$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: l+EV0UWFnRwoZNZvHoo++6BA6BVyl9qqpklQ/a3BMX0= Subject key identifier: 18:E5:8E:8F:86:77:DD:FE:08:94:B3:F3:38:FF:E7:C3:FB:2D:E3:0C Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 533141A1D84C75A3F7B7D6B698FDC861B9AFA07C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 03CD Signing time: Fri 17 Apr 2026 12:42:19 +0000 Manifest this update: Fri 17 Apr 2026 12:37:19 +0000 Manifest next update: Mon 20 Apr 2026 20:36:19 +0000 Files and hashes: 1: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: ZwrafWgULux7pZESDIyZrz0oIb70yJ33WbRXX1JGRuI=) 2: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: UhAy8yzq5pzmyemjvMQXWmvod4+mB55v0YcY/Z40TGU=) 3: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: qNsTe8hbYLDRuOTgoGtVFEisKaeZJB3/MvKL6YgIdCE=) 4: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: 51ubP8FG8L1pQHWOPnC6YfDkz2sLZItUqJolrpJAneM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:31:41:a1:d8:4c:75:a3:f7:b7:d6:b6:98:fd:c8:61:b9:af:a0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Apr 17 12:37:19 2026 GMT Not After : Apr 20 20:36:19 2026 GMT Subject: CN=18E58E8F8677DDFE0894B3F338FFE7C3FB2DE30C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:44:0c:1f:83:8f:e5:1d:0d:95:14:63:90: 51:c2:78:5d:45:23:a9:89:98:d2:fb:06:86:ce:3a: 8a:20:78:78:63:fe:2f:29:eb:64:7f:7f:67:34:87: 33:6d:8d:23:95:fc:89:cd:a9:e2:d4:e7:98:c3:ef: f5:90:e5:bc:bf:e4:17:e7:e5:27:78:46:b9:25:a3: 71:71:5d:f1:97:3b:da:54:df:84:88:58:18:f6:aa: 46:05:7c:5e:bd:45:7f:5e:11:b6:21:6f:db:c6:81: ca:43:ae:58:14:60:b4:8e:40:8a:e8:28:29:4a:79: 47:a8:65:77:b4:8c:a8:b6:61:02:63:f6:04:00:e7: bf:40:58:f6:76:cd:c2:25:0c:3b:a7:89:e4:db:c0: 23:62:a0:b3:e6:56:25:92:7a:c2:65:8f:bb:bf:b7: 62:0e:67:2e:bc:77:56:e7:20:02:b8:11:0d:30:71: e2:c5:68:9c:da:71:1c:58:75:2e:9c:2e:bd:69:8d: 9b:0e:b0:32:ce:85:4c:6d:92:e0:e4:00:cc:bc:c5: 30:48:d8:79:59:38:e6:66:1b:3f:0c:bf:5b:73:e3: 96:fc:48:61:d3:ae:70:69:0e:39:cf:6b:42:c2:c4: 97:48:a8:15:91:84:98:a9:ad:cc:10:83:8f:8e:10: f1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E5:8E:8F:86:77:DD:FE:08:94:B3:F3:38:FF:E7:C3:FB:2D:E3:0C X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:61:af:cc:67:d4:a1:a7:0a:7e:74:5e:4d:aa:8e:20:09:7a: 9f:a3:70:30:47:3f:85:c9:a4:6a:b0:1f:a9:f5:a8:c4:2a:6a: f8:3d:72:6d:f6:a1:04:2b:b2:ea:ff:fe:3b:fb:6e:e8:dd:b1: 56:de:2c:bd:7e:88:01:00:06:24:e9:42:54:85:c7:01:24:69: 44:22:ea:2d:86:b1:dd:eb:cf:07:f2:0e:ad:0a:a6:d0:a3:74: 46:d8:71:1a:f7:ea:6b:b8:e6:00:d3:f6:88:b8:b4:0c:c3:cb: 08:64:9f:f5:ca:99:ac:9c:75:32:be:5a:67:7c:fc:51:05:ca: 63:56:af:3e:69:44:fe:d2:33:f6:78:0a:31:5b:44:0b:a3:ab: 87:75:87:da:1f:ef:f9:e4:0a:1d:fa:34:d9:a5:94:ea:1c:d7: 6b:f4:5b:a7:eb:99:19:75:09:40:cf:7b:16:fd:a8:57:8d:1b: d8:6c:a1:88:ff:f7:39:45:c9:80:3a:50:c3:a8:83:c8:f5:9a: d1:91:89:3d:08:b4:1f:5f:ab:db:61:50:9f:bd:ea:ee:21:f2: e0:ae:c4:de:9e:81:0e:9a:6b:21:25:2f:d0:21:18:5d:b3:b8: d3:55:b0:c8:45:2f:5b:14:98:b9:9c:82:41:e6:65:66:22:59: 0b:4a:e1:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzFBodhMdaP3t9a2mP3IYbmvoHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNjA0MTcxMjM3MTlaFw0yNjA0MjAyMDM2MTlaMDMxMTAvBgNV BAMTKDE4RTU4RThGODY3N0RERkUwODk0QjNGMzM4RkZFN0MzRkIyREUzMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QEQMH4OP5R0NlRRjkFHCeF1F I6mJmNL7BobOOoogeHhj/i8p62R/f2c0hzNtjSOV/InNqeLU55jD7/WQ5by/5Bfn 5Sd4Rrklo3FxXfGXO9pU34SIWBj2qkYFfF69RX9eEbYhb9vGgcpDrlgUYLSOQIro KClKeUeoZXe0jKi2YQJj9gQA579AWPZ2zcIlDDunieTbwCNioLPmViWSesJlj7u/ t2IOZy68d1bnIAK4EQ0wceLFaJzacRxYdS6cLr1pjZsOsDLOhUxtkuDkAMy8xTBI 2HlZOOZmGz8Mv1tz45b8SGHTrnBpDjnPa0LCxJdIqBWRhJiprcwQg4+OEPG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGOWOj4Z33f4IlLPzOP/nw/st4wwwHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdhr8xn1KGnCn50Xk2qjiAJep+jcDBHP4XJ pGqwH6n1qMQqavg9cm32oQQrsur//jv7bujdsVbeLL1+iAEABiTpQlSFxwEkaUQi 6i2Gsd3rzwfyDq0KptCjdEbYcRr36mu45gDT9oi4tAzDywhkn/XKmaycdTK+Wmd8 /FEFymNWrz5pRP7SM/Z4CjFbRAujq4d1h9of7/nkCh36NNmllOoc12v0W6frmRl1 CUDPexb9qFeNG9hsoYj/9zlFyYA6UMOog8j1mtGRiT0ItB9fq9thUJ+96u4h8uCu xN6egQ6aayElL9AhGF2zuNNVsMhFL1sUmLmcgkHmZWYiWQtK4V4= -----END CERTIFICATE-----Generated at Sun Apr 19 11:32:33 2026 by rpki-client