$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json) Hash identifier: iZG9G6T4sHrnW/XvhPrpQFvy94lAbZIwg3qjfvi8n50= Subject key identifier: 18:0E:20:E9:7E:38:A1:53:63:A8:AE:01:F2:0C:DD:CF:15:5D:56:81 Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 52C7540B21DF58C104A68E70EBC3A6AE04AF998C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft Manifest number: 0572 Signing time: Sat 18 Apr 2026 10:22:32 +0000 Manifest this update: Sat 18 Apr 2026 10:17:32 +0000 Manifest next update: Tue 21 Apr 2026 13:44:32 +0000 Files and hashes: 1: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=) 2: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=) 3: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=) 4: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=) 5: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=) 6: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=) 7: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=) 8: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=) 9: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=) 10: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=) 11: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=) 12: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: QO2LMtod5Z7PnYkja7pcxvQSJNKwsoypxCpsvdqb0qM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 13:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c7:54:0b:21:df:58:c1:04:a6:8e:70:eb:c3:a6:ae:04:af:99:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Apr 18 10:17:32 2026 GMT Not After : Apr 21 13:44:32 2026 GMT Subject: CN=180E20E97E38A15363A8AE01F20CDDCF155D5681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:09:a1:ae:34:8c:14:24:44:7e:f8:34:e5:e5: db:6c:5b:46:ad:97:6b:04:d5:f9:62:b5:6a:f2:7f: e4:36:aa:90:cc:63:8b:c1:fe:af:98:b5:18:87:87: bf:95:9f:bc:8d:ea:a4:93:3a:7f:cd:f1:70:7a:87: e1:e0:72:43:d4:d9:ef:89:b2:8c:9a:9b:f0:4b:d2: bd:5d:5f:65:e8:c9:40:34:b7:1c:ca:25:81:05:e8: 3c:d9:eb:41:e9:51:10:06:36:f7:34:71:c5:e0:a0: fd:78:f4:fe:f0:ae:7c:da:36:cb:b8:b7:a4:ba:f6: 7a:24:0d:e0:05:e5:b0:23:57:02:5a:32:c3:a2:ee: f3:d3:f0:5a:48:60:3d:f9:2f:ff:9b:51:40:c5:f0: 69:6d:70:ec:16:52:2a:f7:39:32:ee:17:19:26:ef: 17:8c:ba:80:6c:00:ca:98:9f:92:43:e3:4b:bd:12: f7:81:34:d9:e7:bf:80:8b:c1:73:9f:94:81:8c:ef: 98:f0:11:29:32:26:90:40:ab:c5:22:c2:a8:cb:d8: e8:ab:4c:da:cc:6a:bf:11:6f:0d:8a:e3:1a:fa:30: 61:9d:5b:ee:57:a0:3f:7b:a3:77:c2:a6:71:6d:c8: 32:f6:e4:03:e4:39:de:f3:bb:f0:fa:60:a4:63:33: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0E:20:E9:7E:38:A1:53:63:A8:AE:01:F2:0C:DD:CF:15:5D:56:81 X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5e:64:f2:62:c4:0a:38:65:7a:59:0f:32:c3:22:67:49:56: 8d:65:26:eb:65:85:23:59:20:1b:1b:bc:7c:f8:92:9a:fc:11: 95:00:65:bd:a3:2b:14:0c:28:50:30:84:6d:fb:9f:27:11:28: 42:c0:04:11:d2:d1:cf:4c:2a:63:4d:c4:31:94:73:e6:68:27: 0e:f8:c6:da:62:f4:60:0e:07:be:ae:09:e8:11:1f:74:60:63: 7d:ab:cc:b7:66:f2:ce:ab:60:f4:c3:c2:55:de:29:f0:89:06: 14:ac:6d:6b:82:49:76:0c:5f:a9:ab:3e:b7:1d:31:b8:c0:8c: 5e:fb:19:f3:3e:e3:9d:86:e3:e8:cb:bc:59:06:29:99:06:f5: a0:76:d7:6d:33:b9:3f:40:4c:11:94:aa:d6:b8:29:be:8a:78: f0:76:09:90:0a:50:73:fa:74:f3:09:99:cc:86:91:e9:f2:cb: 15:ef:82:f4:58:1e:89:13:52:d9:7a:e6:f5:04:1d:13:59:11: 0e:75:71:77:b5:6a:c6:f6:e0:f7:f5:f7:6b:eb:3b:3e:98:58: 0e:4a:11:b8:8e:c3:0a:95:eb:8d:cc:77:37:80:65:ba:9e:ec: 22:96:82:55:e4:fd:03:37:24:64:26:f5:5b:d8:9f:5e:0e:fc: ae:5c:f1:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUsdUCyHfWMEEpo5w68OmrgSvmYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNjA0MTgxMDE3MzJaFw0yNjA0MjExMzQ0MzJaMDMxMTAvBgNV BAMTKDE4MEUyMEU5N0UzOEExNTM2M0E4QUUwMUYyMENERENGMTU1RDU2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCaGuNIwUJER++DTl5dtsW0at l2sE1flitWryf+Q2qpDMY4vB/q+YtRiHh7+Vn7yN6qSTOn/N8XB6h+HgckPU2e+J soyam/BL0r1dX2XoyUA0txzKJYEF6DzZ60HpURAGNvc0ccXgoP149P7wrnzaNsu4 t6S69nokDeAF5bAjVwJaMsOi7vPT8FpIYD35L/+bUUDF8GltcOwWUir3OTLuFxkm 7xeMuoBsAMqYn5JD40u9EveBNNnnv4CLwXOflIGM75jwESkyJpBAq8UiwqjL2Oir TNrMar8Rbw2K4xr6MGGdW+5XoD97o3fCpnFtyDL25APkOd7zu/D6YKRjM5RfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGA4g6X44oVNjqK4B8gzdzxVdVoEwHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5 MDAwMUZFRkVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxeZPJixAo4ZXpZDzLDImdJVo1lJutlhSNZ IBsbvHz4kpr8EZUAZb2jKxQMKFAwhG37nycRKELABBHS0c9MKmNNxDGUc+ZoJw74 xtpi9GAOB76uCegRH3RgY32rzLdm8s6rYPTDwlXeKfCJBhSsbWuCSXYMX6mrPrcd MbjAjF77GfM+452G4+jLvFkGKZkG9aB2120zuT9ATBGUqta4Kb6KePB2CZAKUHP6 dPMJmcyGkenyyxXvgvRYHokTUtl65vUEHRNZEQ51cXe1asb24Pf192vrOz6YWA5K EbiOwwqV643MdzeAZbqe7CKWglXk/QM3JGQm9VvYn14O/K5c8SU= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:53 2026 by rpki-client