$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: keKmMffSwuEutyWr+qx57VAzANkCbm9mQMFOrqSWH4k= Subject key identifier: AE:56:86:C0:14:B4:DF:88:A3:39:7B:CC:82:7A:7B:DF:8B:10:92:8A Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 509C59D9BDAFF16AB8E871D0071C2D7661E3C04D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 016A Signing time: Sat 18 Apr 2026 03:10:04 +0000 Manifest this update: Sat 18 Apr 2026 03:05:04 +0000 Manifest next update: Tue 21 Apr 2026 14:15:04 +0000 Files and hashes: 1: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: pqLJi3y/6fveJcm7vp+/NivaPJ7yJdbl8GXn7zHbM4w=) 2: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: SOoZmysbJDZktqnuTuwq0n/y13DKsF/IrNzLNUAhqCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 14:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9c:59:d9:bd:af:f1:6a:b8:e8:71:d0:07:1c:2d:76:61:e3:c0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Apr 18 03:05:04 2026 GMT Not After : Apr 21 14:15:04 2026 GMT Subject: CN=AE5686C014B4DF88A3397BCC827A7BDF8B10928A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:aa:e4:d9:69:12:e4:d2:72:ec:1b:82:e0: 20:d9:53:e2:65:1a:52:a8:da:9c:30:cb:60:9c:68: 91:1f:ac:34:f7:78:65:5c:aa:fa:b4:c9:d5:d8:24: e6:63:1e:ac:9b:d7:56:06:d2:a6:bd:35:57:04:59: 5a:a8:06:09:6a:de:30:d7:af:e6:26:5c:52:f0:ec: 84:a2:9e:c1:1f:fc:0a:1b:f7:51:dd:b4:94:e9:31: 71:3d:b8:55:29:b1:95:9f:28:f4:e1:f7:29:89:09: e1:fa:70:8d:0e:db:35:e9:2e:bd:28:93:6b:45:2a: e7:de:dd:b6:37:4d:8d:c7:50:26:75:78:34:64:41: a7:3d:0c:66:27:6d:86:2c:aa:ab:b0:2e:0c:8d:9b: d7:50:c5:3e:ff:6e:89:94:d3:f3:15:94:d2:4a:d1: b1:58:dc:6c:4e:89:3d:50:fd:08:6d:c8:d9:43:bb: 9b:29:2d:bb:93:da:a5:27:fa:eb:68:ba:5f:e5:14: 23:c8:58:af:62:f3:04:fb:f9:c5:61:80:1c:3c:e1: 7a:00:a9:07:f8:96:df:0b:8d:9f:fd:21:eb:a2:0d: 3d:9d:64:7b:30:48:77:7e:67:e8:9a:82:93:a3:53: 0f:18:55:00:7a:ce:9f:da:40:b7:38:22:50:f4:f1: fa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:56:86:C0:14:B4:DF:88:A3:39:7B:CC:82:7A:7B:DF:8B:10:92:8A X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2b:74:cd:87:1f:43:fb:bb:06:f7:30:01:b5:8d:f5:2a:3f: 96:2f:e5:92:6a:b4:bf:6f:c6:7e:99:60:b5:ac:0d:ef:20:14: e5:12:c2:83:77:91:b6:0b:a8:6e:4c:77:74:51:b0:e7:d7:3c: ab:4d:87:33:b2:55:f8:0a:f2:25:4a:84:a6:20:4c:b5:39:d2: ba:1e:86:d4:fb:df:53:e4:8c:1b:be:cb:af:32:d9:0a:84:9b: 97:b9:b7:65:c0:89:4a:f6:ee:d0:35:3c:70:31:2d:6e:f4:3b: 7e:e4:9f:56:a5:34:d2:36:25:8f:f0:87:26:78:52:a6:78:13: 29:85:d1:e5:81:26:ce:d6:57:be:b4:6e:23:af:50:3d:26:3c: 2f:0d:4f:08:3c:5a:62:57:4a:19:da:c4:94:85:4f:01:11:c0: cc:92:a3:cb:bc:66:ba:63:28:d4:ec:13:fb:e7:6a:8a:30:19: dc:8b:a1:e5:40:7b:d3:3b:7d:90:64:00:c2:9f:d3:a4:7c:49: 80:5b:94:36:f2:2c:ee:6f:01:f8:93:8f:ab:3a:24:8e:44:e2: e6:61:42:88:4b:da:30:8b:d8:23:58:bd:65:69:1b:95:1e:0a: f5:22:c6:bb:08:2e:e1:66:dc:a4:1d:61:70:45:c8:54:61:f7: d6:98:3e:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJxZ2b2v8Wq46HHQBxwtdmHjwE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNjA0MTgwMzA1MDRaFw0yNjA0MjExNDE1MDRaMDMxMTAvBgNV BAMTKEFFNTY4NkMwMTRCNERGODhBMzM5N0JDQzgyN0E3QkRGOEIxMDkyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1ark2WkS5NJy7BuC4CDZU+Jl GlKo2pwwy2CcaJEfrDT3eGVcqvq0ydXYJOZjHqyb11YG0qa9NVcEWVqoBglq3jDX r+YmXFLw7ISinsEf/Aob91HdtJTpMXE9uFUpsZWfKPTh9ymJCeH6cI0O2zXpLr0o k2tFKufe3bY3TY3HUCZ1eDRkQac9DGYnbYYsqquwLgyNm9dQxT7/bomU0/MVlNJK 0bFY3GxOiT1Q/QhtyNlDu5spLbuT2qUn+utoul/lFCPIWK9i8wT7+cVhgBw84XoA qQf4lt8LjZ/9IeuiDT2dZHswSHd+Z+iagpOjUw8YVQB6zp/aQLc4IlD08frfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrlaGwBS034ijOXvMgnp734sQkoowHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgrdM2HH0P7uwb3MAG1jfUqP5Yv5ZJqtL9v xn6ZYLWsDe8gFOUSwoN3kbYLqG5Md3RRsOfXPKtNhzOyVfgK8iVKhKYgTLU50roe htT731PkjBu+y68y2QqEm5e5t2XAiUr27tA1PHAxLW70O37kn1alNNI2JY/whyZ4 UqZ4EymF0eWBJs7WV760biOvUD0mPC8NTwg8WmJXShnaxJSFTwERwMySo8u8Zrpj KNTsE/vnaoowGdyLoeVAe9M7fZBkAMKf06R8SYBblDbyLO5vAfiTj6s6JI5E4uZh QohL2jCL2CNYvWVpG5UeCvUixrsILuFm3KQdYXBFyFRh99aYPqg= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:03 2026 by rpki-client