$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: rXgkITXNRRGJhP6xxZLFcTaRvduyEUQixMPyBRKFPPw= Subject key identifier: E7:CD:A4:BA:FA:B4:2F:D5:6B:35:8D:74:36:21:16:4C:2A:8B:AE:F9 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 33A6ABC66051051F3C510D4B9866DAA033F0BEB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 0581 Signing time: Tue 24 Mar 2026 11:41:27 +0000 Manifest this update: Tue 24 Mar 2026 11:36:27 +0000 Manifest next update: Fri 27 Mar 2026 19:27:27 +0000 Files and hashes: 1: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: KzgLs/LHXiYp6dca8nzIUvPjUz6brhBBX/CAtP5nMik=) 2: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: sN0bA5PBCm+C7V38abObkygWMAGuvMJ8xoVcCiJ3ZJU=) 3: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: 8rLhPZ1kO1OPhZMtRSj4vbuT69WDh/TKZCdll2MOUmQ=) 4: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: /WT3CcLt/Wqy1totp1szjJmd03e3/iGONHlBm57jO1k=) 5: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: V3630RXZfBbv0izTqUqFayseBZlNQ8xYG082iWZg+6Q=) 6: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 6KFCBq0GeLMij9zX0LHtO8AChuye1d1F56fk0H8ZhzU=) 7: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: Wyb0UWY/xry3f5h6Pv1OX1FeBIM6n1lp2HY/CxbmmFM=) 8: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: Vj2lcWZTEwWf2AmX1t9dPjT0UD/5pkYVDIvaHli/TFM=) 9: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=) 10: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: bw8Hpu0FONj3uQaL/ySP1D3C1YAb9B5NcNozVjL3dTY=) 11: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=) 12: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: V9Mppv9SlbFw56ep+HO54EeH/ulvHDySp4xMGMMMAGE=) 13: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: WYMvSvVQ7LmzdzI/Y9IjmjwPnuhAowKHbIWl+8CxoTM=) 14: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: ioskptQxOnwUzRvlUOwTLhn2ti6yWbMMGvP/wH2z3Mo=) 15: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ou1QMOVVtAAa367JCP3byx/XbB4/rWHxtoD7UtBXQ9o=) 16: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: mm2pBp9XNAO/aA6cLfKsVFgLvpIqWU1n8jnigUN46c4=) 17: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: e4sjRhvp6mUHQQONhwMETVFyiY5/bOpZffIZ6/yt038=) 18: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: b9Rswz6WqKP1CD5vZ2CgK/WpMe7q+ItG8/U5zV32DeE=) 19: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 6ji1OwtEeZ5gDOUwTpL/nrhK0wgzay4u+O8JbfpMxKk=) 20: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: +/NKATGB5uQMThm7QeKGnVHTe5xcp8ImXTgyPu6itTk=) 21: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: bZIz402y8HeI28WEFFpDnjFVUP7vZBGPQIM5w8kbN1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a6:ab:c6:60:51:05:1f:3c:51:0d:4b:98:66:da:a0:33:f0:be:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Mar 24 11:36:27 2026 GMT Not After : Mar 27 19:27:27 2026 GMT Subject: CN=E7CDA4BAFAB42FD56B358D743621164C2A8BAEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f4:07:65:42:bc:f5:3b:7b:c0:33:50:46:6f: ed:0a:0c:5c:a2:3a:9b:82:fa:04:28:4e:1f:17:12: 78:be:c4:a8:a7:29:fd:cd:13:cd:6b:f2:b6:b8:ce: fa:1d:1a:4c:21:1c:92:42:e8:f4:c0:5f:35:52:77: d6:7f:cc:5d:4d:a1:e3:4f:d1:99:8a:68:aa:f3:5b: a3:20:55:b2:9d:ad:9c:dc:37:33:d8:1a:64:e8:aa: 1b:fd:51:a4:76:0e:81:01:f7:9d:0f:1d:ba:53:3e: 91:9f:88:7c:09:8e:30:99:ec:bb:8e:f7:67:67:6e: 8c:ae:81:ac:eb:35:74:7f:38:ad:d6:15:f0:bd:0d: f1:35:a5:33:0e:c1:12:1d:e2:81:1c:57:55:5a:27: af:ff:37:c2:61:a5:65:70:4e:55:de:6d:a6:7f:7d: c9:27:f9:56:8a:cb:af:6e:b3:be:9e:4f:9a:10:3d: be:76:fe:5b:f6:06:87:30:db:dd:5b:2e:2d:44:e0: f7:88:92:22:76:59:ac:b5:ae:64:8a:ea:20:6f:f8: 45:78:72:08:70:4d:79:a7:44:fd:bc:60:74:55:e3: 1f:7c:47:91:8f:f4:80:b7:2f:be:f9:09:61:6a:6a: b3:39:c3:06:14:30:10:d7:ef:6c:e2:fc:12:f4:53: d9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CD:A4:BA:FA:B4:2F:D5:6B:35:8D:74:36:21:16:4C:2A:8B:AE:F9 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d8:60:1a:b2:c4:27:71:b2:e5:2b:c0:a6:81:71:59:4e:ef: 95:ab:1b:1f:ad:c2:81:27:0f:4c:d6:d8:53:60:81:16:7b:64: 5e:6d:e3:f8:1e:9e:de:e5:a9:fd:87:c8:37:c3:97:55:4f:1f: 19:30:a1:0d:f0:5f:c4:75:3d:b0:b0:8a:43:ac:b7:ec:23:f0: 19:17:29:c8:47:24:47:84:bc:e9:66:ef:58:f9:77:1b:1b:7a: f5:1d:d6:10:65:b3:9b:e2:8d:13:63:0a:e9:1d:48:a4:35:c0: 58:7d:20:fa:b5:56:51:f7:3f:dc:33:31:a8:3c:6b:1a:87:ca: bc:a6:fe:7d:af:4c:ac:1b:31:8a:9d:8c:2c:5d:dc:db:da:09: a7:3d:8a:30:4c:dd:21:2d:ce:90:82:7e:b4:73:08:ee:9e:3b: b4:9c:7c:76:75:da:03:02:8b:43:7b:7b:3e:90:d3:5e:7e:8b: 7a:2c:43:99:c8:28:72:61:32:52:b6:aa:7b:6d:a5:cf:72:98: f8:4b:58:0f:52:af:ef:8a:13:46:64:31:1d:c5:46:74:fb:59: e5:69:12:a2:66:66:0f:1d:28:05:f6:41:80:41:4c:ba:c7:5b: b7:65:90:c1:94:58:08:1b:d9:a2:3d:8b:ab:20:df:34:13:25: 71:cb:73:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6arxmBRBR88UQ1LmGbaoDPwvrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNjAzMjQxMTM2MjdaFw0yNjAzMjcxOTI3MjdaMDMxMTAvBgNV BAMTKEU3Q0RBNEJBRkFCNDJGRDU2QjM1OEQ3NDM2MjExNjRDMkE4QkFFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9AdlQrz1O3vAM1BGb+0KDFyi OpuC+gQoTh8XEni+xKinKf3NE81r8ra4zvodGkwhHJJC6PTAXzVSd9Z/zF1NoeNP 0ZmKaKrzW6MgVbKdrZzcNzPYGmToqhv9UaR2DoEB950PHbpTPpGfiHwJjjCZ7LuO 92dnboyugazrNXR/OK3WFfC9DfE1pTMOwRId4oEcV1VaJ6//N8JhpWVwTlXebaZ/ fckn+VaKy69us76eT5oQPb52/lv2Bocw291bLi1E4PeIkiJ2Way1rmSK6iBv+EV4 cghwTXmnRP28YHRV4x98R5GP9IC3L775CWFqarM5wwYUMBDX72zi/BL0U9kbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU582kuvq0L9VrNY10NiEWTCqLrvkwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXYYBqyxCdxsuUrwKaBcVlO75WrGx+twoEn D0zW2FNggRZ7ZF5t4/gent7lqf2HyDfDl1VPHxkwoQ3wX8R1PbCwikOst+wj8BkX KchHJEeEvOlm71j5dxsbevUd1hBls5vijRNjCukdSKQ1wFh9IPq1VlH3P9wzMag8 axqHyrym/n2vTKwbMYqdjCxd3NvaCac9ijBM3SEtzpCCfrRzCO6eO7ScfHZ12gMC i0N7ez6Q015+i3osQ5nIKHJhMlK2qnttpc9ymPhLWA9Sr++KE0ZkMR3FRnT7WeVp EqJmZg8dKAX2QYBBTLrHW7dlkMGUWAgb2aI9i6sg3zQTJXHLc8E= -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:40 2026 by rpki-client