$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: 34WucZvFDmT3VM57KceSzjt0fOstXphTriflgO5hX0A= Subject key identifier: 5F:DB:C2:69:0B:20:BE:A2:E9:2D:46:08:E4:E1:47:03:F9:85:50:18 Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 0D05004462216F07E58BEA48C5AACD2DFDA74BF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 0395 Signing time: Thu 16 Apr 2026 13:20:03 +0000 Manifest this update: Thu 16 Apr 2026 13:15:03 +0000 Manifest next update: Sun 19 Apr 2026 16:59:03 +0000 Files and hashes: 1: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) 2: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: iugQ7uB3y1GTKQAet6F4i28Pb+rThdS0SlxqXqKNCsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:05:00:44:62:21:6f:07:e5:8b:ea:48:c5:aa:cd:2d:fd:a7:4b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Apr 16 13:15:03 2026 GMT Not After : Apr 19 16:59:03 2026 GMT Subject: CN=5FDBC2690B20BEA2E92D4608E4E14703F9855018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:33:78:94:7f:89:a0:3c:33:85:d0:4d:9d: d2:b4:a4:80:7a:9a:3c:bc:e1:b8:82:5f:dd:d0:25: 0a:dd:1e:70:0f:35:63:4b:2c:f7:62:bb:ae:d2:21: 87:84:8f:90:4a:11:fc:aa:14:f6:89:8c:da:f4:6e: 2d:5a:54:f4:bb:46:0d:a2:ad:20:87:4e:fb:82:6b: 42:a4:69:9c:d4:8a:37:a1:13:af:1e:4e:96:a0:5d: 52:bc:87:94:7b:9a:c4:df:b9:3e:85:c3:b5:7a:29: da:52:8f:90:e8:1e:80:04:46:0b:94:9d:a7:ca:92: 49:fb:e3:de:c4:34:05:99:9c:ce:e3:5f:1e:10:6d: b0:d0:e2:f4:2b:79:39:e8:b6:dd:16:70:42:02:6e: 30:a5:94:67:2b:20:c6:a8:89:e7:1a:a0:d3:65:5f: 08:dd:fa:db:ce:4b:24:ba:c2:78:f9:dd:52:8e:4a: ec:cf:c8:35:ee:f6:e4:e5:07:4b:fb:3d:f5:c6:aa: 3a:99:f2:dc:e4:1a:ea:5e:0b:3f:57:38:33:29:c4: da:77:86:c2:ac:34:0c:48:d3:4b:5a:c4:ff:82:e8: 0f:23:f7:30:4d:70:a1:78:44:f8:aa:54:55:0d:37: b5:78:2f:52:cf:5f:b1:dc:db:5a:ef:0e:fc:4f:96: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DB:C2:69:0B:20:BE:A2:E9:2D:46:08:E4:E1:47:03:F9:85:50:18 X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:38:a1:8d:a8:53:18:aa:2e:ac:43:c5:f1:35:74:6e:b7:ea: bc:5c:73:99:f3:a8:77:4b:fd:66:17:70:80:58:9e:96:67:44: 48:4b:a2:16:8a:9d:3b:a1:c6:e8:34:33:55:fa:d0:4e:13:a1: 68:e5:7d:98:ff:4d:13:3b:b5:3d:78:42:34:3b:cb:ca:ca:7a: 60:f3:46:d7:38:88:5e:e2:63:f5:d3:27:4a:17:fe:e9:2d:45: 0f:fe:aa:61:70:7a:73:4c:4c:6a:fb:5f:a6:2e:8b:7e:94:30: 9e:73:5c:8d:49:f3:e4:3c:5a:ab:a6:11:f1:1f:08:9f:50:45: 33:55:04:eb:51:09:7b:18:a5:02:54:ca:54:92:a1:14:8b:d7: a2:54:34:53:c7:54:43:e8:42:aa:d0:af:d5:6c:5d:54:9e:28: 75:c3:29:87:18:77:f1:63:07:11:c3:17:31:9f:8b:27:9c:d8: 8a:be:27:e0:53:fb:33:68:16:cd:7f:36:77:c6:d9:49:e2:75: a5:6d:fe:f2:8e:da:28:f1:9d:6e:36:76:ed:ac:9c:9b:2b:78: ac:cf:24:73:c9:c1:92:fc:0e:ee:41:2c:6c:4a:40:32:08:5d: c6:f0:fe:44:c0:db:f1:f7:5e:2d:04:7c:41:3a:15:ed:0c:cb: 92:39:d8:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQUARGIhbwfli+pIxarNLf2nS/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNjA0MTYxMzE1MDNaFw0yNjA0MTkxNjU5MDNaMDMxMTAvBgNV BAMTKDVGREJDMjY5MEIyMEJFQTJFOTJENDYwOEU0RTE0NzAzRjk4NTUwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzFDN4lH+JoDwzhdBNndK0pIB6 mjy84biCX93QJQrdHnAPNWNLLPdiu67SIYeEj5BKEfyqFPaJjNr0bi1aVPS7Rg2i rSCHTvuCa0KkaZzUijehE68eTpagXVK8h5R7msTfuT6Fw7V6KdpSj5DoHoAERguU nafKkkn7497ENAWZnM7jXx4QbbDQ4vQreTnott0WcEICbjCllGcrIMaoiecaoNNl Xwjd+tvOSyS6wnj53VKOSuzPyDXu9uTlB0v7PfXGqjqZ8tzkGupeCz9XODMpxNp3 hsKsNAxI00taxP+C6A8j9zBNcKF4RPiqVFUNN7V4L1LPX7Hc21rvDvxPlhmVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX9vCaQsgvqLpLUYI5OFHA/mFUBgwHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEo4oY2oUxiqLqxDxfE1dG636rxcc5nzqHdL /WYXcIBYnpZnREhLohaKnTuhxug0M1X60E4ToWjlfZj/TRM7tT14QjQ7y8rKemDz Rtc4iF7iY/XTJ0oX/uktRQ/+qmFwenNMTGr7X6Yui36UMJ5zXI1J8+Q8WqumEfEf CJ9QRTNVBOtRCXsYpQJUylSSoRSL16JUNFPHVEPoQqrQr9VsXVSeKHXDKYcYd/Fj BxHDFzGfiyec2Iq+J+BT+zNoFs1/NnfG2UnidaVt/vKO2ijxnW42du2snJsreKzP JHPJwZL8Du5BLGxKQDIIXcbw/kTA2/H3Xi0EfEE6Fe0My5I52Lo= -----END CERTIFICATE-----Generated at Fri Apr 17 15:23:09 2026 by rpki-client