$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft File: 8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json) Hash identifier: eRcRaXYOxraFfFYf55fvGrso4Cb/KUblWz0MAKi7l60= Subject key identifier: 99:27:90:0D:17:72:6D:FB:EF:85:11:79:D4:BE:36:DA:46:18:09:0F Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Certificate issuer: /CN=8A78F143A2E18078229313E44ACE70165360440C Certificate serial: 05F6309E41A2CF50555269BBCBB200736D92DE6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft Manifest number: 0139 Signing time: Wed 15 Apr 2026 22:21:04 +0000 Manifest this update: Wed 15 Apr 2026 22:16:04 +0000 Manifest next update: Sun 19 Apr 2026 09:27:04 +0000 Files and hashes: 1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: Cl4d05g72xbu1dHCMz9A6olz23WpycNvRsteRGx18jg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 09:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f6:30:9e:41:a2:cf:50:55:52:69:bb:cb:b2:00:73:6d:92:de:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C Validity Not Before: Apr 15 22:16:04 2026 GMT Not After : Apr 19 09:27:04 2026 GMT Subject: CN=9927900D17726DFBEF851179D4BE36DA4618090F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0c:83:09:78:94:8f:2c:47:31:87:e3:fc:3c: 61:63:cc:77:1c:45:77:74:6d:42:e3:59:c9:ac:b7: e7:d6:77:96:f9:c9:52:82:7c:eb:ef:91:3b:89:1f: d1:e4:ce:50:49:fd:99:ff:d0:50:1e:f1:6d:03:7a: 6a:db:1e:30:86:20:df:8b:07:b3:a8:5e:3a:f1:c0: 0c:29:18:5c:c0:07:56:ab:59:21:15:8a:c3:74:bc: 5b:9b:9e:b1:3e:da:33:d1:d8:d1:eb:cd:42:fd:df: 0b:e4:1e:0c:d4:64:e0:ad:51:5f:ca:e6:08:44:23: d5:79:1f:e4:58:1d:1b:ac:ad:59:9f:da:ed:a9:17: 59:c2:37:eb:2c:a8:df:e5:e2:e7:c9:1f:3b:64:e1: 4a:48:23:d5:b9:cf:34:98:1b:9c:ee:04:ea:29:c6: b2:9f:ef:2f:8a:0b:f4:3a:68:0d:11:1c:9b:07:e3: 50:e5:78:a1:ad:83:96:18:75:5d:47:d8:64:e7:e0: 7b:5a:57:71:85:02:a4:ec:c6:05:69:2d:d8:95:81: d8:f7:8d:1a:5f:f9:f7:f5:7a:f5:52:f2:a4:73:08: 68:1e:62:76:9e:b1:28:d4:21:d8:a0:e1:96:17:14: 65:2f:7e:81:da:09:25:7d:cd:2a:b3:3e:db:58:28: db:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:27:90:0D:17:72:6D:FB:EF:85:11:79:D4:BE:36:DA:46:18:09:0F X509v3 Authority Key Identifier: keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c6:93:f5:14:f3:01:8b:12:1e:be:59:99:99:ad:16:3f:2d: e8:b9:52:f8:ad:6a:ad:2a:e4:a0:ec:a3:13:f0:b4:76:91:d4: 2d:f0:ba:92:fd:52:eb:c8:96:dd:75:67:36:dc:9b:06:25:f4: 14:7e:4e:1d:c5:67:76:68:a4:35:08:96:9b:9a:a0:4b:c4:cc: 36:8a:fb:68:f1:5b:42:d2:b7:86:99:8f:a9:d5:71:60:95:49: 97:25:a1:75:3e:0f:cd:94:b7:20:f0:f4:b2:26:16:c1:bf:89: 90:37:fd:7b:73:c1:f3:a4:8d:9e:45:8c:c5:c3:f5:7a:40:98: 1d:84:bb:dc:45:10:d5:13:3e:de:cc:7b:3c:f9:6f:fa:f7:75: 38:4a:19:27:0c:41:e5:6f:4a:0f:7a:d7:0c:78:41:c8:3d:fd: 3a:7e:7e:1f:ce:53:f0:dc:1c:07:67:62:d6:fc:79:54:ab:ce: 82:d6:dd:fe:8e:5a:82:a4:67:9c:56:ac:a1:2b:00:37:6e:db: 45:83:8a:fc:0f:6f:91:16:ba:a8:7c:01:5e:9c:b6:a1:cc:2e: b3:cf:d3:54:14:1e:ff:77:bf:56:0d:49:95:a4:ae:69:6a:40: 5a:3a:17:4b:d9:9d:28:12:f0:e4:89:b7:1b:6c:42:92:10:06: e1:0a:ea:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfYwnkGiz1BVUmm7y7IAc22S3m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1 MzYwNDQwQzAeFw0yNjA0MTUyMjE2MDRaFw0yNjA0MTkwOTI3MDRaMDMxMTAvBgNV BAMTKDk5Mjc5MDBEMTc3MjZERkJFRjg1MTE3OUQ0QkUzNkRBNDYxODA5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDIMJeJSPLEcxh+P8PGFjzHcc RXd0bULjWcmst+fWd5b5yVKCfOvvkTuJH9HkzlBJ/Zn/0FAe8W0DemrbHjCGIN+L B7OoXjrxwAwpGFzAB1arWSEVisN0vFubnrE+2jPR2NHrzUL93wvkHgzUZOCtUV/K 5ghEI9V5H+RYHRusrVmf2u2pF1nCN+ssqN/l4ufJHztk4UpII9W5zzSYG5zuBOop xrKf7y+KC/Q6aA0RHJsH41DleKGtg5YYdV1H2GTn4HtaV3GFAqTsxgVpLdiVgdj3 jRpf+ff1evVS8qRzCGgeYnaesSjUIdig4ZYXFGUvfoHaCSV9zSqzPttYKNsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmSeQDRdybfvvhRF51L422kYYCQ8wHwYDVR0j BBgwFoAUinjxQ6LhgHgikxPkSs5wFlNgRAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMC84QTc4RjE0M0Ey RTE4MDc4MjI5MzEzRTQ0QUNFNzAxNjUzNjA0NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1MzYw NDQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcw MTY1MzYwNDQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbGk/UU8wGLEh6+WZmZrRY/Lei5Uvitaq0q 5KDsoxPwtHaR1C3wupL9UuvIlt11ZzbcmwYl9BR+Th3FZ3ZopDUIlpuaoEvEzDaK +2jxW0LSt4aZj6nVcWCVSZcloXU+D82UtyDw9LImFsG/iZA3/XtzwfOkjZ5FjMXD 9XpAmB2Eu9xFENUTPt7Mezz5b/r3dThKGScMQeVvSg961wx4Qcg9/Tp+fh/OU/Dc HAdnYtb8eVSrzoLW3f6OWoKkZ5xWrKErADdu20WDivwPb5EWuqh8AV6ctqHMLrPP 01QUHv93v1YNSZWkrmlqQFo6F0vZnSgS8OSJtxtsQpIQBuEK6gs= -----END CERTIFICATE-----Generated at Fri Apr 17 16:51:30 2026 by rpki-client