$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft File: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft (raw, json) Hash identifier: y92WkmXD0bnnhmJQ2tHx133w1HUsOo3ScFCvnb0p+cE= Subject key identifier: BF:54:2F:21:11:00:11:6A:1F:3B:E8:20:E1:3D:0C:EC:46:19:BF:12 Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 0DF4CD90817E162892BA028225B548530B339A58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft Manifest number: 025D Signing time: Sat 18 Apr 2026 13:02:50 +0000 Manifest this update: Sat 18 Apr 2026 12:57:50 +0000 Manifest next update: Tue 21 Apr 2026 20:56:50 +0000 Files and hashes: 1: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: qDp/9A0Y/ulunffQZxElvfIaE/NdFYhZkLbByr51VdA=) 2: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: i54NYnK2GA2WJM2OLug4LshIBq/PRL0PgNo2Bs8E9pY=) 3: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: EGqCere+OuMmi+yewJcL8GzC3eQu4ZQkb/8gD6T4+6E=) 4: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl (hash: qgaL5NT3OBaSBQK9dqTKcRokwGohonmg4dEZ7yOO4q8=) 5: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: 8PLaaC5TWKChl2hi+NScu0gokk1yJzx4RjePXT89r4I=) 6: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: 5WMxfKjZT65hcUd7WB/JBj/IGlOrVSKyagiTEPB+Bbc=) 7: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: HVqoW+0C33urp1QDrxDJSlQoD43x8mh1qkHLG7bhXAk=) 8: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: FKvQcIFjQ4jSFjJqopycW3C8xU5WMAd9DxBpUx0ooOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f4:cd:90:81:7e:16:28:92:ba:02:82:25:b5:48:53:0b:33:9a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: Apr 18 12:57:50 2026 GMT Not After : Apr 21 20:56:50 2026 GMT Subject: CN=BF542F211100116A1F3BE820E13D0CEC4619BF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1a:f2:d2:bb:09:31:e2:ef:8d:d1:b8:55:37: 1b:30:04:b9:48:55:56:0f:3b:1d:a6:5b:ca:40:bd: 8b:57:89:3a:c5:78:f7:b2:d8:0d:80:10:18:a1:4d: 27:76:df:c7:0e:b1:15:cb:38:6f:5b:f1:8a:a8:55: 66:80:f9:36:2d:42:e6:4a:91:61:aa:7f:a0:5f:af: 63:8b:d5:9a:25:78:18:41:b9:55:e1:b6:77:b2:6d: 66:06:6c:36:0b:4b:0c:7c:02:45:1f:5c:d7:4c:da: b8:b8:3c:3d:68:88:cd:9d:35:bb:87:37:e0:15:3f: 2c:ba:b7:0e:fe:ad:03:f0:b6:e8:0f:21:a7:d4:11: 0b:ae:4b:fe:89:f3:7b:8e:45:a0:09:06:5f:29:f4: a1:34:93:28:1a:fa:b7:6b:84:23:43:d4:99:2e:b1: 1a:93:be:c3:68:67:1b:2c:37:48:6f:6b:24:96:8a: 18:2b:d1:7e:5a:95:48:9c:38:d7:65:ef:05:13:2d: 05:ea:d1:56:d4:99:ed:e5:30:71:d4:db:c8:67:31: dd:63:72:5d:c7:54:8b:64:96:10:47:5c:f7:3a:dd: 9f:ef:de:4c:83:11:d1:fa:45:38:55:e6:dc:65:91: 74:26:2c:69:4f:94:01:1d:91:9e:6a:10:6f:1a:e0: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:54:2F:21:11:00:11:6A:1F:3B:E8:20:E1:3D:0C:EC:46:19:BF:12 X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:30:96:86:e3:51:da:d8:bb:00:13:e1:41:2c:3f:8a:d4:d5: 89:67:06:06:4f:4b:31:f0:0e:48:82:3e:63:ae:57:0e:e5:66: 84:2a:ca:c5:21:84:fa:78:93:f3:2f:20:bc:f7:45:2a:bb:2e: 16:c8:98:37:6f:ab:a9:f8:4b:30:2d:d6:b2:fb:06:82:3c:a6: 11:89:03:a7:d8:d8:b0:75:e7:b3:71:bf:e7:2c:b3:39:34:b4: d6:fd:96:c8:1e:44:39:c6:c5:17:5f:05:3d:1c:78:e9:5c:ff: 4d:ec:f3:6a:c9:2c:70:77:76:1b:af:1f:dc:36:75:81:53:2f: f0:07:1c:70:e3:11:24:d4:c6:96:c7:6b:0d:8a:19:f3:0d:1c: 56:76:7c:47:51:51:17:bc:57:fc:b4:66:cb:f7:e7:9c:02:63: 1c:2b:df:ba:8a:9b:23:69:77:ff:c3:ad:f6:fb:6e:36:ee:ac: f6:f2:a0:9e:af:0d:86:ff:bd:5c:01:52:f2:08:3a:6a:66:6d: 29:88:82:7f:87:14:7f:d5:58:de:23:2a:73:90:d2:fc:39:88: d7:c6:43:3a:f0:1e:40:30:b6:d9:62:b3:a3:b7:83:62:79:2a: c6:cf:d8:f0:8a:d5:15:d9:90:27:36:20:2f:c4:27:c4:72:b2: 26:aa:b7:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfTNkIF+FiiSugKCJbVIUwszmlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNjA0MTgxMjU3NTBaFw0yNjA0MjEyMDU2NTBaMDMxMTAvBgNV BAMTKEJGNTQyRjIxMTEwMDExNkExRjNCRTgyMEUxM0QwQ0VDNDYxOUJGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWGvLSuwkx4u+N0bhVNxswBLlI VVYPOx2mW8pAvYtXiTrFePey2A2AEBihTSd238cOsRXLOG9b8YqoVWaA+TYtQuZK kWGqf6Bfr2OL1ZoleBhBuVXhtneybWYGbDYLSwx8AkUfXNdM2ri4PD1oiM2dNbuH N+AVPyy6tw7+rQPwtugPIafUEQuuS/6J83uORaAJBl8p9KE0kyga+rdrhCND1Jku sRqTvsNoZxssN0hvaySWihgr0X5alUicONdl7wUTLQXq0VbUme3lMHHU28hnMd1j cl3HVItklhBHXPc63Z/v3kyDEdH6RThV5txlkXQmLGlPlAEdkZ5qEG8a4LDFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv1QvIREAEWofO+gg4T0M7EYZvxIwHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkND NjcyN0Q2RTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkwlobjUdrYuwAT4UEsP4rU1YlnBgZPSzHw DkiCPmOuVw7lZoQqysUhhPp4k/MvILz3RSq7LhbImDdvq6n4SzAt1rL7BoI8phGJ A6fY2LB157Nxv+csszk0tNb9lsgeRDnGxRdfBT0ceOlc/03s82rJLHB3dhuvH9w2 dYFTL/AHHHDjESTUxpbHaw2KGfMNHFZ2fEdRURe8V/y0Zsv355wCYxwr37qKmyNp d//Drfb7bjburPbyoJ6vDYb/vVwBUvIIOmpmbSmIgn+HFH/VWN4jKnOQ0vw5iNfG QzrwHkAwttlis6O3g2J5KsbP2PCK1RXZkCc2IC/EJ8Rysiaqt5U= -----END CERTIFICATE-----Generated at Sun Apr 19 11:23:03 2026 by rpki-client