$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft File: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json) Hash identifier: X/gNPJeCBV0wSsr6FRVme/dSwRxOofyzsP6WPrLLiBo= Subject key identifier: 59:93:73:7A:A4:C9:58:BA:EB:14:6B:0F:88:B3:5C:12:EB:AA:71:5A Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 3C07868B792EEC8461225EB7E09EAE60AF1E9B88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft Manifest number: 0295 Signing time: Sat 25 Apr 2026 07:02:43 +0000 Manifest this update: Sat 25 Apr 2026 06:57:43 +0000 Manifest next update: Tue 28 Apr 2026 15:20:43 +0000 Files and hashes: 1: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: Sl7cZCGin20WxMA7Ni4uDk0XZSOKu62uNp9PSdBIzWs=) 2: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: YLdmpoGwseRdvkERTvIA0a5PWJe/uQGzq/1tFv4WuUc=) 3: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: P3vCG1eFCyYSS9LnEKWdiNtZlxHi5gwLg+zU1gklVa8=) 4: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: YGy0DWIan0m6cHj+i356tb49y0BOxHi+yJ0Q2w1l+a8=) 5: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: CxJ4hxnplLzbB6pwhFxT3HS+r/REisJiHUMYV4z0aDo=) 6: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: WokSKV1NyKPp5JmVhTT7RX9X4V0DteRntg1alBFixWo=) 7: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: UZSj1gbIEphe1mWnvI396dxPxD/E5WStBcGb1wpBcZo=) 8: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: kpYH6pkPfG3ly0aK9MFNOJx2Os8AcuGthnzkfl0MEeU=) 9: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: MfIpRbDFsLXG7r+gaPn+k51+pDkVoYxO4kfKQbaBZic=) 10: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: TwtuOdFbOmuGSiYWtbwZ1uQh0l9S7wmozR9F9oj2vO4=) 11: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: nmYMdBmJi2dLE67aggA0wkg2W+WeeYl9g1CRUjC4EIE=) 12: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: ftR/aIoDxynVS6qBsO4B8Q2lDsNYJt3pQB7ABoEc86s=) 13: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: MzI0JKvb+gG5ZW7LD7zcT6Ff/HYQKP31Hdz7lrIhDQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 15:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:07:86:8b:79:2e:ec:84:61:22:5e:b7:e0:9e:ae:60:af:1e:9b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Apr 25 06:57:43 2026 GMT Not After : Apr 28 15:20:43 2026 GMT Subject: CN=5993737AA4C958BAEB146B0F88B35C12EBAA715A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:47:57:62:80:b8:22:09:79:e6:7e:6f:58: 48:61:41:8d:3e:1c:b1:da:99:6d:33:73:68:2b:a8: 9e:3b:0f:59:65:48:bf:c5:ad:82:9e:94:71:e1:4c: 32:79:e3:cf:93:98:b5:cd:a1:37:30:f4:16:a8:44: 35:e7:ca:2b:80:da:07:bb:b5:a3:b4:4f:c9:5a:47: 19:58:f1:ff:25:e1:c3:eb:c7:62:be:d4:dc:3f:4e: a0:21:fd:e5:81:22:31:ac:14:89:ad:37:77:bc:ba: dc:be:0a:aa:d3:aa:a3:cb:39:dd:d5:22:4e:8f:c4: 93:7b:2c:24:95:53:3d:07:ce:f1:4d:fc:6b:01:73: 9f:cf:99:41:27:c5:f5:63:a1:6f:70:21:de:b9:30: f7:5b:e8:6e:f9:6c:0d:02:74:e3:31:44:f0:51:06: 5a:64:08:0a:3b:4d:01:86:73:32:e7:ac:9d:d4:a4: 4c:b7:fb:4a:e8:0b:d9:75:c3:47:ec:55:04:aa:8f: 82:6b:75:cc:cc:6f:47:0d:3f:07:a6:68:94:fa:ad: ec:12:8f:f9:99:75:6c:c3:9f:c9:4e:17:7c:56:0d: 0e:8c:d1:74:fc:56:ec:3d:e6:6a:c6:67:33:ed:5b: 69:5e:26:2b:5e:12:8e:a4:37:4e:2d:7b:c7:e8:ce: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:93:73:7A:A4:C9:58:BA:EB:14:6B:0F:88:B3:5C:12:EB:AA:71:5A X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6c:0a:42:2f:5c:63:75:a7:3c:7e:d2:15:44:f8:a6:eb:29: 7c:df:14:4f:ce:f9:65:08:24:21:48:22:5b:62:65:48:9c:d1: c3:4e:04:b7:b0:67:4b:7c:62:c7:53:79:9c:2a:e4:d1:42:db: 00:a0:00:cf:83:e2:92:2c:de:1b:98:f6:24:66:a3:14:90:32: 22:cb:2b:80:ea:2a:38:b2:72:d0:c0:fb:7c:55:48:7d:b4:b0: ca:89:25:ae:ad:5c:b6:ec:b1:5f:3b:a2:70:15:a4:f1:d0:f0: e7:eb:fa:b9:4a:27:71:c7:0f:b2:76:46:1f:9a:15:1f:34:e5: 6d:16:cf:33:24:44:89:94:89:e9:6c:bc:8e:b3:9d:76:19:ab: 4f:53:50:f1:44:bf:bb:d9:ad:c0:15:3d:7a:a4:e7:1e:0a:3e: 8b:6c:2f:ad:16:6d:38:0e:39:70:cf:4d:63:ee:b7:99:94:7b: 2a:f8:9e:33:de:3b:09:f2:31:6c:9c:04:17:cf:e2:2c:26:75: 31:5c:8b:e6:7b:18:7a:4a:de:ab:db:29:ee:10:53:03:f0:1a: 9e:7d:a8:dd:1b:1d:e5:42:50:cb:ee:bc:d1:19:91:6f:53:f9: a5:3c:9f:cb:f2:be:98:b0:51:8e:9d:73:b7:65:2e:0a:61:14: 6a:bf:5e:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAeGi3ku7IRhIl634J6uYK8em4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNjA0MjUwNjU3NDNaFw0yNjA0MjgxNTIwNDNaMDMxMTAvBgNV BAMTKDU5OTM3MzdBQTRDOTU4QkFFQjE0NkIwRjg4QjM1QzEyRUJBQTcxNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KEdXYoC4Igl55n5vWEhhQY0+ HLHamW0zc2grqJ47D1llSL/FrYKelHHhTDJ548+TmLXNoTcw9BaoRDXnyiuA2ge7 taO0T8laRxlY8f8l4cPrx2K+1Nw/TqAh/eWBIjGsFImtN3e8uty+CqrTqqPLOd3V Ik6PxJN7LCSVUz0HzvFN/GsBc5/PmUEnxfVjoW9wId65MPdb6G75bA0CdOMxRPBR BlpkCAo7TQGGczLnrJ3UpEy3+0roC9l1w0fsVQSqj4JrdczMb0cNPwemaJT6rewS j/mZdWzDn8lOF3xWDQ6M0XT8Vuw95mrGZzPtW2leJiteEo6kN04te8fozoQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZNzeqTJWLrrFGsPiLNcEuuqcVowHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTRE MzU3QUM2NkE4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpsCkIvXGN1pzx+0hVE+KbrKXzfFE/O+WUI JCFIIltiZUic0cNOBLewZ0t8YsdTeZwq5NFC2wCgAM+D4pIs3huY9iRmoxSQMiLL K4DqKjiyctDA+3xVSH20sMqJJa6tXLbssV87onAVpPHQ8Ofr+rlKJ3HHD7J2Rh+a FR805W0WzzMkRImUielsvI6znXYZq09TUPFEv7vZrcAVPXqk5x4KPotsL60WbTgO OXDPTWPut5mUeyr4njPeOwnyMWycBBfP4iwmdTFci+Z7GHpK3qvbKe4QUwPwGp59 qN0bHeVCUMvuvNEZkW9T+aU8n8vyvpiwUY6dc7dlLgphFGq/XmA= -----END CERTIFICATE-----Generated at Sun Apr 26 23:15:10 2026 by rpki-client