$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: hKbJ7KTzcRZESdT8hid+wgAYwiUGBlsJAGHnOPd722U= Subject key identifier: D0:54:67:D1:C6:75:1E:8E:96:89:4A:D6:E7:0B:1B:05:D6:C5:29:E3 Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 545B0C239DF1716EBBB9EE36843B7CACCDE9E0B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 0415 Signing time: Thu 16 Apr 2026 15:52:30 +0000 Manifest this update: Thu 16 Apr 2026 15:47:30 +0000 Manifest next update: Mon 20 Apr 2026 03:17:30 +0000 Files and hashes: 1: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: I8Lo9WWFv2tGN3E1o4OQxQHeU242vqlHknEkU2988xc=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ApcZEcO0CdRpriMpjZ8NMdcvm7zZPBlUASlOFKPUlhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:5b:0c:23:9d:f1:71:6e:bb:b9:ee:36:84:3b:7c:ac:cd:e9:e0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Apr 16 15:47:30 2026 GMT Not After : Apr 20 03:17:30 2026 GMT Subject: CN=D05467D1C6751E8E96894AD6E70B1B05D6C529E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:30:cf:e0:8b:ed:d5:95:90:88:15:bb:e0: ae:55:28:b8:eb:5c:ba:d5:c9:cb:d2:1f:8e:db:bf: 58:89:08:8e:2f:2f:65:cc:9e:04:f0:16:8c:49:07: ef:5c:60:13:d7:16:74:5e:f4:e2:d9:68:f5:50:fe: 95:e4:dd:2a:c4:5b:a7:e0:b5:69:56:75:50:e0:81: dd:10:82:05:38:ef:f8:f0:6f:90:7b:4d:be:25:07: 6d:82:f8:b5:84:84:96:e1:04:8e:60:b8:a1:40:f7: 80:91:4b:85:9a:db:bc:81:21:1b:36:8f:0e:21:00: c3:63:e0:20:96:d4:cd:d9:97:d6:fb:fe:3d:b3:59: ce:9d:ec:32:37:12:05:bd:55:fd:0f:d4:1e:c6:ae: e7:31:7b:09:de:2a:a2:c8:74:24:8a:b4:3c:36:72: 55:52:72:39:d2:e4:5c:9b:d1:7f:5e:52:25:40:e4: f6:18:b7:4f:dc:aa:e6:08:98:f3:46:fb:4c:ce:f8: b4:34:f7:6f:66:f1:a8:85:3a:0f:d2:44:9f:82:d3: 69:ff:02:cb:b5:27:cf:08:bd:7a:03:53:3e:10:5d: 87:3b:01:48:d7:3c:e9:aa:41:f9:7b:6f:17:96:41: 79:26:74:7e:5f:98:2e:d7:f2:db:59:06:68:a1:47: d2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:54:67:D1:C6:75:1E:8E:96:89:4A:D6:E7:0B:1B:05:D6:C5:29:E3 X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:44:7f:01:de:b8:04:27:6b:29:5a:10:a9:b3:c7:dc:7d:31: ab:0f:fe:b3:ea:f4:80:e3:2a:d6:4b:80:2b:9a:6a:77:97:86: d1:65:db:8c:e5:06:cf:69:68:95:af:b1:6e:17:02:fd:e9:1a: 0a:1b:8c:81:ac:f5:fc:4e:42:24:bd:ac:0a:da:32:de:12:b9: 32:f3:5d:70:17:fb:3d:39:a6:6f:8e:de:dc:81:c7:e8:68:44: 02:89:6e:a0:cc:5a:7e:92:b2:7a:3c:9c:bf:2c:4f:a7:d1:d7: 50:b4:8a:73:2a:91:34:59:d6:93:cd:17:10:98:6c:22:29:fa: 33:0d:fb:f7:ec:dc:66:63:e5:d4:f7:b5:42:24:45:10:95:df: 72:76:76:50:39:fa:24:0f:db:2e:8b:3e:67:2f:22:a5:85:96: 1d:28:5c:75:03:72:4f:ac:9d:0d:53:c0:9e:da:1d:5b:bb:ca: a8:32:d7:05:97:59:e8:2f:e6:6e:f8:62:98:bc:37:5f:0d:06: 6c:6a:57:5e:d9:12:d4:c0:28:09:39:fd:f3:97:97:aa:fd:fb: b7:6f:e4:89:00:02:69:19:2c:84:a7:48:3a:83:f2:d8:51:fc: b2:54:19:f9:dd:4d:69:a5:f9:ae:3f:99:fb:f1:0a:f8:a0:b0: e3:ec:b3:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFsMI53xcW67ue42hDt8rM3p4LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNjA0MTYxNTQ3MzBaFw0yNjA0MjAwMzE3MzBaMDMxMTAvBgNV BAMTKEQwNTQ2N0QxQzY3NTFFOEU5Njg5NEFENkU3MEIxQjA1RDZDNTI5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03TDP4Ivt1ZWQiBW74K5VKLjr XLrVycvSH47bv1iJCI4vL2XMngTwFoxJB+9cYBPXFnRe9OLZaPVQ/pXk3SrEW6fg tWlWdVDggd0QggU47/jwb5B7Tb4lB22C+LWEhJbhBI5guKFA94CRS4Wa27yBIRs2 jw4hAMNj4CCW1M3Zl9b7/j2zWc6d7DI3EgW9Vf0P1B7GrucxewneKqLIdCSKtDw2 clVScjnS5Fyb0X9eUiVA5PYYt0/cquYImPNG+0zO+LQ0929m8aiFOg/SRJ+C02n/ Asu1J88IvXoDUz4QXYc7AUjXPOmqQfl7bxeWQXkmdH5fmC7X8ttZBmihR9IpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0FRn0cZ1Ho6WiUrW5wsbBdbFKeMwHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpEfwHeuAQnaylaEKmzx9x9MasP/rPq9IDj KtZLgCuaaneXhtFl24zlBs9paJWvsW4XAv3pGgobjIGs9fxOQiS9rAraMt4SuTLz XXAX+z05pm+O3tyBx+hoRAKJbqDMWn6Ssno8nL8sT6fR11C0inMqkTRZ1pPNFxCY bCIp+jMN+/fs3GZj5dT3tUIkRRCV33J2dlA5+iQP2y6LPmcvIqWFlh0oXHUDck+s nQ1TwJ7aHVu7yqgy1wWXWegv5m74Ypi8N18NBmxqV17ZEtTAKAk5/fOXl6r9+7dv 5IkAAmkZLISnSDqD8thR/LJUGfndTWml+a4/mfvxCvigsOPss6A= -----END CERTIFICATE-----Generated at Sat Apr 18 00:12:02 2026 by rpki-client