$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: BNJaXGoTgg9c7OgGrp1AOWrw7B1OZWaVfeIZwcBlduQ= Subject key identifier: 3B:BA:93:6C:78:49:78:BB:92:80:05:8B:D5:C0:22:3E:1F:3D:E2:56 Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 1D149DBA17FD981A9DFC04C93F5EB74B44066273 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 01F2 Signing time: Fri 17 Apr 2026 03:21:53 +0000 Manifest this update: Fri 17 Apr 2026 03:16:53 +0000 Manifest next update: Mon 20 Apr 2026 09:32:53 +0000 Files and hashes: 1: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: 2+rMUTRr6geT36w1LGs/+72amdtzbZ4S57uwVaFP0y0=) 2: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: ct+DOZjTg6HlumxD8dP014jWapOHq8Dy/EadsYOLkOI=) 3: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: JbsU6wwYGkCof1Bi7HjS1vBbLGm7iyh5iGfgHGG7xPU=) 4: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: 0luKPtCqB91acT7qdl34pnHzKr/1S2q1gyXbGOirewE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:14:9d:ba:17:fd:98:1a:9d:fc:04:c9:3f:5e:b7:4b:44:06:62:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Apr 17 03:16:53 2026 GMT Not After : Apr 20 09:32:53 2026 GMT Subject: CN=3BBA936C784978BB9280058BD5C0223E1F3DE256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:93:9b:31:4b:97:07:8d:7e:76:4b:10:74: cf:82:e1:81:ac:97:42:37:51:71:56:0e:6b:39:00: d0:9a:e8:0b:1b:8c:52:e3:84:1e:51:91:5f:70:08: 0c:1f:4b:26:d4:83:78:b8:e2:f1:34:2d:33:3e:c3: 3b:a6:fc:a0:a8:46:2a:cc:f6:55:b1:55:b3:14:cd: 30:45:23:81:94:5b:86:5a:f5:e8:31:f3:1d:42:68: 84:7a:63:60:a5:01:e8:7d:dd:c8:55:f4:0f:a5:0c: 96:99:1e:f1:b5:d6:2c:bf:77:30:45:29:e9:d3:f2: a2:d3:02:9b:2f:8a:e7:f5:e2:a6:e0:37:4f:4d:1c: bf:38:23:da:26:2c:77:b3:b6:e2:03:ae:32:8a:8f: 21:9f:27:9e:38:cb:aa:59:58:47:bd:c4:00:ab:49: a6:ee:78:31:df:b6:b9:58:6f:a8:67:51:db:07:ab: cc:5f:f9:11:da:78:1c:a7:88:78:0b:c5:05:11:25: 9e:19:8e:25:28:0d:c3:92:e6:40:e0:14:31:dc:31: c1:ef:ba:a0:a1:53:23:33:76:82:b9:6d:a6:09:14: 74:5e:1a:a7:15:a8:f0:63:9f:d2:00:71:47:0a:14: c8:7d:d1:68:3b:b3:f9:2a:f4:2d:d0:9a:fe:11:e8: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BA:93:6C:78:49:78:BB:92:80:05:8B:D5:C0:22:3E:1F:3D:E2:56 X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ff:35:6c:8d:50:fa:79:0b:33:c5:63:eb:8e:10:07:70:90: a3:0f:19:90:40:1d:1b:eb:0c:4f:8b:57:17:29:c4:4a:21:8f: 2f:fb:95:00:dc:8d:98:16:fe:82:ce:34:be:01:24:e3:4d:4a: 39:f4:64:61:6b:52:d7:0d:80:d1:2e:cf:04:59:2d:ad:24:1b: 5e:4b:3b:79:e9:2f:87:d3:96:9d:fb:f8:8b:d6:22:d6:c6:ca: 35:e4:48:c4:31:95:eb:fe:ac:29:f9:2e:dc:a6:7d:bb:a4:20: c2:c8:a5:07:ed:f9:67:52:01:25:f0:3d:90:2b:2a:e1:67:d3: c9:90:91:b6:03:08:91:1d:dc:76:b8:f3:71:6e:79:76:17:12: 14:0c:15:27:82:d2:2d:73:2b:c4:75:14:8e:47:49:06:2d:dd: 34:18:38:a1:7c:3e:2e:9b:db:c1:ca:c9:bf:4f:99:27:7e:72: 4b:2f:d6:70:e7:87:53:5f:49:3f:60:95:49:96:cc:e8:ec:64: 08:e4:04:5a:17:2c:f8:7a:43:6f:5a:58:c5:b3:b1:42:71:70: 50:42:fc:14:d5:3b:b2:b2:9d:c0:19:c8:91:f7:1b:83:d7:18: 42:68:f9:c7:b8:57:29:80:74:83:cd:b8:be:86:44:d4:58:8a: f4:58:b0:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHRSduhf9mBqd/ATJP163S0QGYnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNjA0MTcwMzE2NTNaFw0yNjA0MjAwOTMyNTNaMDMxMTAvBgNV BAMTKDNCQkE5MzZDNzg0OTc4QkI5MjgwMDU4QkQ1QzAyMjNFMUYzREUyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGlZObMUuXB41+dksQdM+C4YGs l0I3UXFWDms5ANCa6AsbjFLjhB5RkV9wCAwfSybUg3i44vE0LTM+wzum/KCoRirM 9lWxVbMUzTBFI4GUW4Za9egx8x1CaIR6Y2ClAeh93chV9A+lDJaZHvG11iy/dzBF KenT8qLTApsviuf14qbgN09NHL84I9omLHeztuIDrjKKjyGfJ544y6pZWEe9xACr SabueDHftrlYb6hnUdsHq8xf+RHaeByniHgLxQURJZ4ZjiUoDcOS5kDgFDHcMcHv uqChUyMzdoK5baYJFHReGqcVqPBjn9IAcUcKFMh90Wg7s/kq9C3Qmv4R6BxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO7qTbHhJeLuSgAWL1cAiPh894lYwHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACH/NWyNUPp5CzPFY+uOEAdwkKMPGZBAHRvr DE+LVxcpxEohjy/7lQDcjZgW/oLONL4BJONNSjn0ZGFrUtcNgNEuzwRZLa0kG15L O3npL4fTlp37+IvWItbGyjXkSMQxlev+rCn5LtymfbukIMLIpQft+WdSASXwPZAr KuFn08mQkbYDCJEd3Ha483FueXYXEhQMFSeC0i1zK8R1FI5HSQYt3TQYOKF8Pi6b 28HKyb9PmSd+cksv1nDnh1NfST9glUmWzOjsZAjkBFoXLPh6Q29aWMWzsUJxcFBC /BTVO7KyncAZyJH3G4PXGEJo+ce4VymAdIPNuL6GRNRYivRYsBM= -----END CERTIFICATE-----Generated at Fri Apr 17 23:42:38 2026 by rpki-client