$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json) Hash identifier: SiZLoaFkCVRTcr+lGjMa/rfCf8NFcM379496UbG1oDE= Subject key identifier: 1C:24:2F:11:B1:72:EA:EF:6A:B5:6F:91:83:CA:B3:6D:5E:B6:DC:1D Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F Certificate serial: 57FAA8CADBCD87B3EE6CF6B802D93D695C0B4C70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft Manifest number: 0104 Signing time: Wed 15 Apr 2026 21:40:03 +0000 Manifest this update: Wed 15 Apr 2026 21:35:03 +0000 Manifest next update: Sat 18 Apr 2026 22:11:03 +0000 Files and hashes: 1: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: 2LacJURrRGdpqkr8B8+Js6eubdkn8GpcOPwFPaGcYgA=) 2: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: WXTlhMYeWb2XPsk3kKz2q/Y6eUxTYpdY6/4zyAzkOVg=) 3: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: tqkGTVXB08w5t1dRViTignjOy8s3QddFYIrWLnAeJTA=) 4: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: HT3mtD9EzYNDUslH4D8zHP3cyYz5I1nQiUhW1KPbzG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:fa:a8:ca:db:cd:87:b3:ee:6c:f6:b8:02:d9:3d:69:5c:0b:4c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F Validity Not Before: Apr 15 21:35:03 2026 GMT Not After : Apr 18 22:11:03 2026 GMT Subject: CN=1C242F11B172EAEF6AB56F9183CAB36D5EB6DC1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:4e:6d:e0:f3:56:6a:65:b1:bf:b3:3f:1d: 9b:58:24:6c:ff:72:9b:22:5f:3e:8d:5b:e5:a3:40: b3:62:d7:75:f1:e1:96:d0:3e:50:46:0b:00:6e:e2: 96:86:e4:be:d1:d7:97:78:c4:e6:2d:ac:3e:fb:77: 76:24:fa:9e:1d:06:79:7f:aa:86:51:be:a6:bb:1f: 7c:f2:68:ef:6c:86:cc:c8:ce:ea:5a:a9:ec:52:da: d2:d5:32:a0:54:f4:fe:f3:07:c3:79:07:c5:16:a6: 17:90:cb:95:9e:ab:cb:13:49:93:fe:b9:62:4f:ae: fd:21:76:74:69:de:d7:77:d2:6c:c2:5b:16:f7:20: cc:a1:72:7a:29:11:cc:f6:75:60:43:fe:62:7d:eb: 92:21:8c:d9:5e:6a:10:ba:29:bc:84:90:d9:bf:a9: ae:f9:06:75:ac:eb:af:12:be:4c:df:c4:2a:eb:7e: c0:e5:8a:31:5e:96:1d:fb:9f:7e:80:79:f7:c0:3a: 5b:ee:e3:7d:b9:f2:22:e8:e2:49:2e:f1:c5:bd:21: e2:f9:2c:03:03:b1:c3:53:29:04:33:74:96:7c:2e: 9d:f3:21:fd:7f:7f:37:08:b1:1f:6e:f3:21:86:aa: 19:10:4b:83:f3:b2:1e:79:26:ae:54:04:35:61:26: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:24:2F:11:B1:72:EA:EF:6A:B5:6F:91:83:CA:B3:6D:5E:B6:DC:1D X509v3 Authority Key Identifier: keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:27:ab:92:66:ab:1b:02:9c:94:1f:76:da:cf:76:7a:d1:f0: 35:7a:e3:a4:a4:4c:d7:59:95:89:1b:6e:0c:f3:66:81:a0:e6: 90:ca:54:33:43:47:71:bd:62:d0:d8:6b:d2:b0:9e:95:d8:8c: 89:8d:cd:5b:d0:5b:5f:66:2c:d9:fb:fc:22:f1:8f:53:fa:82: da:c6:31:19:59:63:7d:79:3a:33:82:51:6e:88:04:ad:e4:64: 42:8b:3e:31:9a:d5:ba:7e:0a:c2:06:80:61:64:47:01:55:6b: 4b:94:e3:1d:cd:76:c6:0e:0d:23:2f:96:29:fc:cd:b9:dc:c2: 46:34:fb:6b:2d:be:9b:77:12:e4:b3:97:83:1e:ce:af:23:4e: f7:ac:2e:be:ad:58:7d:74:8c:f4:07:dc:ad:d6:2a:de:53:d9: 1f:5b:6a:30:1a:c5:1f:5b:f4:ee:ab:35:90:0c:1a:18:be:d0: 04:bd:f7:21:92:fb:0a:f1:ff:5f:51:6e:ab:39:b2:29:e7:4a: 00:dc:0d:db:ee:03:97:fb:ac:f2:8b:19:09:a3:41:8a:dd:c2: ea:56:d8:11:fa:01:22:55:61:bb:0c:76:9c:b7:74:f9:56:cc: 82:f5:31:9b:a2:e6:60:2e:71:61:08:72:4e:a9:d3:9c:31:e2: 61:41:52:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/qoytvNh7PubPa4Atk9aVwLTHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0 MTE2QzQwRjAeFw0yNjA0MTUyMTM1MDNaFw0yNjA0MTgyMjExMDNaMDMxMTAvBgNV BAMTKDFDMjQyRjExQjE3MkVBRUY2QUI1NkY5MTgzQ0FCMzZENUVCNkRDMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95U5t4PNWamWxv7M/HZtYJGz/ cpsiXz6NW+WjQLNi13Xx4ZbQPlBGCwBu4paG5L7R15d4xOYtrD77d3Yk+p4dBnl/ qoZRvqa7H3zyaO9shszIzupaqexS2tLVMqBU9P7zB8N5B8UWpheQy5Weq8sTSZP+ uWJPrv0hdnRp3td30mzCWxb3IMyhcnopEcz2dWBD/mJ965IhjNleahC6KbyEkNm/ qa75BnWs668SvkzfxCrrfsDlijFelh37n36AeffAOlvu43258iLo4kku8cW9IeL5 LAMDscNTKQQzdJZ8Lp3zIf1/fzcIsR9u8yGGqhkQS4Pzsh55Jq5UBDVhJjZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHCQvEbFy6u9qtW+Rg8qzbV623B0wHwYDVR0j BBgwFoAUgQe4lwaAvxU3fiIuYJPtEkEWxA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTk1YjRiNC1iYzhhLTRjZTUtYjU1MC05YWE3YjM2ZWUxZmEvMC84MTA3Qjg5NzA2 ODBCRjE1Mzc3RTIyMkU2MDkzRUQxMjQxMTZDNDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0MTE2 QzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VE MTI0MTE2QzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADInq5JmqxsCnJQfdtrPdnrR8DV646SkTNdZ lYkbbgzzZoGg5pDKVDNDR3G9YtDYa9KwnpXYjImNzVvQW19mLNn7/CLxj1P6gtrG MRlZY315OjOCUW6IBK3kZEKLPjGa1bp+CsIGgGFkRwFVa0uU4x3NdsYODSMvlin8 zbncwkY0+2stvpt3EuSzl4Mezq8jTvesLr6tWH10jPQH3K3WKt5T2R9bajAaxR9b 9O6rNZAMGhi+0AS99yGS+wrx/19Rbqs5sinnSgDcDdvuA5f7rPKLGQmjQYrdwupW 2BH6ASJVYbsMdpy3dPlWzIL1MZui5mAucWEIck6p05wx4mFBUl8= -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:12 2026 by rpki-client