$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json) Hash identifier: ZLA9cviXYmBzbwEvPPFS2tZJz+S04ckOjg4MbEdMd+I= Subject key identifier: 1B:F4:9A:87:98:7A:84:D2:E0:ED:C8:BB:16:50:BE:89:08:E8:81:D0 Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 11DCA7AD51C10CFC73ACA10355054F4F15ACC267 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft Manifest number: 029A Signing time: Fri 17 Apr 2026 08:31:47 +0000 Manifest this update: Fri 17 Apr 2026 08:26:47 +0000 Manifest next update: Mon 20 Apr 2026 15:56:47 +0000 Files and hashes: 1: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: TtoAt5XF5k/VvO7s/IJgg3qpfYPoYBpMQ3uw/EaHESY=) 2: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: UuD6w5FXiXpEb3WA0CSDEKfMUpwCYuxys7TXvAGTTaE=) 3: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: Qqqk2T1cKP78pedxPHc7hCxMQjf7DnhA0KfJusumKno=) 4: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: cSbzW37UFSp4uDE4SjobLjyIHBQEPum3WY749moxuxA=) 5: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: WKEiaTlm3HRRnumgx69gRc0fNHyTzs1yLm0l6WuuEfo=) 6: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: oyn1Uio0Qvr9sm/GPuAcnqkMPKHi72fQr6RvUU829kw=) 7: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: PNCJ4WocNaPAH/kwZWt7OowyEhjGGOj4OI7/0eggMdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:dc:a7:ad:51:c1:0c:fc:73:ac:a1:03:55:05:4f:4f:15:ac:c2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Apr 17 08:26:47 2026 GMT Not After : Apr 20 15:56:47 2026 GMT Subject: CN=1BF49A87987A84D2E0EDC8BB1650BE8908E881D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:2b:d0:c9:3c:41:41:b4:8b:a3:f6:f0:35: e4:1c:58:4c:cd:73:d9:9f:57:13:4d:cd:a7:b5:ab: d8:26:89:54:e1:67:15:10:db:45:ba:0e:be:d3:53: 4b:1f:ab:ae:73:4a:33:43:ba:0c:ea:ef:80:7b:b2: 6e:4e:61:73:9e:05:99:63:07:36:7a:c9:0a:87:08: ea:2c:b6:b2:38:84:de:c7:7f:93:96:95:c8:e1:1e: 58:96:46:d5:19:5f:f4:e0:9b:11:7d:ee:58:e9:26: e6:5d:17:45:13:00:a0:16:eb:2d:78:a5:48:9a:8c: 2d:be:24:c0:c8:d2:a0:03:30:ff:4f:d1:81:fb:03: 95:d9:b8:2f:64:e4:56:ab:02:32:71:8d:f9:ca:6b: ba:af:19:b5:dc:af:15:ae:20:d5:bd:62:e5:bd:96: 7e:e9:10:ad:db:df:09:7d:10:5a:50:d3:2c:34:aa: 90:b3:05:68:ad:9c:6a:58:90:d8:12:76:d8:de:63: 9c:75:83:3b:50:f2:03:cb:01:fd:e0:b1:b4:a5:cb: 29:85:11:a9:4e:73:ee:04:d5:ab:6b:11:32:89:e5: c9:e9:aa:28:ce:cd:3a:70:00:8f:f7:73:35:29:2c: ba:6d:39:2c:e6:0d:72:5d:e6:e1:e8:3f:df:6c:79: d6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F4:9A:87:98:7A:84:D2:E0:ED:C8:BB:16:50:BE:89:08:E8:81:D0 X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:81:4e:3e:c7:e5:f3:bf:04:22:c4:34:0c:a3:71:c4:54:64: 4b:14:40:49:a7:f3:44:19:80:c9:39:83:7a:d9:aa:3a:80:39: c1:62:61:ae:64:4a:89:72:5c:08:3b:af:83:3d:52:0b:25:79: 78:f4:6e:f1:e0:07:11:5f:64:f8:c8:f8:8a:38:eb:10:d5:28: 1f:89:61:0b:92:18:cc:21:f7:43:11:68:4a:aa:33:fe:5b:6f: 38:06:f9:6d:74:30:25:f9:a1:65:12:4c:31:a9:09:03:63:d5: a6:54:35:6a:31:f0:42:a3:b1:a1:a7:f9:fb:05:f1:e0:c9:67: 0e:df:6d:1d:ae:0d:67:01:85:2f:f7:6a:0f:17:ca:aa:ff:0c: a4:23:96:37:c7:70:7b:de:35:1c:6e:89:3a:43:ac:59:6c:30: 8c:7b:63:67:08:e8:7f:9a:ec:66:ff:81:0a:96:76:82:a3:9a: ac:88:7d:b5:d3:af:ad:e0:2e:9b:7a:6a:69:c8:d5:26:c4:4b: c1:30:64:1e:2e:a0:b5:db:20:4c:a8:93:07:83:d6:36:c5:f2: 10:f0:67:ad:07:90:39:bf:4d:8b:e9:dc:df:54:db:3a:5d:e3: fc:0b:87:87:42:10:f2:c0:83:1c:86:e1:d6:cb:23:5d:14:92: b0:e4:cd:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdynrVHBDPxzrKEDVQVPTxWswmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNjA0MTcwODI2NDdaFw0yNjA0MjAxNTU2NDdaMDMxMTAvBgNV BAMTKDFCRjQ5QTg3OTg3QTg0RDJFMEVEQzhCQjE2NTBCRTg5MDhFODgxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMSvQyTxBQbSLo/bwNeQcWEzN c9mfVxNNzae1q9gmiVThZxUQ20W6Dr7TU0sfq65zSjNDugzq74B7sm5OYXOeBZlj BzZ6yQqHCOostrI4hN7Hf5OWlcjhHliWRtUZX/TgmxF97ljpJuZdF0UTAKAW6y14 pUiajC2+JMDI0qADMP9P0YH7A5XZuC9k5FarAjJxjfnKa7qvGbXcrxWuINW9YuW9 ln7pEK3b3wl9EFpQ0yw0qpCzBWitnGpYkNgSdtjeY5x1gztQ8gPLAf3gsbSlyymF EalOc+4E1atrETKJ5cnpqijOzTpwAI/3czUpLLptOSzmDXJd5uHoP99sedbxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG/Sah5h6hNLg7ci7FlC+iQjogdAwHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2 QzM0NjNBMUEyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGBTj7H5fO/BCLENAyjccRUZEsUQEmn80QZ gMk5g3rZqjqAOcFiYa5kSolyXAg7r4M9UgsleXj0bvHgBxFfZPjI+Io46xDVKB+J YQuSGMwh90MRaEqqM/5bbzgG+W10MCX5oWUSTDGpCQNj1aZUNWox8EKjsaGn+fsF 8eDJZw7fbR2uDWcBhS/3ag8Xyqr/DKQjljfHcHveNRxuiTpDrFlsMIx7Y2cI6H+a 7Gb/gQqWdoKjmqyIfbXTr63gLpt6amnI1SbES8EwZB4uoLXbIEyokweD1jbF8hDw Z60HkDm/TYvp3N9U2zpd4/wLh4dCEPLAgxyG4dbLI10UkrDkzRQ= -----END CERTIFICATE-----Generated at Sat Apr 18 00:31:27 2026 by rpki-client