$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: J/IOaXA+2UyCuXkCYRkU9tNEZfGgckKykkaARfJMquI= Subject key identifier: BA:37:54:FF:68:D5:FF:3F:B1:ED:99:98:F1:D5:B2:63:EC:6A:CC:38 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 2E07EBCA9CF9D1EFD68E5F7BAE1747938C1B8D0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 04E7 Signing time: Fri 17 Apr 2026 07:50:59 +0000 Manifest this update: Fri 17 Apr 2026 07:45:59 +0000 Manifest next update: Mon 20 Apr 2026 16:26:59 +0000 Files and hashes: 1: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: nxfaHzu7In54DruoGbwBaJ4HtO/fQhtLpo4UDiFymfE=) 2: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: ZekBegmwkGhtEq1kwIjaVxEJBaW+y/p+5uyfM78H6mk=) 3: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) 4: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:07:eb:ca:9c:f9:d1:ef:d6:8e:5f:7b:ae:17:47:93:8c:1b:8d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Apr 17 07:45:59 2026 GMT Not After : Apr 20 16:26:59 2026 GMT Subject: CN=BA3754FF68D5FF3FB1ED9998F1D5B263EC6ACC38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:4e:df:90:68:50:35:c8:db:bb:6c:2a:c9: b2:21:17:69:b1:07:a4:ee:65:9b:c7:41:92:4d:a9: 9f:9e:f4:9f:27:54:48:ad:d4:af:15:16:e3:d6:2b: 87:0e:ad:ad:5c:85:5a:31:a7:ea:10:eb:0b:16:87: 8d:3c:6e:79:b2:58:f8:46:d7:a6:ea:73:91:ef:cc: f4:11:55:1d:2b:c1:3c:91:f3:71:76:33:8d:d4:78: 44:9f:d2:4e:9d:6f:44:16:2d:98:89:ea:2a:ce:4b: 16:27:e2:d0:42:b6:d1:ee:03:12:6e:04:5e:5a:4e: 5d:62:f9:f5:c0:7d:b8:16:35:f4:ae:05:55:f6:0b: 6a:b5:2a:b3:cf:9c:eb:c4:25:1e:58:fc:bb:13:25: 08:0b:fe:f9:ae:9c:67:16:ad:b6:aa:34:e7:87:6b: 18:1c:27:fc:f5:c3:94:b3:36:08:85:fc:ec:e6:6c: 57:40:a5:ca:d5:56:1a:9f:05:ff:78:7b:c5:4b:a8: 51:9b:1b:f6:cb:45:38:d5:19:35:97:d8:d8:54:7a: e3:23:c0:8a:78:19:f3:d4:71:fc:73:9d:71:0c:18: 68:46:62:3b:54:e2:cf:76:77:6b:cf:c8:9e:6a:05: bf:91:48:19:fb:51:52:71:9c:a9:8c:24:03:52:ba: 66:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:37:54:FF:68:D5:FF:3F:B1:ED:99:98:F1:D5:B2:63:EC:6A:CC:38 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:2a:c6:a7:ad:c6:41:bd:d5:bb:5d:d3:1d:fe:e2:f6:5d:09: b0:35:8c:af:0f:75:bd:da:59:c2:e5:37:ea:1d:00:df:7b:6a: 29:dc:e1:44:16:dd:7f:e0:3b:cf:0a:c2:d6:22:b4:ca:71:84: 26:07:65:49:85:47:fa:6e:97:79:e2:d1:de:5b:81:b8:27:67: d5:6a:20:e9:85:68:42:c4:fc:17:25:4f:90:7b:78:ab:b6:99: 53:07:a9:37:48:5a:74:93:bf:0f:ef:c4:e4:2c:38:cd:5d:c2: 75:49:0c:59:74:37:a4:fa:6f:36:26:c7:03:54:1b:57:bd:dc: 83:de:48:e9:df:83:96:51:57:79:4e:63:60:39:08:75:43:f1: f3:11:df:78:e1:42:ad:2b:3b:d6:c9:16:5d:9f:da:e4:38:22: 34:4e:19:6e:65:7a:0f:0b:15:f8:48:2d:64:51:1b:ef:de:f8: 4e:23:66:30:41:1e:ee:46:9a:14:91:8c:dc:6c:da:73:5b:10: cd:5e:2e:66:fc:cd:3a:95:64:54:d6:35:17:a4:c6:9b:68:e4: 98:28:59:37:4c:77:d8:a6:6a:11:46:80:9b:4a:98:fc:6e:62: 50:97:91:17:9b:af:a7:2d:5f:f0:b9:fe:f7:0a:43:0d:08:54: 03:88:04:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULgfrypz50e/Wjl97rhdHk4wbjQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNjA0MTcwNzQ1NTlaFw0yNjA0MjAxNjI2NTlaMDMxMTAvBgNV BAMTKEJBMzc1NEZGNjhENUZGM0ZCMUVEOTk5OEYxRDVCMjYzRUM2QUNDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKu07fkGhQNcjbu2wqybIhF2mx B6TuZZvHQZJNqZ+e9J8nVEit1K8VFuPWK4cOra1chVoxp+oQ6wsWh408bnmyWPhG 16bqc5HvzPQRVR0rwTyR83F2M43UeESf0k6db0QWLZiJ6irOSxYn4tBCttHuAxJu BF5aTl1i+fXAfbgWNfSuBVX2C2q1KrPPnOvEJR5Y/LsTJQgL/vmunGcWrbaqNOeH axgcJ/z1w5SzNgiF/OzmbFdApcrVVhqfBf94e8VLqFGbG/bLRTjVGTWX2NhUeuMj wIp4GfPUcfxznXEMGGhGYjtU4s92d2vPyJ5qBb+RSBn7UVJxnKmMJANSumaPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUujdU/2jV/z+x7ZmY8dWyY+xqzDgwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEqxqetxkG91btd0x3+4vZdCbA1jK8Pdb3a WcLlN+odAN97ainc4UQW3X/gO88KwtYitMpxhCYHZUmFR/pul3ni0d5bgbgnZ9Vq IOmFaELE/BclT5B7eKu2mVMHqTdIWnSTvw/vxOQsOM1dwnVJDFl0N6T6bzYmxwNU G1e93IPeSOnfg5ZRV3lOY2A5CHVD8fMR33jhQq0rO9bJFl2f2uQ4IjROGW5leg8L FfhILWRRG+/e+E4jZjBBHu5GmhSRjNxs2nNbEM1eLmb8zTqVZFTWNRekxpto5Jgo WTdMd9imahFGgJtKmPxuYlCXkRebr6ctX/C5/vcKQw0IVAOIBAc= -----END CERTIFICATE-----Generated at Sat Apr 18 03:01:58 2026 by rpki-client