$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: /c8ojzT+jdQU3zJ9VhTOhkXafGq8jafe6itRbYgufuk= Subject key identifier: DD:91:26:46:C1:8E:0C:40:06:93:10:04:6E:B6:5F:34:74:C2:F9:0C Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 5070B3E6F56CB9A169305D8035E83F2B949CF720 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: 0166 Signing time: Thu 16 Apr 2026 02:22:15 +0000 Manifest this update: Thu 16 Apr 2026 02:17:15 +0000 Manifest next update: Sun 19 Apr 2026 12:59:15 +0000 Files and hashes: 1: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: UVpWkwc+iXRP8f1//hsstiDdJV+9eXQPF1BPC16g/yQ=) 2: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: 3+C7KNVLkkeXH4Q6aCfPacCb6QKO1RmfOhT9j4ffkS8=) 3: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: tNNCYWCbEdiPKfhICvbEu1ERGWQQfGZS5vvTiRz7UTA=) 4: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: JBRMsmUAdYzb3+gwoPUcR31Beca7hRL3R3vmPms0eZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:70:b3:e6:f5:6c:b9:a1:69:30:5d:80:35:e8:3f:2b:94:9c:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Apr 16 02:17:15 2026 GMT Not After : Apr 19 12:59:15 2026 GMT Subject: CN=DD912646C18E0C40069310046EB65F3474C2F90C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f6:e3:0b:83:db:e7:99:5d:f2:92:45:5d:33: 8c:59:8c:56:a2:2f:de:00:9a:e4:99:76:00:5a:71: 3c:e9:00:71:10:4b:6a:31:ea:64:62:a7:82:2e:ac: ae:81:41:d5:d1:0c:61:72:08:31:c8:61:fb:25:f0: 46:0e:13:c4:9e:8a:20:54:a1:f6:9e:80:ee:ef:47: ac:3b:bf:08:e4:2d:88:95:c1:98:ee:3c:95:4f:70: 94:1f:9b:2e:55:3a:4f:f5:7e:3a:6c:ad:16:40:d1: 9c:2c:9f:59:e5:a2:5f:0d:57:ed:ce:fd:fb:4e:9b: ed:88:6f:70:6d:79:2e:65:d2:c8:ac:e8:17:39:58: c6:82:64:3f:33:50:74:12:8f:e2:55:82:7d:19:f2: 51:d1:e9:30:25:21:99:c8:89:f1:f4:ad:13:87:31: b9:db:08:05:80:44:9f:58:07:da:bc:6a:67:40:36: de:1a:a1:8e:34:5d:49:81:b9:83:27:ce:3c:43:29: 94:c1:c5:42:d2:1b:09:a6:8d:69:86:7f:f5:aa:76: fb:27:70:7f:6f:d1:6f:d5:01:09:26:6f:fb:56:49: 8c:4c:b9:89:30:a5:8b:2c:48:db:f6:c2:cb:3a:31: d5:c9:a1:22:b1:c2:bc:e0:41:f1:30:d1:8c:b5:d9: 0f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:91:26:46:C1:8E:0C:40:06:93:10:04:6E:B6:5F:34:74:C2:F9:0C X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0e:81:7a:97:1a:d5:ed:6f:5c:7a:cf:5d:7c:a1:c6:95:c1: 4e:28:63:9e:28:d9:74:6d:79:a8:a7:d1:c5:30:90:30:ca:65: 82:2d:8e:78:3e:89:f2:f4:d5:bb:9d:04:2d:ba:ac:36:ea:7f: fc:2e:49:e8:c1:70:12:e6:a1:b8:66:a3:50:53:00:41:d0:cd: 4e:e4:87:93:37:4b:04:bf:ab:95:22:0f:be:cf:27:9d:a3:31: 85:22:f1:a6:5b:22:7c:a0:2b:ea:35:33:a4:91:52:a8:5d:b6: a9:62:b2:41:e2:40:d9:8f:52:54:4f:8f:e3:fc:ab:5c:b6:1e: 81:1e:69:16:37:1e:82:44:9e:1d:db:f2:22:d0:9d:4d:52:5e: ba:e2:8f:f6:91:4d:ff:cb:46:3e:44:c0:bd:b7:a4:cf:09:79: 64:9a:34:0b:2b:e2:e7:09:f5:44:41:6c:05:8b:47:2f:f8:f8: ab:e2:04:86:b6:9c:8d:fa:2c:85:94:e2:73:05:f0:fd:3a:df: 0e:be:7b:88:b1:22:71:14:22:dc:99:7b:f0:42:ec:09:b4:70: 3d:68:9a:8e:79:1f:48:fd:dd:69:29:7a:ca:a5:e1:49:6a:34: 59:62:82:62:66:44:f9:7a:09:dd:6e:a6:fc:dc:d3:05:33:6e: 7d:6c:e6:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUHCz5vVsuaFpMF2ANeg/K5Sc9yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNjA0MTYwMjE3MTVaFw0yNjA0MTkxMjU5MTVaMDMxMTAvBgNV BAMTKEREOTEyNjQ2QzE4RTBDNDAwNjkzMTAwNDZFQjY1RjM0NzRDMkY5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL9uMLg9vnmV3ykkVdM4xZjFai L94AmuSZdgBacTzpAHEQS2ox6mRip4IurK6BQdXRDGFyCDHIYfsl8EYOE8SeiiBU ofaegO7vR6w7vwjkLYiVwZjuPJVPcJQfmy5VOk/1fjpsrRZA0Zwsn1nlol8NV+3O /ftOm+2Ib3BteS5l0sis6Bc5WMaCZD8zUHQSj+JVgn0Z8lHR6TAlIZnIifH0rROH MbnbCAWARJ9YB9q8amdANt4aoY40XUmBuYMnzjxDKZTBxULSGwmmjWmGf/Wqdvsn cH9v0W/VAQkmb/tWSYxMuYkwpYssSNv2wss6MdXJoSKxwrzgQfEw0Yy12Q99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ZEmRsGODEAGkxAEbrZfNHTC+QwwHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4OgXqXGtXtb1x6z118ocaVwU4oY54o2XRt eain0cUwkDDKZYItjng+ifL01budBC26rDbqf/wuSejBcBLmobhmo1BTAEHQzU7k h5M3SwS/q5UiD77PJ52jMYUi8aZbInygK+o1M6SRUqhdtqliskHiQNmPUlRPj+P8 q1y2HoEeaRY3HoJEnh3b8iLQnU1SXrrij/aRTf/LRj5EwL23pM8JeWSaNAsr4ucJ 9URBbAWLRy/4+KviBIa2nI36LIWU4nMF8P063w6+e4ixInEUItyZe/BC7Am0cD1o mo55H0j93Wkpesql4UlqNFligmJmRPl6Cd1upvzc0wUzbn1s5p0= -----END CERTIFICATE-----Generated at Fri Apr 17 12:38:52 2026 by rpki-client