$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: +zUYo6wRj2o1idLxUjG/fQQ07t/LlSThcAJoT136rKA= Subject key identifier: 04:CB:EF:83:43:C2:A2:63:C9:B1:E3:2C:F0:56:2D:92:2F:3C:16:78 Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 0C6925F621400EAF2B3615DD58B08D2A0BE217FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 026C Signing time: Sun 05 Apr 2026 06:12:07 +0000 Manifest this update: Sun 05 Apr 2026 06:07:07 +0000 Manifest next update: Wed 08 Apr 2026 12:23:07 +0000 Files and hashes: 1: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=) 2: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=) 3: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: ldrGJsy+/TLnpHhOovohV+mReZwkU+jIEX++pOvvnkI=) 4: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: COO9U7uML0p9DBj/n/cAzOHljkUdAc53HI2BUpiCkZA=) 5: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Apr 2026 12:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:69:25:f6:21:40:0e:af:2b:36:15:dd:58:b0:8d:2a:0b:e2:17:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Apr 5 06:07:07 2026 GMT Not After : Apr 8 12:23:07 2026 GMT Subject: CN=04CBEF8343C2A263C9B1E32CF0562D922F3C1678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:ab:76:74:9d:2e:e7:b9:3c:6d:31:23:35: 3e:59:4f:32:56:02:d1:0e:85:d8:a6:ae:06:1c:4a: 60:dc:95:e1:a1:ae:e7:91:e5:64:99:29:3d:2d:43: 22:c5:f7:2a:d9:5a:a3:b2:30:b7:19:0d:a8:0d:cf: 81:df:32:b1:87:2f:81:e7:0e:c2:cf:73:db:f5:be: 60:63:d6:1e:84:9e:3e:74:66:07:01:cf:e5:63:44: 8d:76:d4:02:bd:3c:a0:d6:46:2f:9e:7f:62:5c:35: 95:f8:de:70:20:3e:38:33:ac:eb:38:07:5d:41:91: 47:f2:1b:79:a1:10:91:5e:e2:e3:9c:32:ae:42:c7: f5:97:8e:53:4a:b9:ce:3b:bd:51:a1:cc:1d:ae:52: f3:da:2b:85:9c:71:0c:09:0c:6e:3d:36:2a:5f:be: 14:f1:a5:c8:b3:b0:4b:04:0c:b4:d0:61:42:87:24: bd:ca:42:c6:d6:12:b1:b2:da:e8:ea:c0:f3:1b:3c: ba:c1:68:80:3c:b5:00:ec:12:3e:61:43:56:cd:8b: 85:7f:2c:7e:bf:0b:08:69:7d:3b:63:d5:80:20:dc: c0:a2:f1:73:81:e8:5d:9d:42:b6:ee:cd:88:09:28: 9c:94:f1:ef:97:35:77:ae:56:6a:60:6d:0c:46:22: ff:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CB:EF:83:43:C2:A2:63:C9:B1:E3:2C:F0:56:2D:92:2F:3C:16:78 X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d9:03:3a:86:da:61:83:e6:07:92:86:2c:26:04:f9:f0:45: d7:19:ca:a9:65:00:cb:e9:e2:43:b2:f0:70:f4:26:54:cb:ea: 88:64:58:7e:d5:29:10:23:cf:c8:4e:e8:1b:15:3d:28:3f:9f: c9:20:26:31:44:f5:05:79:16:9e:85:4d:35:51:11:23:16:fe: 4c:4d:78:44:40:b4:39:c8:e0:9b:26:b3:15:40:2a:04:79:f0: b2:ec:fc:76:66:5b:1f:35:24:ef:6f:1d:8c:27:37:fc:f7:42: f3:48:70:21:64:22:ca:35:7c:19:39:12:ab:25:6a:0f:d9:d3: 96:ac:12:39:3e:10:15:b6:75:3b:60:5f:4a:9d:31:bf:aa:69: 99:b8:76:3f:a2:f5:83:22:a9:5d:f1:29:3f:3b:2a:e8:b0:69: 59:3d:3e:41:35:bf:04:85:a1:08:2b:f6:91:33:c7:47:2d:b0: 8f:d1:6f:93:95:de:d3:59:ce:9c:bd:e3:e6:94:7e:24:dc:8f: 96:d7:2d:f0:b8:42:b1:ec:57:e6:e0:7a:ce:0c:a6:7f:a9:e8: 12:36:7d:ac:03:12:46:d3:ae:b3:8f:6e:c3:be:6d:af:f4:82: d8:4d:82:c0:00:e0:ea:b5:1b:a8:26:a5:05:d7:29:a3:e7:02: 87:a3:88:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGkl9iFADq8rNhXdWLCNKgviF/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNjA0MDUwNjA3MDdaFw0yNjA0MDgxMjIzMDdaMDMxMTAvBgNV BAMTKDA0Q0JFRjgzNDNDMkEyNjNDOUIxRTMyQ0YwNTYyRDkyMkYzQzE2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC05Kt2dJ0u57k8bTEjNT5ZTzJW AtEOhdimrgYcSmDcleGhrueR5WSZKT0tQyLF9yrZWqOyMLcZDagNz4HfMrGHL4Hn DsLPc9v1vmBj1h6Enj50ZgcBz+VjRI121AK9PKDWRi+ef2JcNZX43nAgPjgzrOs4 B11BkUfyG3mhEJFe4uOcMq5Cx/WXjlNKuc47vVGhzB2uUvPaK4WccQwJDG49Nipf vhTxpcizsEsEDLTQYUKHJL3KQsbWErGy2ujqwPMbPLrBaIA8tQDsEj5hQ1bNi4V/ LH6/CwhpfTtj1YAg3MCi8XOB6F2dQrbuzYgJKJyU8e+XNXeuVmpgbQxGIv8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMvvg0PComPJseMs8FYtki88FngwHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnZAzqG2mGD5geShiwmBPnwRdcZyqllAMvp 4kOy8HD0JlTL6ohkWH7VKRAjz8hO6BsVPSg/n8kgJjFE9QV5Fp6FTTVRESMW/kxN eERAtDnI4JsmsxVAKgR58LLs/HZmWx81JO9vHYwnN/z3QvNIcCFkIso1fBk5Eqsl ag/Z05asEjk+EBW2dTtgX0qdMb+qaZm4dj+i9YMiqV3xKT87KuiwaVk9PkE1vwSF oQgr9pEzx0ctsI/Rb5OV3tNZzpy94+aUfiTcj5bXLfC4QrHsV+bges4Mpn+p6BI2 fawDEkbTrrOPbsO+ba/0gthNgsAA4Oq1G6gmpQXXKaPnAoejiKg= -----END CERTIFICATE-----Generated at Mon Apr 6 14:56:19 2026 by rpki-client