$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: bXH/GxWI4tdHEee4mphZc8KdxBV1kCl//9MqUhe95Ho= Subject key identifier: C6:2A:30:83:A6:A0:CF:FE:DF:9B:9B:04:25:AA:B0:12:DB:1D:29:32 Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 460B26C03A34ADCB0C7527309B36C2916FF061D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 01FA Signing time: Mon 20 Apr 2026 22:11:48 +0000 Manifest this update: Mon 20 Apr 2026 22:06:48 +0000 Manifest next update: Fri 24 Apr 2026 08:47:48 +0000 Files and hashes: 1: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: Fqn9pPcHWwZKysUIYt5AzoYTYKUkmk/oFAlI41zCFg0=) 2: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: oV8W8MsKXL5500W1vdosURzu7alAT8Bx2j0JCmfD8uE=) 3: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: gDJkwQ9gyZKkFYwdRFTy7wrHGMBa5YbgBo4hYHB8PGU=) 4: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: In7/y6k0tKU1onXjk4QJUAhlh710hxTg1r3tOp5IDjs=) 5: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: CV24SqbvkbSixkw/z0Fm5hevRc2j9on8+yOAVNVWp6c=) 6: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: V1qL9KpXi+aM0YLlOgcpxWGtKpt9u3OXh+uh8SzOfxo=) 7: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: 89uLp70du3ndPcZNl1H5Nk2O6ZHn9JMvGjuVHTSWLsE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:0b:26:c0:3a:34:ad:cb:0c:75:27:30:9b:36:c2:91:6f:f0:61:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Apr 20 22:06:48 2026 GMT Not After : Apr 24 08:47:48 2026 GMT Subject: CN=C62A3083A6A0CFFEDF9B9B0425AAB012DB1D2932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:43:74:bb:07:9e:98:c2:75:7b:92:dd:d5:e4: 75:98:34:5f:88:3c:6d:0d:29:0b:c3:67:b6:1c:de: a2:c0:2c:f5:b2:42:5d:3a:c5:15:78:ea:f9:c6:54: a9:ef:c2:38:5a:d9:58:75:ca:35:68:54:88:d0:8b: 6d:7f:c9:9f:c4:ea:f1:3e:41:e8:03:ca:7b:e0:89: 50:7a:16:95:49:2d:06:2d:2d:00:bc:ca:d1:5b:87: 4a:4a:62:c3:8c:cf:e8:29:ab:2f:b3:a2:a2:01:57: ea:50:b1:56:93:04:e7:18:0a:66:a3:7a:e0:84:96: c6:b1:bb:4b:6b:c2:a9:6a:1b:f9:33:85:fb:ef:3c: 75:6d:47:bc:c6:a5:d0:8d:29:c6:a0:f9:e5:8f:76: 91:2a:ea:35:41:cb:b4:7d:51:ec:d5:c8:10:fc:0e: 76:b9:39:9c:2b:18:df:bd:be:fb:61:d3:8b:67:4d: af:ab:3c:24:e1:ec:6e:10:25:f0:c0:79:db:a9:3d: 61:8c:fc:05:48:cb:9c:7a:6c:a0:41:1d:17:2d:e5: 1c:d5:7c:06:a2:75:97:ec:47:f2:5b:53:33:60:e5: b4:01:d8:0e:1c:ce:ac:ae:51:aa:b4:f9:69:f2:fd: 9c:dd:20:1b:3e:48:0d:9c:6d:6c:b1:05:ef:40:b5: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2A:30:83:A6:A0:CF:FE:DF:9B:9B:04:25:AA:B0:12:DB:1D:29:32 X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:79:ee:98:31:03:4e:cb:4d:64:f3:81:98:a3:3b:18:21:c3: fc:01:4f:d8:43:da:74:fc:a0:f4:4e:1a:fb:53:46:3a:eb:ba: 39:29:ac:ef:dd:91:03:36:21:54:8f:f6:cd:16:9e:25:c9:5c: 0b:cb:69:aa:2a:a2:87:32:9f:22:39:f7:b1:ae:7c:cb:83:a9: 8d:f1:8a:c0:53:eb:f8:d2:7e:3c:bd:5a:09:27:01:f8:ea:d0: b5:f9:01:ee:b5:e1:c8:c7:50:37:c8:db:a1:38:d4:f4:1c:0a: 1e:20:58:0b:a9:cd:0b:c3:29:36:3e:f6:3b:dc:0c:97:95:6b: 78:71:a7:82:79:11:d9:46:bc:d7:c8:4d:26:10:72:cc:a7:5f: 37:34:77:b4:7c:4e:a3:6d:04:d4:21:d5:44:59:2c:d5:b1:41: 80:2f:05:7e:52:56:00:bd:04:ba:ed:bc:b8:0f:fb:ff:82:66: cb:8d:49:f1:d6:88:17:b1:77:41:9b:e6:3b:18:ea:02:c0:98: 94:0c:7f:fc:c1:ae:00:20:07:27:b4:2a:de:c6:04:7c:f9:fd: e4:f3:65:06:ce:51:f1:66:4e:90:e7:b4:8d:e1:af:1e:a5:3a: 96:e6:98:fa:56:52:83:56:e5:e8:d4:7d:ca:12:54:14:37:99: 56:7d:7d:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURgsmwDo0rcsMdScwmzbCkW/wYdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNjA0MjAyMjA2NDhaFw0yNjA0MjQwODQ3NDhaMDMxMTAvBgNV BAMTKEM2MkEzMDgzQTZBMENGRkVERjlCOUIwNDI1QUFCMDEyREIxRDI5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQ3S7B56YwnV7kt3V5HWYNF+I PG0NKQvDZ7Yc3qLALPWyQl06xRV46vnGVKnvwjha2Vh1yjVoVIjQi21/yZ/E6vE+ QegDynvgiVB6FpVJLQYtLQC8ytFbh0pKYsOMz+gpqy+zoqIBV+pQsVaTBOcYCmaj euCElsaxu0trwqlqG/kzhfvvPHVtR7zGpdCNKcag+eWPdpEq6jVBy7R9UezVyBD8 Dna5OZwrGN+9vvth04tnTa+rPCTh7G4QJfDAedupPWGM/AVIy5x6bKBBHRct5RzV fAaidZfsR/JbUzNg5bQB2A4czqyuUaq0+Wny/ZzdIBs+SA2cbWyxBe9AtaYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxiowg6agz/7fm5sEJaqwEtsdKTIwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZ57pgxA07LTWTzgZijOxghw/wBT9hD2nT8 oPROGvtTRjrrujkprO/dkQM2IVSP9s0WniXJXAvLaaoqoocynyI597GufMuDqY3x isBT6/jSfjy9WgknAfjq0LX5Ae614cjHUDfI26E41PQcCh4gWAupzQvDKTY+9jvc DJeVa3hxp4J5EdlGvNfITSYQcsynXzc0d7R8TqNtBNQh1URZLNWxQYAvBX5SVgC9 BLrtvLgP+/+CZsuNSfHWiBexd0Gb5jsY6gLAmJQMf/zBrgAgBye0Kt7GBHz5/eTz ZQbOUfFmTpDntI3hrx6lOpbmmPpWUoNW5ejUfcoSVBQ3mVZ9fc8= -----END CERTIFICATE-----Generated at Wed Apr 22 07:57:48 2026 by rpki-client