$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: jZIVJH7c4jp+Q152W1BOUvSH+Eu4bRZwjYTixTzPKfY= Subject key identifier: 27:99:DB:1F:3A:6C:42:BB:33:35:6B:2C:D3:62:4C:E4:6C:EC:61:BD Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 56F1BFF65B28A93AAA584CAB5ECD323BC0D48F2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: 011D Signing time: Sun 19 Apr 2026 21:32:43 +0000 Manifest this update: Sun 19 Apr 2026 21:27:43 +0000 Manifest next update: Thu 23 Apr 2026 08:03:43 +0000 Files and hashes: 1: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: BdwcOOdjrH9PAhXEeBoiZT7Ipc8KRJcvOk0tcGJ1ic0=) 2: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: NaC6OjHEbkMsjBRQmR8Tqmru4zPhSmsJN/hiJNkC18Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 08:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f1:bf:f6:5b:28:a9:3a:aa:58:4c:ab:5e:cd:32:3b:c0:d4:8f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Apr 19 21:27:43 2026 GMT Not After : Apr 23 08:03:43 2026 GMT Subject: CN=2799DB1F3A6C42BB33356B2CD3624CE46CEC61BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9c:44:e0:36:86:ca:4d:97:9c:c0:fa:9e:4e: 7d:da:08:23:9d:fd:e0:44:ec:0f:ec:60:56:16:cf: 83:b4:16:70:76:e2:a2:8d:9a:2e:89:24:57:56:06: 4f:69:32:4a:0e:0d:b8:07:bb:30:30:b5:0e:3f:14: 65:ef:b6:ec:f2:c6:f9:f9:4c:0c:31:65:eb:9e:37: c2:d8:10:18:25:cc:45:4d:90:d0:2f:eb:5d:9b:11: 7c:d4:ce:6f:db:99:42:24:40:d7:42:f4:3e:6d:2c: e4:00:79:a2:ab:a3:8f:a3:88:63:ec:b3:9a:4c:f7: 13:74:60:2d:83:bd:e1:60:f0:8b:fa:7d:b7:54:4f: b7:5b:0c:ad:ef:ef:5c:cb:aa:c7:b7:86:f1:b7:c5: 7e:ed:eb:26:0a:b2:a3:28:fa:6d:c0:01:30:6a:f0: ca:f0:1f:c0:78:62:3f:2a:4a:07:80:40:b6:b4:73: ae:fc:0a:0b:1d:45:f7:f3:ad:23:8e:53:28:06:4f: c9:68:0f:66:d5:bf:e8:fb:26:c2:0e:61:cc:4f:33: 3a:a2:86:a1:99:78:1f:d2:7c:bf:d9:f5:06:f3:67: 25:fb:58:bc:00:d0:cb:c4:73:02:3a:c0:97:3e:ba: 75:cb:f1:0e:43:d8:ae:79:af:a6:e6:c8:1b:dc:55: e8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:99:DB:1F:3A:6C:42:BB:33:35:6B:2C:D3:62:4C:E4:6C:EC:61:BD X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:9f:ae:cc:32:c6:c8:6d:7d:84:04:35:5a:a2:a7:79:c6:39: 3f:08:59:c8:27:21:89:76:c1:5f:f7:ba:58:ff:c1:be:a3:b8: e0:67:c5:a9:79:3b:75:85:61:76:95:e1:0b:52:67:4c:26:49: c8:04:e3:ce:b1:6c:13:66:11:f2:8e:76:07:39:08:8b:00:8c: b6:54:f5:ec:78:9f:40:0b:d6:6d:3c:bc:e5:7a:ba:f8:39:e4: 56:13:88:3b:fe:4a:b5:dd:4f:cc:03:66:f9:03:0d:ff:24:cf: 58:80:00:94:bb:02:03:01:d4:bd:9d:dc:55:75:ce:9d:15:e4: c5:14:98:26:d3:8b:cb:71:90:a2:d6:b7:8c:33:5c:dd:f3:f5: 68:aa:5a:c9:dc:ba:6f:1d:26:83:2d:20:5f:e4:37:a3:9d:cb: 2e:9b:3f:86:8d:59:db:be:3e:d5:ac:4a:60:9e:b6:ab:ad:bb: 73:32:68:99:66:4f:8d:15:fb:eb:9a:1f:b6:8e:70:3a:48:ae: 31:29:28:25:b9:30:3e:39:66:5f:1c:64:8b:2a:81:21:75:8f: bc:60:ed:1f:87:93:9b:e5:15:01:5c:43:36:2d:d6:fb:b0:b4: dc:a1:15:02:70:71:95:56:ed:b7:d3:8a:13:57:4b:ca:dc:6c: 3f:17:e5:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvG/9lsoqTqqWEyrXs0yO8DUjy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNjA0MTkyMTI3NDNaFw0yNjA0MjMwODAzNDNaMDMxMTAvBgNV BAMTKDI3OTlEQjFGM0E2QzQyQkIzMzM1NkIyQ0QzNjI0Q0U0NkNFQzYxQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWnETgNobKTZecwPqeTn3aCCOd /eBE7A/sYFYWz4O0FnB24qKNmi6JJFdWBk9pMkoODbgHuzAwtQ4/FGXvtuzyxvn5 TAwxZeueN8LYEBglzEVNkNAv612bEXzUzm/bmUIkQNdC9D5tLOQAeaKro4+jiGPs s5pM9xN0YC2DveFg8Iv6fbdUT7dbDK3v71zLqse3hvG3xX7t6yYKsqMo+m3AATBq 8MrwH8B4Yj8qSgeAQLa0c678CgsdRffzrSOOUygGT8loD2bVv+j7JsIOYcxPMzqi hqGZeB/SfL/Z9QbzZyX7WLwA0MvEcwI6wJc+unXL8Q5D2K55r6bmyBvcVejVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ5nbHzpsQrszNWss02JM5GzsYb0wHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSfrswyxshtfYQENVqip3nGOT8IWcgnIYl2 wV/3ulj/wb6juOBnxal5O3WFYXaV4QtSZ0wmScgE486xbBNmEfKOdgc5CIsAjLZU 9ex4n0AL1m08vOV6uvg55FYTiDv+SrXdT8wDZvkDDf8kz1iAAJS7AgMB1L2d3FV1 zp0V5MUUmCbTi8txkKLWt4wzXN3z9WiqWsncum8dJoMtIF/kN6Odyy6bP4aNWdu+ PtWsSmCetqutu3MyaJlmT40V++uaH7aOcDpIrjEpKCW5MD45Zl8cZIsqgSF1j7xg 7R+Hk5vlFQFcQzYt1vuwtNyhFQJwcZVW7bfTihNXS8rcbD8X5ew= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:56 2026 by rpki-client