$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: LV4sh10lwgBSsdx26AZSZPHtcSsgbW6ezJE0FmiCkS4= Subject key identifier: A3:97:03:87:EE:76:AC:3E:C7:73:78:D1:5E:D0:5E:31:68:A5:19:36 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 1747AABDBCF926E2F9E2D2876D55714487538F89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 058B Signing time: Thu 16 Apr 2026 00:01:25 +0000 Manifest this update: Wed 15 Apr 2026 23:56:25 +0000 Manifest next update: Sun 19 Apr 2026 01:37:25 +0000 Files and hashes: 1: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: mm2pBp9XNAO/aA6cLfKsVFgLvpIqWU1n8jnigUN46c4=) 2: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: e4sjRhvp6mUHQQONhwMETVFyiY5/bOpZffIZ6/yt038=) 3: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: +/NKATGB5uQMThm7QeKGnVHTe5xcp8ImXTgyPu6itTk=) 4: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: 8rLhPZ1kO1OPhZMtRSj4vbuT69WDh/TKZCdll2MOUmQ=) 5: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ou1QMOVVtAAa367JCP3byx/XbB4/rWHxtoD7UtBXQ9o=) 6: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 6KFCBq0GeLMij9zX0LHtO8AChuye1d1F56fk0H8ZhzU=) 7: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: ioskptQxOnwUzRvlUOwTLhn2ti6yWbMMGvP/wH2z3Mo=) 8: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: V3630RXZfBbv0izTqUqFayseBZlNQ8xYG082iWZg+6Q=) 9: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: Wyb0UWY/xry3f5h6Pv1OX1FeBIM6n1lp2HY/CxbmmFM=) 10: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 6ji1OwtEeZ5gDOUwTpL/nrhK0wgzay4u+O8JbfpMxKk=) 11: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=) 12: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: tSn55fIUQrSa+UTyW2nPPJGORdu4ghrJmzkdbcQ67Io=) 13: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=) 14: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: WYMvSvVQ7LmzdzI/Y9IjmjwPnuhAowKHbIWl+8CxoTM=) 15: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: Vj2lcWZTEwWf2AmX1t9dPjT0UD/5pkYVDIvaHli/TFM=) 16: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: bZIz402y8HeI28WEFFpDnjFVUP7vZBGPQIM5w8kbN1g=) 17: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: KzgLs/LHXiYp6dca8nzIUvPjUz6brhBBX/CAtP5nMik=) 18: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: bw8Hpu0FONj3uQaL/ySP1D3C1YAb9B5NcNozVjL3dTY=) 19: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: /WT3CcLt/Wqy1totp1szjJmd03e3/iGONHlBm57jO1k=) 20: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: b9Rswz6WqKP1CD5vZ2CgK/WpMe7q+ItG8/U5zV32DeE=) 21: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: V9Mppv9SlbFw56ep+HO54EeH/ulvHDySp4xMGMMMAGE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:47:aa:bd:bc:f9:26:e2:f9:e2:d2:87:6d:55:71:44:87:53:8f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Apr 15 23:56:25 2026 GMT Not After : Apr 19 01:37:25 2026 GMT Subject: CN=A3970387EE76AC3EC77378D15ED05E3168A51936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:c9:04:59:6a:f4:7d:66:82:ed:a1:42:79: a5:1b:7e:a3:8a:28:53:12:eb:55:d0:bc:9b:67:de: 46:6b:aa:26:68:0b:4f:21:fb:90:5e:b0:e4:8c:1b: c7:3d:b1:fa:d3:bf:50:2d:21:c3:63:99:af:ef:b0: f3:26:84:de:29:19:79:66:8f:80:72:d0:af:46:b4: 39:88:b2:d9:22:f2:08:a1:a5:a8:38:71:f6:16:0b: 8a:dc:22:8d:c9:3f:4f:8b:6f:cc:a2:39:49:70:d1: 72:0a:44:a5:23:73:05:cb:30:56:15:86:2a:1b:47: d4:99:5f:fb:51:06:ef:55:c8:fc:8a:f4:d7:b7:6f: 80:57:50:ab:74:49:89:8d:bd:57:78:7a:28:8e:fd: 43:43:56:4a:02:c0:dc:4e:e8:82:4f:6f:3d:db:36: 18:02:95:95:4c:1f:56:12:0c:16:a8:07:47:b4:e3: cd:c9:b1:e8:be:b3:98:89:a3:3f:32:bc:87:17:97: d4:ac:b8:d7:e6:b0:2e:a1:27:e6:23:18:c6:f6:fb: b3:cb:b4:8e:a7:d1:81:15:5d:b5:1f:1f:22:e0:ec: 92:e6:ec:a6:ea:9c:dd:ae:3e:32:36:b9:3a:f3:8a: d3:cb:57:83:a1:50:ae:b6:4c:b5:19:0f:04:42:fd: 13:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:97:03:87:EE:76:AC:3E:C7:73:78:D1:5E:D0:5E:31:68:A5:19:36 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:4f:75:15:bd:e8:30:0d:d2:06:b1:49:bd:39:1e:02:02:1b: 3f:e9:c8:fb:4b:47:d8:e9:72:9d:49:d4:c6:5c:69:d7:12:b2: 70:a3:65:53:a6:76:1f:6a:31:a4:c9:97:db:e6:1e:38:6b:a2: 97:4b:7c:94:d3:f9:15:97:c4:55:be:69:fd:1d:e3:71:78:c1: c0:93:b6:9d:fc:cd:fa:ba:c3:73:e0:28:cd:66:e6:cf:83:63: 25:b1:c2:3e:1a:13:67:c8:0c:91:98:ad:cc:c9:0a:c3:4e:e4: c5:74:86:74:6e:92:88:67:c3:d2:6b:0b:bb:42:48:c6:b5:08: 79:d8:e7:7b:ae:a1:74:f8:e6:8b:cf:b0:c5:0c:de:0e:33:9f: 14:5e:34:dd:f0:7b:4e:4d:c7:cf:df:cc:c7:70:82:81:d9:6a: 17:c0:1d:93:bf:ed:f5:7d:24:ae:85:50:8f:06:d9:24:d6:79: 01:44:bd:37:34:5d:cb:9e:96:db:df:43:3b:1d:25:8c:8b:b8: 17:18:42:5f:8a:a8:c6:4e:62:c6:61:f3:c6:a1:ae:51:94:e9: 09:cc:2b:2f:d4:63:29:45:be:8a:36:b4:e8:44:5e:c0:f1:5b: 0e:12:68:d9:95:f8:da:92:67:de:b8:00:94:37:90:0e:b3:f1: c0:9b:15:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0eqvbz5JuL54tKHbVVxRIdTj4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNjA0MTUyMzU2MjVaFw0yNjA0MTkwMTM3MjVaMDMxMTAvBgNV BAMTKEEzOTcwMzg3RUU3NkFDM0VDNzczNzhEMTVFRDA1RTMxNjhBNTE5MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdckEWWr0fWaC7aFCeaUbfqOK KFMS61XQvJtn3kZrqiZoC08h+5BesOSMG8c9sfrTv1AtIcNjma/vsPMmhN4pGXlm j4By0K9GtDmIstki8gihpag4cfYWC4rcIo3JP0+Lb8yiOUlw0XIKRKUjcwXLMFYV hiobR9SZX/tRBu9VyPyK9Ne3b4BXUKt0SYmNvVd4eiiO/UNDVkoCwNxO6IJPbz3b NhgClZVMH1YSDBaoB0e0483Jsei+s5iJoz8yvIcXl9SsuNfmsC6hJ+YjGMb2+7PL tI6n0YEVXbUfHyLg7JLm7KbqnN2uPjI2uTrzitPLV4OhUK62TLUZDwRC/RMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo5cDh+52rD7Hc3jRXtBeMWilGTYwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANBPdRW96DAN0gaxSb05HgICGz/pyPtLR9jp cp1J1MZcadcSsnCjZVOmdh9qMaTJl9vmHjhropdLfJTT+RWXxFW+af0d43F4wcCT tp38zfq6w3PgKM1m5s+DYyWxwj4aE2fIDJGYrczJCsNO5MV0hnRukohnw9JrC7tC SMa1CHnY53uuoXT45ovPsMUM3g4znxReNN3we05Nx8/fzMdwgoHZahfAHZO/7fV9 JK6FUI8G2STWeQFEvTc0XcueltvfQzsdJYyLuBcYQl+KqMZOYsZh88ahrlGU6QnM Ky/UYylFvoo2tOhEXsDxWw4SaNmV+NqSZ964AJQ3kA6z8cCbFWQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:25:52 2026 by rpki-client