpSRpfzJKraAOk+x1vz8= Subject key identifier: F7:89:8D:3C:E4:9C:36:6B:9E:04:92:E1:21:07:04:DE:1C:DB:D0:AD Authority key identifier: 3C:71:A1:05:04:1D:9E:A0:1E:F4:C6:96:D4:5D:0D:4C:BF:69:BB:FB Certificate issuer: /CN=3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB Certificate serial: 50C15F2A128F8F08247451324164FBE0B73E594C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft Manifest number: 40 Signing time: Sat 18 Apr 2026 03:42:55 +0000 Manifest this update: Sat 18 Apr 2026 03:37:55 +0000 Manifest next update: Tue 21 Apr 2026 11:30:55 +0000 Files and hashes: 1: 3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl (hash: 3rX0/tjRLYBIap/mxQcfNr8x0lqvExA4pKlmkgbZoyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c1:5f:2a:12:8f:8f:08:24:74:51:32:41:64:fb:e0:b7:3e:59:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB Validity Not Before: Apr 18 03:37:55 2026 GMT Not After : Apr 21 11:30:55 2026 GMT Subject: CN=F7898D3CE49C366B9E0492E1210704DE1CDBD0AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:f7:b9:18:34:73:b4:8d:86:7a:5d:ef:13: 90:33:f0:e9:dd:82:26:3f:39:b7:2d:29:01:37:2b: d1:5d:7b:a2:7e:25:a9:27:99:f0:ac:22:69:d3:4a: e5:33:6a:b5:57:26:a8:83:8b:5c:af:f0:de:99:fd: 51:dd:79:57:f5:f4:c0:de:8d:f7:15:53:11:be:f9: 21:98:cc:54:d2:74:61:99:91:33:af:e9:e3:b6:a4: 7f:fc:20:21:53:68:78:f2:54:1a:bc:eb:d9:66:8f: 88:07:16:7c:69:6c:89:f4:5f:6e:92:17:c6:1a:13: 0e:bc:df:26:1a:1f:f1:43:83:d2:9f:e4:8d:ed:46: 2a:3a:00:b7:cf:00:46:80:1e:bb:26:ab:60:3e:5a: 1a:d3:91:ca:db:1f:45:eb:94:9f:aa:bd:aa:29:c8: a3:d4:92:81:cf:d6:71:37:a7:a9:90:55:f8:87:75: d0:a7:ef:0d:d7:e9:be:c0:02:ca:b6:f6:2b:68:be: 83:8d:3c:a5:9a:db:2c:2a:44:05:63:27:f7:df:96: 2a:67:75:02:3d:12:b5:75:2c:06:57:d4:59:e7:78: f0:a8:5d:8e:7f:9a:c0:75:87:6b:4d:21:3a:23:61: 1f:ef:55:75:ab:5a:43:cb:67:9e:60:e8:25:51:31: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:89:8D:3C:E4:9C:36:6B:9E:04:92:E1:21:07:04:DE:1C:DB:D0:AD X509v3 Authority Key Identifier: keyid:3C:71:A1:05:04:1D:9E:A0:1E:F4:C6:96:D4:5D:0D:4C:BF:69:BB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:08:50:00:ec:38:53:a7:2d:b6:e9:75:59:70:d6:b6:4b:cd: 11:f7:44:07:f4:a0:3e:21:5d:71:27:80:cb:a1:37:df:5d:f9: d6:03:39:ce:7e:b6:51:78:d7:55:fc:b3:42:47:d5:a5:1c:52: e3:7b:e6:e3:b6:9a:40:ac:2b:b6:83:93:b9:1d:cf:c9:ef:b3: 33:37:1d:b2:44:ca:49:44:ee:6b:c3:da:42:0d:86:19:33:06: 52:95:27:03:cd:5a:57:fd:df:9c:09:ae:f8:c4:30:db:cc:66: 34:f1:0b:ef:32:2a:36:90:6b:fe:84:83:81:1a:0f:6f:eb:cf: ab:c3:8e:d8:6c:aa:c5:83:cf:9a:c4:1c:5d:32:45:e2:82:85: 21:71:96:8e:df:17:6a:f2:fe:bc:ba:dd:9a:dc:23:b8:c3:74: 12:af:2b:06:6a:c0:5f:83:d5:31:bc:a9:b4:23:0d:47:67:ec: b3:19:2e:6a:a7:83:ac:43:30:38:7d:03:86:9f:28:11:7e:ea: 5b:9e:f9:16:04:f0:01:43:73:6c:ed:c7:e7:57:a5:6e:58:e4: 6b:e0:cb:a3:23:c2:4b:29:ab:7c:0e:6e:79:9f:45:f1:69:12: 85:d4:8c:6b:2a:d6:fc:a0:f4:4c:a4:84:10:e8:64:aa:a3:46: 81:de:01:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUMFfKhKPjwgkdFEyQWT74Lc+WUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBENENC RjY5QkJGQjAeFw0yNjA0MTgwMzM3NTVaFw0yNjA0MjExMTMwNTVaMDMxMTAvBgNV BAMTKEY3ODk4RDNDRTQ5QzM2NkI5RTA0OTJFMTIxMDcwNERFMUNEQkQwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNUPe5GDRztI2Gel3vE5Az8Ond giY/ObctKQE3K9Fde6J+JaknmfCsImnTSuUzarVXJqiDi1yv8N6Z/VHdeVf19MDe jfcVUxG++SGYzFTSdGGZkTOv6eO2pH/8ICFTaHjyVBq869lmj4gHFnxpbIn0X26S F8YaEw683yYaH/FDg9Kf5I3tRio6ALfPAEaAHrsmq2A+WhrTkcrbH0XrlJ+qvaop yKPUkoHP1nE3p6mQVfiHddCn7w3X6b7AAsq29itovoONPKWa2ywqRAVjJ/fflipn dQI9ErV1LAZX1FnnePCoXY5/msB1h2tNITojYR/vVXWrWkPLZ55g6CVRMU1NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU94mNPOScNmueBJLhIQcE3hzb0K0wHwYDVR0j BBgwFoAUPHGhBQQdnqAe9MaW1F0NTL9pu/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUzMDllMi1mOTI5LTQyZDktOWMzYi1hOTFhMDA2OTBjZjEvMC8zQzcxQTEwNTA0 MUQ5RUEwMUVGNEM2OTZENDVEMEQ0Q0JGNjlCQkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBENENCRjY5 QkJGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MzA5ZTItZjkyOS00MmQ5LTlj M2ItYTkxYTAwNjkwY2YxLzAvM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBE NENCRjY5QkJGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUIUADsOFOnLbbpdVlw1rZLzRH3RAf0oD4h XXEngMuhN99d+dYDOc5+tlF411X8s0JH1aUcUuN75uO2mkCsK7aDk7kdz8nvszM3 HbJEyklE7mvD2kINhhkzBlKVJwPNWlf935wJrvjEMNvMZjTxC+8yKjaQa/6Eg4Ea D2/rz6vDjthsqsWDz5rEHF0yReKChSFxlo7fF2ry/ry63ZrcI7jDdBKvKwZqwF+D 1TG8qbQjDUdn7LMZLmqng6xDMDh9A4afKBF+6lue+RYE8AFDc2ztx+dXpW5Y5Gvg y6Mjwkspq3wObnmfRfFpEoXUjGsq1vyg9EykhBDoZKqjRoHeAdI= -----END CERTIFICATE-----Generated at Sat Apr 18 08:07:55 2026 by rpki-client