$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: kqWUGjuY01s6i1KGe9yLBI/JPS1xrj9w4+khrkkrijI= Subject key identifier: EF:09:61:BB:E2:4D:D3:FE:22:BF:D7:8D:F6:5E:1E:CC:D9:23:14:0A Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 521390FEDC13BADA5890BB35907C65F853B38E5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: 012E Signing time: Fri 17 Apr 2026 11:32:15 +0000 Manifest this update: Fri 17 Apr 2026 11:27:15 +0000 Manifest next update: Mon 20 Apr 2026 17:44:15 +0000 Files and hashes: 1: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: XR720sXp6TuobjzfobpqSw0mDPah5GzM4lOVf1J9xqI=) 2: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: dLduW7MXdnSJllFKIvUDcjg3JCfw8pw/axVHyf0p8mw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:13:90:fe:dc:13:ba:da:58:90:bb:35:90:7c:65:f8:53:b3:8e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Apr 17 11:27:15 2026 GMT Not After : Apr 20 17:44:15 2026 GMT Subject: CN=EF0961BBE24DD3FE22BFD78DF65E1ECCD923140A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:4c:ed:eb:7c:09:6e:b1:87:12:5b:b9:3e: e3:8e:e0:a1:81:81:68:3c:ef:47:91:fa:57:0c:40: 9f:9c:01:9b:ae:aa:3d:ea:2b:74:a4:c8:88:e8:1a: a3:f2:f6:e5:35:98:36:d9:d4:f9:b3:0c:de:40:39: 56:ef:96:ce:43:09:8a:74:ba:10:c6:cd:3f:20:0d: 0d:76:66:44:79:2a:06:50:1d:1d:4b:36:49:2f:87: 10:e4:63:1b:b4:5b:88:3a:37:32:cc:d9:a4:0c:0f: 0f:e1:c9:13:39:d3:ab:65:7c:33:07:26:1f:5f:28: 89:f5:99:94:51:f3:4f:cd:10:b0:d5:82:17:ea:2f: 6a:08:b1:77:e0:f2:c0:94:d6:02:e7:22:4e:6a:a7: d4:47:61:d7:da:ee:85:c9:79:a8:91:cd:40:06:46: 6a:06:c6:c1:28:85:de:bb:d1:87:31:fc:c2:29:e1: 17:0a:0c:83:53:38:bf:07:3a:a3:b4:9a:65:78:ce: 09:41:eb:77:b3:e0:48:c1:ec:de:0b:89:15:3d:e4: c1:31:08:73:15:8a:6a:23:14:cc:84:71:d3:be:bd: 6a:f9:6e:0d:9b:82:c0:cf:89:48:d5:06:ce:5c:d4: af:15:43:ea:9a:7d:60:5a:c5:47:5b:22:99:30:ac: 50:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:09:61:BB:E2:4D:D3:FE:22:BF:D7:8D:F6:5E:1E:CC:D9:23:14:0A X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:80:fb:92:fb:61:79:3b:f7:06:43:07:22:f3:16:a5:ce:1d: ad:b1:e1:4f:7c:d9:18:28:92:9b:1c:6d:18:ea:53:08:56:c5: ff:50:73:9e:ef:1f:21:62:b0:1c:d1:f5:96:fa:84:33:f6:4e: 54:3b:50:89:09:ac:58:d6:60:1f:9b:04:91:dc:57:23:48:35: 7e:c0:26:ef:b6:2e:73:ea:79:70:9a:60:5f:1a:81:ec:37:f3: 43:e2:29:1c:06:26:01:30:17:2a:a6:90:72:3c:b8:01:57:5b: d5:4f:8f:bd:00:11:e6:9e:30:d6:65:89:90:de:01:51:e5:47: d5:24:41:7c:c8:db:7b:76:d1:29:14:94:10:8c:89:e2:8b:5a: 1c:c4:89:3d:e3:b8:df:bf:85:d7:54:7b:6b:4b:66:80:cb:db: 39:e1:43:4f:2e:c7:52:4f:57:67:54:97:8f:3e:6a:7f:a9:73: 14:ad:4a:eb:51:df:99:c8:90:99:84:83:9b:bf:1d:20:23:27: 4e:90:41:ab:9c:d1:8b:8f:76:7e:a4:33:52:57:a0:aa:6f:21: bb:a5:e7:db:14:6a:18:58:ea:e0:4a:43:36:c7:77:aa:33:44: 39:2d:44:74:fb:f8:77:f0:6d:80:13:d1:31:48:27:6d:72:02: 23:9d:af:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUhOQ/twTutpYkLs1kHxl+FOzjlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNjA0MTcxMTI3MTVaFw0yNjA0MjAxNzQ0MTVaMDMxMTAvBgNV BAMTKEVGMDk2MUJCRTI0REQzRkUyMkJGRDc4REY2NUUxRUNDRDkyMzE0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wEzt63wJbrGHElu5PuOO4KGB gWg870eR+lcMQJ+cAZuuqj3qK3SkyIjoGqPy9uU1mDbZ1PmzDN5AOVbvls5DCYp0 uhDGzT8gDQ12ZkR5KgZQHR1LNkkvhxDkYxu0W4g6NzLM2aQMDw/hyRM506tlfDMH Jh9fKIn1mZRR80/NELDVghfqL2oIsXfg8sCU1gLnIk5qp9RHYdfa7oXJeaiRzUAG RmoGxsEohd670Ycx/MIp4RcKDINTOL8HOqO0mmV4zglB63ez4EjB7N4LiRU95MEx CHMVimojFMyEcdO+vWr5bg2bgsDPiUjVBs5c1K8VQ+qafWBaxUdbIpkwrFB3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7wlhu+JN0/4iv9eN9l4ezNkjFAowHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2A+5L7YXk79wZDByLzFqXOHa2x4U982Rgo kpscbRjqUwhWxf9Qc57vHyFisBzR9Zb6hDP2TlQ7UIkJrFjWYB+bBJHcVyNINX7A Ju+2LnPqeXCaYF8agew380PiKRwGJgEwFyqmkHI8uAFXW9VPj70AEeaeMNZliZDe AVHlR9UkQXzI23t20SkUlBCMieKLWhzEiT3juN+/hddUe2tLZoDL2znhQ08ux1JP V2dUl48+an+pcxStSutR35nIkJmEg5u/HSAjJ06QQauc0YuPdn6kM1JXoKpvIbul 59sUahhY6uBKQzbHd6ozRDktRHT7+HfwbYAT0TFIJ21yAiOdr+o= -----END CERTIFICATE-----Generated at Fri Apr 17 13:50:45 2026 by rpki-client