$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: F7z6ZQHsF0bDsF1iJk6CAX66zpygW2iN6ijYm8aCuvQ= Subject key identifier: 5D:79:3A:4E:A3:F4:B9:09:10:64:D8:6E:B6:13:01:88:15:29:2F:1C Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 568C65737FFAF6EA5ECE89502361D6A21125D49D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 01C7 Signing time: Thu 16 Apr 2026 13:22:26 +0000 Manifest this update: Thu 16 Apr 2026 13:17:26 +0000 Manifest next update: Sun 19 Apr 2026 20:07:26 +0000 Files and hashes: 1: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: rX/k/SGX3GdbaAjJlBSXE/K1KEEwMrEbwKyMsbAa4hs=) 2: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: 9bojYeoIsnbgW615Z6YOf1R7Ev0m7lplyXyYIOCm4zE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8c:65:73:7f:fa:f6:ea:5e:ce:89:50:23:61:d6:a2:11:25:d4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Apr 16 13:17:26 2026 GMT Not After : Apr 19 20:07:26 2026 GMT Subject: CN=5D793A4EA3F4B9091064D86EB613018815292F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:3c:61:05:c4:d8:ce:a2:30:54:7b:98:62: 02:17:d3:0e:7f:85:96:51:3f:fd:60:12:ad:d5:00: c2:03:0f:09:39:09:3d:b5:da:b8:22:1b:a2:4b:6e: 72:26:db:97:25:27:9b:72:a1:24:b2:84:62:13:63: 9e:32:40:66:0e:d9:63:fb:a2:de:b6:28:e4:0d:40: b9:18:dd:d8:20:9d:d0:13:3c:97:60:79:93:e8:18: 65:76:f8:45:de:4d:02:0e:2e:81:03:4e:6a:f8:c5: c8:f8:cb:89:cc:89:a4:1a:d9:c7:dc:fc:ee:13:84: ed:04:42:9e:9e:0e:90:66:7e:78:0c:28:9f:26:13: 19:c0:07:04:46:07:36:1a:84:ae:48:ff:65:11:71: 61:d9:b9:fe:f7:1f:2f:7e:ba:1a:e6:34:e4:c9:7e: d3:8a:76:d1:e0:a5:e1:9c:67:1e:6f:95:64:34:fc: af:05:16:af:26:42:f0:8f:2f:a4:9b:a2:a6:99:c0: b6:8d:0a:55:e9:7d:f0:40:c5:7a:75:b4:09:2a:80: dc:df:a0:76:08:1d:8b:5c:6d:b0:ee:c1:c3:28:ba: 30:55:1f:18:a1:6e:a0:2e:66:ca:06:83:26:b3:38: 7c:f7:75:36:f2:10:ed:91:1c:39:a1:d6:22:ec:06: a0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:79:3A:4E:A3:F4:B9:09:10:64:D8:6E:B6:13:01:88:15:29:2F:1C X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:55:83:0e:b8:7f:b4:db:39:e8:db:d4:58:a2:00:dc:91:af: e5:52:a0:15:62:a6:41:dc:88:f4:9c:f7:b8:c3:0d:68:57:c2: df:db:7d:83:62:8d:65:5b:a0:17:40:59:a5:3c:9b:ca:de:bd: 6d:43:35:19:fd:8e:61:bb:66:41:1d:e3:f8:2d:5b:f6:33:fc: 91:43:69:20:7e:f9:94:05:74:9c:53:06:18:8e:0e:4b:8e:31: 4d:2b:48:4b:a6:01:d6:b7:0e:29:36:d6:11:c1:b4:62:71:1e: 77:d1:a8:ed:47:d8:d5:55:6b:de:43:91:54:11:ec:08:e1:ae: d1:14:81:5c:2d:7c:02:b3:5d:8f:0b:c1:99:6f:0f:7a:11:de: 10:64:cb:60:dd:ae:a0:6b:60:e3:20:b0:36:7c:bc:e3:e2:71: 0b:ed:f8:19:5d:5c:29:4c:36:a3:09:28:39:c2:da:df:d6:51: ff:57:62:ee:91:9a:99:68:e5:d2:0c:26:1e:11:28:ec:61:b1: a7:d1:91:f1:cb:f4:b3:bd:e8:bd:71:75:ad:bd:53:b5:a0:f4: 35:b0:20:25:d9:d4:3a:3b:dd:55:73:79:bc:02:36:05:8c:65: 35:07:ac:51:f1:0a:7e:7a:0b:dc:cf:a6:d2:43:64:e1:36:82: d1:2f:3b:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVoxlc3/69upezolQI2HWohEl1J0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNjA0MTYxMzE3MjZaFw0yNjA0MTkyMDA3MjZaMDMxMTAvBgNV BAMTKDVENzkzQTRFQTNGNEI5MDkxMDY0RDg2RUI2MTMwMTg4MTUyOTJGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6jxhBcTYzqIwVHuYYgIX0w5/ hZZRP/1gEq3VAMIDDwk5CT212rgiG6JLbnIm25clJ5tyoSSyhGITY54yQGYO2WP7 ot62KOQNQLkY3dggndATPJdgeZPoGGV2+EXeTQIOLoEDTmr4xcj4y4nMiaQa2cfc /O4ThO0EQp6eDpBmfngMKJ8mExnABwRGBzYahK5I/2URcWHZuf73Hy9+uhrmNOTJ ftOKdtHgpeGcZx5vlWQ0/K8FFq8mQvCPL6SboqaZwLaNClXpffBAxXp1tAkqgNzf oHYIHYtcbbDuwcMoujBVHxihbqAuZsoGgyazOHz3dTbyEO2RHDmh1iLsBqDjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXXk6TqP0uQkQZNhuthMBiBUpLxwwHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpVgw64f7TbOejb1FiiANyRr+VSoBVipkHc iPSc97jDDWhXwt/bfYNijWVboBdAWaU8m8revW1DNRn9jmG7ZkEd4/gtW/Yz/JFD aSB++ZQFdJxTBhiODkuOMU0rSEumAda3Dik21hHBtGJxHnfRqO1H2NVVa95DkVQR 7AjhrtEUgVwtfAKzXY8LwZlvD3oR3hBky2DdrqBrYOMgsDZ8vOPicQvt+BldXClM NqMJKDnC2t/WUf9XYu6Rmplo5dIMJh4RKOxhsafRkfHL9LO96L1xda29U7Wg9DWw ICXZ1Do73VVzebwCNgWMZTUHrFHxCn56C9zPptJDZOE2gtEvOw0= -----END CERTIFICATE-----Generated at Fri Apr 17 18:37:12 2026 by rpki-client