$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: T4Utx70sTKR9/NrKkeY7AIaSsvpGfEL2fOVPeHSy1Xw= Subject key identifier: 6C:7A:54:30:DE:61:06:57:C7:77:5C:49:86:A8:23:5B:E7:BD:40:07 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 280E8CEADBB0FA215F2233011B8736F50D1162B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 015D Signing time: Fri 17 Apr 2026 06:32:13 +0000 Manifest this update: Fri 17 Apr 2026 06:27:13 +0000 Manifest next update: Mon 20 Apr 2026 07:51:13 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: qLocD0uoa2fP6mk3xucmCqh1FJPrsCm1b2fwPg6q6I4=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: vBd/o6+RGsJU4ZF5dz1yRiYJvku7rSkDAbo5yX1o1lY=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: 82ZZd9ZKqDtwhlONQ96AcoNzTHzQmEXlz9QIND1/UOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0e:8c:ea:db:b0:fa:21:5f:22:33:01:1b:87:36:f5:0d:11:62:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Apr 17 06:27:13 2026 GMT Not After : Apr 20 07:51:13 2026 GMT Subject: CN=6C7A5430DE610657C7775C4986A8235BE7BD4007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:eb:1d:87:a0:61:5d:82:2a:89:1b:d8:ae: 0d:3a:eb:26:1a:ac:51:32:22:4f:be:f3:2d:db:39: d4:2b:69:bf:8d:1f:2d:fb:88:76:80:07:a8:ce:b0: 7e:08:bf:7b:e7:a1:4d:f8:1b:51:40:47:86:63:a9: dd:e1:40:95:a7:5b:0d:fd:8e:32:cb:22:ae:9f:50: 0f:f4:0b:b3:2d:d9:c0:4c:fe:f9:93:71:00:26:4e: a3:4f:85:08:42:f2:f9:f3:ed:c3:45:ed:6f:19:4d: d1:49:d7:ff:95:05:54:c2:82:43:23:9d:65:6a:14: 02:28:b1:6c:b1:53:7d:52:90:f7:21:05:b0:2e:6d: 80:d1:88:af:3b:13:e9:be:40:b0:dd:a4:f5:6e:2d: f8:e5:f4:dc:ee:bf:ec:46:78:c6:67:7f:f1:89:ac: 0f:a0:26:8f:f9:c2:e8:80:23:69:5f:6d:f8:54:ae: ff:f0:55:fa:84:a2:9f:b5:e2:f6:2c:bf:52:9e:55: dc:3e:1c:39:09:25:9e:9e:50:5f:68:48:56:ca:25: 25:bb:63:68:80:0e:bc:02:f7:73:5d:f2:f3:fb:72: af:6e:66:3c:54:2d:3c:ba:38:4a:cf:85:26:40:8d: 94:2a:70:dd:dd:9c:86:19:a0:4b:7d:62:37:c2:ca: b2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7A:54:30:DE:61:06:57:C7:77:5C:49:86:A8:23:5B:E7:BD:40:07 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:02:f9:71:ef:de:d4:df:69:8c:9e:71:66:e4:d3:2f:df:ba: d3:b8:1f:a1:d1:86:c4:a7:c3:ff:39:31:83:69:a2:0d:7d:b5: e4:43:48:64:1d:14:c6:d9:9c:fe:3d:f9:e2:b8:b9:12:f2:4f: 81:7e:cd:87:b9:ac:97:72:69:67:90:bb:81:1e:f7:08:25:8d: 6c:f7:47:c9:18:60:86:b7:8f:22:d6:88:c1:5a:58:a4:79:7d: 19:4e:94:b1:d5:39:18:8c:a3:bc:a6:b7:41:f1:f2:c9:9d:68: 7d:09:1e:df:8e:27:42:65:e1:ec:6a:05:18:25:eb:f5:dc:0b: 2c:aa:18:4c:7b:ea:28:0f:7d:93:9f:14:97:b1:e7:c0:47:a4: 54:b4:f5:98:ed:54:0e:cf:c1:e1:1b:7b:d1:06:db:7f:06:69: 1f:98:47:d5:63:0b:a1:c0:f4:2a:40:19:2f:0c:23:7f:25:8f: 9a:d4:b0:1e:1c:f6:1f:6f:99:48:ba:f7:56:2a:91:fa:5c:01: a5:49:5d:78:cf:ff:e2:74:79:10:81:4b:4b:ad:f9:79:16:16: 5c:d5:c5:89:33:65:8f:14:91:b7:24:a4:2c:ee:8e:0d:32:cd: 07:5b:cd:21:c6:1d:f8:c2:4f:bf:ae:ee:49:06:68:7f:28:06: 35:ac:f0:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKA6M6tuw+iFfIjMBG4c29Q0RYrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNjA0MTcwNjI3MTNaFw0yNjA0MjAwNzUxMTNaMDMxMTAvBgNV BAMTKDZDN0E1NDMwREU2MTA2NTdDNzc3NUM0OTg2QTgyMzVCRTdCRDQwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlusdh6BhXYIqiRvYrg066yYa rFEyIk++8y3bOdQrab+NHy37iHaAB6jOsH4Iv3vnoU34G1FAR4Zjqd3hQJWnWw39 jjLLIq6fUA/0C7Mt2cBM/vmTcQAmTqNPhQhC8vnz7cNF7W8ZTdFJ1/+VBVTCgkMj nWVqFAIosWyxU31SkPchBbAubYDRiK87E+m+QLDdpPVuLfjl9Nzuv+xGeMZnf/GJ rA+gJo/5wuiAI2lfbfhUrv/wVfqEop+14vYsv1KeVdw+HDkJJZ6eUF9oSFbKJSW7 Y2iADrwC93Nd8vP7cq9uZjxULTy6OErPhSZAjZQqcN3dnIYZoEt9YjfCyrLjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbHpUMN5hBlfHd1xJhqgjW+e9QAcwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgC+XHv3tTfaYyecWbk0y/futO4H6HRhsSn w/85MYNpog19teRDSGQdFMbZnP49+eK4uRLyT4F+zYe5rJdyaWeQu4Ee9wgljWz3 R8kYYIa3jyLWiMFaWKR5fRlOlLHVORiMo7ymt0Hx8smdaH0JHt+OJ0Jl4exqBRgl 6/XcCyyqGEx76igPfZOfFJex58BHpFS09ZjtVA7PweEbe9EG238GaR+YR9VjC6HA 9CpAGS8MI38lj5rUsB4c9h9vmUi691YqkfpcAaVJXXjP/+J0eRCBS0ut+XkWFlzV xYkzZY8UkbckpCzujg0yzQdbzSHGHfjCT7+u7kkGaH8oBjWs8MY= -----END CERTIFICATE-----Generated at Fri Apr 17 08:02:26 2026 by rpki-client