$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: wWnL3Ic0IfWB63y7GSGLSQ27Xbq7AwkroEX/A/yuGu4= Subject key identifier: 2D:C1:A2:F3:B4:E6:AB:CE:8F:29:02:96:73:ED:FC:F4:B9:E2:67:A4 Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 72EEF897DFB8C078433112BF4E228BAFBF614B0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 0296 Signing time: Fri 17 Apr 2026 08:12:06 +0000 Manifest this update: Fri 17 Apr 2026 08:07:06 +0000 Manifest next update: Mon 20 Apr 2026 11:36:06 +0000 Files and hashes: 1: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: XO7OCQd7PiW3evlQ9RDZa78HCUTA5y41xkJCy0j4SPs=) 2: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: ilq+yNk4ApHai+44nfgKdo0AonRzuRVjx7R66JyfRj4=) 3: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: FC9WYK0GxhFuo5+IPpBOfrYKb96YdbcYuUIwD8S5/cc=) 4: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: vyyRX5ZN0c71huLL8k24+recuGAo/H2zFLb8iVt/MFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ee:f8:97:df:b8:c0:78:43:31:12:bf:4e:22:8b:af:bf:61:4b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: Apr 17 08:07:06 2026 GMT Not After : Apr 20 11:36:06 2026 GMT Subject: CN=2DC1A2F3B4E6ABCE8F29029673EDFCF4B9E267A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:68:ee:f6:35:c7:34:a8:86:88:1f:89:d6: 42:1e:05:d1:10:19:d0:ce:51:05:5e:39:5d:4e:00: cd:85:ce:70:05:27:ed:3a:fa:bf:36:58:e7:43:aa: 87:59:99:d5:d1:dc:83:06:64:92:72:3f:70:0c:2a: 9f:5d:b7:9e:75:df:d4:48:d7:80:e5:86:5b:ac:b3: ad:89:cc:c2:14:ac:71:ad:dd:a7:33:70:62:03:5b: 1e:e4:ad:84:af:c8:f2:b6:bf:83:88:da:bb:aa:7b: 97:1e:5e:06:65:77:6c:62:c8:2b:d0:7c:3c:b8:22: d4:b2:5e:dc:75:f9:15:b6:ee:a4:f4:08:1e:41:83: 49:c1:2b:ba:2e:3c:24:a2:f9:7b:41:36:d5:76:a7: 0d:79:7f:1b:c7:96:2f:dc:3a:36:a1:6c:59:ae:c9: 0a:22:6c:a8:cf:47:f7:93:eb:c0:ca:fb:f3:e4:c3: 89:1d:8b:d9:a9:d8:0d:6b:26:8a:64:16:7f:06:fe: ca:f1:c0:5d:92:07:b0:3a:45:c4:a1:bf:04:8f:d8: d7:f9:f3:df:08:0e:7d:89:c4:71:ca:14:1e:d8:69: 59:c4:aa:45:7c:28:f0:36:da:cf:88:7f:a4:40:06: a9:db:77:76:a8:ab:b5:bb:09:97:88:f2:c8:6a:80: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C1:A2:F3:B4:E6:AB:CE:8F:29:02:96:73:ED:FC:F4:B9:E2:67:A4 X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:69:50:5a:b5:43:9c:2c:ea:f5:35:16:c4:bf:8e:1f:b5:23: 1b:c9:25:0b:24:97:8d:c9:62:81:61:e8:0b:ef:9d:28:34:66: c4:f8:f5:fe:8a:2e:fd:18:bb:c0:4b:c3:4d:f1:0c:b3:fa:14: 65:30:33:e3:0b:7c:0a:06:9d:a7:da:43:ec:41:dd:c9:ab:86: 68:65:c7:70:c4:79:72:3c:d3:cb:6a:00:0e:58:48:01:1e:85: ce:c2:fc:04:b8:6d:ff:bd:1c:bf:4b:65:85:e1:8b:42:dd:d5: df:02:c7:b0:6e:14:92:8f:17:fd:ca:e0:b9:8a:68:f8:87:16: 70:3c:20:4f:16:6b:a8:bc:8f:06:84:03:76:13:60:87:eb:cd: a7:4a:04:63:04:02:42:a9:e4:32:d0:9f:d1:6c:73:a7:5e:f1: ea:1f:88:35:bd:ef:aa:a0:dd:8c:20:7f:98:6b:6c:72:5f:68: e8:0e:81:c6:54:d8:65:57:7d:7b:76:c8:97:68:f8:e3:5f:2a: 92:85:03:00:c3:23:9b:d7:9a:33:e5:2a:15:5c:80:a9:8c:0c: 32:8b:f4:8a:07:95:3d:4a:6d:ee:ad:d6:30:ac:8e:b4:c7:68: f3:0c:cf:30:c9:f7:2e:e0:3a:63:5c:57:29:e7:7f:ba:4f:e4: 48:20:8e:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcu74l9+4wHhDMRK/TiKLr79hSw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNjA0MTcwODA3MDZaFw0yNjA0MjAxMTM2MDZaMDMxMTAvBgNV BAMTKDJEQzFBMkYzQjRFNkFCQ0U4RjI5MDI5NjczRURGQ0Y0QjlFMjY3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6mju9jXHNKiGiB+J1kIeBdEQ GdDOUQVeOV1OAM2FznAFJ+06+r82WOdDqodZmdXR3IMGZJJyP3AMKp9dt55139RI 14Dlhluss62JzMIUrHGt3aczcGIDWx7krYSvyPK2v4OI2ruqe5ceXgZld2xiyCvQ fDy4ItSyXtx1+RW27qT0CB5Bg0nBK7ouPCSi+XtBNtV2pw15fxvHli/cOjahbFmu yQoibKjPR/eT68DK+/Pkw4kdi9mp2A1rJopkFn8G/srxwF2SB7A6RcShvwSP2Nf5 898IDn2JxHHKFB7YaVnEqkV8KPA22s+If6RABqnbd3aoq7W7CZeI8shqgHdnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULcGi87Tmq86PKQKWc+389LniZ6QwHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZpUFq1Q5ws6vU1FsS/jh+1IxvJJQskl43J YoFh6AvvnSg0ZsT49f6KLv0Yu8BLw03xDLP6FGUwM+MLfAoGnafaQ+xB3cmrhmhl x3DEeXI808tqAA5YSAEehc7C/AS4bf+9HL9LZYXhi0Ld1d8Cx7BuFJKPF/3K4LmK aPiHFnA8IE8Wa6i8jwaEA3YTYIfrzadKBGMEAkKp5DLQn9Fsc6de8eofiDW976qg 3Ywgf5hrbHJfaOgOgcZU2GVXfXt2yJdo+ONfKpKFAwDDI5vXmjPlKhVcgKmMDDKL 9IoHlT1Kbe6t1jCsjrTHaPMMzzDJ9y7gOmNcVynnf7pP5EggjhM= -----END CERTIFICATE-----Generated at Fri Apr 17 19:50:28 2026 by rpki-client