$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: /KL/Z5eL+eN9HJHwKZlzB/ZP7Xb74miIheyG0KAZ05M= Subject key identifier: 42:C1:FE:30:7C:1A:DB:45:40:53:1A:19:2B:BA:3A:DE:34:6A:AC:53 Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 525BEB0F8E398DB915844595D218DF6F7B06908D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 0224 Signing time: Sun 19 Apr 2026 06:11:32 +0000 Manifest this update: Sun 19 Apr 2026 06:06:32 +0000 Manifest next update: Wed 22 Apr 2026 10:00:32 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: K/7j+3mIHcGN8nLale/S4xwe/+8DSc0/GWdSmti/TSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5b:eb:0f:8e:39:8d:b9:15:84:45:95:d2:18:df:6f:7b:06:90:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: Apr 19 06:06:32 2026 GMT Not After : Apr 22 10:00:32 2026 GMT Subject: CN=42C1FE307C1ADB4540531A192BBA3ADE346AAC53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:59:08:ff:6f:d0:d4:45:a7:80:5e:20:6e:d4: 66:0d:9c:60:d6:01:9d:a2:17:1c:b3:ef:ab:49:cb: 88:f7:a5:a2:02:c3:dd:ab:bd:f6:e2:2b:7c:bc:e9: 8f:2c:40:a5:06:f7:c5:4b:97:2d:35:42:57:e1:cc: 16:5f:b9:40:ac:55:3b:ec:d2:49:40:df:47:c0:15: 73:c9:83:ee:29:02:38:a9:af:05:db:9d:98:c6:1c: a7:f8:00:81:6f:2a:01:8a:97:61:6a:17:a0:4e:40: bf:67:29:50:1e:82:f9:e1:f5:c2:bf:94:1b:9b:9d: 6e:fa:5b:a1:3c:0e:c0:a4:26:fb:30:a3:71:b5:e8: a8:74:9a:f0:6a:e7:ff:40:21:e6:6c:0a:d6:54:e1: 56:e4:0e:91:32:1c:3e:e0:89:ab:a2:16:ad:01:12: 4e:04:9b:b6:34:61:32:c9:a7:cd:18:86:05:fe:43: d1:c6:55:c9:3e:af:e4:65:b6:e1:b4:c7:c2:6c:17: 9c:7e:5b:74:f5:14:2c:e5:2c:fe:3b:ee:51:54:37: 08:c1:54:1f:4d:69:f4:00:6c:42:e8:d1:4f:21:00: 01:e9:f1:c0:b4:1e:8c:a9:f1:1f:98:7b:d7:8c:e4: b3:e9:10:c5:7e:57:c5:5c:95:9b:c1:91:d2:7d:fc: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C1:FE:30:7C:1A:DB:45:40:53:1A:19:2B:BA:3A:DE:34:6A:AC:53 X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1b:3a:af:75:08:36:cf:27:6d:22:0a:66:35:e3:a7:b2:07: 79:46:5a:e8:dd:ba:95:d1:f6:a2:5d:58:22:fc:a8:1b:e6:ac: 42:80:a5:32:53:7b:d0:b8:12:e2:ff:40:cc:76:58:70:69:a9: 43:3a:21:90:d3:a2:7b:88:88:29:3a:78:ba:3b:20:76:b4:12: ef:66:5f:8e:97:57:97:d3:3e:2f:99:df:23:7a:a8:78:5d:b6: 50:fb:dc:a3:42:4b:b1:b5:ce:94:16:14:4b:13:fa:a7:c2:82: eb:84:c8:ed:85:a9:a2:62:5d:94:08:e1:20:0a:47:c4:ba:26: 75:2e:e5:6a:38:62:c7:88:e0:ed:c1:08:1c:97:4a:80:7a:42: ff:7d:24:34:7c:0b:a7:48:f0:38:1e:b0:85:80:5e:bf:91:db: 36:74:75:67:46:2a:26:38:89:2b:43:fc:40:35:fb:f8:ab:c0: 28:db:9a:6e:65:a8:c1:fa:4f:80:77:b7:e9:17:f8:a2:4d:7d: 39:9d:aa:63:81:77:d9:a2:9a:a6:23:35:f1:04:df:25:d6:f7: e0:12:11:91:7a:8f:82:aa:db:f0:71:89:55:21:97:d1:dd:02: b7:ff:e3:18:5f:2a:19:6d:8e:b7:1d:54:c9:8e:4e:fc:5b:89: 9a:b1:1e:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUlvrD445jbkVhEWV0hjfb3sGkI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNjA0MTkwNjA2MzJaFw0yNjA0MjIxMDAwMzJaMDMxMTAvBgNV BAMTKDQyQzFGRTMwN0MxQURCNDU0MDUzMUExOTJCQkEzQURFMzQ2QUFDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzWQj/b9DURaeAXiBu1GYNnGDW AZ2iFxyz76tJy4j3paICw92rvfbiK3y86Y8sQKUG98VLly01QlfhzBZfuUCsVTvs 0klA30fAFXPJg+4pAjiprwXbnZjGHKf4AIFvKgGKl2FqF6BOQL9nKVAegvnh9cK/ lBubnW76W6E8DsCkJvswo3G16Kh0mvBq5/9AIeZsCtZU4VbkDpEyHD7giauiFq0B Ek4Em7Y0YTLJp80YhgX+Q9HGVck+r+RltuG0x8JsF5x+W3T1FCzlLP477lFUNwjB VB9NafQAbELo0U8hAAHp8cC0Hoyp8R+Ye9eM5LPpEMV+V8VclZvBkdJ9/CL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQsH+MHwa20VAUxoZK7o63jRqrFMwHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8bOq91CDbPJ20iCmY146eyB3lGWujdupXR 9qJdWCL8qBvmrEKApTJTe9C4EuL/QMx2WHBpqUM6IZDTonuIiCk6eLo7IHa0Eu9m X46XV5fTPi+Z3yN6qHhdtlD73KNCS7G1zpQWFEsT+qfCguuEyO2FqaJiXZQI4SAK R8S6JnUu5Wo4YseI4O3BCByXSoB6Qv99JDR8C6dI8DgesIWAXr+R2zZ0dWdGKiY4 iStD/EA1+/irwCjbmm5lqMH6T4B3t+kX+KJNfTmdqmOBd9mimqYjNfEE3yXW9+AS EZF6j4Kq2/BxiVUhl9HdArf/4xhfKhltjrcdVMmOTvxbiZqxHhM= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:46 2026 by rpki-client