$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: L2U+6sA+GdqLbZouxFpErJhnLatE56Ou8/6BpGoLQPI= Subject key identifier: 44:31:BE:B3:1E:E4:43:EC:27:95:70:D4:CE:EF:E5:2E:80:2A:73:39 Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 5F34BB8B38575B5E9E2DC0F5CB13FA3D85057862 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 0204 Signing time: Fri 17 Apr 2026 08:32:12 +0000 Manifest this update: Fri 17 Apr 2026 08:27:12 +0000 Manifest next update: Mon 20 Apr 2026 20:01:12 +0000 Files and hashes: 1: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: bqH62iRxwG1isAeQpkTQx2K5FdeX+ctuDBbw98sB26o=) 2: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: uH7Yykg71jP1VkPGgxNuX7EouajeURB+bw3/u+w3tXE=) 3: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: kIEXLbdHyNVR/2+p4R7baZ0vAlG7dZTeEpJcDfIBOIk=) 4: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: nybBbZermRnfCAlPFTR2ETmDBv6TPrDdj8bK6gzLTv0=) 5: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: GgMpV6awuEKacj2HVVRDN4z4Htq937tLhpXSx5OCQQw=) 6: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: T9XYyvCurgMmepMYEsZNDRpjFjN9NnYsijhEUminICw=) 7: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: NYY0i2hycJDZMAWkhMI1MwXrSLzfIpid9oGLQQbdYaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:34:bb:8b:38:57:5b:5e:9e:2d:c0:f5:cb:13:fa:3d:85:05:78:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Apr 17 08:27:12 2026 GMT Not After : Apr 20 20:01:12 2026 GMT Subject: CN=4431BEB31EE443EC279570D4CEEFE52E802A7339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a5:14:22:41:0a:87:20:e4:16:b8:ca:91:02: 0a:a5:83:fc:6d:34:39:f2:c9:8b:c8:4e:c3:e9:ac: 2a:31:31:d1:c1:e6:ec:55:7f:da:62:f3:03:2c:7a: b4:9d:22:25:b2:c4:e2:55:3e:7b:19:fa:26:f6:a5: de:fd:03:44:26:f7:9c:72:6e:b0:6c:3c:5b:0f:23: 17:a7:73:4a:fe:47:2c:a9:46:9c:72:25:e1:ed:10: 74:64:c7:73:83:63:06:5c:ff:0e:45:df:88:6c:ed: 06:dc:ec:6e:f0:b6:17:6b:9d:f0:2d:60:d3:a0:6d: 2e:48:14:3a:61:45:1d:a7:79:f0:6c:bc:11:0a:3d: d8:ff:f1:e2:e7:0e:5d:90:68:c5:9a:80:a2:39:b0: b8:f9:4f:41:96:c5:69:af:7e:52:fe:92:3b:ba:3b: 1e:d3:e5:bf:d6:81:ca:7f:6d:e3:5b:67:9a:17:81: 24:59:83:5c:7f:a5:d2:be:1b:6c:92:50:f8:d7:e4: 02:e3:8c:28:03:9a:e2:dc:34:23:bd:16:c0:e1:1e: 8d:89:9b:e6:43:e8:69:d8:50:ec:d4:e6:9c:b5:e6: ba:b6:15:b8:16:29:dc:5e:52:d9:23:2c:1a:e1:b1: 92:3b:54:50:9d:0e:7d:11:4e:73:4f:03:b7:49:c8: 23:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:31:BE:B3:1E:E4:43:EC:27:95:70:D4:CE:EF:E5:2E:80:2A:73:39 X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:32:f7:c5:78:f0:a5:61:07:cd:92:eb:b1:fd:00:ba:79:86: 44:bc:b3:e6:a1:df:c6:e7:96:26:af:58:f3:26:13:58:e6:73: 39:2a:99:44:15:de:d0:a2:ab:96:13:1a:cd:8c:ac:37:c6:dd: ac:bc:69:cd:73:7b:ae:b9:72:36:ad:37:4e:91:13:29:6b:15: 9b:97:65:29:55:9d:4a:56:0c:9a:b6:ca:6c:cc:c6:9f:08:43: 67:30:07:67:94:5e:0e:36:e6:e6:cc:a8:84:02:a0:2d:01:d0: ec:41:33:3e:d7:4f:1d:e6:45:99:fd:cf:09:af:83:13:c5:8e: 19:68:f4:5a:03:67:d9:0c:28:34:12:da:17:f0:6c:6b:8c:76: d1:78:95:10:05:ae:16:50:72:3d:c3:ec:cb:d8:e6:87:3c:1d: c5:54:79:1e:ec:4e:c2:a6:f0:44:36:81:3a:02:91:dc:6b:15: 25:93:98:af:c0:ef:d5:03:2a:08:b3:ac:af:3a:38:7c:2f:9b: da:86:d2:65:b4:29:12:a8:98:fc:12:c4:9f:ad:bf:bd:bf:ab: 31:fd:e3:8d:b6:6c:d2:49:92:a9:63:21:0c:ee:1a:d5:c9:3b: ee:7e:87:43:5f:fd:83:94:62:09:52:79:8f:f4:e4:5a:ae:97: 1f:ef:14:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzS7izhXW16eLcD1yxP6PYUFeGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNjA0MTcwODI3MTJaFw0yNjA0MjAyMDAxMTJaMDMxMTAvBgNV BAMTKDQ0MzFCRUIzMUVFNDQzRUMyNzk1NzBENENFRUZFNTJFODAyQTczMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrpRQiQQqHIOQWuMqRAgqlg/xt NDnyyYvITsPprCoxMdHB5uxVf9pi8wMserSdIiWyxOJVPnsZ+ib2pd79A0Qm95xy brBsPFsPIxenc0r+RyypRpxyJeHtEHRkx3ODYwZc/w5F34hs7Qbc7G7wthdrnfAt YNOgbS5IFDphRR2nefBsvBEKPdj/8eLnDl2QaMWagKI5sLj5T0GWxWmvflL+kju6 Ox7T5b/Wgcp/beNbZ5oXgSRZg1x/pdK+G2ySUPjX5ALjjCgDmuLcNCO9FsDhHo2J m+ZD6GnYUOzU5py15rq2FbgWKdxeUtkjLBrhsZI7VFCdDn0RTnNPA7dJyCP1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURDG+sx7kQ+wnlXDUzu/lLoAqczkwHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4y98V48KVhB82S67H9ALp5hkS8s+ah38bn liavWPMmE1jmczkqmUQV3tCiq5YTGs2MrDfG3ay8ac1ze665cjatN06REylrFZuX ZSlVnUpWDJq2ymzMxp8IQ2cwB2eUXg425ubMqIQCoC0B0OxBMz7XTx3mRZn9zwmv gxPFjhlo9FoDZ9kMKDQS2hfwbGuMdtF4lRAFrhZQcj3D7MvY5oc8HcVUeR7sTsKm 8EQ2gToCkdxrFSWTmK/A79UDKgizrK86OHwvm9qG0mW0KRKomPwSxJ+tv72/qzH9 4422bNJJkqljIQzuGtXJO+5+h0Nf/YOUYglSeY/05Fqulx/vFLQ= -----END CERTIFICATE-----Generated at Fri Apr 17 20:28:47 2026 by rpki-client