$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json) Hash identifier: opb1luZsF4HAlWekohlotk5iyesHpvpQlEEX1g+n1YA= Subject key identifier: CD:1F:80:E6:F1:D0:B9:09:AA:53:24:83:82:0E:74:B9:74:C0:F3:1E Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Certificate serial: 3CDA5B7EB0DFCC31E83BFED951FD4F642DF6AB0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft Manifest number: 0564 Signing time: Fri 17 Apr 2026 11:41:01 +0000 Manifest this update: Fri 17 Apr 2026 11:36:01 +0000 Manifest next update: Mon 20 Apr 2026 14:14:01 +0000 Files and hashes: 1: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 3L/LuNQCHJ1QppGAGjYDYBbeNVsrf3Si2Cax6eMLnCM=) 2: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: 9V43hWJhD106Qur+e/iXVkOrJHa3wYOoVgiuMpwP8PI=) 3: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: FiQUn7aPKQPU2lIm5OkJ4ahWfmlpa5DPUvZGHswsG/Q=) 4: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: V0+izgb3kW/OtzIxZT6l6U4KDpKCH9ZjxQM8fPyZ410=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:da:5b:7e:b0:df:cc:31:e8:3b:fe:d9:51:fd:4f:64:2d:f6:ab:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Validity Not Before: Apr 17 11:36:01 2026 GMT Not After : Apr 20 14:14:01 2026 GMT Subject: CN=CD1F80E6F1D0B909AA532483820E74B974C0F31E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:f7:31:21:ae:b9:8b:1c:e0:53:59:5e:f8: 71:9f:6b:1c:25:19:79:c1:5e:e9:0e:b0:fb:55:59: 9e:44:68:3f:6e:3d:53:0b:c1:87:7e:19:eb:8e:b4: 5d:15:a8:d8:8f:be:7c:e9:3a:c2:f5:ee:60:96:51: 6d:cf:fe:cb:8c:fb:11:da:3a:6d:ac:bd:5d:44:5d: 50:4c:0b:39:45:d8:fc:2a:d1:6d:9e:4c:3e:5f:7a: fb:d0:44:9c:08:66:91:93:25:85:bd:c2:ce:b9:0d: 06:74:40:3d:a4:e7:02:0c:9f:49:ec:ea:1d:6f:47: ed:57:49:7f:4d:81:1e:2d:08:3d:64:9a:59:14:35: f6:ad:83:92:ae:31:d4:a3:87:6d:72:a0:33:48:ea: 91:ad:7e:87:8b:3c:04:1e:45:d6:49:f5:ae:45:8f: 6d:46:09:c0:a9:99:92:98:91:b9:b7:fa:1c:5b:bb: 44:44:66:37:f2:53:8d:5d:16:33:71:93:e3:11:76: 4b:68:7b:ac:cc:91:fc:05:fc:0e:98:f2:1d:62:92: 5e:eb:97:07:ac:7b:46:c9:98:1d:a0:32:f4:df:8e: f1:58:29:47:e8:7b:d6:53:a8:da:6e:59:72:65:93: 7d:00:80:28:c2:d2:1f:f6:79:d0:16:a8:b3:50:ce: 9f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1F:80:E6:F1:D0:B9:09:AA:53:24:83:82:0E:74:B9:74:C0:F3:1E X509v3 Authority Key Identifier: keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fd:c4:09:33:e8:36:0f:3d:2a:9c:0f:5c:5d:2b:1f:d2:b2: dc:7e:8e:c1:c2:96:cd:06:78:66:97:fe:c6:2a:b2:9d:85:32: f4:f6:0c:bf:5e:fe:dc:69:94:75:13:ce:3f:d1:b9:62:fb:e7: 79:79:c2:69:e4:6e:c2:08:be:3c:d4:9c:16:e1:31:2b:27:c0: e2:45:9d:0e:57:ef:cd:2c:b9:53:82:2b:8e:82:c5:f1:23:a6: 01:e0:12:96:f7:98:f2:db:e6:6f:1a:0f:ff:29:da:ea:e3:90: 96:d8:9b:f4:12:2d:42:42:68:a4:c6:c5:c0:52:82:a4:40:4f: bc:f7:ef:49:82:b1:e8:e5:4e:a7:a0:18:54:48:00:fc:c8:5e: 3c:63:75:bd:f9:a9:0e:51:3e:0e:72:b7:ca:1d:82:fc:31:ea: 68:9d:8e:f3:d2:a2:3c:86:04:75:0c:b5:9b:4e:18:a1:24:31: 68:03:af:88:76:85:36:ed:c1:03:0e:7d:38:ed:49:c1:f1:36: 70:7e:06:6f:97:5b:83:03:39:8a:d9:ad:7d:c1:f8:0c:05:92: b7:fc:d0:73:33:a0:ac:3e:98:3b:18:f9:1f:b6:c9:b8:1c:19: f0:70:c4:77:4f:bc:95:82:b0:d0:93:d6:91:58:c6:40:e4:ee: 95:b0:6b:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNpbfrDfzDHoO/7ZUf1PZC32qw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5 QzhFRTgwMDAeFw0yNjA0MTcxMTM2MDFaFw0yNjA0MjAxNDE0MDFaMDMxMTAvBgNV BAMTKENEMUY4MEU2RjFEMEI5MDlBQTUzMjQ4MzgyMEU3NEI5NzRDMEYzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEafcxIa65ixzgU1le+HGfaxwl GXnBXukOsPtVWZ5EaD9uPVMLwYd+GeuOtF0VqNiPvnzpOsL17mCWUW3P/suM+xHa Om2svV1EXVBMCzlF2Pwq0W2eTD5fevvQRJwIZpGTJYW9ws65DQZ0QD2k5wIMn0ns 6h1vR+1XSX9NgR4tCD1kmlkUNfatg5KuMdSjh21yoDNI6pGtfoeLPAQeRdZJ9a5F j21GCcCpmZKYkbm3+hxbu0REZjfyU41dFjNxk+MRdktoe6zMkfwF/A6Y8h1ikl7r lwese0bJmB2gMvTfjvFYKUfoe9ZTqNpuWXJlk30AgCjC0h/2edAWqLNQzp9dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzR+A5vHQuQmqUySDgg50uXTA8x4wHwYDVR0j BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3 NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2 NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJT9xAkz6DYPPSqcD1xdKx/Sstx+jsHCls0G eGaX/sYqsp2FMvT2DL9e/txplHUTzj/RuWL753l5wmnkbsIIvjzUnBbhMSsnwOJF nQ5X780suVOCK46CxfEjpgHgEpb3mPLb5m8aD/8p2urjkJbYm/QSLUJCaKTGxcBS gqRAT7z370mCsejlTqegGFRIAPzIXjxjdb35qQ5RPg5yt8odgvwx6midjvPSojyG BHUMtZtOGKEkMWgDr4h2hTbtwQMOfTjtScHxNnB+Bm+XW4MDOYrZrX3B+AwFkrf8 0HMzoKw+mDsY+R+2ybgcGfBwxHdPvJWCsNCT1pFYxkDk7pWwa0k= -----END CERTIFICATE-----Generated at Fri Apr 17 20:41:53 2026 by rpki-client