$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json) Hash identifier: ejM7zaahtoDvvg4F+DNQG45+az76+JMTi62X3tdJw9o= Subject key identifier: 1D:DC:8D:9C:FC:D6:2A:2A:38:CE:5E:57:1F:A1:A9:7E:DB:71:43:47 Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F Certificate serial: 4E687B1F44726437A9AE0A78DBF582CEB837D9D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft Manifest number: 0106 Signing time: Mon 20 Apr 2026 08:20:24 +0000 Manifest this update: Mon 20 Apr 2026 08:15:24 +0000 Manifest next update: Thu 23 Apr 2026 19:31:24 +0000 Files and hashes: 1: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: NTIqOEv0tBRqBvgNcM2Ez6ezDuzCzYX0WV9rHHMa5v8=) 2: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: WXTlhMYeWb2XPsk3kKz2q/Y6eUxTYpdY6/4zyAzkOVg=) 3: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: 2LacJURrRGdpqkr8B8+Js6eubdkn8GpcOPwFPaGcYgA=) 4: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: HT3mtD9EzYNDUslH4D8zHP3cyYz5I1nQiUhW1KPbzG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:68:7b:1f:44:72:64:37:a9:ae:0a:78:db:f5:82:ce:b8:37:d9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F Validity Not Before: Apr 20 08:15:24 2026 GMT Not After : Apr 23 19:31:24 2026 GMT Subject: CN=1DDC8D9CFCD62A2A38CE5E571FA1A97EDB714347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b9:fe:a9:b2:5e:bf:53:54:da:58:d3:17:3b: 13:d0:49:ab:fc:66:ca:79:4e:d0:a4:e3:48:cf:e9: 9a:68:68:fe:64:a6:e3:f6:43:41:9a:a6:b8:df:46: 79:b0:02:0f:b7:07:f1:4f:20:cd:76:af:48:1f:ce: 49:51:d0:33:e0:19:72:aa:96:ad:19:8b:a3:f0:2b: fc:5b:44:21:31:ff:c2:73:cc:29:55:c4:7c:86:71: 03:32:9e:fb:67:d3:af:f7:ac:bf:e2:57:15:7c:a3: 3d:8c:43:18:0c:5d:ce:72:06:69:67:4b:56:6c:fb: 0d:8c:04:4c:6c:6e:bd:b9:f3:87:72:a6:97:71:67: ec:39:21:29:92:d9:4a:dc:bb:3e:54:af:c4:89:c0: 2a:64:35:45:db:c2:58:12:a4:f3:b1:41:09:7c:5d: 7e:da:b8:6c:1d:3a:ad:2f:3b:b9:d9:f0:ad:a0:ee: 19:4c:82:41:07:48:a7:60:53:87:67:bd:ff:e6:1f: 27:ad:1e:50:9e:ec:e8:67:37:a1:34:13:34:6d:79: 7c:a0:24:bc:79:01:db:7a:54:c2:d8:aa:03:ec:f3: 5f:37:fb:88:b7:ea:81:7a:3e:df:9b:24:1c:16:05: a3:79:d4:0b:5e:28:6a:79:4b:c6:06:f2:b1:b5:50: d5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DC:8D:9C:FC:D6:2A:2A:38:CE:5E:57:1F:A1:A9:7E:DB:71:43:47 X509v3 Authority Key Identifier: keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a7:20:c9:ab:29:79:f9:8e:e9:33:20:2b:42:70:ae:53:c4: 55:e2:a2:2e:da:df:87:c9:38:3f:10:7d:7a:91:a9:f4:21:f8: af:8f:f1:c8:81:da:17:d5:a1:7d:c7:ca:96:3a:cf:ea:8f:1e: e3:ff:97:3c:f0:f0:0e:74:8e:43:67:73:05:6e:ec:34:1e:0f: dc:88:25:16:ac:ce:e6:bd:89:03:1f:87:78:2a:4d:d5:46:ad: a1:49:34:43:72:28:90:28:8a:71:07:f6:4f:b6:a7:b2:6b:68: cd:1c:57:54:01:da:fc:ba:11:1c:73:6e:51:61:6f:ab:9b:f1: 9d:e3:63:c0:26:32:7c:0a:27:d7:66:59:34:de:df:57:f8:43: b5:20:2e:89:69:20:b3:67:cf:69:a0:55:e5:5e:29:c8:14:73: 7f:e0:56:41:57:10:eb:ff:f6:90:c8:65:15:83:9c:b0:e0:84: bf:06:1c:39:71:6e:76:7b:f2:1b:6a:85:80:d3:5b:95:cb:81: 58:03:81:fc:ff:c4:29:d9:81:da:85:9a:f7:85:09:f3:67:51: 3a:e6:25:fb:96:d5:13:f1:97:ab:3c:3a:eb:5f:ee:4f:4f:59: 02:f6:73:f9:2e:14:f9:6d:0b:22:9f:70:4c:3c:04:b8:6b:a6: dd:4f:2d:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmh7H0RyZDeprgp42/WCzrg32dcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0 MTE2QzQwRjAeFw0yNjA0MjAwODE1MjRaFw0yNjA0MjMxOTMxMjRaMDMxMTAvBgNV BAMTKDFEREM4RDlDRkNENjJBMkEzOENFNUU1NzFGQTFBOTdFREI3MTQzNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDduf6psl6/U1TaWNMXOxPQSav8 Zsp5TtCk40jP6ZpoaP5kpuP2Q0GaprjfRnmwAg+3B/FPIM12r0gfzklR0DPgGXKq lq0Zi6PwK/xbRCEx/8JzzClVxHyGcQMynvtn06/3rL/iVxV8oz2MQxgMXc5yBmln S1Zs+w2MBExsbr2584dyppdxZ+w5ISmS2Urcuz5Ur8SJwCpkNUXbwlgSpPOxQQl8 XX7auGwdOq0vO7nZ8K2g7hlMgkEHSKdgU4dnvf/mHyetHlCe7OhnN6E0EzRteXyg JLx5Adt6VMLYqgPs8183+4i36oF6Pt+bJBwWBaN51AteKGp5S8YG8rG1UNVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHdyNnPzWKio4zl5XH6GpfttxQ0cwHwYDVR0j BBgwFoAUgQe4lwaAvxU3fiIuYJPtEkEWxA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTk1YjRiNC1iYzhhLTRjZTUtYjU1MC05YWE3YjM2ZWUxZmEvMC84MTA3Qjg5NzA2 ODBCRjE1Mzc3RTIyMkU2MDkzRUQxMjQxMTZDNDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0MTE2 QzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VE MTI0MTE2QzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKnIMmrKXn5jukzICtCcK5TxFXioi7a34fJ OD8QfXqRqfQh+K+P8ciB2hfVoX3HypY6z+qPHuP/lzzw8A50jkNncwVu7DQeD9yI JRaszua9iQMfh3gqTdVGraFJNENyKJAoinEH9k+2p7JraM0cV1QB2vy6ERxzblFh b6ub8Z3jY8AmMnwKJ9dmWTTe31f4Q7UgLolpILNnz2mgVeVeKcgUc3/gVkFXEOv/ 9pDIZRWDnLDghL8GHDlxbnZ78htqhYDTW5XLgVgDgfz/xCnZgdqFmveFCfNnUTrm JfuW1RPxl6s8Outf7k9PWQL2c/kuFPltCyKfcEw8BLhrpt1PLSo= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:52 2026 by rpki-client