$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft File: E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json) Hash identifier: kciH/jB7FqPQPg7k5lR5mNJUFbfHRn2O+eoIa17LSYk= Subject key identifier: 3C:27:9C:29:E4:FF:85:80:52:F5:66:8F:58:1D:50:4C:A6:ED:76:CE Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 Certificate issuer: /CN=E3928623409C1C10E292F838F8308E11636E6C03 Certificate serial: 575CCAC51881283AAFDA88025C8CEC200BF2C84A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft Manifest number: 011E Signing time: Mon 20 Apr 2026 18:52:31 +0000 Manifest this update: Mon 20 Apr 2026 18:47:31 +0000 Manifest next update: Thu 23 Apr 2026 23:08:31 +0000 Files and hashes: 1: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: 3snbSxFHDgZcAdWg1ctk54wh3lSvBfHsf3SIkh0cIEw=) 2: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: yKi1/CgLy/vSnVRFpQJ8qbRC3Gfhckznl3idTXbJhUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5c:ca:c5:18:81:28:3a:af:da:88:02:5c:8c:ec:20:0b:f2:c8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03 Validity Not Before: Apr 20 18:47:31 2026 GMT Not After : Apr 23 23:08:31 2026 GMT Subject: CN=3C279C29E4FF858052F5668F581D504CA6ED76CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f5:f2:ad:35:9a:82:73:72:d5:48:6b:65:dc: 2e:1b:9e:65:cc:8f:e8:d7:0f:21:4b:1a:dc:01:92: 3d:03:68:a1:64:6f:de:d8:34:a9:39:2b:c0:1c:06: 95:66:2b:a6:30:e5:e7:76:3d:8a:4e:2a:e5:11:52: 85:5a:23:31:1f:2f:f4:aa:db:06:27:8b:73:79:3d: 9b:cf:53:fc:89:61:c2:76:4e:53:0f:fb:36:4d:83: e4:63:a0:34:cd:8e:da:b2:9d:0c:83:45:3f:71:a5: cd:2e:3f:9f:8e:b2:72:41:58:23:bd:55:e8:cb:01: d3:a3:78:00:cb:25:43:7a:50:4c:e3:2c:26:2a:9d: 97:28:06:ac:a5:1a:9c:2e:9f:62:2f:10:e2:39:e6: ec:26:ef:5e:86:8a:5f:9c:16:4d:d9:87:3d:6f:29: 85:89:29:47:66:6c:61:73:86:23:e2:cb:d2:b4:53: 24:7a:e1:0b:82:b0:a3:6a:86:c9:30:ca:c6:f8:db: de:1e:4c:14:83:0a:08:55:c2:c4:c1:d6:c6:fd:ef: 6a:02:08:63:f8:e0:0d:79:6c:dc:fd:ca:7d:e8:58: a6:6e:c4:e8:b2:0c:d6:ef:56:b0:7a:7f:71:24:a9: c7:83:5d:f0:9a:88:af:fc:a9:86:1d:5b:96:08:95: a4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:27:9C:29:E4:FF:85:80:52:F5:66:8F:58:1D:50:4C:A6:ED:76:CE X509v3 Authority Key Identifier: keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1a:91:ae:0b:04:d9:20:bb:4d:df:1c:dd:20:14:04:a8:ba: fc:5b:35:9a:69:83:16:6b:63:e5:6a:59:6f:23:eb:2a:ac:0b: cd:bf:08:e4:8c:94:25:26:39:b5:50:54:36:97:98:42:22:9f: 48:20:83:98:92:24:13:ff:aa:5e:aa:ac:c0:2e:25:55:3a:18: 61:36:ba:b4:a3:05:c3:dd:47:c2:d4:6f:85:53:dd:fd:d6:ba: cf:64:6a:d8:6e:91:b5:10:99:ae:52:34:9f:5b:10:99:3e:97: 2b:24:e7:16:7b:9d:96:4d:c5:e7:5d:ea:86:8d:d1:c1:1a:3c: c5:76:90:16:a4:15:7b:3c:19:47:40:06:34:aa:ed:5c:a7:f8: b7:d7:53:97:71:7c:e1:58:2c:19:d7:cd:7e:09:8a:b8:5a:a5: c9:9a:46:3b:26:72:d0:54:4d:93:88:33:9e:18:9b:82:4d:90: 5a:71:07:a8:3d:7a:e0:ac:49:dc:98:96:ff:7d:c4:0c:25:67: 4a:d5:6d:85:a8:98:d2:ca:c9:af:05:ef:04:19:0b:9f:57:95: 0e:6d:8c:6f:7b:2e:63:93:5c:0a:0a:09:b5:b4:0b:c0:e8:03: 58:05:d8:1e:b0:aa:72:21:12:11:a2:5d:a8:06:b3:63:a1:16: 14:8f:c4:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1zKxRiBKDqv2ogCXIzsIAvyyEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2 MzZFNkMwMzAeFw0yNjA0MjAxODQ3MzFaFw0yNjA0MjMyMzA4MzFaMDMxMTAvBgNV BAMTKDNDMjc5QzI5RTRGRjg1ODA1MkY1NjY4RjU4MUQ1MDRDQTZFRDc2Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9fKtNZqCc3LVSGtl3C4bnmXM j+jXDyFLGtwBkj0DaKFkb97YNKk5K8AcBpVmK6Yw5ed2PYpOKuURUoVaIzEfL/Sq 2wYni3N5PZvPU/yJYcJ2TlMP+zZNg+RjoDTNjtqynQyDRT9xpc0uP5+OsnJBWCO9 VejLAdOjeADLJUN6UEzjLCYqnZcoBqylGpwun2IvEOI55uwm716Gil+cFk3Zhz1v KYWJKUdmbGFzhiPiy9K0UyR64QuCsKNqhskwysb4294eTBSDCghVwsTB1sb972oC CGP44A15bNz9yn3oWKZuxOiyDNbvVrB6f3EkqceDXfCaiK/8qYYdW5YIlaRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPCecKeT/hYBS9WaPWB1QTKbtds4wHwYDVR0j BBgwFoAU45KGI0CcHBDikvg4+DCOEWNubAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMS9FMzkyODYyMzQw OUMxQzEwRTI5MkY4MzhGODMwOEUxMTYzNkU2QzAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2MzZF NkMwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhF MTE2MzZFNkMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYaka4LBNkgu03fHN0gFASouvxbNZppgxZr Y+VqWW8j6yqsC82/COSMlCUmObVQVDaXmEIin0ggg5iSJBP/ql6qrMAuJVU6GGE2 urSjBcPdR8LUb4VT3f3Wus9kathukbUQma5SNJ9bEJk+lysk5xZ7nZZNxedd6oaN 0cEaPMV2kBakFXs8GUdABjSq7Vyn+LfXU5dxfOFYLBnXzX4JirhapcmaRjsmctBU TZOIM54Ym4JNkFpxB6g9euCsSdyYlv99xAwlZ0rVbYWomNLKya8F7wQZC59XlQ5t jG97LmOTXAoKCbW0C8DoA1gF2B6wqnIhEhGiXagGs2OhFhSPxHE= -----END CERTIFICATE-----Generated at Wed Apr 22 10:02:28 2026 by rpki-client