$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.mft (raw, json) Hash identifier: tasUxwxgqS93y/8+BKfIZXmPBCkVP3Og7wdhDqULr9A= Subject key identifier: CF:37:C5:8D:06:78:3C:02:D8:D0:16:25:70:12:C2:FA:9E:9F:9C:74 Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Certificate serial: 456A5AA1855042B70758D3C8DA17EED8EE242FE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft Manifest number: 0204 Signing time: Wed 15 Apr 2026 12:00:52 +0000 Manifest this update: Wed 15 Apr 2026 11:55:52 +0000 Manifest next update: Sat 18 Apr 2026 13:53:52 +0000 Files and hashes: 1: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: qj7cnLHXdzh3RQf7tTOLzRFTMV5gpaSe50w+x59MCNQ=) 2: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: qKimyHaQNdX3m0DVQDydLkKY11suW3jDJ+qURPZrcJA=) 3: 3B1029D44B93CA0397DA506FE1E2147503641EC6.crl (hash: onw/XZXt9tzDsWuZvHFFaTF+dneeN/5Pvb7xNB6+QP4=) 4: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: /Fhxy2YkZ3i/kGpUap0g80MdqacR/7CVzqXxyBvq/j8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 13:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6a:5a:a1:85:50:42:b7:07:58:d3:c8:da:17:ee:d8:ee:24:2f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Validity Not Before: Apr 15 11:55:52 2026 GMT Not After : Apr 18 13:53:52 2026 GMT Subject: CN=CF37C58D06783C02D8D016257012C2FA9E9F9C74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:6f:e9:cc:5e:dd:07:31:4d:f9:2f:6f:ca: 9f:cf:f6:cb:dc:67:dd:94:e8:19:6b:c1:20:c9:b2: 19:bf:ef:70:7c:59:37:28:0f:8c:ca:56:62:ca:1c: bf:86:aa:89:3c:7e:e1:09:22:be:94:21:73:bd:40: 49:48:59:ea:65:54:89:5b:69:7d:99:c8:cc:2b:99: 65:0f:39:cd:db:ca:37:26:de:de:f3:cc:20:93:37: 74:32:5b:e6:a7:ef:0e:5b:f5:eb:a5:ea:8c:cf:6f: 6b:0f:59:5f:c6:31:8d:52:e2:64:1f:89:44:67:9e: bf:bd:c1:0a:f4:37:b2:8a:c7:74:26:84:e7:5c:74: 08:6e:73:95:e9:1d:50:50:ff:1f:44:c4:4e:1a:64: 69:56:f2:38:00:6f:7d:dd:f5:db:ca:f0:45:7c:9e: 0b:d0:64:db:43:36:14:34:a2:eb:32:97:39:8b:f2: a1:1e:db:06:5e:a6:72:58:2f:42:0d:16:7f:6e:65: 91:90:80:02:d6:2c:de:21:dd:2d:26:28:a0:0b:0f: 4a:0a:88:52:7f:7d:92:7b:27:2b:cd:bc:b5:60:aa: c2:84:19:a8:1b:78:c2:e6:a6:95:bd:11:9e:9f:d4: b4:3a:02:8b:db:3f:a8:ca:f8:82:34:93:92:8b:13: 74:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:37:C5:8D:06:78:3C:02:D8:D0:16:25:70:12:C2:FA:9E:9F:9C:74 X509v3 Authority Key Identifier: keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e7:b7:8f:99:ff:66:8c:8b:8b:5d:00:53:af:b8:e8:f9:ff: 0f:ca:52:ff:fe:90:f5:9e:ac:12:59:56:f6:a1:f0:70:57:d3: 06:13:9e:aa:9e:77:64:d0:80:92:ec:3d:8b:a0:2c:10:95:33: 98:31:b0:8b:ef:fc:2b:ea:34:13:f3:fa:1d:68:22:79:77:c5: 2f:a6:3f:45:20:98:f3:40:ed:eb:1a:87:c7:b2:a0:a0:66:fc: 64:8d:1b:6e:4e:c3:cf:98:25:8e:46:9c:de:c6:17:01:d6:91: d5:63:b5:b1:d8:a3:c1:88:78:61:74:fb:02:11:e6:e8:f5:45: 46:d7:35:ff:1e:f6:b8:f0:4a:66:c5:73:35:11:ab:42:3e:8a: da:a1:95:1a:ca:98:bc:7b:30:cc:15:7f:9b:85:0c:60:a7:3d: d6:de:8f:95:c2:e6:a4:da:8d:59:b3:74:00:14:38:24:2d:da: c9:dd:f4:d9:04:c3:f5:2a:e8:f1:08:ce:62:8d:85:09:98:c0: 90:e4:90:df:0b:9f:9d:73:c9:ee:d7:bb:d4:05:ff:9a:7c:7d: 76:d2:9c:90:3e:e1:e9:d9:e6:0e:11:da:d9:39:a5:d4:5e:a4: 75:99:58:7b:b6:e1:70:14:c3:98:67:b4:78:59:5d:85:44:c3: 6a:3e:0e:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWpaoYVQQrcHWNPI2hfu2O4kL+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw MzY0MUVDNjAeFw0yNjA0MTUxMTU1NTJaFw0yNjA0MTgxMzUzNTJaMDMxMTAvBgNV BAMTKENGMzdDNThEMDY3ODNDMDJEOEQwMTYyNTcwMTJDMkZBOUU5RjlDNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZW/pzF7dBzFN+S9vyp/P9svc Z92U6BlrwSDJshm/73B8WTcoD4zKVmLKHL+Gqok8fuEJIr6UIXO9QElIWeplVIlb aX2ZyMwrmWUPOc3byjcm3t7zzCCTN3QyW+an7w5b9eul6ozPb2sPWV/GMY1S4mQf iURnnr+9wQr0N7KKx3QmhOdcdAhuc5XpHVBQ/x9ExE4aZGlW8jgAb33d9dvK8EV8 ngvQZNtDNhQ0ousylzmL8qEe2wZepnJYL0INFn9uZZGQgALWLN4h3S0mKKALD0oK iFJ/fZJ7JyvNvLVgqsKEGagbeMLmppW9EZ6f1LQ6AovbP6jK+II0k5KLE3THAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzzfFjQZ4PALY0BYlcBLC+p6fnHQwHwYDVR0j BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0 MUVDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0 NzUwMzY0MUVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITnt4+Z/2aMi4tdAFOvuOj5/w/KUv/+kPWe rBJZVvah8HBX0wYTnqqed2TQgJLsPYugLBCVM5gxsIvv/CvqNBPz+h1oInl3xS+m P0UgmPNA7esah8eyoKBm/GSNG25Ow8+YJY5GnN7GFwHWkdVjtbHYo8GIeGF0+wIR 5uj1RUbXNf8e9rjwSmbFczURq0I+itqhlRrKmLx7MMwVf5uFDGCnPdbej5XC5qTa jVmzdAAUOCQt2snd9NkEw/Uq6PEIzmKNhQmYwJDkkN8Ln51zye7Xu9QF/5p8fXbS nJA+4enZ5g4R2tk5pdRepHWZWHu24XAUw5hntHhZXYVEw2o+DvQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:43:50 2026 by rpki-client