$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: mdSFZyKdTZ9eaFM5k5tMdo/WKxVfMcsGr3KuaTbMWt0= Subject key identifier: 23:DA:37:98:0F:89:C8:B7:15:13:A8:2D:E7:76:01:74:E8:75:F0:C9 Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 402BE24EDE02F3E7D63A8892AB79D2AB70BBD6DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 0256 Signing time: Fri 17 Apr 2026 01:52:16 +0000 Manifest this update: Fri 17 Apr 2026 01:47:16 +0000 Manifest next update: Mon 20 Apr 2026 13:45:16 +0000 Files and hashes: 1: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: xCOn9NWbt0GGMLt//qaNrgk/Sb/ECXg1/Jw9T03F6gc=) 2: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: rPKEvLXWGWoztExe4HntWPPQ3bNHicZSmrS4LoU+DGA=) 3: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: GnxQKOvJzRGekHv8n/RM/TbduGkO0s5pHhVP9SRDzTw=) 4: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: +aYgV7p1X1TAw32sJQDFPZ5QXQcUqf2Pg9Wsy7Iew4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2b:e2:4e:de:02:f3:e7:d6:3a:88:92:ab:79:d2:ab:70:bb:d6:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Apr 17 01:47:16 2026 GMT Not After : Apr 20 13:45:16 2026 GMT Subject: CN=23DA37980F89C8B71513A82DE7760174E875F0C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0f:71:4c:18:4f:e1:27:f7:b2:be:4b:ac:46: 75:45:43:0e:38:bb:94:08:ef:aa:22:28:b1:c7:f2: 90:5a:3c:3d:76:0a:ae:7c:05:1e:72:38:82:5d:67: 91:94:55:7b:cb:41:ca:8c:8f:6c:c2:50:dd:7e:1e: b0:04:5e:ba:ee:50:46:c9:fa:1e:6f:5e:a9:67:86: 5d:b6:fe:61:a6:46:c7:2f:98:76:c7:d5:e3:ee:b8: 0b:9d:26:93:d7:f3:27:a9:99:a3:5b:2b:ef:20:85: a1:fc:c1:d3:1c:69:95:b3:65:78:7a:22:83:33:e7: 63:1d:7b:82:f0:77:27:6d:a8:c6:10:0b:60:a5:a2: 62:d3:80:93:f8:f3:95:5c:7d:62:f7:a5:58:6b:61: 4d:58:3b:27:09:0d:a8:9d:5d:16:2e:39:e0:bd:99: c0:8e:48:98:62:26:a3:56:0b:c9:2c:2e:5f:67:ae: 88:6e:79:00:b3:19:de:54:0d:1a:e4:70:0d:12:4e: ce:76:bf:af:c2:3c:c4:e7:ac:ce:83:2e:21:34:32: 93:8e:a9:b4:47:ad:d0:58:f3:61:81:b6:01:18:42: 12:4d:48:20:1c:58:d0:f1:d5:99:e3:dc:0f:d8:60: 1b:1b:1f:6b:4a:5f:36:56:fe:3c:86:74:09:db:37: 5a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DA:37:98:0F:89:C8:B7:15:13:A8:2D:E7:76:01:74:E8:75:F0:C9 X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e9:65:4a:21:c0:3a:00:e4:77:56:48:ae:2d:3d:1a:1e:98: e3:50:43:ae:17:27:f2:8e:d1:53:ff:f4:28:d3:8e:44:40:04: 25:66:55:58:c3:9f:41:35:c7:de:90:e2:fd:5c:0a:a7:fe:04: 74:d8:af:43:68:83:d2:18:ac:3b:07:c3:2d:90:a8:84:e3:c2: 9a:05:16:77:10:54:f5:fd:9d:0f:4b:20:78:c7:d3:9c:75:e0: 29:5f:08:ef:1d:a7:da:96:7e:d5:e3:68:43:96:ff:cf:6b:ba: f0:a7:3c:8e:3f:d0:25:46:ca:5d:d1:8c:dd:2c:51:70:7b:60: 8d:ce:fb:32:1c:f7:40:77:2d:a4:40:8d:41:aa:72:48:63:d5: c3:cf:41:e0:98:4b:3a:80:50:e8:55:3e:f3:2b:31:7f:b3:59: 53:b4:f5:d8:b9:c1:2e:82:d6:5c:95:6b:51:35:25:df:cc:7f: eb:7d:c0:bd:bc:c4:f9:63:e7:86:5d:e1:75:0a:d5:d4:93:88: 1e:33:7e:e7:a0:88:b5:9e:10:b5:be:4e:21:6a:08:2e:cb:75: 32:2f:fb:9f:4a:61:2f:54:0e:a6:95:12:0a:ff:03:82:b2:70: b7:c1:72:b5:7d:39:9a:0a:8e:5e:82:35:9b:57:f7:b3:54:db: bf:03:4d:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCviTt4C8+fWOoiSq3nSq3C71t8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNjA0MTcwMTQ3MTZaFw0yNjA0MjAxMzQ1MTZaMDMxMTAvBgNV BAMTKDIzREEzNzk4MEY4OUM4QjcxNTEzQTgyREU3NzYwMTc0RTg3NUYwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaD3FMGE/hJ/eyvkusRnVFQw44 u5QI76oiKLHH8pBaPD12Cq58BR5yOIJdZ5GUVXvLQcqMj2zCUN1+HrAEXrruUEbJ +h5vXqlnhl22/mGmRscvmHbH1ePuuAudJpPX8yepmaNbK+8ghaH8wdMcaZWzZXh6 IoMz52Mde4LwdydtqMYQC2ClomLTgJP485VcfWL3pVhrYU1YOycJDaidXRYuOeC9 mcCOSJhiJqNWC8ksLl9nrohueQCzGd5UDRrkcA0STs52v6/CPMTnrM6DLiE0MpOO qbRHrdBY82GBtgEYQhJNSCAcWNDx1Znj3A/YYBsbH2tKXzZW/jyGdAnbN1pNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI9o3mA+JyLcVE6gt53YBdOh18MkwHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjpZUohwDoA5HdWSK4tPRoemONQQ64XJ/KO 0VP/9CjTjkRABCVmVVjDn0E1x96Q4v1cCqf+BHTYr0Nog9IYrDsHwy2QqITjwpoF FncQVPX9nQ9LIHjH05x14ClfCO8dp9qWftXjaEOW/89ruvCnPI4/0CVGyl3RjN0s UXB7YI3O+zIc90B3LaRAjUGqckhj1cPPQeCYSzqAUOhVPvMrMX+zWVO09di5wS6C 1lyVa1E1Jd/Mf+t9wL28xPlj54Zd4XUK1dSTiB4zfuegiLWeELW+TiFqCC7LdTIv +59KYS9UDqaVEgr/A4KycLfBcrV9OZoKjl6CNZtX97NU278DTVs= -----END CERTIFICATE-----Generated at Sat Apr 18 02:49:03 2026 by rpki-client