$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft File: 8E5335B45EE371DC463E5C65783A244FD1846656.mft (raw, json) Hash identifier: BsHna5URCGB7qgXPntqoxmZ8vqa3ywJbCoG/+RNRuJ4= Subject key identifier: 87:B5:3A:4E:2D:2C:B8:15:0D:1A:94:41:54:48:96:28:9B:9B:01:AA Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 Certificate issuer: /CN=8E5335B45EE371DC463E5C65783A244FD1846656 Certificate serial: 56FF303DBEF1B13C56E81F6BD7FE3D589C1CA60D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft Manifest number: 014D Signing time: Sat 18 Apr 2026 01:11:48 +0000 Manifest this update: Sat 18 Apr 2026 01:06:48 +0000 Manifest next update: Tue 21 Apr 2026 03:03:48 +0000 Files and hashes: 1: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: FKWGkuhrHToaQ6HQBG2hDishDUxJo1KcIBwHXf6jaDE=) 2: 8E5335B45EE371DC463E5C65783A244FD1846656.crl (hash: JSf2jDIM311+KrSG9zh7aG+kASeVUtX/p9UYTQW2WRY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 03:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ff:30:3d:be:f1:b1:3c:56:e8:1f:6b:d7:fe:3d:58:9c:1c:a6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656 Validity Not Before: Apr 18 01:06:48 2026 GMT Not After : Apr 21 03:03:48 2026 GMT Subject: CN=87B53A4E2D2CB8150D1A9441544896289B9B01AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:f8:98:cf:47:0c:a8:c1:74:58:83:66:ac: f7:74:e4:73:3e:60:75:8a:64:1b:b0:72:72:aa:2a: 7f:8d:a4:43:c9:30:a1:37:c5:71:08:34:1a:65:e7: 6b:b9:d2:c1:68:d5:78:a0:cf:72:8e:a6:a3:2d:60: 9d:06:ca:fc:d1:da:56:d3:6b:9f:32:5b:90:c6:fb: 10:e7:46:cf:cc:26:80:56:97:ec:ec:4c:1a:1b:67: d1:4a:37:22:7a:98:95:c1:c1:d8:a3:e2:49:57:a7: b9:a4:bd:a6:97:82:d5:8d:52:f0:24:1c:f6:df:63: 97:07:11:b8:4d:7e:c1:e1:81:2f:9f:2b:35:36:f4: 26:31:c8:ec:cc:c6:f2:a3:c2:15:8b:3c:da:16:9a: 48:6f:c6:c1:5e:dc:bc:b4:c8:eb:65:81:e8:94:3c: f0:97:47:10:b5:d5:d5:5d:14:7b:8c:be:13:4d:6f: e5:d2:01:09:8b:dc:68:b7:f6:1f:33:97:a5:99:b8: e1:2d:10:ee:6b:c1:54:60:2d:b4:0c:f4:95:0b:2e: 5b:3d:2b:a2:96:4a:d8:7b:09:2e:81:dd:8c:d0:56: 21:38:57:42:dd:89:c7:69:0c:cf:21:41:e7:96:12: b9:7d:62:f8:3c:ab:55:d6:cd:1d:9a:84:74:3b:de: 26:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B5:3A:4E:2D:2C:B8:15:0D:1A:94:41:54:48:96:28:9B:9B:01:AA X509v3 Authority Key Identifier: keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:aa:93:78:7b:f0:61:8e:89:64:a7:d3:35:ed:f0:af:0b:ec: 49:b7:1b:11:5b:3f:55:74:e8:8b:69:9b:45:ba:ca:6c:12:d4: 9f:09:e8:c7:89:24:ca:b3:d8:a4:c4:46:c0:35:c8:c3:3f:28: cd:aa:f1:93:75:80:34:92:cd:5b:84:10:d7:a7:5e:bd:67:57: 37:a8:93:40:19:e2:13:c2:d9:60:b8:4b:fd:cd:d5:6b:49:ca: 01:89:01:db:f1:99:fa:ac:13:69:81:71:97:2c:cc:0e:0b:69: 59:a5:ae:70:65:8a:5a:c4:0c:03:0e:61:df:32:cf:07:66:41: 3d:41:a2:df:fd:92:08:04:cc:3f:7c:82:10:4a:81:89:0a:5f: ad:35:a5:e7:be:42:88:55:9e:6a:fe:2f:81:9c:f2:2d:5b:90: 0d:11:df:91:28:95:f5:79:79:ff:15:f0:20:fe:37:e1:9b:df: 3f:99:0e:68:a9:4f:00:9f:19:3b:54:f3:1e:af:7c:62:0f:06: f6:57:ac:ac:30:13:94:c4:12:21:71:6c:63:b5:df:f9:ae:2b: dc:b3:2d:d6:52:0b:50:e4:99:b3:44:05:e6:8f:28:55:0a:6c: 99:70:41:d9:96:44:cc:37:2d:f5:5b:40:38:7f:17:f3:c1:63: e7:2c:08:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVv8wPb7xsTxW6B9r1/49WJwcpg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZE MTg0NjY1NjAeFw0yNjA0MTgwMTA2NDhaFw0yNjA0MjEwMzAzNDhaMDMxMTAvBgNV BAMTKDg3QjUzQTRFMkQyQ0I4MTUwRDFBOTQ0MTU0NDg5NjI4OUI5QjAxQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdv/iYz0cMqMF0WINmrPd05HM+ YHWKZBuwcnKqKn+NpEPJMKE3xXEINBpl52u50sFo1Xigz3KOpqMtYJ0GyvzR2lbT a58yW5DG+xDnRs/MJoBWl+zsTBobZ9FKNyJ6mJXBwdij4klXp7mkvaaXgtWNUvAk HPbfY5cHEbhNfsHhgS+fKzU29CYxyOzMxvKjwhWLPNoWmkhvxsFe3Ly0yOtlgeiU PPCXRxC11dVdFHuMvhNNb+XSAQmL3Gi39h8zl6WZuOEtEO5rwVRgLbQM9JULLls9 K6KWSth7CS6B3YzQViE4V0LdicdpDM8hQeeWErl9Yvg8q1XWzR2ahHQ73iaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh7U6Ti0suBUNGpRBVEiWKJubAaowHwYDVR0j BBgwFoAUjlM1tF7jcdxGPlxleDokT9GEZlYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWNjMmU1Yi0zYjkxLTQyYWYtODIwMy01ZTNiOTE3MDQ4NDMvMC84RTUzMzVCNDVF RTM3MURDNDYzRTVDNjU3ODNBMjQ0RkQxODQ2NjU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZEMTg0 NjY1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTljYzJlNWItM2I5MS00MmFmLTgy MDMtNWUzYjkxNzA0ODQzLzAvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0 NEZEMTg0NjY1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaqk3h78GGOiWSn0zXt8K8L7Em3GxFbP1V0 6Itpm0W6ymwS1J8J6MeJJMqz2KTERsA1yMM/KM2q8ZN1gDSSzVuEENenXr1nVzeo k0AZ4hPC2WC4S/3N1WtJygGJAdvxmfqsE2mBcZcszA4LaVmlrnBlilrEDAMOYd8y zwdmQT1Bot/9kggEzD98ghBKgYkKX601pee+QohVnmr+L4Gc8i1bkA0R35EolfV5 ef8V8CD+N+Gb3z+ZDmipTwCfGTtU8x6vfGIPBvZXrKwwE5TEEiFxbGO13/muK9yz LdZSC1DkmbNEBeaPKFUKbJlwQdmWRMw3LfVbQDh/F/PBY+csCOs= -----END CERTIFICATE-----Generated at Sat Apr 18 05:01:15 2026 by rpki-client