$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft File: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft (raw, json) Hash identifier: dA2WzISLQ2Li2+ZkaboiVr3raS3oCGDBSTnNoQ4MnE8= Subject key identifier: 5E:1E:79:14:66:C8:25:84:C2:0D:91:2B:46:D1:93:62:23:AE:BF:F2 Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 Certificate issuer: /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Certificate serial: 1931F7D6C894FC5AEE13BB38A3DDDB3FD0AC277D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft Manifest number: 01E1 Signing time: Wed 15 Apr 2026 23:12:24 +0000 Manifest this update: Wed 15 Apr 2026 23:07:24 +0000 Manifest next update: Sun 19 Apr 2026 08:40:24 +0000 Files and hashes: 1: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl (hash: 2Qf4Q1HrKX4u0mhI3klyun6Joae7muDeci77se0iiPg=) 2: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: 3hFFQihiUWQ6IklFjwNs/rvoW0wAPy/hcaMMMxF76HU=) 3: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: LoN9n04DTytZ0C9xVez/xcCtenBfVSkHJQnf+LTbYY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:31:f7:d6:c8:94:fc:5a:ee:13:bb:38:a3:dd:db:3f:d0:ac:27:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Validity Not Before: Apr 15 23:07:24 2026 GMT Not After : Apr 19 08:40:24 2026 GMT Subject: CN=5E1E791466C82584C20D912B46D1936223AEBFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:16:fc:99:01:71:b1:f4:5d:4f:fc:70:c4: 98:9f:92:f3:72:ad:3f:1c:2c:3d:08:ec:6b:4a:c9: 16:8a:2a:2d:00:6b:3a:10:01:aa:49:0a:06:1f:43: 76:47:0e:14:94:cd:79:8e:34:e9:b4:1e:fd:3e:6d: ef:da:bb:22:74:df:d0:c4:65:d5:b0:4d:fe:e2:72: 4f:bb:92:69:be:ab:6a:fb:b2:b5:8e:50:78:4c:11: 78:dc:a2:0f:f7:9b:de:b6:55:0f:d1:21:d8:0b:58: 18:00:2f:a1:1c:38:5b:32:59:3e:4d:71:8a:14:e3: d0:7a:4a:84:2f:62:7c:9c:45:45:7a:c2:cd:41:b2: 44:d6:a4:8b:d2:df:68:52:b0:74:17:08:95:46:3b: 03:7b:61:91:36:04:02:52:b2:2e:80:fa:b3:24:45: 57:d0:52:65:db:83:24:22:2d:f0:30:c7:b7:fc:e8: 43:c7:11:12:d2:ea:9b:0d:4b:db:fb:63:fa:ae:7b: 8a:5a:42:03:f9:83:e7:7d:1e:a5:4e:4d:3d:a6:86: 8f:00:cf:78:72:05:af:bc:52:61:72:0e:11:20:bc: 4d:0a:94:9f:c2:8d:dd:93:9d:d9:ce:f2:ef:66:1b: dc:7f:58:d0:7d:5c:e0:d5:66:36:cc:41:fa:77:32: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1E:79:14:66:C8:25:84:C2:0D:91:2B:46:D1:93:62:23:AE:BF:F2 X509v3 Authority Key Identifier: keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b3:4e:a6:66:aa:bb:5b:a7:57:d4:fc:7d:fb:66:3a:65:2e: d3:e6:04:3c:41:a5:83:3c:4b:83:05:e0:34:06:21:6f:4d:93: f5:80:a1:a4:5a:ad:f8:7b:97:91:45:fa:2f:c5:88:00:83:e9: f1:c8:06:58:26:dd:f5:64:fd:a2:60:69:0b:7c:d0:bb:48:69: cb:46:9a:13:a7:90:da:cc:2c:99:29:2f:7c:dc:b3:10:d9:9e: cd:4f:79:11:8d:88:9f:4a:f7:06:06:9a:38:0f:52:0b:87:40: 80:f8:3d:3e:0f:21:02:62:05:f6:6c:72:c7:2e:90:10:73:17: f4:58:d9:5c:19:db:d5:b7:c3:f3:ba:99:f0:a5:29:0d:62:e3: 2a:9f:46:aa:ee:51:b5:c3:48:56:f8:ab:80:5e:12:50:c8:6b: f3:50:eb:35:12:6d:eb:77:f1:53:bd:76:a4:cb:67:62:7f:9d: 8a:c6:fd:fd:35:d1:f3:a4:22:cc:2f:9c:69:be:99:8e:c1:c0: ef:4b:63:60:12:4f:39:b4:8a:f3:11:b0:af:54:06:67:55:4d: c0:5b:e4:63:c6:ab:21:47:a7:08:3a:af:ab:fa:eb:c8:72:c3: 6e:e9:bd:99:10:48:56:61:d8:e6:d3:c8:3e:9c:15:0e:d8:ba: 53:f4:f1:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTH31siU/FruE7s4o93bP9CsJ30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJC NTNDQzY4MTAeFw0yNjA0MTUyMzA3MjRaFw0yNjA0MTkwODQwMjRaMDMxMTAvBgNV BAMTKDVFMUU3OTE0NjZDODI1ODRDMjBEOTEyQjQ2RDE5MzYyMjNBRUJGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oRb8mQFxsfRdT/xwxJifkvNy rT8cLD0I7GtKyRaKKi0AazoQAapJCgYfQ3ZHDhSUzXmONOm0Hv0+be/auyJ039DE ZdWwTf7ick+7kmm+q2r7srWOUHhMEXjcog/3m962VQ/RIdgLWBgAL6EcOFsyWT5N cYoU49B6SoQvYnycRUV6ws1BskTWpIvS32hSsHQXCJVGOwN7YZE2BAJSsi6A+rMk RVfQUmXbgyQiLfAwx7f86EPHERLS6psNS9v7Y/que4paQgP5g+d9HqVOTT2mho8A z3hyBa+8UmFyDhEgvE0KlJ/Cjd2TndnO8u9mG9x/WNB9XODVZjbMQfp3MjbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXh55FGbIJYTCDZErRtGTYiOuv/IwHwYDVR0j BBgwFoAUgggxeiSrTNgozYhV+B8+8rU8xoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODc4OGE4Yi01NDFiLTRjYmYtYmFiOS04ZGMzNzdiYzEyODQvMC84MjA4MzE3QTI0 QUI0Q0Q4MjhDRDg4NTVGODFGM0VGMkI1M0NDNjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJCNTND QzY4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNF RjJCNTNDQzY4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuzTqZmqrtbp1fU/H37ZjplLtPmBDxBpYM8 S4MF4DQGIW9Nk/WAoaRarfh7l5FF+i/FiACD6fHIBlgm3fVk/aJgaQt80LtIactG mhOnkNrMLJkpL3zcsxDZns1PeRGNiJ9K9wYGmjgPUguHQID4PT4PIQJiBfZscscu kBBzF/RY2VwZ29W3w/O6mfClKQ1i4yqfRqruUbXDSFb4q4BeElDIa/NQ6zUSbet3 8VO9dqTLZ2J/nYrG/f010fOkIswvnGm+mY7BwO9LY2ASTzm0ivMRsK9UBmdVTcBb 5GPGqyFHpwg6r6v668hyw27pvZkQSFZh2ObTyD6cFQ7YulP08V8= -----END CERTIFICATE-----Generated at Fri Apr 17 11:03:58 2026 by rpki-client