$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: JxUC/tAJTcY0D54xH5lgEZfhg4cnHtIPOvAdjTLJ6ew= Subject key identifier: 53:11:DD:00:02:31:7E:F9:EE:DA:7F:28:18:7D:83:AE:50:38:41:D7 Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 4E10C16801D01723577BCAEFDD8DE76DB51B0F48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: 014D Signing time: Fri 17 Apr 2026 08:51:11 +0000 Manifest this update: Fri 17 Apr 2026 08:46:11 +0000 Manifest next update: Mon 20 Apr 2026 13:03:11 +0000 Files and hashes: 1: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: LP4TTt3a5d/zySiXXgSowixO1QRuEixn6QL9fhz9N90=) 2: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: 8cewFPLuyArtugKlZDxPydivdpl6gb8C4w3o7gohs6Q=) 3: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: XsyvDRA0TNZEIvbyLzo4xfiEE9IebAVqTJNT7CQxRoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:10:c1:68:01:d0:17:23:57:7b:ca:ef:dd:8d:e7:6d:b5:1b:0f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Apr 17 08:46:11 2026 GMT Not After : Apr 20 13:03:11 2026 GMT Subject: CN=5311DD0002317EF9EEDA7F28187D83AE503841D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:36:4c:6e:10:f0:15:9e:28:4a:2d:db:85: 28:5e:d3:25:ef:83:c5:7f:6b:9e:ed:a6:a4:2d:1d: ed:72:33:45:30:b5:ad:6f:f4:bd:4b:99:81:60:de: 65:19:33:1d:96:0f:11:02:a5:e5:25:fe:46:68:d4: c3:43:d9:17:06:48:23:5d:e7:45:67:5e:87:df:8b: 60:33:19:7d:d0:aa:36:bd:85:19:eb:52:2a:1c:95: 69:95:e2:de:b4:9e:7d:ed:3c:a4:62:92:de:f7:1b: a3:bb:53:6d:41:fc:aa:3f:c8:00:fc:b0:e6:ea:b0: d4:83:01:f3:33:48:c3:78:a5:9b:51:fc:ab:8a:1c: 72:4c:ed:e5:ec:c1:ef:8e:fe:8d:53:bf:fd:5a:88: d6:b4:e3:4c:cc:23:0e:f8:e9:7e:b7:d7:5f:b9:91: 13:5d:92:26:7a:01:15:26:9a:12:cd:52:39:cc:6e: f2:a5:d8:50:68:95:3c:53:dd:03:58:73:ba:fe:7d: d0:1c:3e:72:67:b3:5f:8d:fa:ee:be:7a:17:2b:bd: 63:3f:9f:94:fe:e6:9c:5e:7e:89:63:b4:33:d3:e9: f8:60:8d:d9:59:df:e2:86:44:6f:f2:f5:e6:03:1f: 65:82:10:34:76:88:cf:1c:f1:97:7a:59:2a:29:a3: 5f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:11:DD:00:02:31:7E:F9:EE:DA:7F:28:18:7D:83:AE:50:38:41:D7 X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ea:a6:49:a1:ae:69:6e:37:ad:53:44:5b:2d:73:38:87:84: 09:e4:68:d8:29:89:9b:17:e0:d9:0f:3d:1c:3d:3a:79:86:f9: 5d:a4:94:a6:0d:cc:44:e8:27:0b:66:96:70:18:48:e7:be:c0: b9:3d:36:2d:f0:0f:cb:c0:3c:50:6a:31:1f:5d:7c:68:19:0e: 07:d0:8a:fc:f9:b3:d4:07:db:ea:c2:f8:85:1a:92:9b:a4:69: 40:58:ae:52:62:75:17:98:98:90:11:99:a3:51:67:fa:c4:19: f4:74:7c:4d:cb:7f:f8:bb:e4:6e:e1:62:7a:0e:6a:1c:be:99: 19:d4:b2:51:32:d2:5e:97:87:be:05:c7:f2:37:85:8e:04:bc: 68:a9:61:69:b2:e7:58:05:c9:67:98:da:a7:9f:86:d6:be:53: 26:d5:f0:ba:84:cf:ab:c8:33:87:40:1b:97:d2:80:48:cc:6e: 8f:ff:df:4e:50:9e:b8:15:a0:38:43:9c:b8:d0:ba:b9:01:08: 16:ee:86:ae:19:34:10:b9:f9:fa:4e:6d:a9:60:49:3f:a7:df: 0b:d8:94:86:dd:18:ce:85:1b:fc:a9:e4:f1:76:ff:cd:55:3e: ec:c8:c6:64:c3:22:ef:4b:89:50:19:8d:7a:72:23:66:47:65: be:0d:5f:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThDBaAHQFyNXe8rv3Y3nbbUbD0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNjA0MTcwODQ2MTFaFw0yNjA0MjAxMzAzMTFaMDMxMTAvBgNV BAMTKDUzMTFERDAwMDIzMTdFRjlFRURBN0YyODE4N0Q4M0FFNTAzODQxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnazZMbhDwFZ4oSi3bhShe0yXv g8V/a57tpqQtHe1yM0Uwta1v9L1LmYFg3mUZMx2WDxECpeUl/kZo1MND2RcGSCNd 50VnXoffi2AzGX3Qqja9hRnrUioclWmV4t60nn3tPKRikt73G6O7U21B/Ko/yAD8 sObqsNSDAfMzSMN4pZtR/KuKHHJM7eXswe+O/o1Tv/1aiNa040zMIw746X6311+5 kRNdkiZ6ARUmmhLNUjnMbvKl2FBolTxT3QNYc7r+fdAcPnJns1+N+u6+ehcrvWM/ n5T+5pxefoljtDPT6fhgjdlZ3+KGRG/y9eYDH2WCEDR2iM8c8Zd6WSopo1/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUxHdAAIxfvnu2n8oGH2DrlA4QdcwHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfqpkmhrmluN61TRFstcziHhAnkaNgpiZsX 4NkPPRw9OnmG+V2klKYNzEToJwtmlnAYSOe+wLk9Ni3wD8vAPFBqMR9dfGgZDgfQ ivz5s9QH2+rC+IUakpukaUBYrlJidReYmJARmaNRZ/rEGfR0fE3Lf/i75G7hYnoO ahy+mRnUslEy0l6Xh74Fx/I3hY4EvGipYWmy51gFyWeY2qefhta+UybV8LqEz6vI M4dAG5fSgEjMbo//305QnrgVoDhDnLjQurkBCBbuhq4ZNBC5+fpObalgST+n3wvY lIbdGM6FG/yp5PF2/81VPuzIxmTDIu9LiVAZjXpyI2ZHZb4NX4Y= -----END CERTIFICATE-----Generated at Fri Apr 17 13:54:02 2026 by rpki-client