$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft File: 3D93688202931D72322A7EE0053964A2DD8EB457.mft (raw, json) Hash identifier: eWeyKGqXEjozlBBFtExr8Hc2lJRm/oeoYgBNT6swNFw= Subject key identifier: 56:6E:9B:B3:54:DB:A7:E1:AE:C1:07:89:86:B3:96:46:18:70:D4:43 Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 Certificate issuer: /CN=3D93688202931D72322A7EE0053964A2DD8EB457 Certificate serial: 3B775DC132A2E8D908422992A24D31AEE2578541 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft Manifest number: 0298 Signing time: Sun 19 Apr 2026 04:32:47 +0000 Manifest this update: Sun 19 Apr 2026 04:27:47 +0000 Manifest next update: Wed 22 Apr 2026 08:43:47 +0000 Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: nZa9O0Oy57Qvy1eSyrrGMPwvccZjDMgFZsghULji6GE=) 2: 3D93688202931D72322A7EE0053964A2DD8EB457.crl (hash: ILSow9zRctRkNW7KGBf7YcVgt/vFVg/IJHxloeCtuL0=) 3: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: VFgDZjjg61vRpBVfhYU5xtxK3HYEvLDpevoAQqYhxWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:77:5d:c1:32:a2:e8:d9:08:42:29:92:a2:4d:31:ae:e2:57:85:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457 Validity Not Before: Apr 19 04:27:47 2026 GMT Not After : Apr 22 08:43:47 2026 GMT Subject: CN=566E9BB354DBA7E1AEC1078986B396461870D443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:35:b1:81:c6:d9:75:63:8d:57:ea:2b:e9: 37:00:02:eb:7b:1b:ab:a9:94:18:9b:0c:07:53:07: 3b:1d:d9:ec:e5:8e:d1:0b:d9:5a:6e:5b:e7:68:22: c8:40:af:bb:cc:77:c0:a0:9e:6e:43:46:87:af:d6: 2e:15:32:b2:35:5b:c5:00:b9:56:f5:2e:2b:49:aa: 6a:6a:45:54:96:67:1b:b3:f7:31:11:d9:c7:65:ba: 6d:6f:5b:d2:9c:a8:67:88:df:e8:71:13:e8:db:99: c4:9f:da:99:1a:df:e3:e8:bb:7b:1d:c0:be:7a:14: 98:52:d1:41:61:ec:15:e4:96:a6:3d:fa:1c:bd:37: cc:1e:65:5a:52:b2:24:ba:ac:b0:db:f7:3d:09:a5: 4a:82:56:bf:92:82:2e:7d:aa:3d:56:71:36:74:ef: 90:3f:9a:d0:11:e6:cc:14:7a:3c:34:73:c1:10:34: 2d:43:aa:be:b4:d1:05:2f:44:19:89:b0:1c:85:92: cc:07:5d:c2:59:ff:e3:b7:bb:2f:6a:c7:b0:71:7b: 7c:4a:58:9c:a8:35:6e:ff:3c:59:3a:59:fd:b8:94: af:2a:d4:ea:c4:10:18:74:4d:1e:3f:7f:90:9e:6a: 56:af:28:82:06:d7:9b:ce:20:50:b7:e7:be:c8:0d: fd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6E:9B:B3:54:DB:A7:E1:AE:C1:07:89:86:B3:96:46:18:70:D4:43 X509v3 Authority Key Identifier: keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2c:8f:41:3f:6a:9d:16:33:8a:b4:17:d0:91:24:fc:4c:93: b1:b2:09:65:9a:30:32:3a:b8:11:7e:42:4a:89:1d:7e:70:6a: 46:bf:9e:ee:2e:4b:2e:ec:05:f7:66:87:43:72:6c:52:7a:c7: ce:e7:19:7a:d5:50:38:11:76:0e:72:db:c5:c7:fb:9c:ce:c6: 20:7a:a1:fe:2d:4a:76:0d:60:68:0d:ec:e1:db:fc:b1:5b:c0: 4f:f2:a1:92:6f:f3:b2:df:2e:11:78:52:ed:23:0a:a0:75:35: a0:9d:34:c6:00:dc:6d:f8:12:6d:3a:b6:1a:43:28:e2:70:9d: 9b:fb:49:6c:13:05:1e:e4:11:ee:a6:03:b9:5e:3c:78:3d:43: 14:bd:c0:4f:c9:5b:19:5f:4d:66:48:d1:56:a2:85:32:71:90: ef:ed:84:f8:e7:c2:44:51:d9:19:e3:76:b9:7e:cb:0d:20:40: 41:e6:5f:74:8f:07:69:33:dd:77:6c:e0:dd:b2:31:3e:08:0f: 39:13:1a:cd:eb:ac:4a:ba:2f:84:c7:69:24:14:2a:f3:da:80: 61:40:12:15:63:10:4f:c0:b5:0b:83:4b:8b:6c:77:be:53:88: 4c:f3:92:5c:d5:5a:84:88:70:de:f5:4b:78:a4:c6:92:4a:76: 4d:42:3f:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3ddwTKi6NkIQimSok0xruJXhUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJE RDhFQjQ1NzAeFw0yNjA0MTkwNDI3NDdaFw0yNjA0MjIwODQzNDdaMDMxMTAvBgNV BAMTKDU2NkU5QkIzNTREQkE3RTFBRUMxMDc4OTg2QjM5NjQ2MTg3MEQ0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvETWxgcbZdWONV+or6TcAAut7 G6uplBibDAdTBzsd2ezljtEL2VpuW+doIshAr7vMd8Cgnm5DRoev1i4VMrI1W8UA uVb1LitJqmpqRVSWZxuz9zER2cdlum1vW9KcqGeI3+hxE+jbmcSf2pka3+Pou3sd wL56FJhS0UFh7BXklqY9+hy9N8weZVpSsiS6rLDb9z0JpUqCVr+Sgi59qj1WcTZ0 75A/mtAR5swUejw0c8EQNC1Dqr600QUvRBmJsByFkswHXcJZ/+O3uy9qx7Bxe3xK WJyoNW7/PFk6Wf24lK8q1OrEEBh0TR4/f5CealavKIIG15vOIFC3577IDf1xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVm6bs1Tbp+GuwQeJhrOWRhhw1EMwHwYDVR0j BBgwFoAUPZNoggKTHXIyKn7gBTlkot2OtFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmQ4ODQ5Ni1iMmJhLTRkMTMtOTgyNS1hZTM4YWZmMWRhMTUvMC8zRDkzNjg4MjAy OTMxRDcyMzIyQTdFRTAwNTM5NjRBMkREOEVCNDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJERDhF QjQ1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0 QTJERDhFQjQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUsj0E/ap0WM4q0F9CRJPxMk7GyCWWaMDI6 uBF+QkqJHX5waka/nu4uSy7sBfdmh0NybFJ6x87nGXrVUDgRdg5y28XH+5zOxiB6 of4tSnYNYGgN7OHb/LFbwE/yoZJv87LfLhF4Uu0jCqB1NaCdNMYA3G34Em06thpD KOJwnZv7SWwTBR7kEe6mA7lePHg9QxS9wE/JWxlfTWZI0VaihTJxkO/thPjnwkRR 2Rnjdrl+yw0gQEHmX3SPB2kz3Xds4N2yMT4IDzkTGs3rrEq6L4THaSQUKvPagGFA EhVjEE/AtQuDS4tsd75TiEzzklzVWoSIcN71S3ikxpJKdk1CPzg= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:42 2026 by rpki-client