$ rpki-client -vvf repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft File: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft (raw, json) Hash identifier: EvwezoOrJsJCYaZs9mv8FLwKYLzWef+AxTWvr4bu7sM= Subject key identifier: E5:D4:D1:FE:83:7C:8F:1D:BF:7E:52:FC:47:3B:38:6E:50:C8:FA:00 Authority key identifier: 81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3 Certificate issuer: /CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3 Certificate serial: 64DD60CB4B88CE13E3C5501C139D9559CAFA48B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft Manifest number: 020C Signing time: Wed 15 Apr 2026 09:52:22 +0000 Manifest this update: Wed 15 Apr 2026 09:47:22 +0000 Manifest next update: Sat 18 Apr 2026 20:03:22 +0000 Files and hashes: 1: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: tGutfHYLd+1w5afOstLzep3nkeXsmFCSKPGKSJYYWl0=) 2: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl (hash: Y+SSHARl8L+o+JsVw5S6cy2vQkXBKhx+v3pNmoOf17I=) 3: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: YeGR8oOh1UfyEQoGwDtsTMZrPfaKasaF2ECFyYxm2Hg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 20:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:dd:60:cb:4b:88:ce:13:e3:c5:50:1c:13:9d:95:59:ca:fa:48:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3 Validity Not Before: Apr 15 09:47:22 2026 GMT Not After : Apr 18 20:03:22 2026 GMT Subject: CN=E5D4D1FE837C8F1DBF7E52FC473B386E50C8FA00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:b0:fc:8e:79:1f:c1:d9:ff:ac:84:d4:b0: f5:19:17:1b:c0:7e:a0:d3:46:cd:c5:f3:98:05:20: ba:1b:1e:7c:ed:b9:0f:ce:39:05:cd:2f:9e:8b:2f: 8c:2a:26:00:82:9b:63:2f:5f:20:1c:fc:08:4a:d8: 93:a1:7c:e0:94:96:90:8b:e0:aa:1a:9d:9b:bb:d2: bf:cd:3e:22:cd:31:69:d4:ff:be:22:dd:a1:3d:53: 9f:5e:17:64:19:00:f0:4d:f5:f9:ef:eb:3c:34:e6: e1:3f:20:39:32:e8:e1:48:8c:61:86:08:e5:19:58: 7b:fa:24:80:31:5e:58:28:7a:ec:e5:58:f5:16:d1: dc:cc:c4:b7:fc:26:84:9d:41:78:ae:a8:0e:1f:ea: 7a:a3:99:8f:49:38:65:c8:2a:c9:68:82:e8:8c:78: fe:18:af:76:56:06:fe:49:24:cc:9d:2c:9a:f1:62: 99:87:75:61:44:3a:15:17:36:13:7b:15:2b:06:29: d5:f2:8e:1e:dd:b3:54:38:1f:2a:9c:eb:d7:c2:c5: f4:0e:c2:43:e2:1e:82:d2:35:51:68:4c:af:23:5d: b7:fc:2b:06:90:aa:67:a2:78:4e:ae:3e:0e:1e:b7: 98:eb:a8:5c:bd:0e:1d:c1:0b:d4:49:de:75:e2:87: 3a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D4:D1:FE:83:7C:8F:1D:BF:7E:52:FC:47:3B:38:6E:50:C8:FA:00 X509v3 Authority Key Identifier: keyid:81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8f:65:dc:7d:6f:58:b0:fc:a8:1f:48:8d:c1:03:3c:3c:3f: f4:e2:b9:ab:64:9a:05:35:14:d6:4d:61:57:b3:56:c2:7d:79: a3:a9:b1:65:23:0d:89:70:5b:af:72:12:69:92:80:2f:f0:74: 7d:65:96:8b:3d:ec:fa:5d:30:95:85:cf:f5:37:e2:33:99:d0: e4:1e:6e:4c:ce:13:56:07:a9:af:6a:b4:5f:5c:f0:1b:c0:0d: c8:78:2f:af:40:4d:7c:67:6d:6e:93:89:d8:21:d6:57:61:2b: 1d:1d:c8:79:45:09:69:45:94:f8:2f:f1:d1:d2:b6:92:27:e0: 3b:82:5f:82:03:1b:78:3a:62:2a:cc:2c:8f:69:67:06:82:d0: f9:42:a4:42:e7:4e:a5:b8:3a:9a:e6:88:5b:6f:ac:35:4d:40: 81:3a:4c:33:14:0a:dd:a6:7a:5d:97:e9:0f:4d:34:f0:9b:50: 06:e2:2b:c2:ee:79:5b:48:c5:0c:e2:76:a5:3f:1d:5d:7e:4c: db:ff:0c:ef:78:25:ea:95:35:14:92:75:8a:8c:66:79:7f:0d: 02:c3:19:ca:ef:15:1a:1c:a9:a6:c4:c6:e0:02:50:b4:ac:73: 2f:d5:1d:d3:ed:f7:67:ca:25:14:a5:47:4a:e7:c8:50:db:1c: 2d:4f:a3:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZN1gy0uIzhPjxVAcE52VWcr6SLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUxODY3 MDUwN0ZDMzAeFw0yNjA0MTUwOTQ3MjJaFw0yNjA0MTgyMDAzMjJaMDMxMTAvBgNV BAMTKEU1RDREMUZFODM3QzhGMURCRjdFNTJGQzQ3M0IzODZFNTBDOEZBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLrD8jnkfwdn/rITUsPUZFxvA fqDTRs3F85gFILobHnztuQ/OOQXNL56LL4wqJgCCm2MvXyAc/AhK2JOhfOCUlpCL 4KoanZu70r/NPiLNMWnU/74i3aE9U59eF2QZAPBN9fnv6zw05uE/IDky6OFIjGGG COUZWHv6JIAxXlgoeuzlWPUW0dzMxLf8JoSdQXiuqA4f6nqjmY9JOGXIKsloguiM eP4Yr3ZWBv5JJMydLJrxYpmHdWFEOhUXNhN7FSsGKdXyjh7ds1Q4Hyqc69fCxfQO wkPiHoLSNVFoTK8jXbf8KwaQqmeieE6uPg4et5jrqFy9Dh3BC9RJ3nXihzpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5dTR/oN8jx2/flL8Rzs4blDI+gAwHwYDVR0j BBgwFoAUgZrQQ6ei+EJKvJ5s/ZxRhnBQf8MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzhkNGVlMi01NDllLTQxNjAtOGQ2Zi04NzczMGU4YWU1ZTIvMC84MTlBRDA0M0E3 QTJGODQyNEFCQzlFNkNGRDlDNTE4NjcwNTA3RkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUxODY3MDUw N0ZDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUx ODY3MDUwN0ZDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqPZdx9b1iw/KgfSI3BAzw8P/TiuatkmgU1 FNZNYVezVsJ9eaOpsWUjDYlwW69yEmmSgC/wdH1llos97PpdMJWFz/U34jOZ0OQe bkzOE1YHqa9qtF9c8BvADch4L69ATXxnbW6Tidgh1ldhKx0dyHlFCWlFlPgv8dHS tpIn4DuCX4IDG3g6YirMLI9pZwaC0PlCpELnTqW4OprmiFtvrDVNQIE6TDMUCt2m el2X6Q9NNPCbUAbiK8LueVtIxQzidqU/HV1+TNv/DO94JeqVNRSSdYqMZnl/DQLD GcrvFRocqabExuACULSscy/VHdPt92fKJRSlR0rnyFDbHC1Poz4= -----END CERTIFICATE-----Generated at Fri Apr 17 21:22:57 2026 by rpki-client