$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft File: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json) Hash identifier: 4nzv/14zloLVaPyBg37R3QVbigGpFEjpDcxNFu0+cYU= Subject key identifier: 6F:81:C9:76:C1:29:86:74:94:78:E4:F9:87:53:F4:5B:8A:0E:44:1B Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Certificate serial: 53A2D5BB41F14C87C047F78EF23A319EB2D927DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft Manifest number: 0151 Signing time: Fri 17 Apr 2026 06:11:02 +0000 Manifest this update: Fri 17 Apr 2026 06:06:02 +0000 Manifest next update: Mon 20 Apr 2026 08:23:02 +0000 Files and hashes: 1: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: 05cR4rkbQAoJaWMtwq3P0YWhLhUqkGnum6zWt/eV6dA=) 2: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: jwgg8IRJIDQmnbDrJO7DlfsBE1An9lAR0nLLubI5qII=) 3: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: nSJVoG4D6/bGoLQwSAn+ZSP/PaLdUBaDt+5AYEiWLy8=) 4: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: +5XEFa5Q5a8ev++uImNUVz8f1Hioijw3UOVtIFPuX9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a2:d5:bb:41:f1:4c:87:c0:47:f7:8e:f2:3a:31:9e:b2:d9:27:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Validity Not Before: Apr 17 06:06:02 2026 GMT Not After : Apr 20 08:23:02 2026 GMT Subject: CN=6F81C976C12986749478E4F98753F45B8A0E441B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:5f:55:0b:87:4b:39:87:2e:ba:1e:d8:ce: 2c:d8:8d:3c:55:f7:fe:e4:72:8b:54:ae:24:55:7b: 7b:e9:65:7f:f6:c3:1b:3d:ea:a7:40:56:7e:5f:87: 90:55:00:44:c0:a1:7e:14:4f:0d:05:e1:ec:f9:b5: 65:8f:41:43:86:f2:c3:f8:2d:b2:fd:73:be:ec:d7: 75:9a:96:b9:d5:a9:40:18:6d:47:ea:27:5c:da:f7: c0:97:11:31:7c:02:9c:81:e3:3c:c8:de:3e:93:d7: 29:b4:3c:9c:8f:f7:66:63:6c:7d:a5:be:38:42:55: 98:3b:dd:f1:2e:5e:2c:38:b5:b5:4c:76:1f:a2:07: f6:62:7b:4b:d3:6e:54:43:b8:29:e6:85:f9:65:17: ce:d5:75:5d:ad:b7:2f:41:43:01:72:5f:ac:bd:e8: af:89:c0:c3:79:7e:19:70:88:86:d0:ec:ee:2f:45: 90:af:f1:44:83:de:44:a9:88:5b:f9:ad:93:0c:7e: 7e:c9:56:78:73:b3:32:98:83:8b:08:fa:6e:f1:76: b1:02:10:48:62:7c:cf:ab:44:bd:7c:9a:85:a5:83: 25:87:37:2d:40:c2:72:c5:c1:aa:c0:46:99:b7:c0: de:63:90:cf:cc:2e:ba:f9:b2:9d:77:1f:01:66:1f: b7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:81:C9:76:C1:29:86:74:94:78:E4:F9:87:53:F4:5B:8A:0E:44:1B X509v3 Authority Key Identifier: keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:8f:24:19:13:2b:22:da:91:9f:c7:7b:8a:48:e2:ca:10:90: 7f:1a:e1:36:2e:88:ad:34:53:bd:63:a6:97:48:c4:d8:20:e5: 45:13:50:47:e4:3b:fc:20:e9:d1:82:b8:40:9d:ee:5f:1e:1a: 7c:d5:f7:3f:98:f6:61:b6:a2:2c:82:94:2e:f4:17:4c:7d:19: d9:c4:1f:ed:98:61:e9:d4:18:cd:4e:33:3e:f5:59:f6:4a:67: 78:9f:08:47:b9:2e:28:ed:f2:20:85:25:40:40:83:b6:e1:93: 6b:a6:f2:03:3f:01:69:5f:0a:14:c8:7b:78:9f:5a:0f:2e:1f: 97:36:51:1c:90:c3:6b:2d:b7:56:6d:8f:5c:c7:ed:b2:ba:2d: b4:a0:8a:08:91:9f:f9:2c:47:d6:05:47:65:51:d2:d4:6a:16: 37:42:a3:92:f3:0e:a4:c0:a3:34:12:d6:6b:8a:d6:94:8f:f6: f8:ce:eb:d4:19:64:57:7f:c2:16:db:65:87:50:12:ed:2f:f5: a7:6e:55:f1:9d:f2:ba:e4:6a:8f:09:a5:82:e7:c6:01:8f:07: e4:8c:93:13:c0:d5:46:cc:e6:24:1a:ec:69:27:91:97:5c:f6: 15:10:64:d3:10:a5:b0:da:cc:bb:54:33:17:e8:d8:75:f3:7a: 65:8f:01:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU6LVu0HxTIfAR/eO8joxnrLZJ90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF MzREMjlBQjAeFw0yNjA0MTcwNjA2MDJaFw0yNjA0MjAwODIzMDJaMDMxMTAvBgNV BAMTKDZGODFDOTc2QzEyOTg2NzQ5NDc4RTRGOTg3NTNGNDVCOEEwRTQ0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd2V9VC4dLOYcuuh7YzizYjTxV 9/7kcotUriRVe3vpZX/2wxs96qdAVn5fh5BVAETAoX4UTw0F4ez5tWWPQUOG8sP4 LbL9c77s13WalrnVqUAYbUfqJ1za98CXETF8ApyB4zzI3j6T1ym0PJyP92ZjbH2l vjhCVZg73fEuXiw4tbVMdh+iB/Zie0vTblRDuCnmhfllF87VdV2tty9BQwFyX6y9 6K+JwMN5fhlwiIbQ7O4vRZCv8USD3kSpiFv5rZMMfn7JVnhzszKYg4sI+m7xdrEC EEhifM+rRL18moWlgyWHNy1AwnLFwarARpm3wN5jkM/MLrr5sp13HwFmH7eRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb4HJdsEphnSUeOT5h1P0W4oORBswHwYDVR0j BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2 MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNE NzBFMzREMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaPJBkTKyLakZ/He4pI4soQkH8a4TYuiK00 U71jppdIxNgg5UUTUEfkO/wg6dGCuECd7l8eGnzV9z+Y9mG2oiyClC70F0x9GdnE H+2YYenUGM1OMz71WfZKZ3ifCEe5Lijt8iCFJUBAg7bhk2um8gM/AWlfChTIe3if Wg8uH5c2URyQw2stt1Ztj1zH7bK6LbSgigiRn/ksR9YFR2VR0tRqFjdCo5LzDqTA ozQS1muK1pSP9vjO69QZZFd/whbbZYdQEu0v9aduVfGd8rrkao8JpYLnxgGPB+SM kxPA1UbM5iQa7GknkZdc9hUQZNMQpbDazLtUMxfo2HXzemWPATc= -----END CERTIFICATE-----Generated at Fri Apr 17 18:30:12 2026 by rpki-client