$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: SI5obzxzvOGkE0WwJ1JlR/D8MiP4djipFqHGBmYA/CY= Subject key identifier: 0E:9C:A9:15:FA:D7:92:47:03:E5:EC:5E:A4:61:89:76:43:A2:60:47 Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 4B4A0B11DEAC5E3D8FF07EC52A83D9EF188DADB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 0264 Signing time: Fri 17 Apr 2026 09:40:41 +0000 Manifest this update: Fri 17 Apr 2026 09:35:41 +0000 Manifest next update: Mon 20 Apr 2026 12:19:41 +0000 Files and hashes: 1: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: 9kP7WVETfnZHl6QQOMrTEyNc8lFnH2hWuQfhVnmA8rg=) 2: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: 2BhpUk9JV9oTYqiLVMwwqvoJL+4d7TW2AtEs6eg2nFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4a:0b:11:de:ac:5e:3d:8f:f0:7e:c5:2a:83:d9:ef:18:8d:ad:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: Apr 17 09:35:41 2026 GMT Not After : Apr 20 12:19:41 2026 GMT Subject: CN=0E9CA915FAD7924703E5EC5EA461897643A26047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:89:01:8a:62:f2:29:64:37:30:6a:29:a1:2e: 16:fa:2c:2a:b6:a6:17:3f:df:40:73:af:7a:cf:12: 54:b6:cc:27:ed:ac:6e:c1:7f:9e:5a:65:7c:f7:99: 9d:47:8a:b7:59:7b:bf:2a:d8:3b:3f:6f:7a:43:13: 07:c8:53:09:89:f5:c7:04:60:4d:5f:0d:6f:96:dd: a5:96:48:23:e7:27:1c:9b:34:5c:06:da:d7:ae:a2: fa:e9:05:62:aa:86:d3:75:c3:79:52:dd:f4:c3:9e: 02:d5:fd:6e:cb:8b:7b:40:c8:35:fd:a1:48:a3:50: ee:b1:33:ce:8e:00:e3:18:11:64:c0:d0:96:87:93: ec:bf:7a:ea:69:f6:19:ff:47:55:27:ab:8b:2b:b6: f5:b7:99:25:96:00:7b:ee:de:f2:cd:d6:3c:4d:a2: 2c:f0:f6:dc:46:e9:47:5c:7f:98:32:2c:ad:ab:35: f3:eb:aa:4c:93:da:c4:a8:cc:e5:69:e4:1e:b7:24: 5c:c1:e9:04:3a:85:89:60:bd:3f:9e:7f:a1:1a:c7: 04:9a:10:75:8b:13:f7:53:11:2e:85:80:bc:2c:d9: 32:ba:d4:fc:5d:40:a1:45:7c:dd:76:bd:1f:01:5a: ad:49:96:43:9a:d1:45:5f:36:df:35:12:61:76:3c: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9C:A9:15:FA:D7:92:47:03:E5:EC:5E:A4:61:89:76:43:A2:60:47 X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:8d:0a:cd:8c:df:e6:df:0d:36:cd:c1:aa:e2:1a:42:1d:a0: cb:0c:a5:8b:e4:a0:a0:70:5f:73:65:46:b9:04:7a:03:c1:14: 21:8c:e3:42:6f:c8:a9:23:11:7c:28:d6:68:4c:15:45:11:4d: 83:9d:3a:ee:fb:2e:d0:af:c6:e2:af:f3:a6:a1:0a:3e:7b:28: ae:e0:9a:6c:03:4f:37:82:fa:d5:7d:18:f9:d1:39:ef:6c:ad: 8a:cd:11:b6:64:4a:9b:49:6e:c1:64:e7:11:e0:6f:e8:16:4a: d9:5e:d3:7b:09:66:22:e8:13:5a:9b:50:af:92:7e:c4:d8:e3: 8b:73:d1:ab:aa:ad:be:46:22:17:59:d1:8b:b1:fb:77:b2:8c: 4c:1e:f0:2f:1c:84:11:5b:63:e1:37:9c:56:42:22:ae:ca:50: 74:37:77:4e:fa:cf:9c:78:28:2d:ea:1c:1f:df:4f:29:e6:16: 94:9b:6d:9c:63:92:62:09:b9:44:23:3d:b3:47:11:50:f6:a0: 82:d0:bc:c8:5f:52:39:ed:ba:4a:e3:7a:e4:5c:6c:15:fe:02: a2:3f:1b:15:41:01:7a:a9:ca:58:b0:3c:c8:d5:f4:ab:0d:5d: 6f:1a:75:fc:38:8d:df:0d:60:a9:5e:0a:f6:b9:83:7b:71:47: 0f:d2:f3:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0oLEd6sXj2P8H7FKoPZ7xiNrbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNjA0MTcwOTM1NDFaFw0yNjA0MjAxMjE5NDFaMDMxMTAvBgNV BAMTKDBFOUNBOTE1RkFENzkyNDcwM0U1RUM1RUE0NjE4OTc2NDNBMjYwNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaiQGKYvIpZDcwaimhLhb6LCq2 phc/30Bzr3rPElS2zCftrG7Bf55aZXz3mZ1HirdZe78q2Ds/b3pDEwfIUwmJ9ccE YE1fDW+W3aWWSCPnJxybNFwG2teuovrpBWKqhtN1w3lS3fTDngLV/W7Li3tAyDX9 oUijUO6xM86OAOMYEWTA0JaHk+y/eupp9hn/R1Unq4srtvW3mSWWAHvu3vLN1jxN oizw9txG6Udcf5gyLK2rNfPrqkyT2sSozOVp5B63JFzB6QQ6hYlgvT+ef6EaxwSa EHWLE/dTES6FgLws2TK61PxdQKFFfN12vR8BWq1JlkOa0UVfNt81EmF2PE+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDpypFfrXkkcD5exepGGJdkOiYEcwHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWNCs2M3+bfDTbNwariGkIdoMsMpYvkoKBw X3NlRrkEegPBFCGM40JvyKkjEXwo1mhMFUURTYOdOu77LtCvxuKv86ahCj57KK7g mmwDTzeC+tV9GPnROe9srYrNEbZkSptJbsFk5xHgb+gWStle03sJZiLoE1qbUK+S fsTY44tz0auqrb5GIhdZ0Yux+3eyjEwe8C8chBFbY+E3nFZCIq7KUHQ3d076z5x4 KC3qHB/fTynmFpSbbZxjkmIJuUQjPbNHEVD2oILQvMhfUjntukrjeuRcbBX+AqI/ GxVBAXqpyliwPMjV9KsNXW8adfw4jd8NYKleCva5g3txRw/S87o= -----END CERTIFICATE-----Generated at Sun Apr 19 12:45:19 2026 by rpki-client