$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: /dztP03byDScgL0LFiBka2E+OnQV7nEpgJzqg+QSOHI= Subject key identifier: E6:EC:44:FF:DE:BE:69:B8:02:86:82:D8:7C:D1:D4:4A:40:57:93:D3 Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 1864D00BE19A3468F446184766605795AA963214 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 0276 Signing time: Sat 18 Apr 2026 08:02:24 +0000 Manifest this update: Sat 18 Apr 2026 07:57:24 +0000 Manifest next update: Tue 21 Apr 2026 10:52:24 +0000 Files and hashes: 1: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: axzSin1Zuw9sFUIcxr7eHuy7ItZSFfIne5t//OUfyLI=) 2: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: sheURZ1JlOCQlhALUs8LQPX0wKHQXpBd6sjNcfxqeow=) 3: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: oQF2g29fJ1rphB8ZnKarTHkHJW/AbS8xJ9Z8slQV/e4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 10:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:64:d0:0b:e1:9a:34:68:f4:46:18:47:66:60:57:95:aa:96:32:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Apr 18 07:57:24 2026 GMT Not After : Apr 21 10:52:24 2026 GMT Subject: CN=E6EC44FFDEBE69B8028682D87CD1D44A405793D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:b3:c7:8b:4c:72:f1:38:25:2b:25:85:59: c4:28:0b:ca:f0:9a:a4:79:25:fc:48:99:50:d1:61: e0:4e:fc:8c:66:33:ea:aa:d0:7f:c4:36:6f:20:f3: 1c:66:cf:eb:1f:6d:dc:a3:57:c8:e1:f4:29:a0:7e: f8:bc:94:e9:47:aa:44:b3:59:8a:aa:d9:64:a4:b5: 99:53:2f:8c:f9:c1:de:5f:59:99:57:07:fa:ce:3c: 1e:37:80:1f:17:1e:19:af:1e:7d:59:82:52:ed:78: ab:26:41:76:0f:4d:a4:9b:dc:b9:24:f2:40:0b:b9: f7:39:cd:e0:d9:f6:0b:c1:60:46:b3:a4:25:91:a6: b1:62:db:eb:9f:a6:48:5f:13:20:6b:82:ac:df:74: 98:6e:d8:f5:24:ce:a4:f2:e1:60:2f:77:d7:51:a6: 65:09:83:00:5a:6a:67:64:3a:89:47:d3:4e:69:68: 6c:33:45:ec:9e:43:db:37:1a:51:5d:d9:cb:f4:5b: 97:f3:c1:07:6f:82:1f:f1:72:1a:51:4b:4d:89:04: 33:1f:73:8a:da:b5:7d:6d:6d:69:2e:de:c4:40:ff: a5:1a:4f:ad:c8:6b:d5:8c:79:e0:37:9d:0e:9f:b9: cd:bc:df:4d:1c:0d:ca:7c:64:2a:fb:03:1f:a8:5c: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EC:44:FF:DE:BE:69:B8:02:86:82:D8:7C:D1:D4:4A:40:57:93:D3 X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:55:a3:92:95:47:ff:43:6b:11:c9:b8:da:51:8c:5e:93:91: 84:ee:15:1e:30:8f:0d:30:bd:5c:90:15:c2:82:08:67:97:ef: bb:99:e3:b3:b5:22:8e:07:a9:ac:7d:d6:fe:35:d6:f2:49:15: a7:33:5e:9e:7a:4e:41:75:9a:01:30:cb:e7:cb:d3:78:c4:4b: eb:8f:f2:22:cd:9f:09:11:70:3c:30:17:e6:8b:83:3f:45:9a: f8:96:08:c6:be:0e:85:e2:88:f9:d1:68:39:da:cf:50:96:c3: 71:09:35:f0:64:bc:b1:82:cf:27:cc:6e:8f:2c:85:c4:e8:b3: 97:fe:df:d8:61:1f:0d:0f:23:d2:c2:ba:ee:ab:80:2c:e6:66: 8b:37:3e:e3:97:04:69:63:37:61:64:7a:26:3e:55:f4:d0:06: cf:23:b5:ef:2a:4f:1e:a5:5a:9e:28:f6:92:83:d7:c3:8f:d1: da:fd:42:13:0a:80:23:d8:84:09:b8:56:4f:28:ec:c7:4d:87: e2:87:4a:f5:6a:7b:24:2d:b6:2e:1b:83:0b:22:39:e8:55:ea: f6:dc:5a:0d:81:5c:9d:19:15:dd:29:ba:5d:4e:be:52:79:67: 38:7f:2e:96:9a:d6:0e:c6:c6:fa:06:4d:c9:c9:5b:3d:f7:5b: 1f:d6:22:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGGTQC+GaNGj0RhhHZmBXlaqWMhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNjA0MTgwNzU3MjRaFw0yNjA0MjExMDUyMjRaMDMxMTAvBgNV BAMTKEU2RUM0NEZGREVCRTY5QjgwMjg2ODJEODdDRDFENDRBNDA1NzkzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmLPHi0xy8TglKyWFWcQoC8rw mqR5JfxImVDRYeBO/IxmM+qq0H/ENm8g8xxmz+sfbdyjV8jh9Cmgfvi8lOlHqkSz WYqq2WSktZlTL4z5wd5fWZlXB/rOPB43gB8XHhmvHn1ZglLteKsmQXYPTaSb3Lkk 8kALufc5zeDZ9gvBYEazpCWRprFi2+ufpkhfEyBrgqzfdJhu2PUkzqTy4WAvd9dR pmUJgwBaamdkOolH005paGwzReyeQ9s3GlFd2cv0W5fzwQdvgh/xchpRS02JBDMf c4ratX1tbWku3sRA/6UaT63Ia9WMeeA3nQ6fuc28300cDcp8ZCr7Ax+oXP49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5uxE/96+abgChoLYfNHUSkBXk9MwHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVVo5KVR/9DaxHJuNpRjF6TkYTuFR4wjw0w vVyQFcKCCGeX77uZ47O1Io4Hqax91v411vJJFaczXp56TkF1mgEwy+fL03jES+uP 8iLNnwkRcDwwF+aLgz9FmviWCMa+DoXiiPnRaDnaz1CWw3EJNfBkvLGCzyfMbo8s hcTos5f+39hhHw0PI9LCuu6rgCzmZos3PuOXBGljN2FkeiY+VfTQBs8jte8qTx6l Wp4o9pKD18OP0dr9QhMKgCPYhAm4Vk8o7MdNh+KHSvVqeyQtti4bgwsiOehV6vbc Wg2BXJ0ZFd0pul1OvlJ5Zzh/Lpaa1g7GxvoGTcnJWz33Wx/WIlY= -----END CERTIFICATE-----Generated at Sun Apr 19 10:05:46 2026 by rpki-client