$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft File: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft (raw, json) Hash identifier: FwCcKlNqucgP3Zh7ze2bs0ShlaKAlnYgbcM6rC58sNE= Subject key identifier: 10:43:9E:03:3A:A5:88:6D:E9:69:4C:8C:39:89:82:EE:D3:1C:1F:5A Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Certificate serial: 494A8CCB4CC5CAEB3015E71EEF8D76D522EC0F5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft Manifest number: 0265 Signing time: Fri 17 Apr 2026 17:52:01 +0000 Manifest this update: Fri 17 Apr 2026 17:47:01 +0000 Manifest next update: Mon 20 Apr 2026 23:32:01 +0000 Files and hashes: 1: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: oDrqqfgam7Z9q9E5EExV9zAvlD6EiX1QGxTTwyoxWlg=) 2: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl (hash: 6p+rfoVLhbtMFfWM9f9ZrmoZt7/MMo3lAkvkNhmqRJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4a:8c:cb:4c:c5:ca:eb:30:15:e7:1e:ef:8d:76:d5:22:ec:0f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Validity Not Before: Apr 17 17:47:01 2026 GMT Not After : Apr 20 23:32:01 2026 GMT Subject: CN=10439E033AA5886DE9694C8C398982EED31C1F5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:58:28:6d:89:c4:1e:20:17:98:da:78:77:48: e9:b8:fd:89:93:e9:94:06:57:10:45:04:9f:a0:9c: 0e:44:d1:dc:ed:22:a5:70:e0:24:19:e0:e6:51:0d: de:1a:a5:74:48:99:55:86:e4:2c:2e:05:73:6d:5f: 64:9e:9c:13:63:d6:95:de:e7:36:5e:c3:04:fd:88: cd:c7:20:07:f1:84:ca:be:61:76:3a:27:21:ad:dc: 58:9e:31:7e:2c:98:4a:a5:98:5f:07:ff:09:6a:bd: a7:ae:00:50:88:6e:2a:b7:0f:e4:c3:9f:0a:c7:85: ab:99:6c:62:bb:dc:23:f3:f5:cf:ea:85:03:f7:7f: e8:6f:9a:73:12:d1:b6:7e:54:ad:2e:b5:76:c2:75: 61:65:c7:90:ec:5d:3c:5d:fc:02:d1:47:bf:67:25: 13:15:4d:2e:c7:0f:86:bf:1e:4e:98:f5:6f:29:b1: 38:48:c4:54:6f:bf:e2:fa:64:9f:d1:cf:3b:53:58: 55:a6:a3:8f:1d:7e:47:0e:da:2e:46:75:ed:87:46: 2c:8a:8b:8d:a3:c0:d4:7a:ab:d4:7d:49:cf:c9:d4: 60:e5:eb:8c:77:31:83:63:d9:98:c1:cd:c4:73:6a: 17:51:13:bc:15:71:3a:ab:56:56:63:0c:3f:36:99: f2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:43:9E:03:3A:A5:88:6D:E9:69:4C:8C:39:89:82:EE:D3:1C:1F:5A X509v3 Authority Key Identifier: keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:81:88:cc:29:45:63:15:b2:58:4f:b5:fb:2b:79:92:51:cd: 78:79:cf:ad:ae:f9:f2:6e:e3:78:09:7b:7b:cb:74:6c:00:45: 43:eb:0b:92:15:a9:ab:21:25:10:d6:6d:22:fc:81:2b:74:34: c7:41:24:ad:aa:89:c7:f4:ec:10:43:73:be:88:b2:08:63:74: 9a:46:65:ea:a8:66:77:71:22:1d:4c:5f:32:8d:de:bb:59:1d: ea:f4:00:e2:aa:02:47:5b:82:74:d0:48:f2:92:ca:12:cf:a7: 67:22:c4:2e:60:7b:9d:e9:d4:bd:06:d9:32:9a:b9:bd:6c:c5: 51:ad:8a:69:e5:62:6c:be:84:50:cd:58:88:76:f7:7a:93:99: 96:6c:70:47:c2:51:1c:0e:c2:2e:d3:13:b4:6e:bf:88:0e:0b: 94:95:6e:82:cc:56:ae:7b:11:6a:f7:e0:7c:41:c8:cf:56:40: 12:7c:ef:cd:90:bf:3b:17:f3:0e:62:3b:88:18:60:15:29:fd: 67:2c:45:33:66:8c:48:bb:ee:37:82:31:b0:38:c9:d9:3d:f8: 39:57:c3:1d:8e:45:89:e7:07:65:d3:bc:df:6c:ca:a3:e3:cd: f3:6c:f2:09:49:f6:3b:0b:eb:18:82:bd:5c:c0:eb:74:f2:2c: d8:8a:72:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSUqMy0zFyuswFece74121SLsD18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYw NzI3RjFDQjAeFw0yNjA0MTcxNzQ3MDFaFw0yNjA0MjAyMzMyMDFaMDMxMTAvBgNV BAMTKDEwNDM5RTAzM0FBNTg4NkRFOTY5NEM4QzM5ODk4MkVFRDMxQzFGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZWChticQeIBeY2nh3SOm4/YmT 6ZQGVxBFBJ+gnA5E0dztIqVw4CQZ4OZRDd4apXRImVWG5CwuBXNtX2SenBNj1pXe 5zZewwT9iM3HIAfxhMq+YXY6JyGt3FieMX4smEqlmF8H/wlqvaeuAFCIbiq3D+TD nwrHhauZbGK73CPz9c/qhQP3f+hvmnMS0bZ+VK0utXbCdWFlx5DsXTxd/ALRR79n JRMVTS7HD4a/Hk6Y9W8psThIxFRvv+L6ZJ/RzztTWFWmo48dfkcO2i5Gde2HRiyK i42jwNR6q9R9Sc/J1GDl64x3MYNj2ZjBzcRzahdRE7wVcTqrVlZjDD82mfIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEEOeAzqliG3paUyMOYmC7tMcH1owHwYDVR0j BBgwFoAUi/AtgXLUyooAqe4uuMwJnwcn8cswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTZjMmE5MS02YWZjLTQ3NjctYmJjMS03NTA2MTMyNjQ1ODUvMC84QkYwMkQ4MTcy RDRDQThBMDBBOUVFMkVCOENDMDk5RjA3MjdGMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYwNzI3 RjFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2YzJhOTEtNmFmYy00NzY3LWJi YzEtNzUwNjEzMjY0NTg1LzAvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5 OUYwNzI3RjFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuBiMwpRWMVslhPtfsreZJRzXh5z62u+fJu 43gJe3vLdGwARUPrC5IVqashJRDWbSL8gSt0NMdBJK2qicf07BBDc76IsghjdJpG ZeqoZndxIh1MXzKN3rtZHer0AOKqAkdbgnTQSPKSyhLPp2cixC5ge53p1L0G2TKa ub1sxVGtimnlYmy+hFDNWIh293qTmZZscEfCURwOwi7TE7Ruv4gOC5SVboLMVq57 EWr34HxByM9WQBJ8782QvzsX8w5iO4gYYBUp/WcsRTNmjEi77jeCMbA4ydk9+DlX wx2ORYnnB2XTvN9syqPjzfNs8glJ9jsL6xiCvVzA63TyLNiKcrA= -----END CERTIFICATE-----Generated at Sat Apr 18 03:03:39 2026 by rpki-client