$ rpki-client -vvf repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft File: 3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft (raw, json) Hash identifier: 6NhWmUyPY336y5mmEFPljOEXPx700YAnLTmSFjE3qaM= Subject key identifier: 71:B2:59:EB:21:B0:18:06:E6:53:F2:23:DB:A9:4F:A6:39:89:7E:44 Authority key identifier: 31:57:B9:BE:6F:36:9A:1C:A3:87:38:FF:D6:4D:61:13:C7:5C:0E:2D Certificate issuer: /CN=3157B9BE6F369A1CA38738FFD64D6113C75C0E2D Certificate serial: 38D16D2EE93D4540E68A6D43B42FFC6B847BA58E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft Manifest number: FF Signing time: Mon 20 Apr 2026 01:52:07 +0000 Manifest this update: Mon 20 Apr 2026 01:47:07 +0000 Manifest next update: Thu 23 Apr 2026 11:15:07 +0000 Files and hashes: 1: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: W0LbcDgwtmyP20SeYwIB78u7UnepT3G+vjiQKG938P8=) 2: 3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.crl (hash: qleKQMc02QGc9CXaz+Sh2uKgCZyYUlae+Oes4hufck0=) 3: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: kfe7bioqh5Iq3Zs3yK/jDrU8ENFR3XhQIQMqoWIpf3I=) 4: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: vWKkBT4xeS3gWR4PhONDDyBeT46kLBCLfRTaWAbu5Wk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.crl rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 11:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d1:6d:2e:e9:3d:45:40:e6:8a:6d:43:b4:2f:fc:6b:84:7b:a5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3157B9BE6F369A1CA38738FFD64D6113C75C0E2D Validity Not Before: Apr 20 01:47:07 2026 GMT Not After : Apr 23 11:15:07 2026 GMT Subject: CN=71B259EB21B01806E653F223DBA94FA639897E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:7d:d2:be:03:83:d6:77:f2:80:15:c8:ad: 22:87:40:62:39:44:43:ac:e2:45:e7:23:57:91:ab: 15:fc:e7:c9:37:68:55:ad:8a:bf:32:14:dd:b0:22: 64:31:1b:b5:a9:47:a5:ab:c3:8b:6a:21:b9:d0:44: 33:0a:05:b1:af:84:59:b3:c1:f6:d2:99:64:77:15: 23:76:77:fb:a4:f8:95:38:de:2b:9b:46:f3:5d:f1: 3e:c2:50:0a:88:69:d5:1a:bc:c5:99:fb:9a:a9:6f: ed:a2:7c:a3:8e:47:d6:b6:46:18:3b:ec:57:ac:4a: 2d:bf:93:29:2d:03:72:52:09:be:b5:54:66:7f:ae: ea:f8:6a:df:e3:06:6d:ce:df:0b:1e:fd:41:36:6a: 07:d1:a0:fa:92:42:83:18:e0:1e:ac:35:c4:49:f0: 2d:19:f2:63:25:1f:1c:07:42:bb:67:66:6c:a1:9a: c1:b9:7c:c8:43:68:80:a6:7e:ff:20:27:70:21:f5: ec:b0:8c:79:e1:66:9b:0a:cb:db:64:a3:d9:6b:40: 65:1a:f4:f8:e3:21:6c:c7:66:73:e1:8b:71:91:79: 1d:1e:76:21:48:47:63:90:91:2e:85:8f:ef:6f:1e: dd:c2:47:8d:51:e9:11:5f:87:87:95:9f:aa:9a:43: 1e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B2:59:EB:21:B0:18:06:E6:53:F2:23:DB:A9:4F:A6:39:89:7E:44 X509v3 Authority Key Identifier: keyid:31:57:B9:BE:6F:36:9A:1C:A3:87:38:FF:D6:4D:61:13:C7:5C:0E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:20:92:96:1b:7f:10:7d:ca:81:0d:f2:b0:54:a0:1a:a9:6e: e6:6d:c5:5a:fd:27:de:ab:5c:52:67:34:b2:55:4c:b5:75:3b: 96:f5:17:c5:fb:83:ae:76:25:e2:f7:d6:95:a5:cc:29:ce:dd: 5e:fd:1f:62:7f:6e:8c:9f:12:5b:2a:ae:a3:99:14:25:b7:59: 37:bc:88:dc:a2:b2:1e:c5:8e:58:04:01:51:27:5f:c5:e9:5a: 45:c1:8f:a5:09:ab:14:24:2f:a1:88:98:d3:fa:4a:85:91:c0: fc:88:55:a5:a5:7f:7f:4a:11:22:16:40:45:fc:e7:4e:ce:6c: 1c:4a:d7:7b:12:3a:e6:21:da:85:40:4b:b9:cf:de:3a:4b:6a: de:74:88:05:a8:e8:7d:3f:ad:98:fb:7d:2b:76:ec:21:3b:f6: c4:9b:de:a9:ca:d5:9a:ce:b1:f1:d1:66:f4:30:02:52:9f:af: 1b:a6:36:88:3f:03:89:7c:26:e4:17:f1:3e:ec:0e:bf:d7:e0: 9c:5d:57:76:10:41:3b:88:50:1f:65:82:a5:57:29:83:8c:df: 62:87:ff:e0:6c:9d:9d:46:08:98:3e:3e:27:ab:09:a3:01:78: 0f:20:e3:9a:86:fe:54:fc:ba:06:46:9f:87:21:c9:41:48:58: 49:44:f0:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUONFtLuk9RUDmim1DtC/8a4R7pY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1N0I5QkU2RjM2OUExQ0EzODczOEZGRDY0RDYxMTND NzVDMEUyRDAeFw0yNjA0MjAwMTQ3MDdaFw0yNjA0MjMxMTE1MDdaMDMxMTAvBgNV BAMTKDcxQjI1OUVCMjFCMDE4MDZFNjUzRjIyM0RCQTk0RkE2Mzk4OTdFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8AX3SvgOD1nfygBXIrSKHQGI5 REOs4kXnI1eRqxX858k3aFWtir8yFN2wImQxG7WpR6Wrw4tqIbnQRDMKBbGvhFmz wfbSmWR3FSN2d/uk+JU43iubRvNd8T7CUAqIadUavMWZ+5qpb+2ifKOOR9a2Rhg7 7FesSi2/kyktA3JSCb61VGZ/rur4at/jBm3O3wse/UE2agfRoPqSQoMY4B6sNcRJ 8C0Z8mMlHxwHQrtnZmyhmsG5fMhDaICmfv8gJ3Ah9eywjHnhZpsKy9tko9lrQGUa 9PjjIWzHZnPhi3GReR0ediFIR2OQkS6Fj+9vHt3CR41R6RFfh4eVn6qaQx65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcbJZ6yGwGAbmU/Ij26lPpjmJfkQwHwYDVR0j BBgwFoAUMVe5vm82mhyjhzj/1k1hE8dcDi0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MGZiNzhhOS1jZDY4LTQ0ZmQtODVhYS02YzZiMDhjYjIzNDYvMC8zMTU3QjlCRTZG MzY5QTFDQTM4NzM4RkZENjRENjExM0M3NUMwRTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzE1N0I5QkU2RjM2OUExQ0EzODczOEZGRDY0RDYxMTNDNzVD MEUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvMzE1N0I5QkU2RjM2OUExQ0EzODczOEZGRDY0RDYx MTNDNzVDMEUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM8gkpYbfxB9yoEN8rBUoBqpbuZtxVr9J96r XFJnNLJVTLV1O5b1F8X7g652JeL31pWlzCnO3V79H2J/boyfElsqrqOZFCW3WTe8 iNyish7FjlgEAVEnX8XpWkXBj6UJqxQkL6GImNP6SoWRwPyIVaWlf39KESIWQEX8 507ObBxK13sSOuYh2oVAS7nP3jpLat50iAWo6H0/rZj7fSt27CE79sSb3qnK1ZrO sfHRZvQwAlKfrxumNog/A4l8JuQX8T7sDr/X4JxdV3YQQTuIUB9lgqVXKYOM32KH /+BsnZ1GCJg+PierCaMBeA8g45qG/lT8ugZGn4chyUFIWElE8Lw= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:53 2026 by rpki-client