$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft File: E3FB5E3343EC63D705FF51B645113F74C7965236.mft (raw, json) Hash identifier: f3haxStsNkqyTSB2fRmIffKR7c0tAHMz9KZ1txzCJK4= Subject key identifier: 48:BF:E5:07:4C:BA:E2:86:B2:23:28:46:81:D8:FE:99:00:38:2D:D1 Authority key identifier: E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 Certificate issuer: /CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Certificate serial: 324EB07D6638354D8E1BC3FF1C362E54C3E88B4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft Manifest number: 0118 Signing time: Tue 21 Apr 2026 18:01:36 +0000 Manifest this update: Tue 21 Apr 2026 17:56:36 +0000 Manifest next update: Sat 25 Apr 2026 02:40:36 +0000 Files and hashes: 1: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: pcP51KVAYXagtYkUaOdwTyhCZXZM5gMNbSSkIN9xwSo=) 2: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: KzwY0iiHcJ5O0UVPUHPKtH6yEpVlgjbtPe1xq08+n3c=) 3: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: 4O9lmpHneuudT9xjvw5LwULxiETAfGvFoNCP2XYgoOQ=) 4: E3FB5E3343EC63D705FF51B645113F74C7965236.crl (hash: m2U8pqgNXh8dhdQMD4CChRVzM1NP3hoM4i7PuSF2T6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4e:b0:7d:66:38:35:4d:8e:1b:c3:ff:1c:36:2e:54:c3:e8:8b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Validity Not Before: Apr 21 17:56:36 2026 GMT Not After : Apr 25 02:40:36 2026 GMT Subject: CN=48BFE5074CBAE286B223284681D8FE9900382DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:00:ae:fb:fe:83:f2:06:c7:a6:af:cd:6b: 2c:ba:d4:ee:78:96:c9:ea:b8:6e:61:79:98:fd:7a: cf:be:ba:1d:a4:0e:a2:5f:11:2f:3b:7b:30:52:bc: 0c:56:d8:a7:72:ba:f0:4f:32:4a:5a:c2:31:9e:5b: 75:89:e5:a2:ab:b2:ba:af:10:b7:08:af:15:76:8d: 02:a1:aa:b9:f6:64:6c:be:8a:f3:b9:92:3e:ce:a4: fe:5a:b4:1e:4a:e9:4e:ff:c2:a1:f0:63:2d:10:49: ea:e1:c1:91:71:72:9a:c8:4a:2e:29:66:40:fe:85: 34:06:74:e0:9f:61:c9:2b:43:92:12:30:fe:8a:0b: 7b:8a:a5:64:7d:3d:45:20:f4:52:fe:fa:be:d3:d7: 8c:1e:7c:45:07:54:a6:16:8d:63:04:c2:cd:ea:e5: 31:18:83:13:e2:c0:24:f1:5c:b1:b7:07:92:b9:3c: 92:c4:29:d1:36:80:16:c3:25:81:ca:16:6b:b7:d2: a9:18:a3:9e:51:0d:47:a2:c3:e3:21:fa:7b:ed:a5: 00:a7:df:99:c5:17:b2:05:f5:6f:ab:32:f4:b4:b6: b4:48:18:3d:21:cf:20:db:98:7d:7f:1e:58:d9:06: b6:52:cf:c1:10:48:63:8b:62:00:ba:7d:45:58:b9: bc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BF:E5:07:4C:BA:E2:86:B2:23:28:46:81:D8:FE:99:00:38:2D:D1 X509v3 Authority Key Identifier: keyid:E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ae:cb:e1:08:d7:04:8a:0c:5a:e3:75:80:6d:0d:00:df:05: cf:78:82:12:70:60:2d:38:43:ae:ee:71:7d:ad:a3:4a:40:cf: e1:56:59:56:2c:29:da:08:02:74:fb:08:24:22:35:4b:36:18: 94:54:32:63:44:e8:96:f0:c4:00:55:fc:1d:63:e3:17:bc:b0: 54:11:29:d8:35:da:5f:e2:4f:06:45:93:f8:88:62:1a:bd:d4: a5:58:c2:5d:60:98:7f:5d:9d:9c:b1:3d:cb:9d:e2:7c:59:a2: 7c:16:50:90:77:ef:35:6f:dd:76:6f:cb:67:94:5d:ec:89:76: 2e:28:c0:1d:7f:bc:a9:e8:05:14:e8:e6:8e:9c:fa:9e:71:fc: 69:cd:f0:6e:8e:2d:9d:c0:c5:50:d9:f8:4a:06:7c:86:b8:92: c5:ad:a3:a0:3a:56:e7:70:fa:3e:15:5e:b9:0a:87:77:6d:9f: 12:89:e7:0f:c5:a9:84:91:44:6d:e6:df:f6:db:7e:2a:40:47: ad:1b:b2:e8:2f:85:4a:11:19:22:7e:bc:b8:b7:5e:ae:18:a3: cc:72:5e:d8:38:35:6c:c2:63:39:f6:8a:08:93:d4:fa:97:75: 25:09:11:65:da:8c:d2:38:94:85:8f:b6:b1:12:d8:5b:c3:f4: 0f:c3:22:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMk6wfWY4NU2OG8P/HDYuVMPoi00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRD Nzk2NTIzNjAeFw0yNjA0MjExNzU2MzZaFw0yNjA0MjUwMjQwMzZaMDMxMTAvBgNV BAMTKDQ4QkZFNTA3NENCQUUyODZCMjIzMjg0NjgxRDhGRTk5MDAzODJERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnACu+/6D8gbHpq/Nayy61O54 lsnquG5heZj9es++uh2kDqJfES87ezBSvAxW2KdyuvBPMkpawjGeW3WJ5aKrsrqv ELcIrxV2jQKhqrn2ZGy+ivO5kj7OpP5atB5K6U7/wqHwYy0QSerhwZFxcprISi4p ZkD+hTQGdOCfYckrQ5ISMP6KC3uKpWR9PUUg9FL++r7T14wefEUHVKYWjWMEws3q 5TEYgxPiwCTxXLG3B5K5PJLEKdE2gBbDJYHKFmu30qkYo55RDUeiw+Mh+nvtpQCn 35nFF7IF9W+rMvS0trRIGD0hzyDbmH1/HljZBrZSz8EQSGOLYgC6fUVYubxPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSL/lB0y64oayIyhGgdj+mQA4LdEwHwYDVR0j BBgwFoAU4/teM0PsY9cF/1G2RRE/dMeWUjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC9FM0ZCNUUzMzQz RUM2M0Q3MDVGRjUxQjY0NTExM0Y3NEM3OTY1MjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRDNzk2 NTIzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzAvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNG NzRDNzk2NTIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWuy+EI1wSKDFrjdYBtDQDfBc94ghJwYC04 Q67ucX2to0pAz+FWWVYsKdoIAnT7CCQiNUs2GJRUMmNE6JbwxABV/B1j4xe8sFQR Kdg12l/iTwZFk/iIYhq91KVYwl1gmH9dnZyxPcud4nxZonwWUJB37zVv3XZvy2eU XeyJdi4owB1/vKnoBRTo5o6c+p5x/GnN8G6OLZ3AxVDZ+EoGfIa4ksWto6A6Vudw +j4VXrkKh3dtnxKJ5w/FqYSRRG3m3/bbfipAR60bsugvhUoRGSJ+vLi3Xq4Yo8xy Xtg4NWzCYzn2igiT1PqXdSUJEWXajNI4lIWPtrES2FvD9A/DIm0= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:46 2026 by rpki-client