$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: XAA0vKWcOVYYh6hCRNZMNOtLY01rxoULP8JgpBtiG3E= Subject key identifier: A4:E6:3B:B5:BE:6A:C6:B6:B3:B7:BC:F3:13:E6:47:3F:6F:74:AB:C8 Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 045CC5EA6C3C67D35E95D646132BAA3B112E1C1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 0226 Signing time: Fri 17 Apr 2026 11:01:55 +0000 Manifest this update: Fri 17 Apr 2026 10:56:55 +0000 Manifest next update: Mon 20 Apr 2026 22:35:55 +0000 Files and hashes: 1: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: Azqs4uCMHi/b0OsMvcPPulvfzGsvWJeSjd/mfasxW98=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 75IsX464I80YzdtDMOG0/64Es8A4yar1LsqWA90nFOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 22:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5c:c5:ea:6c:3c:67:d3:5e:95:d6:46:13:2b:aa:3b:11:2e:1c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Apr 17 10:56:55 2026 GMT Not After : Apr 20 22:35:55 2026 GMT Subject: CN=A4E63BB5BE6AC6B6B3B7BCF313E6473F6F74ABC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:e8:ab:51:9f:a8:89:db:00:9c:c2:90:72: cb:2f:69:40:eb:41:c2:c0:6b:1a:83:35:53:b3:02: db:01:23:d1:b2:e4:ec:0d:f9:3b:d1:5a:71:51:5c: b6:2b:b0:09:e7:fc:dd:d3:c6:1b:30:84:5d:84:b6: 97:b7:13:45:30:09:4a:b5:6f:68:d4:ed:19:8e:70: 6d:39:47:05:fc:e3:df:bb:87:8e:f7:21:b0:3c:f3: c4:d7:94:37:03:5f:02:d8:5c:20:16:d0:c4:dc:71: 4c:07:0f:e1:9e:58:02:0d:73:de:06:84:ee:6d:76: ae:5a:6f:40:6c:94:01:a5:04:2d:00:ad:bc:b5:26: af:b4:0f:32:fe:e3:60:ee:1c:ab:22:a7:44:70:a4: 2a:16:48:78:8f:b1:f4:bd:4a:20:bd:c3:18:8f:c5: 48:c4:59:ed:1c:bf:2a:cd:b1:c4:e4:17:cb:87:f4: d4:c9:6a:ba:b1:72:3c:43:16:76:6c:b2:e7:72:5a: 81:06:e2:d3:38:fd:94:fc:85:da:6e:0a:1a:4b:b6: a2:ce:f9:6b:90:b7:eb:1e:e6:de:15:f4:ab:90:60: f1:a5:72:b2:f1:5c:f9:56:8a:a1:14:f1:f3:7e:12: 8a:c3:6d:f5:de:a2:f6:3c:07:c0:82:75:d1:aa:71: 63:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E6:3B:B5:BE:6A:C6:B6:B3:B7:BC:F3:13:E6:47:3F:6F:74:AB:C8 X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:84:4e:02:0d:f3:3c:bb:52:40:28:70:87:b0:98:21:05:14: de:c9:66:24:75:85:58:f2:9b:b3:0d:32:cc:b7:d0:c9:eb:8c: b3:41:94:48:80:1d:e4:60:1c:80:ed:1f:08:2a:f4:1d:95:76: 21:dd:be:c0:3a:3b:19:92:2e:bd:12:e7:ba:43:65:25:d1:c9: 10:3a:43:e9:2f:ce:5c:87:81:65:2c:f7:32:72:eb:9a:54:e6: 01:73:2e:2a:33:6f:d4:72:f6:28:cc:8c:e8:d5:36:c5:37:62: 32:76:74:3a:2d:7a:71:7b:2a:60:b7:b8:55:70:82:ff:22:b2: 8d:6c:d9:19:1e:e3:0e:74:de:4b:ee:26:a9:37:9d:dc:3c:1b: a7:bf:89:3b:76:d0:51:8c:cc:68:d3:09:c8:d8:1b:fd:9e:61: 6f:43:bb:4a:3b:84:ba:41:a8:e1:0d:55:4c:ba:d0:8b:0c:22: e4:b3:34:b1:d8:17:9f:3c:c8:e2:20:b7:49:a8:be:86:ca:20: 4b:84:18:72:5c:4e:0d:35:6f:1b:c8:b4:e9:5d:38:ff:f5:ec: 9e:b3:d7:27:12:ec:39:99:98:2b:41:af:0e:02:0a:ab:b4:89: 1b:84:26:40:b5:58:62:18:2f:6c:16:76:9b:c0:54:ff:ed:fb: cb:91:d3:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFzF6mw8Z9NeldZGEyuqOxEuHB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNjA0MTcxMDU2NTVaFw0yNjA0MjAyMjM1NTVaMDMxMTAvBgNV BAMTKEE0RTYzQkI1QkU2QUM2QjZCM0I3QkNGMzEzRTY0NzNGNkY3NEFCQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+eirUZ+oidsAnMKQcssvaUDr QcLAaxqDNVOzAtsBI9Gy5OwN+TvRWnFRXLYrsAnn/N3TxhswhF2Etpe3E0UwCUq1 b2jU7RmOcG05RwX849+7h473IbA888TXlDcDXwLYXCAW0MTccUwHD+GeWAINc94G hO5tdq5ab0BslAGlBC0Arby1Jq+0DzL+42DuHKsip0RwpCoWSHiPsfS9SiC9wxiP xUjEWe0cvyrNscTkF8uH9NTJarqxcjxDFnZssudyWoEG4tM4/ZT8hdpuChpLtqLO +WuQt+se5t4V9KuQYPGlcrLxXPlWiqEU8fN+EorDbfXeovY8B8CCddGqcWMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpOY7tb5qxrazt7zzE+ZHP290q8gwHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuETgIN8zy7UkAocIewmCEFFN7JZiR1hVjy m7MNMsy30MnrjLNBlEiAHeRgHIDtHwgq9B2VdiHdvsA6OxmSLr0S57pDZSXRyRA6 Q+kvzlyHgWUs9zJy65pU5gFzLiozb9Ry9ijMjOjVNsU3YjJ2dDotenF7KmC3uFVw gv8iso1s2Rke4w503kvuJqk3ndw8G6e/iTt20FGMzGjTCcjYG/2eYW9Du0o7hLpB qOENVUy60IsMIuSzNLHYF588yOIgt0movobKIEuEGHJcTg01bxvItOldOP/17J6z 1ycS7DmZmCtBrw4CCqu0iRuEJkC1WGIYL2wWdpvAVP/t+8uR02g= -----END CERTIFICATE-----Generated at Sat Apr 18 06:12:25 2026 by rpki-client