$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft File: 8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json) Hash identifier: GMvcqFkPcRG6hjnYcalYENL/KXcBt6v0ypi4unm3AjI= Subject key identifier: F7:43:84:1A:AD:CA:86:FB:0C:F9:30:87:21:76:12:5F:81:07:CA:73 Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 460482AF1D424C8DB2CD91DF12EABCF04D7D34AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft Manifest number: 0559 Signing time: Sat 18 Apr 2026 21:50:52 +0000 Manifest this update: Sat 18 Apr 2026 21:45:52 +0000 Manifest next update: Tue 21 Apr 2026 22:10:52 +0000 Files and hashes: 1: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: StQnDRnfW6M3ReBuONzcowP5KfDufiWynmaG7BPDH50=) 2: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: anheo7/IFUA2/H9FN8liseYHAvu0fSEkGprdILkGE3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 22:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:04:82:af:1d:42:4c:8d:b2:cd:91:df:12:ea:bc:f0:4d:7d:34:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Apr 18 21:45:52 2026 GMT Not After : Apr 21 22:10:52 2026 GMT Subject: CN=F743841AADCA86FB0CF930872176125F8107CA73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:63:86:61:71:2c:3a:11:86:b2:31:52:bc: 14:46:7d:a2:18:84:8f:17:5c:cc:bf:ec:dc:05:83: 2a:26:ae:1f:49:48:f0:46:31:23:dc:5d:63:06:b8: 3c:c0:f3:be:60:0a:89:88:07:11:bb:d3:94:40:ca: 6f:72:85:8c:bc:c0:2a:e1:b5:ec:2a:ec:97:2e:30: bf:82:60:7e:5c:cc:58:67:22:91:b1:d1:b5:ab:21: 3c:5e:48:9d:fe:85:12:21:1f:a0:4b:42:b6:a7:71: fd:88:e6:b7:35:62:3c:13:5f:f3:a2:8d:53:d0:98: 5c:f4:1a:99:f5:58:e7:d0:d4:91:47:86:2c:8e:fc: 77:6c:18:c4:2b:18:d9:32:f0:04:8d:07:4c:f0:45: 03:bf:73:4d:78:4b:01:f0:b0:ae:13:c6:ac:13:6a: e6:47:76:8e:b0:67:ba:cb:da:6e:3e:c4:b4:6a:a7: ba:43:9f:76:a4:ba:4d:f8:be:39:7e:6f:78:01:17: 20:ba:bd:34:07:aa:9e:c6:11:d7:ca:05:11:63:72: 44:87:80:b7:87:f4:a7:05:a3:fe:f9:3e:d3:52:9a: cf:03:3e:1a:fa:2a:b9:92:e7:77:a2:ae:f8:64:83: a1:e7:fa:69:1b:60:f2:c9:19:f2:59:76:b1:eb:1c: 76:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:43:84:1A:AD:CA:86:FB:0C:F9:30:87:21:76:12:5F:81:07:CA:73 X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2c:69:1a:ae:86:de:da:d5:25:b6:d8:75:b0:c7:28:2c:d9: fb:5f:5e:e7:7a:25:f0:b8:10:86:4b:c0:24:cd:51:0c:2f:bd: f4:07:40:2b:21:fe:de:73:22:2d:f3:f9:72:27:8b:70:45:db: 26:90:22:d1:71:5b:b5:45:e5:97:04:53:36:19:8a:2e:56:6b: 92:ae:91:08:8e:43:d4:4d:d0:e9:e5:24:40:17:b1:9e:f8:d5: af:04:9a:85:5d:c3:5f:c7:cd:55:af:f6:0f:dd:6d:54:a6:c3: 6f:b5:f9:ff:bb:cf:54:12:e9:97:a3:f0:e1:53:e2:a4:55:b2: 5f:3c:bb:ab:63:c5:60:b5:7c:4a:40:38:32:6a:6e:4b:5d:63: 84:99:cc:1e:11:b1:17:20:70:bb:fc:1f:8e:af:1f:ff:39:f1: b2:59:e2:19:5c:0b:ac:41:1d:87:8a:b2:a8:94:00:28:87:98: af:82:96:a6:da:ce:2c:3f:be:4a:29:24:f3:21:59:ac:51:56: 60:f5:7a:a6:c5:a5:9d:7b:2c:3b:33:c5:8c:d6:f5:d4:9e:82: ff:61:80:43:d7:c8:55:34:da:40:81:e6:d9:b0:f9:dc:fc:ef: b0:a6:ab:65:a2:ff:5f:ed:d6:88:f8:03:f8:6c:c3:3d:16:15: 36:19:a8:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURgSCrx1CTI2yzZHfEuq88E19NKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNjA0MTgyMTQ1NTJaFw0yNjA0MjEyMjEwNTJaMDMxMTAvBgNV BAMTKEY3NDM4NDFBQURDQTg2RkIwQ0Y5MzA4NzIxNzYxMjVGODEwN0NBNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRWOGYXEsOhGGsjFSvBRGfaIY hI8XXMy/7NwFgyomrh9JSPBGMSPcXWMGuDzA875gComIBxG705RAym9yhYy8wCrh tewq7JcuML+CYH5czFhnIpGx0bWrITxeSJ3+hRIhH6BLQrancf2I5rc1YjwTX/Oi jVPQmFz0Gpn1WOfQ1JFHhiyO/HdsGMQrGNky8ASNB0zwRQO/c014SwHwsK4TxqwT auZHdo6wZ7rL2m4+xLRqp7pDn3akuk34vjl+b3gBFyC6vTQHqp7GEdfKBRFjckSH gLeH9KcFo/75PtNSms8DPhr6KrmS53eirvhkg6Hn+mkbYPLJGfJZdrHrHHZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU90OEGq3KhvsM+TCHIXYSX4EHynMwHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEw NjMxQkVFRDQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4saRquht7a1SW22HWwxygs2ftfXud6JfC4 EIZLwCTNUQwvvfQHQCsh/t5zIi3z+XIni3BF2yaQItFxW7VF5ZcEUzYZii5Wa5Ku kQiOQ9RN0OnlJEAXsZ741a8EmoVdw1/HzVWv9g/dbVSmw2+1+f+7z1QS6Zej8OFT 4qRVsl88u6tjxWC1fEpAODJqbktdY4SZzB4RsRcgcLv8H46vH/858bJZ4hlcC6xB HYeKsqiUACiHmK+Clqbaziw/vkopJPMhWaxRVmD1eqbFpZ17LDszxYzW9dSegv9h gEPXyFU02kCB5tmw+dz877Cmq2Wi/1/t1oj4A/hswz0WFTYZqLw= -----END CERTIFICATE-----Generated at Sun Apr 19 14:23:45 2026 by rpki-client