$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: EvAeCgxnzwmCsj1qnZfJYwn4frNZEp0Fqqk3iGqG+rY= Subject key identifier: C9:BD:F9:26:6C:C2:E5:CD:9F:AC:17:52:95:C0:82:0C:D6:0F:15:3A Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 45C236A9AAE32B5A1C9BE8CF3C303D74E3AB8011 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: 0129 Signing time: Tue 21 Apr 2026 19:02:39 +0000 Manifest this update: Tue 21 Apr 2026 18:57:39 +0000 Manifest next update: Sat 25 Apr 2026 05:15:39 +0000 Files and hashes: 1: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) 2: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: lQdYfsmlfwJMNWe+sfwELO6FiqJphsAs7JbBr0eG8jc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 05:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c2:36:a9:aa:e3:2b:5a:1c:9b:e8:cf:3c:30:3d:74:e3:ab:80:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Apr 21 18:57:39 2026 GMT Not After : Apr 25 05:15:39 2026 GMT Subject: CN=C9BDF9266CC2E5CD9FAC175295C0820CD60F153A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c0:5a:54:ca:34:43:00:08:e9:cb:dd:90:9e: 8e:c6:8b:3e:79:67:15:21:e0:1c:c2:0b:f0:a8:4d: 9d:40:c5:b8:05:3f:8e:16:87:32:d9:cd:e5:3a:56: 79:46:2b:2a:66:72:fe:50:ff:37:d7:c9:42:d6:17: 54:92:45:63:58:2f:82:6e:a6:7b:da:d9:b9:8b:b1: 32:a9:93:c6:06:4e:aa:21:c3:dc:33:d6:ee:56:a7: 25:1f:16:84:45:40:f5:a3:c8:fc:64:ac:4f:ac:c9: 7e:c3:8c:d1:a8:3b:22:7d:f0:58:65:cd:0a:b1:e0: 24:c1:67:83:af:c0:eb:06:2f:34:30:e9:fc:e4:bf: 75:e6:64:43:fb:fd:ab:59:2c:4a:50:cf:71:2f:41: 2d:c7:5c:1b:fc:3b:99:c3:64:e3:6e:c3:0c:74:60: 46:77:c3:26:5c:9c:9f:75:e6:63:11:55:c2:47:90: 7f:76:9f:1b:cb:ac:b9:78:c8:e9:f8:b3:de:01:8b: c4:a7:dd:af:1a:20:31:5c:77:3f:05:1a:4a:68:4f: dd:b5:7b:e1:e9:88:72:3b:3c:14:1c:41:50:05:15: 6a:79:2f:c4:4d:8b:95:ef:3a:97:9f:15:06:21:74: 91:a2:c4:68:1f:3b:0a:66:a6:af:a5:e8:8b:3f:17: 53:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BD:F9:26:6C:C2:E5:CD:9F:AC:17:52:95:C0:82:0C:D6:0F:15:3A X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b1:5c:0a:e2:71:64:6e:75:26:23:c8:7d:f7:11:33:72:6d: 0c:c4:d0:e8:b0:fd:b0:30:df:b2:fb:5a:c4:6c:3b:f1:96:a6: 5d:a1:83:78:08:a4:8b:a8:0f:aa:2a:d9:37:c4:1a:46:fb:e8: d9:4d:aa:ae:03:85:06:e6:7e:40:bd:53:51:49:19:71:d2:8b: d9:f6:d2:c1:99:fa:8a:00:a5:c5:40:c7:9d:d5:db:29:18:08: 55:89:e6:6d:be:01:5a:7b:72:cd:94:b4:24:23:d1:5d:37:f5: 5b:aa:8c:47:98:69:d3:d3:8a:8a:f6:66:8c:4c:1b:71:1f:24: 5e:47:84:2c:1e:ae:67:47:51:ca:06:9c:60:8d:0d:58:18:75: d4:6e:d4:25:6f:2b:3f:d2:44:31:c2:f2:fa:28:eb:b1:1d:d6: ee:c4:92:8b:b7:3c:15:5e:93:b4:c9:d2:b2:1c:36:46:54:fd: 90:49:f2:9e:40:e8:a5:cf:2d:dd:a5:2c:2c:1e:ac:35:0e:f3: b2:59:4f:35:2d:f0:36:0f:6b:4f:03:23:fd:df:77:90:c0:78: 82:30:2e:c0:6a:19:41:c8:df:ff:9b:3f:6d:aa:5f:81:be:0f: 40:08:a8:6f:c2:ef:d8:f4:b8:84:29:35:32:74:62:55:ce:d9: 2e:56:91:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURcI2qarjK1ocm+jPPDA9dOOrgBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNjA0MjExODU3MzlaFw0yNjA0MjUwNTE1MzlaMDMxMTAvBgNV BAMTKEM5QkRGOTI2NkNDMkU1Q0Q5RkFDMTc1Mjk1QzA4MjBDRDYwRjE1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrwFpUyjRDAAjpy92Qno7Giz55 ZxUh4BzCC/CoTZ1AxbgFP44WhzLZzeU6VnlGKypmcv5Q/zfXyULWF1SSRWNYL4Ju pnva2bmLsTKpk8YGTqohw9wz1u5WpyUfFoRFQPWjyPxkrE+syX7DjNGoOyJ98Fhl zQqx4CTBZ4OvwOsGLzQw6fzkv3XmZEP7/atZLEpQz3EvQS3HXBv8O5nDZONuwwx0 YEZ3wyZcnJ915mMRVcJHkH92nxvLrLl4yOn4s94Bi8Sn3a8aIDFcdz8FGkpoT921 e+HpiHI7PBQcQVAFFWp5L8RNi5XvOpefFQYhdJGixGgfOwpmpq+l6Is/F1PpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyb35JmzC5c2frBdSlcCCDNYPFTowHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOxXAricWRudSYjyH33ETNybQzE0Oiw/bAw 37L7WsRsO/GWpl2hg3gIpIuoD6oq2TfEGkb76NlNqq4DhQbmfkC9U1FJGXHSi9n2 0sGZ+ooApcVAx53V2ykYCFWJ5m2+AVp7cs2UtCQj0V039VuqjEeYadPTior2ZoxM G3EfJF5HhCwermdHUcoGnGCNDVgYddRu1CVvKz/SRDHC8voo67Ed1u7Ekou3PBVe k7TJ0rIcNkZU/ZBJ8p5A6KXPLd2lLCwerDUO87JZTzUt8DYPa08DI/3fd5DAeIIw LsBqGUHI3/+bP22qX4G+D0AIqG/C79j0uIQpNTJ0YlXO2S5WkZ8= -----END CERTIFICATE-----Generated at Wed Apr 22 09:59:12 2026 by rpki-client