$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: 5GASs8+NUPHzJ9KgREl/UWyGkzWcCCOMfpd5ZdPgCWE= Subject key identifier: B8:C1:A9:3F:AF:CE:7F:EA:4C:82:C6:E2:E7:69:D5:4F:C4:69:87:D0 Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 363BA82E23BEB8A3D583A4AB2646183F7E424FA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 0419 Signing time: Sun 26 Apr 2026 10:32:30 +0000 Manifest this update: Sun 26 Apr 2026 10:27:30 +0000 Manifest next update: Wed 29 Apr 2026 14:06:30 +0000 Files and hashes: 1: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ApcZEcO0CdRpriMpjZ8NMdcvm7zZPBlUASlOFKPUlhU=) 2: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: DjKtGUvhQHDYgj5TGw2bsj8ZdWiK1PlISLyrN4K6g+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 14:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3b:a8:2e:23:be:b8:a3:d5:83:a4:ab:26:46:18:3f:7e:42:4f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Apr 26 10:27:30 2026 GMT Not After : Apr 29 14:06:30 2026 GMT Subject: CN=B8C1A93FAFCE7FEA4C82C6E2E769D54FC46987D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:55:72:12:90:c0:b8:2a:1d:fb:9c:67:b3:ff: b5:d1:66:8d:91:70:7a:d4:60:17:1c:31:81:21:a3: c3:df:eb:e5:62:ad:7c:48:f8:ac:18:6e:f9:a3:fe: b9:27:44:e1:9b:13:9d:47:b5:9f:8c:bf:8f:94:88: 9c:c7:7a:c9:6e:4c:95:95:d9:e6:c5:80:b9:e3:e9: 13:25:9d:f3:5f:ed:71:03:11:44:9a:4f:05:01:21: 9e:24:12:91:33:d3:3b:c9:c7:b3:07:8d:c1:a1:67: d8:df:62:31:8b:cc:12:c8:a5:76:34:c7:28:48:4f: 02:56:c2:c1:96:3e:2e:58:f7:2e:b6:ff:96:fa:f6: 0b:5b:10:38:81:42:d2:57:e6:e3:dc:74:9f:c7:fc: a5:b1:37:28:fc:0c:1b:73:e2:ee:65:d9:96:ce:b7: b4:a2:f0:48:79:95:61:3a:b5:20:4d:aa:e0:71:24: 76:6a:4f:bd:28:e2:2e:e2:62:97:32:8f:b4:42:8e: ba:c4:1a:44:be:9a:33:50:90:ab:53:19:f8:b8:6c: a9:96:31:85:e1:7c:17:6a:0c:c4:fc:f2:26:94:49: 5d:1c:de:e5:00:01:99:09:bb:a0:6f:46:5f:c9:48: 8c:9b:d6:4a:a1:2f:ef:82:fe:ee:1c:dc:46:11:b4: 12:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C1:A9:3F:AF:CE:7F:EA:4C:82:C6:E2:E7:69:D5:4F:C4:69:87:D0 X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:60:39:1c:d5:26:48:7f:cf:6a:b9:9c:b7:2d:91:09:f1:a6: 77:86:47:f6:53:b8:d2:d4:df:d6:1f:8d:50:a7:51:58:84:a3: d5:33:60:24:d2:c2:f5:45:90:03:59:ae:d6:75:82:e3:4c:14: 6f:ed:1c:1a:0e:bd:ce:2e:8f:67:20:96:4c:84:fd:32:d9:5a: 7e:6b:f6:d1:dd:80:f8:23:12:1f:4c:a8:37:82:e9:a9:b9:4c: dd:1a:c7:f2:9e:21:66:24:ba:50:7b:43:93:c1:58:f2:08:d9: fd:85:4e:c2:b8:b5:72:20:dd:54:cd:45:df:3d:b2:36:4b:91: 2d:89:f5:2e:93:68:7c:b3:26:95:a7:ef:8f:4e:57:5d:40:cb: f3:1e:d0:3e:80:bc:18:73:49:27:e7:8a:47:01:33:cf:17:67: a0:a8:18:c9:4a:2f:39:e6:ac:74:65:2c:3a:57:d1:f4:35:43: fa:48:29:1a:84:0b:ef:da:11:c4:4f:44:d9:27:7a:77:57:72: 72:dc:cc:29:7c:bc:7b:59:9a:96:79:fa:47:6a:6d:f5:cb:20: 29:1f:9b:b8:e4:f3:66:56:ac:40:f4:ce:a5:76:47:6f:d8:5e: 18:8c:59:a7:c9:ee:98:85:9e:c3:30:5e:70:54:b9:3b:6b:3f: 7e:54:97:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjuoLiO+uKPVg6SrJkYYP35CT6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNjA0MjYxMDI3MzBaFw0yNjA0MjkxNDA2MzBaMDMxMTAvBgNV BAMTKEI4QzFBOTNGQUZDRTdGRUE0QzgyQzZFMkU3NjlENTRGQzQ2OTg3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmVXISkMC4Kh37nGez/7XRZo2R cHrUYBccMYEho8Pf6+VirXxI+KwYbvmj/rknROGbE51HtZ+Mv4+UiJzHesluTJWV 2ebFgLnj6RMlnfNf7XEDEUSaTwUBIZ4kEpEz0zvJx7MHjcGhZ9jfYjGLzBLIpXY0 xyhITwJWwsGWPi5Y9y62/5b69gtbEDiBQtJX5uPcdJ/H/KWxNyj8DBtz4u5l2ZbO t7Si8Eh5lWE6tSBNquBxJHZqT70o4i7iYpcyj7RCjrrEGkS+mjNQkKtTGfi4bKmW MYXhfBdqDMT88iaUSV0c3uUAAZkJu6BvRl/JSIyb1kqhL++C/u4c3EYRtBLrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuMGpP6/Of+pMgsbi52nVT8Rph9AwHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNgORzVJkh/z2q5nLctkQnxpneGR/ZTuNLU 39YfjVCnUViEo9UzYCTSwvVFkANZrtZ1guNMFG/tHBoOvc4uj2cglkyE/TLZWn5r 9tHdgPgjEh9MqDeC6am5TN0ax/KeIWYkulB7Q5PBWPII2f2FTsK4tXIg3VTNRd89 sjZLkS2J9S6TaHyzJpWn749OV11Ay/Me0D6AvBhzSSfnikcBM88XZ6CoGMlKLznm rHRlLDpX0fQ1Q/pIKRqEC+/aEcRPRNknendXcnLczCl8vHtZmpZ5+kdqbfXLICkf m7jk82ZWrED0zqV2R2/YXhiMWafJ7piFnsMwXnBUuTtrP35Ul7M= -----END CERTIFICATE-----Generated at Mon Apr 27 19:47:49 2026 by rpki-client