$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: 7y5JsFjeduUoRZiaFki/cpDEDbasFLSH1R6zKxeOrkE= Subject key identifier: 25:C2:59:26:EA:2D:64:18:06:0A:64:8B:9C:C4:C2:1E:E0:47:DB:6D Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 1BC64DFD11E5D0C082EFBD693BE7B1AAD045E456 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 0374 Signing time: Fri 17 Apr 2026 09:12:03 +0000 Manifest this update: Fri 17 Apr 2026 09:07:03 +0000 Manifest next update: Mon 20 Apr 2026 17:12:03 +0000 Files and hashes: 1: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: i2RCXQ2h/tijX2X+SFP27I82J2d7eFOatLRW4qkSUTs=) 2: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: zWJYN2XG8P0RnY9CSUVBnEgmuVsEalWKm5k5yR0nlxQ=) 3: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: iUci27xszbQ8EJwd8pY/iWzlPoV5fxehxSyWVNq/HBw=) 4: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: CwI8o18dMmmdKMsJY38paR/SR1tzAkJd4x6YF0hfFxY=) 5: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: y5nXoWY6Wm0SOQPEufWhbcau0TcczOnsmw1jzg5LM2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c6:4d:fd:11:e5:d0:c0:82:ef:bd:69:3b:e7:b1:aa:d0:45:e4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Apr 17 09:07:03 2026 GMT Not After : Apr 20 17:12:03 2026 GMT Subject: CN=25C25926EA2D6418060A648B9CC4C21EE047DB6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:20:86:d0:1f:21:bc:bf:d9:ad:e8:cc:01: 1d:19:53:d6:ec:00:1e:ec:58:ca:de:82:57:ae:8e: 5f:16:8c:3b:b8:ba:95:da:11:44:b2:f3:af:92:cc: 33:70:37:e9:b9:d7:1e:28:c8:b9:da:7a:bc:74:45: 39:a2:71:e4:54:96:51:71:bf:25:ac:2b:61:e2:a3: bb:d1:08:7c:f8:2d:92:56:30:3d:26:ed:28:ec:c4: 40:83:ee:49:33:57:3d:06:62:81:ec:9f:29:20:e8: 62:07:a3:76:4c:e4:0d:61:25:23:33:e0:04:02:47: 69:90:95:73:86:b6:1e:a9:67:c4:49:c8:15:7f:20: 2d:36:4e:4d:43:cd:2e:01:a8:af:83:91:49:31:0c: 5e:9d:11:57:1a:e3:40:49:3e:8f:4e:ce:7e:50:6a: 41:34:05:d4:67:62:e4:e4:6c:4c:4c:1e:67:a8:dd: ff:0b:b8:a6:ff:d1:87:90:69:95:83:bf:cc:ce:f0: ca:54:fc:bf:93:2a:05:f8:b7:15:fb:c9:3f:bb:f9: 1a:3e:47:5c:c7:ab:9b:d1:f2:61:31:eb:23:81:6e: 14:f7:47:3a:24:f3:eb:f2:57:7f:cb:eb:dc:c6:cd: d6:30:1c:5c:dc:ae:ee:b0:46:f5:67:28:92:87:13: 33:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C2:59:26:EA:2D:64:18:06:0A:64:8B:9C:C4:C2:1E:E0:47:DB:6D X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:da:87:d7:a1:0d:7f:a0:88:e1:ed:6b:1d:26:d8:f0:68:09: 7d:94:bd:60:46:ce:35:b2:59:98:88:af:8f:d3:06:8b:0b:5f: 74:4e:3c:89:65:44:b9:ee:39:97:df:a8:e1:8b:6a:85:fe:94: 53:71:7d:83:0d:dd:22:e0:c5:52:50:28:95:b4:b2:68:e7:56: 0a:15:a5:96:50:93:fa:22:2a:73:64:a8:8c:4b:9f:8f:9c:7e: 5d:e6:d9:f4:ae:f2:1b:e7:e6:ee:3e:89:37:c8:c4:ed:55:2f: f7:12:fc:62:1e:26:e3:b5:e2:22:0d:d3:64:56:ed:88:e4:89: 91:59:7d:4a:cf:a4:b5:5f:42:df:e9:9c:86:99:14:f8:44:0f: b4:af:95:74:d8:84:58:18:d0:90:b1:fd:6e:21:6f:7b:57:41: 8d:db:30:3c:f0:64:0d:fa:78:75:eb:92:c9:43:00:5b:23:92: 9b:4a:b1:0b:e6:94:dc:9c:95:0f:4b:71:ca:7b:42:50:a8:08: 2e:e3:e3:c6:35:28:41:e8:27:80:c8:cc:48:04:ea:42:bd:7e: 68:94:e5:1c:ce:80:08:29:8d:90:ff:3c:16:6c:e8:c8:8e:d8: 85:2a:81:aa:a4:f6:ec:dc:7b:e0:e3:d8:27:b6:b5:40:b4:38: 80:d7:0a:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8ZN/RHl0MCC771pO+exqtBF5FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNjA0MTcwOTA3MDNaFw0yNjA0MjAxNzEyMDNaMDMxMTAvBgNV BAMTKDI1QzI1OTI2RUEyRDY0MTgwNjBBNjQ4QjlDQzRDMjFFRTA0N0RCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwnSCG0B8hvL/ZrejMAR0ZU9bs AB7sWMregleujl8WjDu4upXaEUSy86+SzDNwN+m51x4oyLnaerx0RTmiceRUllFx vyWsK2Hio7vRCHz4LZJWMD0m7SjsxECD7kkzVz0GYoHsnykg6GIHo3ZM5A1hJSMz 4AQCR2mQlXOGth6pZ8RJyBV/IC02Tk1DzS4BqK+DkUkxDF6dEVca40BJPo9Ozn5Q akE0BdRnYuTkbExMHmeo3f8LuKb/0YeQaZWDv8zO8MpU/L+TKgX4txX7yT+7+Ro+ R1zHq5vR8mEx6yOBbhT3Rzok8+vyV3/L69zGzdYwHFzcru6wRvVnKJKHEzPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJcJZJuotZBgGCmSLnMTCHuBH220wHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLah9ehDX+giOHtax0m2PBoCX2UvWBGzjWy WZiIr4/TBosLX3ROPIllRLnuOZffqOGLaoX+lFNxfYMN3SLgxVJQKJW0smjnVgoV pZZQk/oiKnNkqIxLn4+cfl3m2fSu8hvn5u4+iTfIxO1VL/cS/GIeJuO14iIN02RW 7YjkiZFZfUrPpLVfQt/pnIaZFPhED7SvlXTYhFgY0JCx/W4hb3tXQY3bMDzwZA36 eHXrkslDAFsjkptKsQvmlNyclQ9Lccp7QlCoCC7j48Y1KEHoJ4DIzEgE6kK9fmiU 5RzOgAgpjZD/PBZs6MiO2IUqgaqk9uzce+Dj2Ce2tUC0OIDXCjc= -----END CERTIFICATE-----Generated at Fri Apr 17 11:11:53 2026 by rpki-client