$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: Uc2A//xkZ1vBjtinx852MhrVRJkw2T3zk72ZZ2TBWdM= Subject key identifier: 2F:0D:83:A9:85:BC:58:4B:85:5F:A5:E1:1C:D2:87:04:57:B4:D0:61 Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 7B5971AE5CB02CC39826C4355EB411D3CFCDFCA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 02C7 Signing time: Thu 16 Apr 2026 18:41:48 +0000 Manifest this update: Thu 16 Apr 2026 18:36:48 +0000 Manifest next update: Sun 19 Apr 2026 23:07:48 +0000 Files and hashes: 1: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: Zz17TQa2NJzEsR1WGPakO7j3yFYvZxiFyfeaOkhhBlE=) 2: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: Y4bPgbY00LFw6dCjax4qoEDoRKILSN/1k5/i7qfqO84=) 3: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 8wTO/tBBvlV50rqLL/FsgrieuqraT8M5ri1ZF8sxwQY=) 4: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: yVV5dswPF/JJinXwT/AnHMY4w0AFsBRTFOmucBW2KiU=) 5: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: xBq4u83ia6TOjUP4DGj4goi5YscW5lbRAoeEejloPEM=) 6: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: 1xj2l1iw+yAigEZVfk6qr5RUAjnT+Wu5eRzm3bKESvg=) 7: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: csPdkdJcUUCAtCT9DXQEOSSDc2dcYO076Q+UqLNYO0k=) 8: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: WglNMON1uFXdqdZO+92FBvvihsTNbskJIYYFQnplXHc=) 9: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Oqn/4hUIUai1+mMhRgpHuJU5fSEKD5vusBmxtK4Q6/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:59:71:ae:5c:b0:2c:c3:98:26:c4:35:5e:b4:11:d3:cf:cd:fc:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Apr 16 18:36:48 2026 GMT Not After : Apr 19 23:07:48 2026 GMT Subject: CN=2F0D83A985BC584B855FA5E11CD2870457B4D061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e3:37:d8:a6:f5:1d:bd:de:73:14:b7:92:9a: 1a:4a:95:a9:00:cf:19:e3:a9:46:13:de:02:7c:f6: 02:95:76:15:a0:c2:c8:57:00:5b:2c:75:e8:8d:c2: 45:c7:7c:a6:ce:b5:3e:8c:b9:43:7c:05:05:71:89: ec:55:67:bd:69:ef:ff:65:fe:e3:5a:6b:18:00:0e: 82:dc:da:38:6f:12:02:1f:a0:fb:59:9b:c5:7d:09: 7f:43:08:f7:20:81:e2:b8:3c:19:9a:53:47:65:5f: 7f:1a:ce:f9:6a:c4:20:d7:57:38:30:80:5f:c8:8d: 89:a2:4f:7a:33:4f:0a:fe:cf:6e:98:82:39:bd:4b: 33:8d:77:c4:ad:64:dc:77:f3:a5:14:aa:8e:b2:25: 1e:25:e5:a9:ed:c9:82:91:5f:8f:31:5d:38:1d:0a: 46:5d:a3:f1:97:d5:99:f6:d9:10:0c:dd:2f:7e:54: b2:4f:d9:9e:f7:fd:da:48:f0:3c:cd:d3:a0:e8:19: 38:00:43:bf:67:6d:d5:a9:aa:e0:30:74:3c:ca:3e: 43:7d:ce:bd:82:0b:b3:ec:47:61:c0:71:be:44:16: 46:fe:ff:b8:70:09:a3:1c:04:1c:b4:60:d8:db:7a: 47:34:03:e9:52:31:e6:6b:b1:b0:e4:36:69:a8:34: c1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0D:83:A9:85:BC:58:4B:85:5F:A5:E1:1C:D2:87:04:57:B4:D0:61 X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:73:47:a2:8d:da:4b:64:1b:32:b7:c3:81:f4:6d:a9:f3:2e: 5a:cc:cc:e4:0b:d4:35:f2:f2:ff:0e:47:59:88:a3:40:ab:fd: 0a:93:97:a1:62:5b:5c:17:2c:b3:fa:88:33:ba:4a:c9:cc:85: f1:e8:d7:e3:4c:88:4d:eb:10:56:55:15:2e:ed:86:fa:06:9f: c8:70:74:59:c9:c9:be:c0:bd:b0:ba:10:32:e5:41:3f:49:ad: 89:ad:87:0f:8c:f5:0a:b1:90:d8:dd:cf:6b:3b:82:ee:89:96: 63:df:01:04:7c:03:2a:ab:89:74:8d:b1:68:1c:a5:79:fc:92: b5:83:cb:97:2b:dd:5b:2e:4a:fe:85:f1:d0:1b:94:e5:9c:7c: 7e:3e:48:a4:4b:b7:17:cd:46:ea:64:b3:0e:e0:2e:3b:1b:c1: 8c:04:54:cb:b7:28:13:b8:99:fe:9c:94:f5:26:aa:2e:7f:b1: 21:8c:37:d4:18:e5:2a:57:64:dd:08:bf:16:57:5e:fe:85:42: e5:e5:6e:1c:d1:ac:f1:d6:db:a0:cb:07:9c:4d:24:7f:0d:6b: b2:0a:92:c1:c7:b0:98:43:df:e9:86:f2:26:22:33:25:e7:fa: 84:05:36:fd:f0:b8:b7:67:f8:5a:e2:87:94:4e:d8:52:ae:ab: 25:7e:b0:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe1lxrlywLMOYJsQ1XrQR08/N/KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNjA0MTYxODM2NDhaFw0yNjA0MTkyMzA3NDhaMDMxMTAvBgNV BAMTKDJGMEQ4M0E5ODVCQzU4NEI4NTVGQTVFMTFDRDI4NzA0NTdCNEQwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV4zfYpvUdvd5zFLeSmhpKlakA zxnjqUYT3gJ89gKVdhWgwshXAFssdeiNwkXHfKbOtT6MuUN8BQVxiexVZ71p7/9l /uNaaxgADoLc2jhvEgIfoPtZm8V9CX9DCPcggeK4PBmaU0dlX38azvlqxCDXVzgw gF/IjYmiT3ozTwr+z26Ygjm9SzONd8StZNx386UUqo6yJR4l5antyYKRX48xXTgd CkZdo/GX1Zn22RAM3S9+VLJP2Z73/dpI8DzN06DoGTgAQ79nbdWpquAwdDzKPkN9 zr2CC7PsR2HAcb5EFkb+/7hwCaMcBBy0YNjbekc0A+lSMeZrsbDkNmmoNMGnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULw2DqYW8WEuFX6XhHNKHBFe00GEwHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5zR6KN2ktkGzK3w4H0banzLlrMzOQL1DXy 8v8OR1mIo0Cr/QqTl6FiW1wXLLP6iDO6SsnMhfHo1+NMiE3rEFZVFS7thvoGn8hw dFnJyb7AvbC6EDLlQT9JrYmthw+M9QqxkNjdz2s7gu6JlmPfAQR8AyqriXSNsWgc pXn8krWDy5cr3VsuSv6F8dAblOWcfH4+SKRLtxfNRupksw7gLjsbwYwEVMu3KBO4 mf6clPUmqi5/sSGMN9QY5SpXZN0IvxZXXv6FQuXlbhzRrPHW26DLB5xNJH8Na7IK ksHHsJhD3+mG8iYiMyXn+oQFNv3wuLdn+Frih5RO2FKuqyV+sKo= -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:28 2026 by rpki-client