$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: au8/6wTs9AMxqE5n74S/khJH5rp4Wa6xT1TtuhcREPA= Subject key identifier: 9D:32:01:E5:08:34:90:F7:2A:C7:45:4F:4C:2F:75:F5:17:C3:D7:53 Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 14AC09D225748EFB117B3A0F5F6D8840F221232D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 02D9 Signing time: Thu 16 Apr 2026 17:32:08 +0000 Manifest this update: Thu 16 Apr 2026 17:27:08 +0000 Manifest next update: Sun 19 Apr 2026 20:28:08 +0000 Files and hashes: 1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: ilhPhYMwxjxcNC74Yon3xYNd0uQUNUNF+7YCYR6VBOw=) 2: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: ttYnFKv0eCosAmKtbFgQYAOZGo2aF5TcLaqIQ8nNbQM=) 3: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: T+TvJ8L62bCZqFmpIphffr8c4LXSlLo4atPH9poDMJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ac:09:d2:25:74:8e:fb:11:7b:3a:0f:5f:6d:88:40:f2:21:23:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Apr 16 17:27:08 2026 GMT Not After : Apr 19 20:28:08 2026 GMT Subject: CN=9D3201E5083490F72AC7454F4C2F75F517C3D753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:c8:9d:0d:8f:09:99:d7:68:80:cc:0c:cb: 37:80:c2:6b:82:ff:86:3d:dd:8c:0f:af:91:cc:93: 09:31:55:5d:c4:29:87:2f:56:8d:f9:0c:b8:ca:bb: 4c:f7:01:1f:60:39:5d:2e:a1:07:40:3a:e9:e8:8d: a2:a9:64:e5:48:4c:9c:47:de:ec:e0:3f:dc:7f:3c: c2:4f:87:31:2e:4a:54:92:84:8e:e2:8d:37:1c:02: 9e:f4:8a:7c:67:81:51:d6:a1:b9:83:a3:17:79:e8: 5f:ef:dd:07:84:f5:fe:db:92:40:7b:ad:5d:aa:c3: 4e:33:b1:a2:7a:04:e1:d6:0f:68:54:b5:90:8c:ae: ee:b0:ab:14:d8:a6:6f:1f:dd:dd:83:b3:0e:00:36: 06:18:ca:69:f8:91:88:8a:26:dc:7d:59:5d:cb:ed: ce:f1:3d:2d:c6:f3:71:b0:66:e9:ad:be:2d:a5:5d: fd:13:f0:b3:04:0d:c9:5a:ea:2d:24:7d:68:80:97: 8f:8d:8a:fd:2c:09:9d:ca:18:84:a1:0b:e8:b9:26: 69:75:2f:1c:c0:68:35:a7:b3:a6:43:3d:97:bf:7b: 03:10:7e:cf:13:06:f0:ca:6b:85:7f:e9:11:d0:cd: 7e:a3:45:4b:18:dc:b0:96:5e:db:a6:cb:d1:b7:72: 0e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:32:01:E5:08:34:90:F7:2A:C7:45:4F:4C:2F:75:F5:17:C3:D7:53 X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:08:cb:1f:50:0a:b1:7b:ca:a1:c7:fd:7b:dd:c3:7d:56:20: e7:67:43:27:57:22:35:6a:6b:9c:30:0c:b0:5f:51:b2:c6:6c: ea:91:25:30:d7:c7:c6:71:f1:32:d3:01:99:63:62:4f:f5:ef: 3e:54:63:78:87:e2:7f:89:f3:ef:a2:65:c4:2b:37:9f:1a:0e: 84:cb:4b:e5:9b:be:06:81:cb:d8:5a:79:03:f1:06:8d:3d:c9: 73:3b:38:ed:77:de:ee:81:63:2c:66:15:95:c2:94:eb:9d:fc: 71:17:1a:48:e6:02:f0:bd:9a:0c:a5:f6:b5:33:f5:7e:5c:37: eb:59:58:cb:5d:7f:e2:fe:37:ff:dd:f6:3e:3f:3f:da:fd:59: b2:0c:1e:60:20:b8:4f:e8:32:0c:2f:d6:a0:25:b9:a2:0f:0f: eb:43:36:41:40:a9:0f:36:17:49:6a:61:25:36:f9:81:98:8d: c5:98:58:69:58:99:a4:69:41:e5:f3:0c:29:cd:d3:03:6a:48: 9a:48:7f:b1:16:2a:8a:de:ec:b8:95:72:02:18:a2:9e:f0:02: b4:d0:0e:80:df:cd:da:27:59:2a:55:30:d7:07:e0:25:a4:d9: 98:c6:53:98:a1:c6:c7:b9:ab:fd:55:63:a5:d3:ff:ff:d7:8b: 31:8f:e4:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKwJ0iV0jvsRezoPX22IQPIhIy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNjA0MTYxNzI3MDhaFw0yNjA0MTkyMDI4MDhaMDMxMTAvBgNV BAMTKDlEMzIwMUU1MDgzNDkwRjcyQUM3NDU0RjRDMkY3NUY1MTdDM0Q3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ksidDY8JmddogMwMyzeAwmuC /4Y93YwPr5HMkwkxVV3EKYcvVo35DLjKu0z3AR9gOV0uoQdAOunojaKpZOVITJxH 3uzgP9x/PMJPhzEuSlSShI7ijTccAp70inxngVHWobmDoxd56F/v3QeE9f7bkkB7 rV2qw04zsaJ6BOHWD2hUtZCMru6wqxTYpm8f3d2Dsw4ANgYYymn4kYiKJtx9WV3L 7c7xPS3G83GwZumtvi2lXf0T8LMEDcla6i0kfWiAl4+Niv0sCZ3KGIShC+i5Jml1 LxzAaDWns6ZDPZe/ewMQfs8TBvDKa4V/6RHQzX6jRUsY3LCWXtumy9G3cg6BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnTIB5Qg0kPcqx0VPTC919RfD11MwHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4Iyx9QCrF7yqHH/Xvdw31WIOdnQydXIjVq a5wwDLBfUbLGbOqRJTDXx8Zx8TLTAZljYk/17z5UY3iH4n+J8++iZcQrN58aDoTL S+WbvgaBy9haeQPxBo09yXM7OO133u6BYyxmFZXClOud/HEXGkjmAvC9mgyl9rUz 9X5cN+tZWMtdf+L+N//d9j4/P9r9WbIMHmAguE/oMgwv1qAluaIPD+tDNkFAqQ82 F0lqYSU2+YGYjcWYWGlYmaRpQeXzDCnN0wNqSJpIf7EWKore7LiVcgIYop7wArTQ DoDfzdonWSpVMNcH4CWk2ZjGU5ihxse5q/1VY6XT///XizGP5Hg= -----END CERTIFICATE-----Generated at Fri Apr 17 21:35:55 2026 by rpki-client