$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: anubd8W9YvaGHptA1ms9UACjj6G1ysnXJ6/FAcIycgo= Subject key identifier: 7E:80:F3:CA:B0:D4:B4:94:B8:BC:B2:82:68:6A:D6:5B:8B:61:35:80 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 179B713F536D32FEB1E8367F9701E3449CF58B85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 0287 Signing time: Thu 16 Apr 2026 10:01:47 +0000 Manifest this update: Thu 16 Apr 2026 09:56:47 +0000 Manifest next update: Sun 19 Apr 2026 21:04:47 +0000 Files and hashes: 1: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) 2: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: KOpwpgV3KMerxKCwLU3q9HuCOFmD7phkyqZLGcZkPQ8=) 3: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: 8m6X191VzrwrVHZRyza0VXyBq37Gn/fmWBddTlyvomI=) 4: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) 5: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: HVYhAep7KgaM4M+kBrrFEPVlyU6iOfNPrETiLrA+FPY=) 6: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: FQr3dnu6W2wmRC6QsO/LIhkDuERPgR93ow/4oU8iN0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 21:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9b:71:3f:53:6d:32:fe:b1:e8:36:7f:97:01:e3:44:9c:f5:8b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Apr 16 09:56:47 2026 GMT Not After : Apr 19 21:04:47 2026 GMT Subject: CN=7E80F3CAB0D4B494B8BCB282686AD65B8B613580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:a0:b1:b2:ec:cb:86:12:64:86:c8:c7:96: 70:c9:ce:d3:59:bd:c4:3e:2a:58:a2:77:0f:fd:21: 73:f2:51:33:f6:5f:ab:13:94:01:36:db:21:2c:c8: c9:76:92:d0:b1:b5:c1:e5:22:ba:e8:72:b1:3a:11: 90:69:d1:47:de:38:2b:ee:6b:bb:94:8e:9d:78:5a: b1:b3:da:bb:61:b2:b9:64:d6:aa:eb:87:e5:ed:e7: ba:24:aa:69:98:8b:96:0f:6b:d6:fe:64:71:92:33: bc:83:d4:dd:78:6a:9a:04:8a:3c:6a:e1:a2:c7:ca: 25:cf:75:4c:6b:bb:73:33:1a:2f:a8:fd:92:42:50: 5d:74:65:8d:bf:1a:39:95:0e:4c:97:9b:77:cd:32: d6:c7:10:14:11:b2:be:4b:5d:8b:7e:8a:3d:45:eb: 5a:64:0a:f1:c9:c4:5c:a9:0b:80:a7:64:da:95:86: 26:34:8f:c9:a1:0c:82:4a:a9:b8:b4:c5:16:0b:63: 2e:3b:ee:e1:e2:65:55:1e:38:76:9c:82:97:2c:75: 20:2c:b6:20:a4:94:14:67:2c:1c:3a:2b:42:e1:ca: 7a:45:25:34:68:c6:54:4b:7b:13:fb:f7:2e:9f:94: 7c:1a:15:39:a7:73:d8:c7:ce:9a:45:f0:77:52:47: 65:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:80:F3:CA:B0:D4:B4:94:B8:BC:B2:82:68:6A:D6:5B:8B:61:35:80 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:7d:b0:47:d3:68:28:31:ad:04:2d:bd:d6:0f:c5:d0:5e:d0: cc:9b:75:b5:5b:d4:0e:6d:7d:07:fb:9c:51:df:6e:f4:db:b2: 25:8d:d1:33:f4:a0:f4:61:e7:6e:3a:ef:b3:45:6b:c7:7c:53: d0:67:0c:e4:f0:21:90:99:0f:a9:19:3b:24:61:f5:17:48:c1: 0b:19:3c:0b:e0:99:fe:e5:24:5e:ab:7c:e1:30:17:15:24:76: 42:e2:04:97:49:d2:b4:4c:27:f7:1b:0b:ba:48:3c:06:11:a5: 82:42:e5:8f:d6:61:a6:5f:02:47:a8:8b:2b:e0:45:49:25:ca: 5e:dc:cc:c7:78:80:ee:c0:69:9c:f6:d0:be:b8:1c:55:4a:d9: ab:94:09:d6:50:88:39:68:b0:72:4b:8d:07:39:1d:fe:20:dd: 22:17:20:2f:e3:4d:f0:ad:fd:a0:af:2c:ce:14:da:c3:e6:bb: 45:f0:6e:3d:1a:f4:71:67:78:17:3e:ee:35:08:c3:d0:29:4d: e5:19:e8:db:a6:63:42:0c:f0:9e:c6:f4:fa:6c:0b:77:6c:70: cd:33:9d:c3:14:65:b5:a7:35:38:af:f4:64:ca:c9:f7:ed:f9: 93:d0:e6:61:95:e1:00:6e:4c:fc:7e:21:ae:37:d4:af:d5:9a: 1d:25:6d:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF5txP1NtMv6x6DZ/lwHjRJz1i4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNjA0MTYwOTU2NDdaFw0yNjA0MTkyMTA0NDdaMDMxMTAvBgNV BAMTKDdFODBGM0NBQjBENEI0OTRCOEJDQjI4MjY4NkFENjVCOEI2MTM1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNqCxsuzLhhJkhsjHlnDJztNZ vcQ+Kliidw/9IXPyUTP2X6sTlAE22yEsyMl2ktCxtcHlIrrocrE6EZBp0UfeOCvu a7uUjp14WrGz2rthsrlk1qrrh+Xt57okqmmYi5YPa9b+ZHGSM7yD1N14apoEijxq 4aLHyiXPdUxru3MzGi+o/ZJCUF10ZY2/GjmVDkyXm3fNMtbHEBQRsr5LXYt+ij1F 61pkCvHJxFypC4CnZNqVhiY0j8mhDIJKqbi0xRYLYy477uHiZVUeOHacgpcsdSAs tiCklBRnLBw6K0LhynpFJTRoxlRLexP79y6flHwaFTmnc9jHzppF8HdSR2V3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfoDzyrDUtJS4vLKCaGrWW4thNYAwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKt9sEfTaCgxrQQtvdYPxdBe0MybdbVb1A5t fQf7nFHfbvTbsiWN0TP0oPRh524677NFa8d8U9BnDOTwIZCZD6kZOyRh9RdIwQsZ PAvgmf7lJF6rfOEwFxUkdkLiBJdJ0rRMJ/cbC7pIPAYRpYJC5Y/WYaZfAkeoiyvg RUklyl7czMd4gO7AaZz20L64HFVK2auUCdZQiDlosHJLjQc5Hf4g3SIXIC/jTfCt /aCvLM4U2sPmu0Xwbj0a9HFneBc+7jUIw9ApTeUZ6NumY0IM8J7G9PpsC3dscM0z ncMUZbWnNTiv9GTKyfft+ZPQ5mGV4QBuTPx+Ia431K/Vmh0lbUI= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:23 2026 by rpki-client