$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: +3MIZ9/yWVuk3kJ/wo8oyNixXp2PO3jhmvl/lE0zZ78= Subject key identifier: EF:D4:4F:0E:F2:E6:BC:46:A8:EF:29:E6:5C:39:05:C3:F7:FA:2F:DB Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 72EB932C19131E6207E3F5646787EB58E18B3430 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: 0124 Signing time: Thu 16 Apr 2026 00:40:50 +0000 Manifest this update: Thu 16 Apr 2026 00:35:50 +0000 Manifest next update: Sun 19 Apr 2026 06:35:50 +0000 Files and hashes: 1: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) 2: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: 903oF4xDKyXULT07qVySjD1DUhNiwmfBxzgwrT+Pke4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:eb:93:2c:19:13:1e:62:07:e3:f5:64:67:87:eb:58:e1:8b:34:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Apr 16 00:35:50 2026 GMT Not After : Apr 19 06:35:50 2026 GMT Subject: CN=EFD44F0EF2E6BC46A8EF29E65C3905C3F7FA2FDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:dc:58:39:d0:75:7f:1f:0b:a3:4a:c9:b1: a0:22:e6:9d:1e:15:7a:4e:8d:d3:cb:b1:61:cb:0d: 64:83:60:33:9b:13:9b:fb:27:b6:c7:0a:41:22:12: a9:f9:ff:bb:8d:f3:02:4a:a9:11:54:16:a6:f7:4e: 48:e5:85:47:0b:0e:a7:e8:a1:0e:49:49:bd:cd:cc: fb:b4:00:6f:45:05:6d:d6:81:5a:fe:01:9f:06:9a: 53:f6:d9:85:c7:d2:a2:2e:b6:c4:7c:96:9a:2e:49: de:01:54:90:b0:53:26:78:da:51:3b:6e:33:4d:34: 7e:8a:ab:6e:93:6e:ac:87:66:e8:f8:43:fd:fc:7d: 4e:1f:9b:a4:72:31:ea:1e:f3:b0:ad:1d:85:ea:62: 08:f1:bd:ff:d2:82:92:10:2d:b3:4f:e6:6f:68:97: 39:db:9e:a4:3d:02:da:f7:81:58:df:4b:61:13:cf: 6a:92:91:f5:6e:12:ef:f6:98:1d:58:7e:a9:16:02: 35:58:42:7f:cd:e8:63:99:e2:6d:74:d4:fa:e2:dc: 5d:e1:f1:c8:b3:d5:17:64:03:64:92:6b:06:dc:e3: ad:8c:e6:19:3e:58:fd:01:64:a5:f4:39:8c:44:9c: e5:20:0e:d7:27:a7:bb:97:f7:9b:75:4f:4d:2d:b3: b0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D4:4F:0E:F2:E6:BC:46:A8:EF:29:E6:5C:39:05:C3:F7:FA:2F:DB X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:90:d3:6e:26:91:ef:8a:2b:5f:71:c5:d2:0d:5b:a2:3c:5c: 35:20:33:41:a5:17:1d:85:9c:2e:81:b7:9e:04:99:e8:47:b0: b5:30:f0:06:8c:06:0c:99:ea:b2:6a:12:1c:06:c9:18:1c:b7: 45:d6:89:a9:11:2c:9e:f1:73:21:5c:70:c1:d0:2f:82:90:c2: f3:36:b1:3f:fd:5a:7c:da:e9:2e:d0:c6:28:b9:f3:60:1c:14: 18:a5:a3:b3:1f:70:3b:42:86:20:ef:78:c1:ac:0f:b2:7f:69: 01:98:5d:86:04:2f:ca:aa:89:75:ce:de:eb:9d:be:e8:c8:2d: 4a:b1:f9:77:85:08:5a:13:dd:14:47:be:48:8c:f7:09:d4:8c: 8a:84:97:77:21:11:30:db:25:79:2d:69:3a:1e:b0:d5:ca:c2: bc:b6:c7:da:af:ff:a5:41:db:e0:b2:76:8a:18:23:05:aa:0c: b3:7d:fb:ad:4a:d2:7b:f2:32:95:f3:1d:b9:2e:25:86:7b:a0: 2d:96:e7:8a:36:e5:71:71:70:1b:4a:9b:a9:76:3d:2b:5c:9c: ca:7f:16:59:ee:cb:c4:e4:b4:a3:0c:60:2c:f7:ab:cd:9b:0c: c9:ea:07:2b:3d:18:ec:f3:aa:4c:ad:bb:f1:ed:14:0f:9c:e9: ec:e7:a5:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuuTLBkTHmIH4/VkZ4frWOGLNDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNjA0MTYwMDM1NTBaFw0yNjA0MTkwNjM1NTBaMDMxMTAvBgNV BAMTKEVGRDQ0RjBFRjJFNkJDNDZBOEVGMjlFNjVDMzkwNUMzRjdGQTJGREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71NxYOdB1fx8Lo0rJsaAi5p0e FXpOjdPLsWHLDWSDYDObE5v7J7bHCkEiEqn5/7uN8wJKqRFUFqb3TkjlhUcLDqfo oQ5JSb3NzPu0AG9FBW3WgVr+AZ8GmlP22YXH0qIutsR8lpouSd4BVJCwUyZ42lE7 bjNNNH6Kq26TbqyHZuj4Q/38fU4fm6RyMeoe87CtHYXqYgjxvf/SgpIQLbNP5m9o lznbnqQ9Atr3gVjfS2ETz2qSkfVuEu/2mB1YfqkWAjVYQn/N6GOZ4m101Pri3F3h 8ciz1RdkA2SSawbc462M5hk+WP0BZKX0OYxEnOUgDtcnp7uX95t1T00ts7C7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU79RPDvLmvEao7ynmXDkFw/f6L9swHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSQ024mke+KK19xxdINW6I8XDUgM0GlFx2F nC6Bt54EmehHsLUw8AaMBgyZ6rJqEhwGyRgct0XWiakRLJ7xcyFccMHQL4KQwvM2 sT/9Wnza6S7Qxii582AcFBilo7MfcDtChiDveMGsD7J/aQGYXYYEL8qqiXXO3uud vujILUqx+XeFCFoT3RRHvkiM9wnUjIqEl3chETDbJXktaToesNXKwry2x9qv/6VB 2+CydooYIwWqDLN9+61K0nvyMpXzHbkuJYZ7oC2W54o25XFxcBtKm6l2PStcnMp/ Flnuy8TktKMMYCz3q82bDMnqBys9GOzzqkytu/HtFA+c6eznpT8= -----END CERTIFICATE-----Generated at Sat Apr 18 00:05:21 2026 by rpki-client