$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: CDeU4cEgKKg4F42QZPP5LcKzOwskeQNrrV9sNc1jwgc= Subject key identifier: 9E:0A:24:A5:4D:FA:16:2B:C5:9D:36:9E:8D:61:59:9D:C0:FA:34:FD Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 41E6EF99AC98FE449E763B88C6517267A9C2542A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: 015B Signing time: Sat 18 Apr 2026 19:42:19 +0000 Manifest this update: Sat 18 Apr 2026 19:37:19 +0000 Manifest next update: Wed 22 Apr 2026 05:57:19 +0000 Files and hashes: 1: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: E0CjFn5U/9BTQeO2HTeXnXZQvzamSjcjllnOK42R05A=) 2: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: rg9lpQpQ+ZgL/aBtSdpzREEnhOBkrouF51BUGtJjEn0=) 3: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: aUHPqtGL7kNyM5lWdTvW0W3Hg1KTklO/vOwEbRIxI9M=) 4: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: kkiTIIYSjBTKRfHlWaLnjPTQdK1oEnXuZHdGsrSz9QU=) 5: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: mRxvTYWPyY4uCFeQDxVkCJFWfVPhlAl1Ny0mi+/MyiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 05:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e6:ef:99:ac:98:fe:44:9e:76:3b:88:c6:51:72:67:a9:c2:54:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Apr 18 19:37:19 2026 GMT Not After : Apr 22 05:57:19 2026 GMT Subject: CN=9E0A24A54DFA162BC59D369E8D61599DC0FA34FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4e:ce:e0:2e:82:f4:12:98:df:aa:b5:c9:21: 9e:d9:be:8a:a4:eb:20:3c:af:b4:37:7d:bb:bc:6a: 6e:31:96:fe:87:3e:f7:ea:ae:0b:ca:0a:f2:02:c8: 7d:08:e3:c8:4e:13:a8:e2:72:ac:55:56:7f:32:55: 6e:16:3d:c5:8e:88:92:bf:0a:bb:99:b2:51:e5:13: dd:c6:b1:a0:a5:98:71:7a:bd:8f:d4:e1:65:6e:68: ab:10:94:44:e5:22:01:1d:18:c3:25:e1:11:2d:2c: 6a:46:56:5b:d1:16:c4:4b:3a:e2:8f:5a:88:4e:74: dc:5b:e5:4b:9c:1b:bd:b8:93:03:74:e8:34:81:1c: e8:e0:3e:86:f6:48:bf:f0:11:3b:ba:39:05:cf:26: 7f:3b:2d:90:d5:35:2c:aa:47:c9:81:05:6c:c3:66: a8:fe:8d:58:65:88:7b:d0:39:0e:ee:5f:e5:07:f8: dd:a4:c4:5e:a6:1f:f0:86:49:9f:ea:b0:93:72:79: b4:c4:d4:c0:74:fd:38:9c:a0:54:94:b6:6f:0b:a9: 9c:03:ff:87:31:c4:db:1c:c7:4c:b0:bb:0a:60:12: e7:05:a5:9b:39:c1:fc:fc:da:3d:69:83:8e:1f:86: 1a:4b:51:28:2e:08:55:7e:60:bb:e3:45:53:bd:1e: 70:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0A:24:A5:4D:FA:16:2B:C5:9D:36:9E:8D:61:59:9D:C0:FA:34:FD X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:89:97:99:d5:3d:9e:3b:f5:21:2c:19:0d:0c:a9:38:ec:54: 68:f1:0a:b9:dc:84:8e:f5:64:d5:72:de:3c:e2:9e:43:7c:25: a6:80:c9:27:04:61:2a:da:20:3b:11:50:d5:d9:b0:c8:30:3e: 55:85:0c:5c:05:85:13:84:53:0c:62:5e:78:05:73:c3:87:6c: 8d:a0:60:72:39:d9:db:77:c6:4f:e2:90:6d:45:f4:fd:9c:f1: 73:85:58:f8:92:65:58:ff:c6:ed:d2:21:91:b4:5d:50:47:7e: 26:33:5e:7b:73:74:65:7b:f9:56:08:ba:67:70:27:28:57:a5: b0:3d:b9:fe:32:73:61:68:74:97:ab:38:ef:c7:38:7d:96:cc: b6:e4:75:68:48:3c:51:05:a8:d2:77:65:a2:59:c4:c8:92:d0: d6:19:49:e4:88:41:74:8b:b9:84:7c:bf:23:ce:da:31:de:66: a1:65:ef:dd:f1:59:e0:32:e4:40:29:69:ad:29:ec:c1:ca:fd: ef:10:b2:04:62:2a:a7:a0:55:cd:fd:42:79:21:db:ef:6e:05: bd:ae:fb:e9:01:4f:d0:5b:01:2a:cb:f2:39:7b:fb:05:c1:69: df:a5:4a:4a:cb:b0:07:3f:f1:f7:3c:4a:80:10:d8:d4:76:da: 19:f5:db:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQebvmayY/kSedjuIxlFyZ6nCVCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNjA0MTgxOTM3MTlaFw0yNjA0MjIwNTU3MTlaMDMxMTAvBgNV BAMTKDlFMEEyNEE1NERGQTE2MkJDNTlEMzY5RThENjE1OTlEQzBGQTM0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTs7gLoL0EpjfqrXJIZ7Zvoqk 6yA8r7Q3fbu8am4xlv6HPvfqrgvKCvICyH0I48hOE6jicqxVVn8yVW4WPcWOiJK/ CruZslHlE93GsaClmHF6vY/U4WVuaKsQlETlIgEdGMMl4REtLGpGVlvRFsRLOuKP WohOdNxb5UucG724kwN06DSBHOjgPob2SL/wETu6OQXPJn87LZDVNSyqR8mBBWzD Zqj+jVhliHvQOQ7uX+UH+N2kxF6mH/CGSZ/qsJNyebTE1MB0/TicoFSUtm8LqZwD /4cxxNscx0ywuwpgEucFpZs5wfz82j1pg44fhhpLUSguCFV+YLvjRVO9HnAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUngokpU36FivFnTaejWFZncD6NP0wHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2Jl5nVPZ479SEsGQ0MqTjsVGjxCrnchI71 ZNVy3jzinkN8JaaAyScEYSraIDsRUNXZsMgwPlWFDFwFhROEUwxiXngFc8OHbI2g YHI52dt3xk/ikG1F9P2c8XOFWPiSZVj/xu3SIZG0XVBHfiYzXntzdGV7+VYIumdw JyhXpbA9uf4yc2FodJerOO/HOH2WzLbkdWhIPFEFqNJ3ZaJZxMiS0NYZSeSIQXSL uYR8vyPO2jHeZqFl793xWeAy5EApaa0p7MHK/e8QsgRiKqegVc39Qnkh2+9uBb2u ++kBT9BbASrL8jl7+wXBad+lSkrLsAc/8fc8SoAQ2NR22hn12/w= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:46 2026 by rpki-client