$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft File: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft (raw, json) Hash identifier: fo2h/qZUjLwNmVFkbNufqBNQZtcGOnH9o2mT3OLdmb4= Subject key identifier: CD:14:1D:EB:18:2F:2C:34:7B:CC:37:F4:D2:27:D1:F8:4D:E4:31:4A Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Certificate serial: 139DE38A6355F98109C6639688558ED57DDE19DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft Manifest number: 0210 Signing time: Thu 16 Apr 2026 23:01:18 +0000 Manifest this update: Thu 16 Apr 2026 22:56:18 +0000 Manifest next update: Mon 20 Apr 2026 02:38:18 +0000 Files and hashes: 1: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: jbeNAM8uIrcuyXo9L60I9mV9bFqM+96eyJHSvni2ZAo=) 2: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl (hash: zmanBdKkMjJj79c29KhYFcaRuj4vcSmpnvr/W7p4wrs=) 3: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: PymGJBtcf2BbEhLIvNoHiy1Mb2P/x61Bs29YxaHSsg8=) 4: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: Juur4GxLWpPp32FXP5B1lQD8F+2wWzZU/lQ5cSimSag=) 5: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: Gb7BtMa3ZwQg1TqLmijU1iSRdOGqKu707FAgIn+V6/Q=) 6: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: Ovv2ETM/TwcVTfyu6Kr+ausDEpr6HmSaSG285SkzGoE=) 7: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: /38osmS1ovCsNqWoBte+rgzduLMxUE6ppFENnBxm0Os=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9d:e3:8a:63:55:f9:81:09:c6:63:96:88:55:8e:d5:7d:de:19:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Validity Not Before: Apr 16 22:56:18 2026 GMT Not After : Apr 20 02:38:18 2026 GMT Subject: CN=CD141DEB182F2C347BCC37F4D227D1F84DE4314A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2e:8b:c3:e0:ec:63:46:68:89:3f:4a:d4:06: 12:e2:a0:e7:fa:49:14:0d:e8:60:b1:19:ef:ba:56: 36:25:e3:45:f4:23:7e:81:58:20:9f:b7:74:96:63: 59:00:79:a1:75:bf:cd:10:16:82:64:05:46:d4:cd: f2:9f:3a:54:be:62:73:32:7f:d5:31:e2:ca:0e:cf: 57:c7:f2:ac:45:fb:d2:b0:67:69:77:fb:b9:04:27: 92:f3:b0:bd:9b:d7:0d:35:45:4d:e2:6c:2f:5e:2c: 81:cc:22:80:44:a5:9b:39:32:51:0b:46:a0:8b:90: de:eb:b7:f6:e0:08:47:9e:a7:e1:4e:4d:4a:9e:7b: 6c:97:06:72:3b:00:5e:52:df:6b:f5:a8:28:55:ea: f8:9e:b5:92:19:26:03:85:9f:e1:c6:29:8e:96:7a: 95:9b:7c:2f:22:8e:6c:6e:14:c1:7d:3f:e4:d2:7b: 2d:3d:57:63:53:44:a2:ed:11:c1:24:47:a8:6a:37: 64:62:22:9a:fb:25:19:3e:1d:9b:8c:b8:3b:98:d6: 6f:9e:8b:1f:4c:5b:cf:1a:7c:fa:5a:36:b1:5d:76: 9d:ee:29:2c:fd:d9:d9:de:42:d8:fa:74:a3:d7:84: 13:72:4f:47:cc:62:b6:5c:5d:82:ff:85:b5:b1:da: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:14:1D:EB:18:2F:2C:34:7B:CC:37:F4:D2:27:D1:F8:4D:E4:31:4A X509v3 Authority Key Identifier: keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:16:9e:da:60:19:b1:2f:3d:13:67:3f:20:cf:40:70:3c:db: 25:13:14:0a:03:cd:bc:dd:73:83:9e:df:fa:e1:e9:54:20:dd: 31:03:42:99:a6:93:30:6a:c2:14:28:0c:3a:d9:96:5b:f4:96: 53:c4:f7:24:9b:cd:96:a5:9e:23:cd:82:75:39:99:2a:e1:16: ad:73:60:85:0e:37:4a:dc:fb:f1:02:92:c1:af:d0:34:65:63: e3:a6:5d:7d:57:53:3f:9b:1b:d7:54:a0:9f:72:e3:cb:f8:b6: 30:24:4e:30:2c:8d:72:5e:6e:fd:ab:04:aa:1a:4b:dc:e0:20: 44:87:c3:2f:79:1d:a5:07:a0:0b:dd:ca:ef:3b:15:41:44:22: c9:d5:87:d1:59:b2:72:70:a1:4b:35:04:88:b1:1d:f4:3d:d5: 10:bc:f6:ee:db:e1:72:bd:b7:82:03:fc:e5:d6:a7:e6:af:81: a9:67:cc:1b:b1:cc:9a:d6:e1:db:aa:5f:34:90:7f:94:e2:60: be:77:09:52:67:e3:1c:63:82:f6:ad:4f:3f:09:fb:88:ec:a2: d5:f6:17:28:f7:03:85:b7:50:9e:a7:fc:be:c8:6a:ca:f1:92: ab:24:73:d2:21:42:51:68:62:de:20:35:b2:d8:79:8c:1f:0e: 9c:a3:c8:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE53jimNV+YEJxmOWiFWO1X3eGdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0 RDRGODMwODAeFw0yNjA0MTYyMjU2MThaFw0yNjA0MjAwMjM4MThaMDMxMTAvBgNV BAMTKENEMTQxREVCMTgyRjJDMzQ3QkNDMzdGNEQyMjdEMUY4NERFNDMxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNLovD4OxjRmiJP0rUBhLioOf6 SRQN6GCxGe+6VjYl40X0I36BWCCft3SWY1kAeaF1v80QFoJkBUbUzfKfOlS+YnMy f9Ux4soOz1fH8qxF+9KwZ2l3+7kEJ5LzsL2b1w01RU3ibC9eLIHMIoBEpZs5MlEL RqCLkN7rt/bgCEeep+FOTUqee2yXBnI7AF5S32v1qChV6vietZIZJgOFn+HGKY6W epWbfC8ijmxuFMF9P+TSey09V2NTRKLtEcEkR6hqN2RiIpr7JRk+HZuMuDuY1m+e ix9MW88afPpaNrFddp3uKSz92dneQtj6dKPXhBNyT0fMYrZcXYL/hbWx2iYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzRQd6xgvLDR7zDf00ifR+E3kMUowHwYDVR0j BBgwFoAUuMKisbIRZK+OruOHx9ml2U1PgwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC9COEMyQTJCMUIy MTE2NEFGOEVBRUUzODdDN0Q5QTVEOTRENEY4MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0RDRG ODMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1 RDk0RDRGODMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkWntpgGbEvPRNnPyDPQHA82yUTFAoDzbzd c4Oe3/rh6VQg3TEDQpmmkzBqwhQoDDrZllv0llPE9ySbzZalniPNgnU5mSrhFq1z YIUON0rc+/ECksGv0DRlY+OmXX1XUz+bG9dUoJ9y48v4tjAkTjAsjXJebv2rBKoa S9zgIESHwy95HaUHoAvdyu87FUFEIsnVh9FZsnJwoUs1BIixHfQ91RC89u7b4XK9 t4ID/OXWp+avgalnzBuxzJrW4duqXzSQf5TiYL53CVJn4xxjgvatTz8J+4jsotX2 Fyj3A4W3UJ6n/L7Iasrxkqskc9IhQlFoYt4gNbLYeYwfDpyjyLA= -----END CERTIFICATE-----Generated at Sat Apr 18 07:39:00 2026 by rpki-client