$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft File: 115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json) Hash identifier: 2B11JFMeWTILi2FkCEnrrrHdgTK0fNMtnoUu6dWSHhQ= Subject key identifier: 9A:CE:D4:9A:E0:BF:73:E4:5A:9D:4D:16:C8:A1:D3:E5:55:C7:0A:7D Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 Certificate issuer: /CN=115880D133393FF2D96A5861679B5166AFDB1248 Certificate serial: 4095DE22851DE42F0EFD2C1C2D72EF85DAD7EB6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft Manifest number: 021C Signing time: Wed 15 Apr 2026 19:42:36 +0000 Manifest this update: Wed 15 Apr 2026 19:37:36 +0000 Manifest next update: Sun 19 Apr 2026 02:04:36 +0000 Files and hashes: 1: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: VvBdfRoXJdspZfeWpUDljLmbCHnzMGWW+ov3JCtu9WA=) 2: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=) 3: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: 1qHo3owsIra2DLunWHCtcR/bz4Z6XiVGZF9DHU6ujCU=) 4: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: 7cjr2Mf8da23M7780NOwEQz2pNcc6LU8HdKHbP3bqXY=) 5: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: GbW8pIvunTcszaDOe8fHQRX98OSxYPSLoytCW4o6p7M=) 6: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=) 7: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: h49j/2Ga2ZWeRDrwEjEvCDS4AX4uciyVzSTBX8uB/Wg=) 8: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: NlqtXEYc0qu5C4pNIHVhgdQEP8qnif0LKTnWyQfNsyQ=) 9: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: xtnJq1KAJuqbcFc2YyOOFPYcekqZft0vnm1IMQmaZ2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:95:de:22:85:1d:e4:2f:0e:fd:2c:1c:2d:72:ef:85:da:d7:eb:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248 Validity Not Before: Apr 15 19:37:36 2026 GMT Not After : Apr 19 02:04:36 2026 GMT Subject: CN=9ACED49AE0BF73E45A9D4D16C8A1D3E555C70A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:52:5c:42:0a:0f:10:e8:22:f9:d7:9d:92:0e: a9:bc:81:9c:34:13:5b:9d:65:fb:a7:0a:22:80:2b: 4a:5c:e1:cd:86:e7:b0:d9:0f:2f:1e:bd:c4:ba:39: 26:93:43:72:bc:d3:7a:d4:85:5d:bb:59:f8:47:d7: 7a:a1:54:c0:77:f7:b0:26:fe:69:fb:11:ed:28:09: 7f:de:9d:e7:95:e0:c9:56:07:2c:c2:64:a2:90:8d: 6e:3b:a1:9a:49:51:5e:b2:de:8d:e3:65:a1:ab:34: 4b:95:a0:aa:66:07:24:77:65:64:3d:5b:ca:0c:f1: 68:21:e1:1e:87:20:b8:f2:3e:61:72:c7:02:11:f9: 5e:73:43:86:11:68:62:cf:0b:2e:a7:e2:1e:0d:37: cc:fb:71:03:67:5f:59:3b:12:4b:ca:98:ec:34:89: 3c:be:65:d1:cb:00:91:82:1a:85:f0:fb:61:87:4c: 41:c4:0d:68:d5:49:64:18:f6:dc:13:fb:2d:a5:10: 5e:3b:da:48:fc:5d:09:8d:35:08:fe:ca:5a:27:bd: f0:f8:cd:c1:20:59:54:08:9a:83:27:66:6f:ee:03: 1d:0a:d1:9c:33:ea:0c:c1:45:f6:0c:7d:08:9e:1d: c6:5b:88:4b:cf:4f:17:db:d1:9f:f5:65:6b:0d:4b: 6c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CE:D4:9A:E0:BF:73:E4:5A:9D:4D:16:C8:A1:D3:E5:55:C7:0A:7D X509v3 Authority Key Identifier: keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f2:08:f7:76:96:9c:e2:d9:0d:f7:93:38:5a:85:f2:4c:83: 22:a9:7c:42:f4:8a:c7:72:d7:de:50:ce:da:12:cd:80:eb:4a: a6:1b:6c:1c:d8:55:18:29:e1:a7:e9:2d:3d:86:a5:da:75:d4: 12:41:0d:aa:ba:eb:91:a1:93:e5:12:42:ad:7c:f6:bd:86:38: b2:fe:37:70:87:de:46:60:8f:03:f8:af:14:eb:6d:e0:02:fb: ae:51:72:df:ae:59:dc:8b:2f:6c:80:a0:0b:55:7c:13:99:ae: c7:ee:53:68:fd:3a:45:b9:04:cf:46:a8:44:39:ae:e5:e3:d1: 29:4d:5a:8c:1e:e3:cd:de:80:10:29:5c:34:8a:b3:e0:58:0d: 43:38:9f:ce:29:06:65:ca:86:fc:d1:5f:ba:81:4d:ad:5f:37: 30:ce:b3:86:b8:50:ce:05:df:19:85:5e:c5:4e:1c:54:b9:53: 94:6e:0d:cb:6d:3c:6f:6e:f1:fc:d0:97:4b:9f:17:84:97:43: 1a:56:90:d1:cf:60:ca:e9:c4:d6:f9:a3:83:e0:86:21:2f:b9: d3:6f:f1:f2:8c:53:a2:d2:97:a2:0e:91:3f:99:89:c7:65:2f: 17:97:64:17:48:d6:c3:bd:0e:d0:01:06:bd:36:2f:81:0a:af: 6b:da:d9:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJXeIoUd5C8O/SwcLXLvhdrX62wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB RkRCMTI0ODAeFw0yNjA0MTUxOTM3MzZaFw0yNjA0MTkwMjA0MzZaMDMxMTAvBgNV BAMTKDlBQ0VENDlBRTBCRjczRTQ1QTlENEQxNkM4QTFEM0U1NTVDNzBBN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtUlxCCg8Q6CL5152SDqm8gZw0 E1udZfunCiKAK0pc4c2G57DZDy8evcS6OSaTQ3K803rUhV27WfhH13qhVMB397Am /mn7Ee0oCX/eneeV4MlWByzCZKKQjW47oZpJUV6y3o3jZaGrNEuVoKpmByR3ZWQ9 W8oM8Wgh4R6HILjyPmFyxwIR+V5zQ4YRaGLPCy6n4h4NN8z7cQNnX1k7EkvKmOw0 iTy+ZdHLAJGCGoXw+2GHTEHEDWjVSWQY9twT+y2lEF472kj8XQmNNQj+ylonvfD4 zcEgWVQImoMnZm/uAx0K0Zwz6gzBRfYMfQieHcZbiEvPTxfb0Z/1ZWsNS2zhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUms7UmuC/c+RanU0WyKHT5VXHCn0wHwYDVR0j BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm NjItYjdiMGQ2MDMxN2FmLzAvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUx NjZBRkRCMTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELyCPd2lpzi2Q33kzhahfJMgyKpfEL0isdy 195QztoSzYDrSqYbbBzYVRgp4afpLT2Gpdp11BJBDaq665Ghk+USQq189r2GOLL+ N3CH3kZgjwP4rxTrbeAC+65Rct+uWdyLL2yAoAtVfBOZrsfuU2j9OkW5BM9GqEQ5 ruXj0SlNWowe483egBApXDSKs+BYDUM4n84pBmXKhvzRX7qBTa1fNzDOs4a4UM4F 3xmFXsVOHFS5U5RuDcttPG9u8fzQl0ufF4SXQxpWkNHPYMrpxNb5o4PghiEvudNv 8fKMU6LSl6IOkT+ZicdlLxeXZBdI1sO9DtABBr02L4EKr2va2fk= -----END CERTIFICATE-----Generated at Fri Apr 17 16:58:29 2026 by rpki-client