$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft File: D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json) Hash identifier: TEQN+2/KOR/1EFHiJkfNBo/KcbMJ3Mc3gpVZEIsLVao= Subject key identifier: 98:9C:A5:27:54:B9:F4:A5:C0:AF:1F:68:20:4A:15:60:A9:C4:2E:E3 Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 0CEEB4D50D59BB874F789408F176077E3385599B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft Manifest number: 016C Signing time: Wed 15 Apr 2026 16:01:01 +0000 Manifest this update: Wed 15 Apr 2026 15:56:01 +0000 Manifest next update: Sat 18 Apr 2026 17:45:01 +0000 Files and hashes: 1: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: Dw31EdkkqE44eq1AnUHix9Mf5h38woQtP6BC5QCkZuA=) 2: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: D8V9Ti1MiqCoDzJ7ekoPuNqjW7Yshnj+Rr7KMkTOEU8=) 3: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: Tuf6YmeksipJcb4xRfVDjk7Za8/2+w2AMl37FB8z1BA=) 4: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: qbymQcWrHfUJL/+zfay4GCgmn2N2MJnny8eN/n0IMAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ee:b4:d5:0d:59:bb:87:4f:78:94:08:f1:76:07:7e:33:85:59:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Apr 15 15:56:01 2026 GMT Not After : Apr 18 17:45:01 2026 GMT Subject: CN=989CA52754B9F4A5C0AF1F68204A1560A9C42EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:fe:86:f6:ad:ee:1a:0c:59:88:36:be:dd: 4a:53:b4:f5:b1:0b:16:69:c8:7a:b4:64:3a:1a:13: c2:4b:e7:19:ba:3a:2b:40:2d:0a:17:b9:80:63:82: a6:0a:79:18:60:03:3b:a3:8b:28:c6:2f:61:81:f7: cf:e4:72:e7:79:65:99:f3:15:0e:5b:88:ca:aa:31: b0:93:79:63:74:7c:65:9d:fa:74:17:4c:28:a3:4d: 70:8d:d7:1c:fb:fd:31:cd:dc:0e:ad:f0:ce:a4:8d: f6:ab:5f:6b:05:25:03:06:68:49:75:d1:22:d7:c0: 37:fd:8b:94:a1:c8:4f:e3:a3:5c:4e:b7:7c:da:55: be:38:4a:b0:f6:b5:8a:f9:6c:81:05:67:47:b5:06: 4a:7a:49:b7:62:b1:5c:f5:0c:a1:a6:d5:55:44:3a: c9:c0:c2:c0:ed:f4:20:f9:6e:54:fc:1b:a1:cb:e6: c3:cc:17:b1:02:9b:03:65:35:54:4e:a8:f9:38:a6: bc:60:cc:20:9f:7c:5f:95:4d:c0:15:07:2b:ff:cc: 14:36:65:35:a6:2b:66:58:da:79:df:7e:9b:e2:be: 02:76:c8:39:3d:15:37:67:a8:12:2c:b1:39:7a:8d: 0b:49:00:0f:67:5e:7f:3e:f7:04:47:b1:04:33:9d: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9C:A5:27:54:B9:F4:A5:C0:AF:1F:68:20:4A:15:60:A9:C4:2E:E3 X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:55:66:9a:46:80:8d:e6:7c:92:92:1b:03:a5:cc:08:2c:16: 6d:0c:3c:ba:60:2e:98:65:0a:92:40:ed:3d:ad:11:01:a9:75: 77:6b:d4:ee:5c:4c:f3:65:31:02:74:e4:a4:f0:c0:b5:5c:8d: 40:1e:bf:9b:86:0f:69:44:c5:b5:73:a6:9a:ca:e8:1b:92:1c: ae:ae:5f:8d:5d:56:17:35:f2:0e:42:55:f9:2f:e5:c7:09:25: 41:d4:2c:a4:b2:a2:3a:a4:1e:a8:75:50:90:c4:0c:a8:5c:87: b9:54:88:ce:ab:c9:c0:e3:63:64:0b:aa:bc:7c:ca:11:11:15: 33:a8:41:b9:25:38:6a:2f:e6:fd:88:5f:fa:1c:4d:d1:09:55: d5:de:df:ba:6d:ed:09:62:b2:8a:ca:6c:fd:01:2e:b4:82:8a: 29:09:52:e6:28:0b:4c:da:a3:67:08:c1:d7:7d:e3:53:d6:c4: 73:7b:ab:fc:3e:19:1e:30:6e:0f:7f:a1:b9:b0:b8:c3:4d:67: b4:cf:be:ef:d4:bb:c8:12:81:85:bc:06:52:20:2e:5c:c6:70: 9f:85:8d:42:15:22:44:5e:c7:04:b5:19:75:68:57:cf:1e:15: e4:2a:fe:16:50:76:c4:61:29:ca:9c:56:bc:73:ab:16:99:2f: 55:9b:6f:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDO601Q1Zu4dPeJQI8XYHfjOFWZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNjA0MTUxNTU2MDFaFw0yNjA0MTgxNzQ1MDFaMDMxMTAvBgNV BAMTKDk4OUNBNTI3NTRCOUY0QTVDMEFGMUY2ODIwNEExNTYwQTlDNDJFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aP6G9q3uGgxZiDa+3UpTtPWx CxZpyHq0ZDoaE8JL5xm6OitALQoXuYBjgqYKeRhgAzujiyjGL2GB98/kcud5ZZnz FQ5biMqqMbCTeWN0fGWd+nQXTCijTXCN1xz7/THN3A6t8M6kjfarX2sFJQMGaEl1 0SLXwDf9i5ShyE/jo1xOt3zaVb44SrD2tYr5bIEFZ0e1Bkp6SbdisVz1DKGm1VVE OsnAwsDt9CD5blT8G6HL5sPMF7ECmwNlNVROqPk4prxgzCCffF+VTcAVByv/zBQ2 ZTWmK2ZY2nnffpvivgJ2yDk9FTdnqBIssTl6jQtJAA9nXn8+9wRHsQQznVUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmJylJ1S59KXArx9oIEoVYKnELuMwHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNE MTkxOTIzOEMyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFVZppGgI3mfJKSGwOlzAgsFm0MPLpgLphl CpJA7T2tEQGpdXdr1O5cTPNlMQJ05KTwwLVcjUAev5uGD2lExbVzpprK6BuSHK6u X41dVhc18g5CVfkv5ccJJUHULKSyojqkHqh1UJDEDKhch7lUiM6rycDjY2QLqrx8 yhERFTOoQbklOGov5v2IX/ocTdEJVdXe37pt7QlisorKbP0BLrSCiikJUuYoC0za o2cIwdd941PWxHN7q/w+GR4wbg9/obmwuMNNZ7TPvu/Uu8gSgYW8BlIgLlzGcJ+F jUIVIkRexwS1GXVoV88eFeQq/hZQdsRhKcqcVrxzqxaZL1Wbb4c= -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:24 2026 by rpki-client