$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: WrP7gKQo009R9fJysrwmHWJ3wmanjvqgqsWXZ+2yxdg= Subject key identifier: 76:FF:D3:D8:0D:56:84:2F:96:0D:2D:21:E2:2F:CF:96:0D:E8:C9:80 Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 6EF9B68A6C353C650784A9BE0E5700305630A55E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 01E4 Signing time: Thu 16 Apr 2026 14:22:39 +0000 Manifest this update: Thu 16 Apr 2026 14:17:39 +0000 Manifest next update: Sun 19 Apr 2026 16:06:39 +0000 Files and hashes: 1: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: ICnoqiEwX4K5+bPW5k+TuCD6FcA6NPx7U34EDJ/BnWo=) 2: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: gLnAeNYiAKBydxYbPAquLJN6fD3Xlvodua3juQf6vXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f9:b6:8a:6c:35:3c:65:07:84:a9:be:0e:57:00:30:56:30:a5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Apr 16 14:17:39 2026 GMT Not After : Apr 19 16:06:39 2026 GMT Subject: CN=76FFD3D80D56842F960D2D21E22FCF960DE8C980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:2c:f3:f2:af:c9:cd:3f:e5:f6:60:48:66: ee:03:98:e0:c0:cc:1d:16:57:ef:9d:4d:f9:99:64: 5a:e3:58:f6:7c:19:85:45:4f:c8:c4:6e:15:b6:46: d1:ed:01:92:d8:af:f8:f6:1e:03:b6:8c:dd:e8:4a: 33:70:52:1f:67:ba:35:cb:cc:78:5c:79:d6:d5:f5: fe:c8:0b:51:8f:c9:72:24:92:0d:2b:06:b2:b1:af: 3e:ec:b2:37:ee:d4:ed:ce:fe:60:bf:db:51:82:52: 2f:98:ef:b8:ff:54:25:95:db:cf:db:c3:eb:83:25: fa:b3:bd:78:f5:80:df:df:a3:d5:85:49:9c:66:0d: 65:65:91:ce:14:25:d1:1a:24:a9:95:7b:5d:43:36: af:c5:a0:2a:e1:be:c4:9d:fb:d6:44:e4:fa:33:dc: 4e:88:ab:2b:43:d2:67:f8:26:f1:33:84:ce:01:04: 95:4c:19:f6:97:77:d0:ee:10:e8:70:77:c6:98:d5: a6:9c:d6:8b:5a:71:f0:2b:8a:0c:ba:dd:af:1b:fa: 1f:f7:62:d1:48:65:a3:00:de:04:6d:14:65:09:ef: f6:05:a2:66:82:77:62:ae:c3:19:db:9c:9f:b2:92: f6:c3:25:1e:e3:2a:2e:0b:81:e8:34:86:52:0b:ed: af:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FF:D3:D8:0D:56:84:2F:96:0D:2D:21:E2:2F:CF:96:0D:E8:C9:80 X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7e:1d:2e:c1:31:1c:a0:4e:d9:99:15:9e:90:ad:43:28:c0: 0f:31:b7:12:3d:ae:b1:29:37:ec:cc:78:f6:ee:9f:31:7e:46: 29:d9:da:eb:07:18:4f:c0:2d:1b:d6:70:93:d8:88:8d:04:ee: 23:a9:6f:01:8c:cd:22:19:6a:00:8d:b8:6b:f9:6e:d5:53:80: b8:04:bd:38:91:05:4e:19:14:8a:a0:99:ae:e2:1d:c0:4a:a0: 73:fb:7a:04:1d:a3:11:e6:4b:99:27:1a:2e:df:30:cb:e7:3a: 02:32:09:0b:9a:96:03:85:35:19:37:c3:aa:8b:6a:33:d5:e3: 37:60:50:2f:52:98:39:d6:51:53:9b:5c:19:95:8c:61:82:44: 45:b2:5f:62:04:f9:61:3a:b1:49:5a:c9:75:8a:de:17:e2:b1: 11:97:9e:5d:f2:29:3e:80:7e:1e:1d:5e:0a:f0:02:b0:21:ab: 6b:26:ba:14:a8:5a:db:24:95:c8:e0:42:e2:ae:c1:a1:8f:50: 9b:b5:3c:8e:f2:46:9c:23:8c:cb:1e:83:0a:28:78:bc:23:60: c9:d3:20:36:20:6b:04:67:60:bd:5f:7a:b0:84:50:c7:d8:11: 77:88:cc:5d:47:8a:60:38:4f:1e:6a:31:1f:5c:6f:f7:23:af: 71:02:19:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbvm2imw1PGUHhKm+DlcAMFYwpV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNjA0MTYxNDE3MzlaFw0yNjA0MTkxNjA2MzlaMDMxMTAvBgNV BAMTKDc2RkZEM0Q4MEQ1Njg0MkY5NjBEMkQyMUUyMkZDRjk2MERFOEM5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20yzz8q/JzT/l9mBIZu4DmODA zB0WV++dTfmZZFrjWPZ8GYVFT8jEbhW2RtHtAZLYr/j2HgO2jN3oSjNwUh9nujXL zHhcedbV9f7IC1GPyXIkkg0rBrKxrz7ssjfu1O3O/mC/21GCUi+Y77j/VCWV28/b w+uDJfqzvXj1gN/fo9WFSZxmDWVlkc4UJdEaJKmVe11DNq/FoCrhvsSd+9ZE5Poz 3E6IqytD0mf4JvEzhM4BBJVMGfaXd9DuEOhwd8aY1aac1otacfArigy63a8b+h/3 YtFIZaMA3gRtFGUJ7/YFomaCd2KuwxnbnJ+ykvbDJR7jKi4Lgeg0hlIL7a97AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdv/T2A1WhC+WDS0h4i/Plg3oyYAwHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1+HS7BMRygTtmZFZ6QrUMowA8xtxI9rrEp N+zMePbunzF+RinZ2usHGE/ALRvWcJPYiI0E7iOpbwGMzSIZagCNuGv5btVTgLgE vTiRBU4ZFIqgma7iHcBKoHP7egQdoxHmS5knGi7fMMvnOgIyCQualgOFNRk3w6qL ajPV4zdgUC9SmDnWUVObXBmVjGGCREWyX2IE+WE6sUlayXWK3hfisRGXnl3yKT6A fh4dXgrwArAhq2smuhSoWtsklcjgQuKuwaGPUJu1PI7yRpwjjMsegwooeLwjYMnT IDYgawRnYL1ferCEUMfYEXeIzF1HimA4Tx5qMR9cb/cjr3ECGcU= -----END CERTIFICATE-----Generated at Fri Apr 17 14:57:02 2026 by rpki-client