$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft File: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json) Hash identifier: ngzTUx+4b+T2iXD6Jk+M4Y3LSyxqp7bEFZ3xZH+bo0w= Subject key identifier: 96:92:F7:AF:AE:6E:FF:C7:DE:5F:42:3F:5F:38:87:05:25:1A:A9:FD Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Certificate serial: 14D8D2BE9150BA26847B996DE04139F8C51AC7B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft Manifest number: 0153 Signing time: Tue 21 Apr 2026 09:11:02 +0000 Manifest this update: Tue 21 Apr 2026 09:06:02 +0000 Manifest next update: Fri 24 Apr 2026 14:44:02 +0000 Files and hashes: 1: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: Aw+O2KCIyfoKXC7/ONn5aUKsjohnxDw08kzCi3KGGUw=) 2: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: nSJVoG4D6/bGoLQwSAn+ZSP/PaLdUBaDt+5AYEiWLy8=) 3: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: +5XEFa5Q5a8ev++uImNUVz8f1Hioijw3UOVtIFPuX9A=) 4: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: jwgg8IRJIDQmnbDrJO7DlfsBE1An9lAR0nLLubI5qII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d8:d2:be:91:50:ba:26:84:7b:99:6d:e0:41:39:f8:c5:1a:c7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Validity Not Before: Apr 21 09:06:02 2026 GMT Not After : Apr 24 14:44:02 2026 GMT Subject: CN=9692F7AFAE6EFFC7DE5F423F5F388705251AA9FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ef:4b:92:08:31:e7:eb:3a:ae:61:1a:e4:11: 70:fa:74:14:f5:ef:3c:99:c5:82:d0:82:0c:ec:cb: f6:4f:e0:0a:93:fc:14:27:e2:e5:62:60:32:99:08: 3e:76:2c:00:06:33:7c:98:6e:2d:2f:c1:8a:39:3e: 74:f2:41:4b:a6:9a:b6:5b:7c:35:80:7b:b7:68:a1: 87:d4:53:f8:e7:7c:c6:a2:95:37:7d:23:a7:85:a2: 53:ed:5a:4f:2d:9b:60:ce:58:77:46:e9:76:dd:cb: a7:18:4d:24:b2:a8:f0:ce:29:f5:c9:d3:b3:43:ff: 7c:44:b6:34:8c:24:97:97:08:ce:df:8d:9c:bc:b1: 66:f4:28:6a:d3:26:46:ff:33:c8:ff:bb:61:af:77: 1f:2c:4e:5a:a3:9f:a5:17:c2:25:e2:d4:72:72:56: 9b:b8:7b:2f:95:b5:aa:f6:98:d6:b6:04:ae:06:6c: 1d:48:63:06:9a:b6:a5:cc:b2:11:97:5e:62:d9:b6: 4f:cd:44:68:29:af:e0:b3:a9:82:af:20:b4:d1:5e: c3:99:86:e8:a1:5c:04:58:b8:cf:43:c0:e7:5d:5e: d9:39:d4:3a:74:bd:4f:c8:4f:e7:04:da:29:56:1f: ba:f8:88:d9:4a:44:b6:0d:1b:10:d7:55:af:f6:be: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:92:F7:AF:AE:6E:FF:C7:DE:5F:42:3F:5F:38:87:05:25:1A:A9:FD X509v3 Authority Key Identifier: keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:83:c7:88:4e:47:3e:35:a6:d2:6b:05:4c:2b:67:f2:d9:9b: 56:78:6c:dc:70:4b:5e:a4:27:73:d4:03:86:08:1c:e0:c9:f9: f7:6d:70:4b:c5:3d:5f:49:d3:0d:29:bf:3d:83:13:ad:ce:7b: 89:db:6b:df:7e:dc:b2:3d:98:3f:f1:86:8c:d4:d1:bc:3b:5e: df:d7:43:ef:45:bb:5a:17:55:6f:5b:6c:8c:04:9c:db:6c:ea: 51:19:51:aa:34:5b:e1:2d:d3:57:29:82:14:47:fe:32:0c:a3: 83:fc:7c:8f:4f:e0:94:2f:b0:76:d3:5c:c9:4a:d4:21:0a:7d: 78:24:8c:e7:31:a9:9e:ac:3d:a9:fc:0c:72:04:a4:57:ea:f1: ac:5c:83:a8:39:55:8e:31:be:13:c4:fa:0f:52:ab:6f:ec:75: 04:5b:4e:15:b8:e4:e0:64:b5:d2:7a:63:fd:fb:e0:98:88:54: 55:ee:cc:9e:88:a9:5d:e8:87:1e:92:0d:ca:2d:58:f4:8d:27: f2:a6:f0:2e:6b:8a:59:93:c5:69:52:dd:b0:93:87:be:d6:14: ee:ba:e6:9e:df:74:b3:84:5b:1e:3f:9c:1d:40:27:77:66:f4: 72:a7:9c:e3:1a:09:f5:2f:af:30:94:33:61:79:31:98:58:ac: c3:b8:58:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFNjSvpFQuiaEe5lt4EE5+MUax7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF MzREMjlBQjAeFw0yNjA0MjEwOTA2MDJaFw0yNjA0MjQxNDQ0MDJaMDMxMTAvBgNV BAMTKDk2OTJGN0FGQUU2RUZGQzdERTVGNDIzRjVGMzg4NzA1MjUxQUE5RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF70uSCDHn6zquYRrkEXD6dBT1 7zyZxYLQggzsy/ZP4AqT/BQn4uViYDKZCD52LAAGM3yYbi0vwYo5PnTyQUummrZb fDWAe7dooYfUU/jnfMailTd9I6eFolPtWk8tm2DOWHdG6Xbdy6cYTSSyqPDOKfXJ 07ND/3xEtjSMJJeXCM7fjZy8sWb0KGrTJkb/M8j/u2Gvdx8sTlqjn6UXwiXi1HJy Vpu4ey+Vtar2mNa2BK4GbB1IYwaatqXMshGXXmLZtk/NRGgpr+CzqYKvILTRXsOZ huihXARYuM9DwOddXtk51Dp0vU/IT+cE2ilWH7r4iNlKRLYNGxDXVa/2vtOjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlpL3r65u/8feX0I/XziHBSUaqf0wHwYDVR0j BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2 MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNE NzBFMzREMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2Dx4hORz41ptJrBUwrZ/LZm1Z4bNxwS16k J3PUA4YIHODJ+fdtcEvFPV9J0w0pvz2DE63Oe4nba99+3LI9mD/xhozU0bw7Xt/X Q+9Fu1oXVW9bbIwEnNts6lEZUao0W+Et01cpghRH/jIMo4P8fI9P4JQvsHbTXMlK 1CEKfXgkjOcxqZ6sPan8DHIEpFfq8axcg6g5VY4xvhPE+g9Sq2/sdQRbThW45OBk tdJ6Y/374JiIVFXuzJ6IqV3ohx6SDcotWPSNJ/Km8C5rilmTxWlS3bCTh77WFO66 5p7fdLOEWx4/nB1AJ3dm9HKnnOMaCfUvrzCUM2F5MZhYrMO4WGs= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:45 2026 by rpki-client