$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft File: E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json) Hash identifier: ZbwDqLLUxGkiTU2H39nmpuU/F5VP2R/hY+P9QCqVTXo= Subject key identifier: 59:57:8D:62:2C:9B:82:0D:89:33:70:58:1B:68:0E:0B:B4:56:75:5D Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B Certificate issuer: /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Certificate serial: 22363B84050621F880FD5280E2DEE4B71749BF3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft Manifest number: 036E Signing time: Sun 19 Apr 2026 07:10:44 +0000 Manifest this update: Sun 19 Apr 2026 07:05:44 +0000 Manifest next update: Wed 22 Apr 2026 08:46:44 +0000 Files and hashes: 1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: vpr17Dq63EAf7kSnTvyHr/XaOayUbYEvdzyr7iSBt3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:36:3b:84:05:06:21:f8:80:fd:52:80:e2:de:e4:b7:17:49:bf:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Validity Not Before: Apr 19 07:05:44 2026 GMT Not After : Apr 22 08:46:44 2026 GMT Subject: CN=59578D622C9B820D893370581B680E0BB456755D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:79:ac:b0:52:80:e0:5e:99:55:b6:d2:5c:43: ff:90:22:88:9f:17:af:f5:f6:ef:8b:51:21:54:ac: 2d:fd:1a:96:29:15:cc:f7:01:c2:9b:bb:ba:e0:5d: 29:ab:ba:2d:06:d7:6c:a6:2e:66:2d:f8:d5:64:b8: 56:09:2f:d9:af:80:b2:4f:ab:db:40:9d:b9:b5:15: 7c:1f:ff:7d:24:8f:26:1e:bb:51:2d:93:11:c4:0e: a5:43:23:8a:44:62:03:90:aa:ee:4a:b6:2f:5f:c4: 69:d4:44:59:ec:1b:1d:a7:4b:40:56:d6:0f:4e:0e: d8:64:70:52:31:b4:58:79:f9:5f:1a:c9:af:5a:5d: 47:5c:5b:c1:59:83:28:ad:27:5e:54:c2:63:01:69: a9:2a:c8:28:f5:6b:3d:e0:43:89:8a:43:22:de:7d: 97:ad:61:85:06:fb:2c:6c:18:c8:d2:6d:bc:e2:ad: 40:b5:a3:6b:60:70:0c:a6:18:41:4d:0b:05:a0:85: 95:3d:e0:8c:b5:e2:e0:86:20:0b:1a:a3:12:37:c8: 0f:18:c6:a8:a3:9a:48:c0:8d:d7:82:88:ab:80:d8: 61:3d:64:7a:f3:de:4f:7f:7f:fd:ec:f8:61:55:93: cb:aa:51:47:10:34:51:e3:da:57:68:e7:16:b9:f8: 75:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:57:8D:62:2C:9B:82:0D:89:33:70:58:1B:68:0E:0B:B4:56:75:5D X509v3 Authority Key Identifier: keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:96:12:f5:01:71:8c:fe:bc:f0:f1:14:23:39:81:d6:95:3b: 7f:70:93:28:fa:29:cd:78:36:f1:6e:9f:a1:8b:b2:25:a3:51: a4:42:49:3d:66:4a:39:71:24:fd:43:e3:dc:e1:02:ff:13:8c: e7:dd:3b:c2:ba:11:0f:91:fa:8a:a2:f3:d6:6b:2b:e8:02:64: 4c:1d:8f:87:6f:52:6c:3b:91:a6:ba:b6:7b:4b:c7:a5:50:57: 9c:2a:12:2d:9c:82:76:d8:aa:de:e1:b4:cb:46:cd:30:5b:b5: a4:ce:a9:91:58:c2:01:68:22:07:c5:3b:9b:d6:e0:e0:e6:4e: ba:af:1b:58:97:bb:ea:cd:a3:98:cb:f6:7a:21:77:2c:bd:c3: ea:18:2e:3a:4e:54:d6:98:30:8f:d5:c4:60:8f:91:6a:16:30: 44:39:9e:e6:df:33:6b:eb:96:67:dd:bf:9f:09:f0:2c:6e:e7: eb:70:13:67:bf:06:48:e6:9e:a5:a4:fc:ef:d4:cf:67:2c:77: 1b:26:f8:63:28:cd:5d:9d:63:b0:1d:60:85:45:30:2e:fc:9c: 2b:9b:fd:5f:f9:64:7c:23:2f:d5:69:a6:e1:a5:57:61:e0:a2: 54:a3:f2:ba:c9:98:d5:c4:d3:c9:e3:25:f9:d3:3f:29:3f:86: bb:23:09:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjY7hAUGIfiA/VKA4t7ktxdJvz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFG MDY2RUM1QjAeFw0yNjA0MTkwNzA1NDRaFw0yNjA0MjIwODQ2NDRaMDMxMTAvBgNV BAMTKDU5NTc4RDYyMkM5QjgyMEQ4OTMzNzA1ODFCNjgwRTBCQjQ1Njc1NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmeaywUoDgXplVttJcQ/+QIoif F6/19u+LUSFUrC39GpYpFcz3AcKbu7rgXSmrui0G12ymLmYt+NVkuFYJL9mvgLJP q9tAnbm1FXwf/30kjyYeu1EtkxHEDqVDI4pEYgOQqu5Kti9fxGnURFnsGx2nS0BW 1g9ODthkcFIxtFh5+V8aya9aXUdcW8FZgyitJ15UwmMBaakqyCj1az3gQ4mKQyLe fZetYYUG+yxsGMjSbbzirUC1o2tgcAymGEFNCwWghZU94Iy14uCGIAsaoxI3yA8Y xqijmkjAjdeCiKuA2GE9ZHrz3k9/f/3s+GFVk8uqUUcQNFHj2ldo5xa5+HUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWVeNYiybgg2JM3BYG2gOC7RWdV0wHwYDVR0j BBgwFoAU6NqH80pVDQBH7sA5ogyEQfBm7FswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ2NzZjZC1kZTM5LTQ2OGEtYWQyNS02NzVlMWI5MTBmYWMvMC9FOERBODdGMzRB NTUwRDAwNDdFRUMwMzlBMjBDODQ0MUYwNjZFQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFGMDY2 RUM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0 NDFGMDY2RUM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyWEvUBcYz+vPDxFCM5gdaVO39wkyj6Kc14 NvFun6GLsiWjUaRCST1mSjlxJP1D49zhAv8TjOfdO8K6EQ+R+oqi89ZrK+gCZEwd j4dvUmw7kaa6tntLx6VQV5wqEi2cgnbYqt7htMtGzTBbtaTOqZFYwgFoIgfFO5vW 4ODmTrqvG1iXu+rNo5jL9nohdyy9w+oYLjpOVNaYMI/VxGCPkWoWMEQ5nubfM2vr lmfdv58J8Cxu5+twE2e/BkjmnqWk/O/Uz2csdxsm+GMozV2dY7AdYIVFMC78nCub /V/5ZHwjL9VppuGlV2HgolSj8rrJmNXE08njJfnTPyk/hrsjCTQ= -----END CERTIFICATE-----Generated at Sun Apr 19 11:40:08 2026 by rpki-client