$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: jumx32eFKIDD7OT8jru4nJzJ77Bm6I6n6fYR/c+XC5U= Subject key identifier: 8C:95:F0:0C:64:CC:1A:25:7F:6E:84:E3:D5:45:94:B0:41:CD:20:68 Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 489C5D3BF06248EA559C1A2784236440DCA0EB72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 0444 Signing time: Tue 21 Apr 2026 03:00:49 +0000 Manifest this update: Tue 21 Apr 2026 02:55:49 +0000 Manifest next update: Fri 24 Apr 2026 06:18:49 +0000 Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: LlPhblyPcezHXhcFqA+CZXrxHEMGvdt9TGaJB5yD+gY=) 2: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: lHTn8z38a4raxygkZHiK5olLO1hmwWy67YSOaXSHPY8=) 3: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: Lgrhp41jptGJ34xYRLutIvNBtg+t3ul40E1PSX1jZZA=) 4: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 9IhGsQ54tY2/cR1q0Xs6zMzTt5FF9c1oVfoMV5wVdC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9c:5d:3b:f0:62:48:ea:55:9c:1a:27:84:23:64:40:dc:a0:eb:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Apr 21 02:55:49 2026 GMT Not After : Apr 24 06:18:49 2026 GMT Subject: CN=8C95F00C64CC1A257F6E84E3D54594B041CD2068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:b3:b3:a5:3d:5f:a7:33:34:be:38:72:51: f7:20:bd:bc:48:6d:57:8a:0f:2e:d8:48:a7:79:b9: 25:81:eb:06:c1:31:4e:5b:13:e3:9f:de:be:6d:04: ba:68:64:53:90:c4:1e:de:28:e6:0f:14:7d:d8:9d: 06:dd:60:1e:bc:1f:f0:cb:ad:27:bf:90:97:1c:21: b2:87:b6:73:72:06:35:09:78:85:32:c9:3d:5a:71: 19:5b:9f:82:51:86:21:e6:6b:81:9e:d9:5a:51:83: 1a:e0:56:41:17:51:02:d5:66:da:ba:43:9c:50:1f: 18:d4:6e:5a:c0:b8:9e:09:c9:67:97:2a:57:77:d8: 4c:a3:64:ea:d2:d6:78:fe:8e:c7:04:63:02:a9:37: a0:40:46:10:1f:e7:35:b6:db:b9:74:43:82:74:dc: 58:52:a5:13:57:17:e3:d0:4c:84:39:2f:c7:54:17: ee:cc:56:18:c8:eb:3f:69:c8:91:aa:6f:ea:81:33: 42:c3:c0:40:6f:c3:78:b2:99:4c:46:97:85:fe:71: d9:d4:1a:04:dc:ed:5e:cf:c1:72:55:f9:e6:d4:6f: cd:a4:f9:69:b9:0c:ed:f7:e6:fc:f9:ca:da:94:23: 5d:62:fa:41:fd:f5:0d:3f:6c:df:60:7f:3f:6c:74: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:95:F0:0C:64:CC:1A:25:7F:6E:84:E3:D5:45:94:B0:41:CD:20:68 X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:0c:ec:79:4d:ac:3c:05:52:9b:d2:5e:9f:d0:0a:66:74:a0: 91:cc:74:dd:97:cf:bd:26:3c:ae:94:0d:df:92:f2:da:0e:79: 94:a7:78:fc:6d:77:e3:43:d4:87:e9:04:d7:58:40:31:d9:a4: af:ba:f8:b6:02:45:9f:ac:08:8f:5a:79:9f:ec:39:1b:89:0f: fe:f7:e4:07:2f:3d:20:df:17:af:dd:04:17:38:49:24:81:90: c7:25:7d:14:3a:bd:46:8d:b0:f6:66:a0:9c:1c:26:0c:19:12: 73:19:3f:4c:2d:5f:13:61:41:23:11:87:e2:d7:81:67:52:be: b2:0e:80:56:00:d6:14:5c:4c:c0:71:b5:2b:01:f9:aa:17:af: 0c:2d:54:ef:5e:4c:41:85:0a:98:81:28:d2:93:b1:05:86:a1: aa:4b:c8:16:5a:ae:7d:47:98:67:62:cc:09:1d:57:74:c0:be: 92:f0:fb:b1:d4:29:5b:41:d5:6c:4a:f3:30:2a:9c:52:07:93: 3a:d4:bf:62:68:41:0b:cd:8a:97:23:fb:42:ac:13:4e:e2:52: 5e:0f:56:15:51:8f:ae:08:92:60:32:33:56:8e:4b:80:23:6d: 75:b6:0f:f7:f4:7d:0b:46:10:61:a7:38:67:c0:5b:99:d0:1e: 68:0d:25:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJxdO/BiSOpVnBonhCNkQNyg63IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNjA0MjEwMjU1NDlaFw0yNjA0MjQwNjE4NDlaMDMxMTAvBgNV BAMTKDhDOTVGMDBDNjRDQzFBMjU3RjZFODRFM0Q1NDU5NEIwNDFDRDIwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM17OzpT1fpzM0vjhyUfcgvbxI bVeKDy7YSKd5uSWB6wbBMU5bE+Of3r5tBLpoZFOQxB7eKOYPFH3YnQbdYB68H/DL rSe/kJccIbKHtnNyBjUJeIUyyT1acRlbn4JRhiHma4Ge2VpRgxrgVkEXUQLVZtq6 Q5xQHxjUblrAuJ4JyWeXKld32EyjZOrS1nj+jscEYwKpN6BARhAf5zW227l0Q4J0 3FhSpRNXF+PQTIQ5L8dUF+7MVhjI6z9pyJGqb+qBM0LDwEBvw3iymUxGl4X+cdnU GgTc7V7PwXJV+ebUb82k+Wm5DO335vz5ytqUI11i+kH99Q0/bN9gfz9sdIFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJXwDGTMGiV/boTj1UWUsEHNIGgwHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIM7HlNrDwFUpvSXp/QCmZ0oJHMdN2Xz70m PK6UDd+S8toOeZSnePxtd+ND1IfpBNdYQDHZpK+6+LYCRZ+sCI9aeZ/sORuJD/73 5AcvPSDfF6/dBBc4SSSBkMclfRQ6vUaNsPZmoJwcJgwZEnMZP0wtXxNhQSMRh+LX gWdSvrIOgFYA1hRcTMBxtSsB+aoXrwwtVO9eTEGFCpiBKNKTsQWGoapLyBZarn1H mGdizAkdV3TAvpLw+7HUKVtB1WxK8zAqnFIHkzrUv2JoQQvNipcj+0KsE07iUl4P VhVRj64IkmAyM1aOS4AjbXW2D/f0fQtGEGGnOGfAW5nQHmgNJeU= -----END CERTIFICATE-----Generated at Wed Apr 22 10:02:02 2026 by rpki-client