$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: sPuirwzyFc2Sl8AX+gkWAMmy527iTS4fSLlwWXRMdrw= Subject key identifier: 27:92:12:E4:F7:39:11:93:96:DE:8E:FE:A3:7A:04:F9:35:A1:F6:A6 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 18234D0909CD651A37B7A7D63BC929FF41E90F6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 0586 Signing time: Sun 05 Apr 2026 00:51:26 +0000 Manifest this update: Sun 05 Apr 2026 00:46:26 +0000 Manifest next update: Wed 08 Apr 2026 12:35:26 +0000 Files and hashes: 1: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: J3/CmSrrGwPER39Cu6S87vqXtoBJTuO52W56OEKvVvc=) 2: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: WYMvSvVQ7LmzdzI/Y9IjmjwPnuhAowKHbIWl+8CxoTM=) 3: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: 8rLhPZ1kO1OPhZMtRSj4vbuT69WDh/TKZCdll2MOUmQ=) 4: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: bZIz402y8HeI28WEFFpDnjFVUP7vZBGPQIM5w8kbN1g=) 5: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: Wyb0UWY/xry3f5h6Pv1OX1FeBIM6n1lp2HY/CxbmmFM=) 6: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: b9Rswz6WqKP1CD5vZ2CgK/WpMe7q+ItG8/U5zV32DeE=) 7: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=) 8: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 6KFCBq0GeLMij9zX0LHtO8AChuye1d1F56fk0H8ZhzU=) 9: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: +/NKATGB5uQMThm7QeKGnVHTe5xcp8ImXTgyPu6itTk=) 10: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 6ji1OwtEeZ5gDOUwTpL/nrhK0wgzay4u+O8JbfpMxKk=) 11: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: e4sjRhvp6mUHQQONhwMETVFyiY5/bOpZffIZ6/yt038=) 12: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: bw8Hpu0FONj3uQaL/ySP1D3C1YAb9B5NcNozVjL3dTY=) 13: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: V3630RXZfBbv0izTqUqFayseBZlNQ8xYG082iWZg+6Q=) 14: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ou1QMOVVtAAa367JCP3byx/XbB4/rWHxtoD7UtBXQ9o=) 15: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: mm2pBp9XNAO/aA6cLfKsVFgLvpIqWU1n8jnigUN46c4=) 16: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: KzgLs/LHXiYp6dca8nzIUvPjUz6brhBBX/CAtP5nMik=) 17: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: ioskptQxOnwUzRvlUOwTLhn2ti6yWbMMGvP/wH2z3Mo=) 18: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: V9Mppv9SlbFw56ep+HO54EeH/ulvHDySp4xMGMMMAGE=) 19: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: /WT3CcLt/Wqy1totp1szjJmd03e3/iGONHlBm57jO1k=) 20: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=) 21: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: Vj2lcWZTEwWf2AmX1t9dPjT0UD/5pkYVDIvaHli/TFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Apr 2026 12:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:23:4d:09:09:cd:65:1a:37:b7:a7:d6:3b:c9:29:ff:41:e9:0f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Apr 5 00:46:26 2026 GMT Not After : Apr 8 12:35:26 2026 GMT Subject: CN=279212E4F739119396DE8EFEA37A04F935A1F6A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:23:d4:6b:6f:da:e8:23:33:eb:7c:ed:ac: dc:d5:59:56:92:d1:ac:1c:0d:b9:06:30:0f:01:32: 88:2b:5c:24:40:8f:25:c8:27:10:55:d0:c8:3c:21: 30:eb:2d:b2:90:76:60:d1:96:d1:92:6e:31:74:e1: c7:58:4a:8b:1a:1f:70:2f:ed:00:86:f3:71:48:99: 1e:77:a0:82:26:9a:51:b4:db:26:72:d2:c6:20:32: 92:58:10:f2:9b:f1:2c:d1:a4:a0:4c:a5:2c:c0:17: 1e:43:15:49:70:08:88:a5:b1:85:d6:39:08:01:1c: fa:90:21:8d:ea:50:cf:4f:e5:15:e2:a9:14:6c:b2: 0c:31:41:2d:df:d5:72:29:7f:47:1a:2c:1c:18:71: 43:f6:48:84:06:48:c5:0b:12:c8:61:9d:0b:79:e5: d2:87:5c:bf:2f:40:3d:1f:fe:f4:78:31:38:34:35: 06:0f:3a:d7:82:fb:6b:a6:a4:d1:03:1c:17:04:3f: 3c:04:22:c5:16:b0:97:24:e2:29:5b:c5:75:e7:ef: f0:01:ae:b2:94:d2:9c:c5:a9:d4:02:fa:98:6f:5c: 50:0b:35:af:30:9b:ca:98:cf:54:e2:bb:07:a9:a6: 79:05:61:82:2b:dd:8c:cc:c0:00:4f:59:ed:eb:a7: c5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:92:12:E4:F7:39:11:93:96:DE:8E:FE:A3:7A:04:F9:35:A1:F6:A6 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ca:2a:22:e2:c0:1a:22:f4:82:a1:c2:b9:29:a4:3a:32:4e: 3f:ef:7a:f3:57:60:f1:a6:9c:e1:d1:67:d3:ba:12:ec:1c:eb: 1f:af:f4:54:36:d2:7a:f3:a9:ca:0b:0f:2d:5c:83:ec:1e:97: dd:0b:d3:b5:d6:da:04:fc:63:0e:a1:c7:ca:c3:6c:54:69:4e: 6f:1d:72:aa:c2:29:e7:ef:b7:72:65:4a:31:28:92:c8:5f:39: 24:ea:93:fe:e7:46:d1:22:fa:4d:97:64:03:5e:9b:1b:c7:9d: 71:95:6c:72:42:b5:3a:74:9e:91:f3:72:f9:63:6b:98:70:c9: cf:c8:8c:3e:2c:7d:cc:c8:17:01:48:e7:38:ba:34:04:e0:09: ba:04:e6:e0:89:4b:c8:71:ae:46:00:2a:09:a3:42:79:ed:b7: 9a:88:35:89:1a:eb:5d:64:9a:df:87:af:e1:8a:86:ac:5e:e2: ad:c5:a8:3b:5c:16:92:ac:8b:51:39:26:c5:0e:14:dc:9e:80: e0:81:46:eb:78:ac:b2:c9:bc:c4:a1:aa:81:72:90:08:30:c0: 57:c4:e6:c8:84:1e:10:2b:89:9c:24:2f:8c:71:fa:78:07:d0: c8:ef:1a:17:61:35:34:88:50:2b:8a:ca:fe:2a:95:12:88:f8: 7e:0d:72:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGCNNCQnNZRo3t6fWO8kp/0HpD24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNjA0MDUwMDQ2MjZaFw0yNjA0MDgxMjM1MjZaMDMxMTAvBgNV BAMTKDI3OTIxMkU0RjczOTExOTM5NkRFOEVGRUEzN0EwNEY5MzVBMUY2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ECPUa2/a6CMz63ztrNzVWVaS 0awcDbkGMA8BMogrXCRAjyXIJxBV0Mg8ITDrLbKQdmDRltGSbjF04cdYSosaH3Av 7QCG83FImR53oIImmlG02yZy0sYgMpJYEPKb8SzRpKBMpSzAFx5DFUlwCIilsYXW OQgBHPqQIY3qUM9P5RXiqRRssgwxQS3f1XIpf0caLBwYcUP2SIQGSMULEshhnQt5 5dKHXL8vQD0f/vR4MTg0NQYPOteC+2umpNEDHBcEPzwEIsUWsJck4ilbxXXn7/AB rrKU0pzFqdQC+phvXFALNa8wm8qYz1TiuweppnkFYYIr3YzMwABPWe3rp8X3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ5IS5Pc5EZOW3o7+o3oE+TWh9qYwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvKKiLiwBoi9IKhwrkppDoyTj/vevNXYPGm nOHRZ9O6Euwc6x+v9FQ20nrzqcoLDy1cg+wel90L07XW2gT8Yw6hx8rDbFRpTm8d cqrCKefvt3JlSjEokshfOSTqk/7nRtEi+k2XZANemxvHnXGVbHJCtTp0npHzcvlj a5hwyc/IjD4sfczIFwFI5zi6NATgCboE5uCJS8hxrkYAKgmjQnntt5qINYka611k mt+Hr+GKhqxe4q3FqDtcFpKsi1E5JsUOFNyegOCBRut4rLLJvMShqoFykAgwwFfE 5siEHhAriZwkL4xx+ngH0MjvGhdhNTSIUCuKyv4qlRKI+H4NcrA= -----END CERTIFICATE-----Generated at Mon Apr 6 14:53:31 2026 by rpki-client