$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: tTtpLZPhL+7sAHUgvhoBLzxniZMvKSMW9kujcru85DM= Subject key identifier: 3C:77:04:73:B5:2A:E2:9F:08:4F:D7:D8:30:91:F7:52:EF:01:17:E6 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 2E132C6B0962A2C52B4D2DF6493DD1DCB9502AF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: FD Signing time: Thu 16 Apr 2026 14:11:03 +0000 Manifest this update: Thu 16 Apr 2026 14:06:03 +0000 Manifest next update: Sun 19 Apr 2026 17:40:03 +0000 Files and hashes: 1: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: LW5rOerEeQ4o2LL00sXUmEen9sAHKxhrciVztv4Q/SE=) 2: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: zxm4Oi1ZvnYV5yuIsCQHUwsCUNFDJHzYXDEKmYaeM/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:13:2c:6b:09:62:a2:c5:2b:4d:2d:f6:49:3d:d1:dc:b9:50:2a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Apr 16 14:06:03 2026 GMT Not After : Apr 19 17:40:03 2026 GMT Subject: CN=3C770473B52AE29F084FD7D83091F752EF0117E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:63:34:1c:6a:28:91:80:56:d7:1d:69:c9: 71:19:03:0c:ad:a0:e7:d1:70:9c:6c:0d:b8:df:2b: c9:01:b5:fb:f3:e2:25:d0:47:42:1a:5c:08:6e:4c: 71:63:01:a1:9a:61:73:d1:b3:6f:8a:d4:3a:d0:18: 95:ca:ef:ea:55:56:0a:a6:7e:48:8f:43:f3:8c:22: d0:67:a5:9d:12:45:a0:5d:ea:06:d3:68:13:d8:79: 73:b6:1d:c8:9f:a5:da:67:ed:dd:c6:a0:db:d8:0c: 3d:53:f4:5f:cd:c2:29:af:70:07:dc:0b:b5:40:a0: 29:e1:b8:a9:23:b3:fb:68:01:c2:67:63:59:87:63: 85:4a:5f:ac:7e:8e:41:c3:61:5d:7f:a7:6b:f7:ca: 9f:e5:62:ff:e7:0f:0a:0f:56:03:1d:c0:91:7e:e6: f3:83:b7:ca:91:9d:62:bd:36:e5:23:24:9c:e1:70: 41:04:54:14:d8:0f:34:5d:d8:40:aa:02:d9:ce:0e: 8a:53:ed:6c:99:19:c5:36:f9:eb:b1:40:03:cc:39: 2d:fc:22:88:20:01:b2:73:3c:cc:ed:96:71:11:be: 04:d9:3b:d1:99:50:c2:a9:e0:6c:f8:f0:71:26:48: c8:13:84:41:49:cf:e1:7c:bf:c6:e1:06:59:72:20: 91:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:77:04:73:B5:2A:E2:9F:08:4F:D7:D8:30:91:F7:52:EF:01:17:E6 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a5:22:81:8a:1f:4e:a3:b6:9c:19:2a:a0:c1:0e:fc:35:f4: b3:a6:b2:75:d3:83:87:e4:e5:79:b9:73:bc:03:2b:25:cf:eb: a5:03:27:91:2e:24:59:6f:78:96:a2:a7:62:6f:72:8b:5e:85: cd:16:98:25:9c:be:c1:2d:76:11:63:90:5c:7c:9b:6d:33:6b: c3:1b:ea:a4:2e:e5:0d:23:ea:cb:b7:a8:89:9b:28:27:cf:0d: 91:1d:ca:18:8d:7e:7d:fb:d9:0f:05:56:f0:94:c1:80:a0:38: 13:c1:28:50:ee:1a:7c:b8:ad:30:a9:0b:b6:4c:eb:78:a7:77: 37:1b:06:09:51:55:76:39:b4:da:0e:4f:b2:77:8d:84:4a:b9: 32:3a:0e:59:97:f5:83:bd:89:da:9a:e2:d6:07:52:49:d9:cd: ff:f2:98:2f:f1:3f:3a:fc:99:12:fc:fc:47:b8:9b:62:c0:89: e2:2e:da:f6:0c:e2:08:08:ee:b2:22:ba:9d:a7:66:6a:c7:ab: e6:94:27:33:66:ae:36:ac:d7:49:34:72:92:23:a0:a0:69:8d: a1:67:61:18:bb:98:8c:4c:c0:2e:15:a3:fc:26:46:23:eb:03: ea:0c:b5:d8:4e:8f:dd:b5:6b:6d:ee:ce:b5:92:c9:16:56:f6: 44:9f:ce:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhMsawliosUrTS32ST3R3LlQKvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNjA0MTYxNDA2MDNaFw0yNjA0MTkxNzQwMDNaMDMxMTAvBgNV BAMTKDNDNzcwNDczQjUyQUUyOUYwODRGRDdEODMwOTFGNzUyRUYwMTE3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGf2M0HGookYBW1x1pyXEZAwyt oOfRcJxsDbjfK8kBtfvz4iXQR0IaXAhuTHFjAaGaYXPRs2+K1DrQGJXK7+pVVgqm fkiPQ/OMItBnpZ0SRaBd6gbTaBPYeXO2Hcifpdpn7d3GoNvYDD1T9F/NwimvcAfc C7VAoCnhuKkjs/toAcJnY1mHY4VKX6x+jkHDYV1/p2v3yp/lYv/nDwoPVgMdwJF+ 5vODt8qRnWK9NuUjJJzhcEEEVBTYDzRd2ECqAtnODopT7WyZGcU2+euxQAPMOS38 IoggAbJzPMztlnERvgTZO9GZUMKp4Gz48HEmSMgThEFJz+F8v8bhBllyIJGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPHcEc7Uq4p8IT9fYMJH3Uu8BF+YwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGlIoGKH06jtpwZKqDBDvw19LOmsnXTg4fk 5Xm5c7wDKyXP66UDJ5EuJFlveJaip2Jvcotehc0WmCWcvsEtdhFjkFx8m20za8Mb 6qQu5Q0j6su3qImbKCfPDZEdyhiNfn372Q8FVvCUwYCgOBPBKFDuGny4rTCpC7ZM 63indzcbBglRVXY5tNoOT7J3jYRKuTI6DlmX9YO9idqa4tYHUknZzf/ymC/xPzr8 mRL8/Ee4m2LAieIu2vYM4ggI7rIiup2nZmrHq+aUJzNmrjas10k0cpIjoKBpjaFn YRi7mIxMwC4Vo/wmRiPrA+oMtdhOj921a23uzrWSyRZW9kSfzos= -----END CERTIFICATE-----Generated at Sat Apr 18 04:39:44 2026 by rpki-client