$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: Xvu3TYJBMccGAnWTJ3uLzfmI3torYVoiviLADRSfYS0= Subject key identifier: A5:38:C7:BA:ED:30:86:64:05:85:75:D4:80:0A:83:AF:A4:32:5B:28 Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 0D2481032242D1BAEDFF9CE87AFA39D4D2541505 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 0568 Signing time: Thu 16 Apr 2026 14:21:18 +0000 Manifest this update: Thu 16 Apr 2026 14:16:18 +0000 Manifest next update: Sun 19 Apr 2026 20:47:18 +0000 Files and hashes: 1: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=) 2: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=) 3: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: zD6P10c08vBdVUX1Blw4siJmG1zu/6W0pMKd1wCsTHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:24:81:03:22:42:d1:ba:ed:ff:9c:e8:7a:fa:39:d4:d2:54:15:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Apr 16 14:16:18 2026 GMT Not After : Apr 19 20:47:18 2026 GMT Subject: CN=A538C7BAED308664058575D4800A83AFA4325B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:33:c5:25:ee:d6:bc:b2:5d:8c:58:b3:d3: 7a:02:57:82:53:ad:e7:87:4f:ee:a7:59:ac:96:e8: 82:dd:c7:2e:f0:d5:51:26:3d:58:30:6e:86:26:e3: 85:11:f0:61:7d:fa:c3:3e:5f:c9:98:23:d8:5d:e9: d0:f1:96:f4:bc:a4:13:07:97:d8:3d:d3:99:59:7e: 30:17:a9:e7:3a:7e:4d:b7:c1:de:76:12:0b:7b:2e: 29:69:1b:35:2b:96:d3:d7:26:91:3a:d3:7f:1a:86: 35:c0:16:e2:e6:39:6e:6c:9e:95:42:a6:99:e1:94: b8:0d:0d:01:d7:1e:ff:17:83:eb:06:a7:43:7b:34: c5:05:68:06:00:a3:96:f3:38:f9:8f:1a:16:9e:d2: ac:71:81:25:75:bb:d1:ff:08:71:39:ef:e0:06:63: 18:34:4a:ba:49:a5:38:0c:0b:77:5c:95:85:15:2c: 3d:ea:79:60:07:57:08:6f:fe:ea:1b:4f:7f:78:2d: 56:67:74:16:12:74:c2:8c:31:cb:3d:50:62:89:e0: a7:9c:f4:8d:28:f3:10:42:6d:11:53:c5:f7:40:95: 21:e1:2f:1a:41:cd:5d:6d:b6:37:c1:1b:7c:32:7d: 6c:f4:21:d6:b2:26:16:d3:1b:dd:3b:65:76:a0:0e: be:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:38:C7:BA:ED:30:86:64:05:85:75:D4:80:0A:83:AF:A4:32:5B:28 X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e8:e7:ab:7f:4c:eb:6a:de:f5:e7:64:bc:5c:c2:f7:63:53: f1:3a:bf:7f:97:53:0b:d3:b7:f5:16:dd:b4:84:50:4f:83:01: 71:5f:92:13:39:39:b6:34:0e:86:57:82:a7:f2:c5:79:04:9f: 91:a5:9f:48:0a:62:de:68:31:3c:f2:0f:61:26:85:5d:d8:f8: a6:3d:16:35:26:50:21:25:13:74:25:8d:8f:a0:1e:3a:a2:97: 9d:bc:49:ee:25:fe:c4:a8:50:17:47:6a:35:77:e9:5d:e4:12: a2:b4:17:47:6b:2b:56:2c:5d:f9:8e:be:ad:29:2d:a5:ea:f6: b4:68:e3:dd:55:74:a2:5e:b0:26:c8:04:7b:90:fd:30:a4:4b: 4a:5d:d8:72:36:fc:82:db:ed:ec:5d:87:0a:0a:78:79:69:ad: 09:01:0f:da:0c:11:b9:76:dd:ac:7f:4f:8d:ed:e9:2c:14:69: 4b:b4:f1:e7:61:95:b7:00:85:b6:9a:97:9e:11:ed:e4:2b:da: d9:79:11:88:9a:15:21:60:e4:dc:cb:4a:9c:4b:fc:44:ef:5a: 97:f3:7f:e6:27:2e:5f:09:f4:d2:2e:1a:14:ec:c8:86:15:ce: fc:a0:36:91:df:30:fd:fd:67:11:da:e8:01:8b:08:ce:0d:dc: 84:32:bb:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDSSBAyJC0brt/5zoevo51NJUFQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNjA0MTYxNDE2MThaFw0yNjA0MTkyMDQ3MThaMDMxMTAvBgNV BAMTKEE1MzhDN0JBRUQzMDg2NjQwNTg1NzVENDgwMEE4M0FGQTQzMjVCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaDPFJe7WvLJdjFiz03oCV4JT reeHT+6nWayW6ILdxy7w1VEmPVgwboYm44UR8GF9+sM+X8mYI9hd6dDxlvS8pBMH l9g905lZfjAXqec6fk23wd52Egt7LilpGzUrltPXJpE6038ahjXAFuLmOW5snpVC ppnhlLgNDQHXHv8Xg+sGp0N7NMUFaAYAo5bzOPmPGhae0qxxgSV1u9H/CHE57+AG Yxg0SrpJpTgMC3dclYUVLD3qeWAHVwhv/uobT394LVZndBYSdMKMMcs9UGKJ4Kec 9I0o8xBCbRFTxfdAlSHhLxpBzV1ttjfBG3wyfWz0IdayJhbTG907ZXagDr6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpTjHuu0whmQFhXXUgAqDr6QyWygwHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7o56t/TOtq3vXnZLxcwvdjU/E6v3+XUwvT t/UW3bSEUE+DAXFfkhM5ObY0DoZXgqfyxXkEn5Gln0gKYt5oMTzyD2EmhV3Y+KY9 FjUmUCElE3QljY+gHjqil528Se4l/sSoUBdHajV36V3kEqK0F0drK1YsXfmOvq0p LaXq9rRo491VdKJesCbIBHuQ/TCkS0pd2HI2/ILb7exdhwoKeHlprQkBD9oMEbl2 3ax/T43t6SwUaUu08edhlbcAhbaal54R7eQr2tl5EYiaFSFg5NzLSpxL/ETvWpfz f+YnLl8J9NIuGhTsyIYVzvygNpHfMP39ZxHa6AGLCM4N3IQyu3E= -----END CERTIFICATE-----Generated at Sat Apr 18 05:00:03 2026 by rpki-client