$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: zXPh35RTkbGr+LuAmqPtWgr07irC/VqCFoNpQYRNANU= Subject key identifier: 84:BF:C1:FB:55:30:E4:F3:6F:D3:A4:B7:90:BA:CF:A4:00:52:FC:3C Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 4087B1DA63C1233EF61CC33AFFE91A7B1A4B90CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: 0104 Signing time: Thu 16 Apr 2026 21:41:40 +0000 Manifest this update: Thu 16 Apr 2026 21:36:40 +0000 Manifest next update: Mon 20 Apr 2026 04:51:40 +0000 Files and hashes: 1: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: v8bBnW/IsT95QBl4fIG2cpqFWqej9N7mhtdVsVo8Djg=) 2: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: tfvFAul9pjc/Wi//p7lcXXJokuoGN8UfdeXWsqF8UAA=) 3: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: L0OHjTLAoKuTGX0pU6SpedvQBvVTanvlgQCeJn9jtow=) 4: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: +SLAv/Ao5ipR0W/v6AgPtFrgrn+d0qK7qqbca2xo8WU=) 5: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: zKHXogUEbsyyC8ISVc+ANF+73aCbCi6els1lcd1hD1E=) 6: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: Jy6L+sGekPMyuMtdpky0D2jRd/OipqZg9C05WnpPS4Y=) 7: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: vaX/n6vc4K9mejYUu1eJI/tNjnfyjVyWN2o5zH8Hflc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:87:b1:da:63:c1:23:3e:f6:1c:c3:3a:ff:e9:1a:7b:1a:4b:90:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Apr 16 21:36:40 2026 GMT Not After : Apr 20 04:51:40 2026 GMT Subject: CN=84BFC1FB5530E4F36FD3A4B790BACFA40052FC3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e7:84:c4:2a:c1:28:1b:47:c6:9a:97:f3:1e: fe:bb:0a:86:0a:1f:d5:b7:2d:ae:60:9b:11:af:0e: 96:e1:87:c0:4f:46:90:50:a4:9e:d7:15:ae:0e:55: 38:3d:a2:3e:3a:b9:e2:87:b9:1a:e3:8d:d1:2c:f8: e5:49:21:0e:34:02:87:ae:79:11:66:29:7d:44:2c: da:1c:d7:dc:a5:13:e8:9c:07:b1:69:f8:7c:76:40: ba:5b:35:93:49:e7:8b:86:6f:cf:fd:5e:57:6f:01: 98:60:1e:23:e1:90:4b:d6:1c:23:85:99:e5:de:9e: 4f:4d:dd:e1:c0:ff:7d:b8:51:7e:83:db:74:99:89: 20:43:f8:62:22:19:2b:64:c7:3c:26:44:60:63:fb: 37:30:f8:2e:26:f7:57:4f:e9:3f:f8:a4:3f:09:d1: bc:75:29:dc:f8:ec:14:b6:6f:68:08:73:0d:36:f4: 77:bc:5e:8c:d4:f8:7d:78:42:75:e3:34:ff:97:39: 35:de:a4:11:27:59:10:82:93:ba:bb:88:d8:97:72: 7b:1f:b6:48:3f:62:a1:5c:73:51:5f:91:40:14:e9: 16:f0:15:98:a7:20:6e:2a:c4:06:ff:9d:07:74:1f: 5c:e9:64:ba:ff:c4:c1:79:48:5e:cd:bb:b8:47:f9: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BF:C1:FB:55:30:E4:F3:6F:D3:A4:B7:90:BA:CF:A4:00:52:FC:3C X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8e:50:5a:6a:2d:d8:d4:dd:75:4c:db:6a:cb:c3:3f:2d:8f: 4c:69:05:97:a6:16:50:d7:e5:57:e4:44:3a:06:97:7a:5f:f5: 98:a4:89:cb:c1:92:b4:42:2d:ab:51:02:c6:f3:f5:04:d0:56: 18:d8:ab:81:03:e1:18:21:79:19:a0:d7:ad:07:4c:d3:36:ec: 66:5e:93:b0:d5:c2:23:27:27:c2:f7:69:53:3b:8a:c4:8e:cb: aa:94:8f:96:15:00:31:28:02:28:03:b2:7d:b2:8f:5e:2b:30: 19:81:a5:09:e9:1e:b7:87:88:fa:26:a3:4a:f6:87:74:7f:ca: 06:5e:45:60:28:68:3c:5e:83:1f:40:79:e1:b1:a4:ea:1d:89: bb:e7:f0:27:ea:d4:b8:57:92:48:76:3e:0a:b1:9e:84:44:75: 23:52:4e:92:69:74:a4:8a:87:54:84:9e:e6:ea:12:18:2b:bc: 77:43:ab:a0:c8:3e:09:60:79:03:59:1c:d3:f2:68:71:8a:e9: 83:31:9f:d8:e3:11:78:38:2f:71:23:1c:56:5d:e3:38:cf:bd: 5a:2f:c9:a3:54:4b:75:2b:76:2e:2f:c1:45:30:37:38:1b:ec: 3b:ed:d0:2d:7e:4d:5c:1c:3e:37:ed:5c:79:97:88:10:2f:12: c5:95:ad:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQIex2mPBIz72HMM6/+kaexpLkMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNjA0MTYyMTM2NDBaFw0yNjA0MjAwNDUxNDBaMDMxMTAvBgNV BAMTKDg0QkZDMUZCNTUzMEU0RjM2RkQzQTRCNzkwQkFDRkE0MDA1MkZDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq54TEKsEoG0fGmpfzHv67CoYK H9W3La5gmxGvDpbhh8BPRpBQpJ7XFa4OVTg9oj46ueKHuRrjjdEs+OVJIQ40Aoeu eRFmKX1ELNoc19ylE+icB7Fp+Hx2QLpbNZNJ54uGb8/9XldvAZhgHiPhkEvWHCOF meXenk9N3eHA/324UX6D23SZiSBD+GIiGStkxzwmRGBj+zcw+C4m91dP6T/4pD8J 0bx1Kdz47BS2b2gIcw029He8XozU+H14QnXjNP+XOTXepBEnWRCCk7q7iNiXcnsf tkg/YqFcc1FfkUAU6RbwFZinIG4qxAb/nQd0H1zpZLr/xMF5SF7Nu7hH+attAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhL/B+1Uw5PNv06S3kLrPpABS/DwwHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiOUFpqLdjU3XVM22rLwz8tj0xpBZemFlDX 5VfkRDoGl3pf9ZikicvBkrRCLatRAsbz9QTQVhjYq4ED4RgheRmg160HTNM27GZe k7DVwiMnJ8L3aVM7isSOy6qUj5YVADEoAigDsn2yj14rMBmBpQnpHreHiPomo0r2 h3R/ygZeRWAoaDxegx9AeeGxpOodibvn8Cfq1LhXkkh2PgqxnoREdSNSTpJpdKSK h1SEnubqEhgrvHdDq6DIPglgeQNZHNPyaHGK6YMxn9jjEXg4L3EjHFZd4zjPvVov yaNUS3Urdi4vwUUwNzgb7Dvt0C1+TVwcPjftXHmXiBAvEsWVrfY= -----END CERTIFICATE-----Generated at Fri Apr 17 21:19:20 2026 by rpki-client