$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json) Hash identifier: BLhL1zPbeDZqUeQqJlDoGv2riaPfrf/2pwnxp6QNeIM= Subject key identifier: A2:CB:EB:3B:F1:7C:42:9C:CD:05:0D:94:19:BA:EC:A3:81:11:EC:54 Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 5A1415FEFE650E68E0D38DBDE24BE8AE62AD00A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft Manifest number: 0353 Signing time: Fri 17 Apr 2026 08:42:28 +0000 Manifest this update: Fri 17 Apr 2026 08:37:28 +0000 Manifest next update: Mon 20 Apr 2026 12:02:28 +0000 Files and hashes: 1: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: KB67q4SCRzcFv43ZUJG/KADzbe2hXV8kny5lP7t0r80=) 2: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: e1QrPwAZns8eHEuIMNfxgebVSxfz8/ls+1qfvrtVzio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:14:15:fe:fe:65:0e:68:e0:d3:8d:bd:e2:4b:e8:ae:62:ad:00:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: Apr 17 08:37:28 2026 GMT Not After : Apr 20 12:02:28 2026 GMT Subject: CN=A2CBEB3BF17C429CCD050D9419BAECA38111EC54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:b3:8f:4d:3b:b8:f9:f6:e9:07:08:74:3f: b2:e0:12:8d:79:b8:c9:90:c6:a2:1f:53:d3:51:1c: 81:ee:15:59:e0:2e:18:b9:74:86:e7:db:0b:40:2a: 34:b9:4a:e1:41:44:3b:35:61:cc:2c:d2:5a:24:77: 25:bf:7f:82:54:72:63:b8:96:e2:3e:d3:d4:f6:e0: e2:c0:4b:51:eb:7d:09:fc:d6:9d:ef:d8:b8:30:3e: 8e:82:64:49:71:39:5c:d0:ad:12:73:d9:c2:d8:46: ac:b6:13:23:c7:51:7c:44:ca:d8:9e:f2:23:c7:22: b4:40:84:78:0f:f6:d0:64:57:3d:9d:03:b0:43:bb: 6b:1e:50:3d:35:e8:ac:84:2f:1b:b5:1b:c6:3a:3a: 31:0f:99:52:6b:54:35:48:3c:87:ee:b7:da:61:cb: 46:dc:d0:5d:3a:18:a0:4d:50:8d:4d:91:e9:0a:03: dc:79:10:42:cf:16:49:ef:87:39:7e:3c:e4:ed:df: 4f:fe:78:9d:4e:5c:ae:5f:75:f8:6d:fe:d5:6b:ff: 1c:db:14:86:16:9c:b2:0b:e0:58:53:e8:cb:79:c9: 04:01:22:36:70:52:bd:b6:95:b3:51:96:bb:d3:72: 01:c0:18:4d:df:2d:02:06:e4:ad:17:67:63:a0:90: c7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CB:EB:3B:F1:7C:42:9C:CD:05:0D:94:19:BA:EC:A3:81:11:EC:54 X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d6:7a:6a:30:bf:28:a9:19:b0:a6:2f:e0:f4:92:84:d5:4e: 0b:25:1c:54:20:4a:c4:55:95:2f:9c:76:3e:00:14:4b:cb:82: 99:5d:0f:18:70:a3:75:37:94:f6:0c:3b:8f:85:cf:ac:41:d4: 41:bf:74:53:b8:65:c6:df:25:3d:79:be:e8:da:c1:4c:1f:2b: 48:c3:92:36:d7:29:84:eb:53:77:69:9d:a9:b1:6e:c8:29:92: 34:97:10:a0:fe:c3:79:c1:ef:02:ba:0c:e0:8c:df:3a:61:cb: ff:ec:1d:a5:31:3c:e8:64:2f:59:11:69:61:d0:3f:68:b6:20: c2:db:b6:54:bf:93:00:f2:b6:35:e5:58:7e:32:70:95:fe:06: d5:7e:da:e3:5c:fc:35:fa:e8:d4:63:99:19:c2:ff:c6:ed:58: c7:e8:22:4b:db:01:81:1a:f8:93:4b:6c:a7:be:13:65:9e:a4: 1e:20:aa:e4:88:b1:d8:a9:e6:bb:80:04:bc:fb:31:74:ba:ab: de:97:4e:36:7a:de:49:3a:61:e4:2e:16:67:98:ad:d5:fa:27: c3:59:c9:43:05:4d:0c:06:7c:e3:d9:b6:07:cc:ac:d2:87:ac: 59:b8:15:90:4b:ff:ce:a1:ee:ef:af:d4:7b:1b:78:f3:9d:96: 2e:c9:0a:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhQV/v5lDmjg04294kvormKtAKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yNjA0MTcwODM3MjhaFw0yNjA0MjAxMjAyMjhaMDMxMTAvBgNV BAMTKEEyQ0JFQjNCRjE3QzQyOUNDRDA1MEQ5NDE5QkFFQ0EzODExMUVDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/l7OPTTu4+fbpBwh0P7LgEo15 uMmQxqIfU9NRHIHuFVngLhi5dIbn2wtAKjS5SuFBRDs1Ycws0lokdyW/f4JUcmO4 luI+09T24OLAS1HrfQn81p3v2LgwPo6CZElxOVzQrRJz2cLYRqy2EyPHUXxEytie 8iPHIrRAhHgP9tBkVz2dA7BDu2seUD016KyELxu1G8Y6OjEPmVJrVDVIPIfut9ph y0bc0F06GKBNUI1NkekKA9x5EELPFknvhzl+POTt30/+eJ1OXK5fdfht/tVr/xzb FIYWnLIL4FhT6Mt5yQQBIjZwUr22lbNRlrvTcgHAGE3fLQIG5K0XZ2OgkMdZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUosvrO/F8QpzNBQ2UGbrso4ER7FQwHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJD QUQ4NkNFRDYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDWemowvyipGbCmL+D0koTVTgslHFQgSsRV lS+cdj4AFEvLgpldDxhwo3U3lPYMO4+Fz6xB1EG/dFO4ZcbfJT15vujawUwfK0jD kjbXKYTrU3dpnamxbsgpkjSXEKD+w3nB7wK6DOCM3zphy//sHaUxPOhkL1kRaWHQ P2i2IMLbtlS/kwDytjXlWH4ycJX+BtV+2uNc/DX66NRjmRnC/8btWMfoIkvbAYEa +JNLbKe+E2WepB4gquSIsdip5ruABLz7MXS6q96XTjZ63kk6YeQuFmeYrdX6J8NZ yUMFTQwGfOPZtgfMrNKHrFm4FZBL/86h7u+v1HsbePOdli7JChg= -----END CERTIFICATE-----Generated at Fri Apr 17 10:58:51 2026 by rpki-client