$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: jei6qoX8rvRgS2TENXNcvIcUrAdAE32iFif47kcMkJE= Subject key identifier: 47:CF:79:B7:BB:44:7D:B4:D3:03:A7:97:A8:96:0C:F7:E7:44:FC:C0 Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 06C5718B0DDE2195422244B664F954283256EDB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 0289 Signing time: Thu 16 Apr 2026 20:21:37 +0000 Manifest this update: Thu 16 Apr 2026 20:16:37 +0000 Manifest next update: Sun 19 Apr 2026 22:11:37 +0000 Files and hashes: 1: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=) 2: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: 8ZWQPdcJgeKZrsbUmRYq2OzkrsqVWW52cECdkg/5pH0=) 3: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: xa1YV30NWgUzUo7xCvAKvrZideDCOjH6ESgRLl0xYeI=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: pc293ep/4fQQOE2DdqqWAYfU1Bh+ldyDqPDpR8SqPEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 22:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c5:71:8b:0d:de:21:95:42:22:44:b6:64:f9:54:28:32:56:ed:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Apr 16 20:16:37 2026 GMT Not After : Apr 19 22:11:37 2026 GMT Subject: CN=47CF79B7BB447DB4D303A797A8960CF7E744FCC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:a4:ff:e8:6e:f3:aa:89:73:98:60:36:d6: 0b:35:15:e3:5c:82:58:38:87:8c:c9:08:40:52:f9: 63:fa:3f:92:39:87:98:7c:cd:20:35:8c:91:97:c5: 3e:d3:fe:c0:7b:d5:8c:95:39:79:33:21:07:1d:d3: 67:ef:a5:b3:14:83:40:91:83:ab:af:f2:5a:7f:dc: 16:e4:1d:a3:d4:2a:3e:bc:4f:31:36:ff:e9:6f:67: 62:8a:b3:25:48:f1:b2:d3:b0:1b:d9:97:c3:c9:e6: 43:1a:f0:51:1d:b0:d8:e8:0f:1f:ed:4a:15:d1:4a: 8c:45:7d:b7:82:a0:ec:b3:09:8d:28:a2:2c:f6:78: 55:a4:33:66:0b:d5:c6:c8:51:ad:af:bb:35:7d:5e: 00:6a:0e:be:0d:d9:5a:66:03:97:6f:3b:9a:31:e7: 1c:3e:c9:89:1b:b4:23:be:16:d3:fa:f7:51:e2:48: 7e:49:dd:31:ef:1b:6a:eb:6a:18:06:7c:22:4e:91: 74:48:39:fe:08:a2:f2:db:e1:ad:06:ec:7a:ac:2d: 47:9b:39:94:06:e9:24:28:41:0b:21:6d:2c:fb:52: e2:2f:7b:fb:1a:f0:2d:ba:08:28:44:7e:88:2a:3f: fd:78:03:39:88:56:c9:2d:e0:6e:79:44:b6:8b:e7: a8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CF:79:B7:BB:44:7D:B4:D3:03:A7:97:A8:96:0C:F7:E7:44:FC:C0 X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:49:50:b2:8e:2d:c3:d1:25:76:2e:8a:3e:80:61:da:70:dc: ea:78:17:36:97:6e:12:b6:7a:8e:3a:a3:68:ec:24:5a:a0:4f: a3:17:05:1f:40:cc:89:27:e2:4e:0f:dc:c7:a2:72:34:20:08: 90:6c:ce:e4:00:18:4c:01:36:11:4d:10:6d:9d:c9:e2:c5:05: 01:0a:fe:bd:a0:44:08:1f:28:ae:ed:1f:6e:4b:95:db:ce:e3: 47:3f:ec:c6:2a:90:ea:2d:7a:6f:6f:9c:4c:a2:19:e6:30:3c: e5:c2:5d:5d:2b:59:5a:17:c0:11:6b:15:0e:df:00:b5:70:77: af:da:8f:ec:3c:65:3b:b4:f5:53:96:8f:02:4b:af:1e:6c:92: 8b:a6:cd:ab:b4:69:7e:10:20:c4:05:fe:6a:06:21:9f:93:88: 91:f1:ef:c9:2b:b9:a4:67:00:f5:17:74:ac:c1:8e:b3:5a:f0: c5:5f:73:27:2f:4c:a2:23:76:ca:d6:85:f6:45:f9:9d:54:91: 87:ca:dc:19:27:85:e9:89:14:d5:44:ca:cc:7b:fe:d1:a0:2c: 37:3a:96:31:7b:71:7f:63:17:44:29:5a:e6:ac:b2:a0:50:b5: e0:8d:92:87:82:10:d6:20:00:f8:5a:24:9f:b8:7b:87:00:cb: 58:63:77:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsVxiw3eIZVCIkS2ZPlUKDJW7bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNjA0MTYyMDE2MzdaFw0yNjA0MTkyMjExMzdaMDMxMTAvBgNV BAMTKDQ3Q0Y3OUI3QkI0NDdEQjREMzAzQTc5N0E4OTYwQ0Y3RTc0NEZDQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLqT/6G7zqolzmGA21gs1FeNc glg4h4zJCEBS+WP6P5I5h5h8zSA1jJGXxT7T/sB71YyVOXkzIQcd02fvpbMUg0CR g6uv8lp/3BbkHaPUKj68TzE2/+lvZ2KKsyVI8bLTsBvZl8PJ5kMa8FEdsNjoDx/t ShXRSoxFfbeCoOyzCY0ooiz2eFWkM2YL1cbIUa2vuzV9XgBqDr4N2VpmA5dvO5ox 5xw+yYkbtCO+FtP691HiSH5J3THvG2rrahgGfCJOkXRIOf4IovLb4a0G7HqsLUeb OZQG6SQoQQshbSz7UuIve/sa8C26CChEfogqP/14AzmIVskt4G55RLaL56jRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR895t7tEfbTTA6eXqJYM9+dE/MAwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5JULKOLcPRJXYuij6AYdpw3Op4FzaXbhK2 eo46o2jsJFqgT6MXBR9AzIkn4k4P3MeicjQgCJBszuQAGEwBNhFNEG2dyeLFBQEK /r2gRAgfKK7tH25LldvO40c/7MYqkOotem9vnEyiGeYwPOXCXV0rWVoXwBFrFQ7f ALVwd6/aj+w8ZTu09VOWjwJLrx5skoumzau0aX4QIMQF/moGIZ+TiJHx78kruaRn APUXdKzBjrNa8MVfcycvTKIjdsrWhfZF+Z1UkYfK3BknhemJFNVEysx7/tGgLDc6 ljF7cX9jF0QpWuassqBQteCNkoeCENYgAPhaJJ+4e4cAy1hjdzw= -----END CERTIFICATE-----Generated at Fri Apr 17 20:48:39 2026 by rpki-client