$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: zkAF1QrvtT4A5rH7sBiA79qTg4HpX79t+LBn+sMrQ8c= Subject key identifier: 05:4A:9A:AB:03:F3:95:41:82:32:C2:BF:37:7F:C7:CC:68:BA:0C:6A Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 60756308DE8AB4988EE7AAA7854B82D184D103BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 0578 Signing time: Sat 18 Apr 2026 20:52:21 +0000 Manifest this update: Sat 18 Apr 2026 20:47:21 +0000 Manifest next update: Wed 22 Apr 2026 01:48:21 +0000 Files and hashes: 1: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: amdqV6lzMAC4zxO9RwYxm18VuzSqbFKiq2hPtX/elIw=) 2: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: hXWJa8fVoj0vzNayNv76Qv76zEys5r5KfZWHwpWNqSA=) 3: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: hhpCxFcEoOagDyPhH5XBjeb1igWgqvxnlYos7/MVcRQ=) 4: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: M4zMEE4gM9B2z9mzotuldgSgaCKFtNvfP7tGSiFjQks=) 5: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=) 6: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: fEqrWk5yzRrIfC/NwZzR4O5o8YjE++0relBMS0Qsam4=) 7: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: 1FGJd6AqSTK9oY+Kf0u0bGP0qcgnLzetRfPl9A2Bh4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 01:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:75:63:08:de:8a:b4:98:8e:e7:aa:a7:85:4b:82:d1:84:d1:03:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: Apr 18 20:47:21 2026 GMT Not After : Apr 22 01:48:21 2026 GMT Subject: CN=054A9AAB03F395418232C2BF377FC7CC68BA0C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e0:f2:67:a0:38:9d:90:1b:9f:84:d9:6a:a2: df:94:83:b1:3f:f8:eb:db:3f:7d:8f:27:e2:dc:cc: 51:b1:ed:b5:a4:9c:46:c1:34:8c:ab:44:61:35:80: a8:fc:f6:76:a6:ae:6e:ad:d1:5f:0a:9d:3f:18:36: 82:61:b5:2b:a8:ab:72:75:a3:5e:2c:39:ee:4c:b0: 29:79:4c:40:d7:aa:9d:7f:f6:ce:81:21:50:c9:a5: c0:0e:20:c3:1b:bb:d7:de:8f:97:5c:b4:09:8e:13: a5:96:47:78:cd:bf:21:32:b5:8e:54:51:81:43:67: f1:4e:bf:7f:8d:51:5a:ca:f6:2a:3a:d8:da:2a:6e: f5:a0:54:1a:a3:42:4f:6b:cc:c4:d2:53:5e:9d:17: bb:24:4f:1a:7a:cc:7b:94:a3:36:1c:f5:a6:c0:6c: 34:ec:76:ff:5f:6c:c4:e8:9f:87:ad:4b:6a:fd:90: ca:a4:7e:dd:1c:f1:a2:09:de:e4:c4:46:7b:6d:13: e4:bc:d8:21:b1:df:af:eb:e1:a9:3b:e8:6a:63:54: 9c:be:f7:4a:a3:4e:5e:ee:d7:93:8b:8f:ac:2e:0f: 06:d1:41:a4:eb:49:d8:ed:e6:64:fb:8e:2f:f5:34: 0d:d9:00:fe:0c:50:92:9b:d0:0d:e0:f7:a7:f0:15: 79:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4A:9A:AB:03:F3:95:41:82:32:C2:BF:37:7F:C7:CC:68:BA:0C:6A X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:36:da:db:ac:37:06:f6:d8:c0:3e:94:92:a5:d4:a3:be:f4: a0:37:77:30:11:47:d1:5d:63:9f:98:12:0d:d1:f2:ed:df:e7: f2:20:a2:24:63:54:e4:dc:cf:96:95:28:5d:86:60:54:81:43: 35:6d:00:41:e0:9b:36:18:6b:58:5e:6c:f3:ca:0d:2e:7c:52: f3:59:c7:19:09:de:c5:fa:82:e9:90:09:7f:3d:9d:5a:e5:60: 7c:f2:96:71:3c:2c:4b:28:97:54:5b:e4:a0:4b:18:14:30:c3: d3:4a:bf:de:f1:57:47:63:dd:2e:03:4c:75:98:61:10:e3:f6: 41:18:3e:ff:de:78:e0:a6:93:a5:cb:ca:e4:be:55:22:9b:06: 57:b8:3f:8f:d1:2e:91:99:2c:b1:2a:80:6b:5b:9b:fc:af:ed: 57:c4:ad:33:ed:3d:8b:c4:cc:9e:51:ed:26:95:3c:65:0f:5d: 58:b3:1b:26:15:1d:9e:2b:b2:e0:00:79:19:d4:ab:47:1f:59: 12:3f:a7:2a:95:99:a0:14:ab:0f:af:61:2e:b7:4d:c9:36:e3: 03:79:31:57:ff:6b:02:5f:9a:f7:1c:5d:d7:15:78:6d:aa:0e: 32:e6:f3:c4:7c:16:00:e4:b9:82:fd:26:03:5b:d8:13:8d:48: 0d:59:4e:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHVjCN6KtJiO56qnhUuC0YTRA78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNjA0MTgyMDQ3MjFaFw0yNjA0MjIwMTQ4MjFaMDMxMTAvBgNV BAMTKDA1NEE5QUFCMDNGMzk1NDE4MjMyQzJCRjM3N0ZDN0NDNjhCQTBDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb4PJnoDidkBufhNlqot+Ug7E/ +OvbP32PJ+LczFGx7bWknEbBNIyrRGE1gKj89namrm6t0V8KnT8YNoJhtSuoq3J1 o14sOe5MsCl5TEDXqp1/9s6BIVDJpcAOIMMbu9fej5dctAmOE6WWR3jNvyEytY5U UYFDZ/FOv3+NUVrK9io62NoqbvWgVBqjQk9rzMTSU16dF7skTxp6zHuUozYc9abA bDTsdv9fbMTon4etS2r9kMqkft0c8aIJ3uTERnttE+S82CGx36/r4ak76GpjVJy+ 90qjTl7u15OLj6wuDwbRQaTrSdjt5mT7ji/1NA3ZAP4MUJKb0A3g96fwFXnxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBUqaqwPzlUGCMsK/N3/HzGi6DGowHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALI22tusNwb22MA+lJKl1KO+9KA3dzARR9Fd Y5+YEg3R8u3f5/IgoiRjVOTcz5aVKF2GYFSBQzVtAEHgmzYYa1hebPPKDS58UvNZ xxkJ3sX6gumQCX89nVrlYHzylnE8LEsol1Rb5KBLGBQww9NKv97xV0dj3S4DTHWY YRDj9kEYPv/eeOCmk6XLyuS+VSKbBle4P4/RLpGZLLEqgGtbm/yv7VfErTPtPYvE zJ5R7SaVPGUPXVizGyYVHZ4rsuAAeRnUq0cfWRI/pyqVmaAUqw+vYS63Tck24wN5 MVf/awJfmvccXdcVeG2qDjLm88R8FgDkuYL9JgNb2BONSA1ZTrg= -----END CERTIFICATE-----Generated at Sun Apr 19 12:44:10 2026 by rpki-client