$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft File: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft (raw, json) Hash identifier: MygGKkdqNi3tZWv+GhI3ifTdDl1CKfDPgk2xCqn1J44= Subject key identifier: B9:02:24:F5:6B:92:E8:1B:E1:A4:0B:8C:A1:6F:BA:F5:E3:FD:D5:E0 Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Certificate issuer: /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Certificate serial: 4ED77DCBCCF19B70C74E3AB73E0A280DE7E4E016 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft Manifest number: 0238 Signing time: Wed 15 Apr 2026 19:22:10 +0000 Manifest this update: Wed 15 Apr 2026 19:17:10 +0000 Manifest next update: Sun 19 Apr 2026 06:32:10 +0000 Files and hashes: 1: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl (hash: Pm0ypV9w4F1x5kvgfGFCjtGG5WRBrEHOkxSk7xPbvh0=) 2: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: AlVmqpfL/WFpHYoBKjxWx/LAHevtz/DHHIwmIJ22kko=) 3: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2CDFzM/b08FBAmMsE5mkOznd4mOppWCjC4ZNYfj8Grs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d7:7d:cb:cc:f1:9b:70:c7:4e:3a:b7:3e:0a:28:0d:e7:e4:e0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Validity Not Before: Apr 15 19:17:10 2026 GMT Not After : Apr 19 06:32:10 2026 GMT Subject: CN=B90224F56B92E81BE1A40B8CA16FBAF5E3FDD5E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:64:7d:b9:e6:64:c2:c1:3f:a4:94:85:a2: 67:40:bd:32:e5:31:72:31:06:53:f4:a6:54:99:9a: 44:2e:ed:4f:8d:f7:61:44:a0:8a:d0:93:41:0a:c2: 59:bc:ac:c3:8c:2c:6a:6f:fd:96:e3:5c:74:90:32: d7:f5:83:43:0d:87:12:ed:5f:95:88:bb:8c:08:a1: 83:b7:db:65:9c:13:da:43:38:98:53:e8:9d:b5:fe: da:cf:4c:1d:f1:8b:5d:7c:17:ef:45:00:f2:f5:31: a7:58:41:d5:4c:15:d3:b3:cf:a5:8d:2d:ce:4c:85: f6:f6:b9:ba:6d:7a:85:6d:49:d9:1a:74:c3:8b:14: c6:1d:1c:09:fc:8a:ae:da:30:ec:89:7e:2e:49:85: 13:9f:10:42:c1:fe:b4:19:cb:ac:ed:b5:19:f1:ad: 80:fe:bb:56:2a:1e:65:9d:58:86:3f:18:07:a1:c9: fc:d8:bf:b0:2b:dc:f7:80:25:62:76:ee:54:1e:48: 3c:7a:96:43:99:f6:b0:42:a2:d2:e8:bb:52:a5:75: 8c:a9:1d:cc:97:2d:96:25:e8:aa:42:ec:b2:ce:a5: 73:41:4e:6e:ff:7a:fd:51:18:43:05:ec:00:b8:6a: f8:27:bb:bc:81:29:64:4e:45:2d:71:68:57:0a:63: 13:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:02:24:F5:6B:92:E8:1B:E1:A4:0B:8C:A1:6F:BA:F5:E3:FD:D5:E0 X509v3 Authority Key Identifier: keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d0:58:fe:9d:c2:df:57:ed:a8:ee:fe:f7:48:70:22:e3:be: b8:55:19:74:6b:7d:47:d6:92:0e:ed:fe:ee:f2:15:17:a8:1f: 4e:1a:64:e0:f0:16:b4:e6:59:b0:51:67:d4:cf:2c:10:4c:88: 42:1c:58:91:6f:c8:04:4d:fc:93:d9:ef:10:55:fb:f6:a7:c7: f7:be:15:05:47:45:29:72:79:b0:3d:69:ec:20:a2:54:07:22: ad:e7:d6:04:ba:cc:e3:1b:c0:69:97:d4:d5:94:c5:ad:1b:69: a9:b7:4f:63:2b:aa:94:e7:92:d8:03:bb:b0:c4:9a:57:30:04: a9:db:cb:a0:90:a7:2e:81:23:0f:ac:cf:60:e4:3f:47:82:00: ab:bf:04:6b:1d:ae:d8:bf:36:44:a3:97:f8:d4:ae:42:57:dd: c3:a3:01:ee:1c:8e:b8:45:77:b7:d1:f8:1e:88:1c:92:58:a3: 06:31:63:22:e1:31:3e:c5:4e:6c:e7:e8:e9:ea:8c:49:3f:e5: 49:63:50:85:b6:b4:57:04:37:4a:be:52:9f:30:1d:d2:b5:cf: b5:d7:65:08:08:48:7a:f6:c0:54:52:0f:67:1f:8c:7f:71:ce: df:b3:0b:c4:0e:72:ea:60:be:a7:83:ac:3d:86:2c:e4:b3:5a: 0a:88:c9:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtd9y8zxm3DHTjq3PgooDefk4BYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlD NkE0Njg2ODAeFw0yNjA0MTUxOTE3MTBaFw0yNjA0MTkwNjMyMTBaMDMxMTAvBgNV BAMTKEI5MDIyNEY1NkI5MkU4MUJFMUE0MEI4Q0ExNkZCQUY1RTNGREQ1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RmR9ueZkwsE/pJSFomdAvTLl MXIxBlP0plSZmkQu7U+N92FEoIrQk0EKwlm8rMOMLGpv/ZbjXHSQMtf1g0MNhxLt X5WIu4wIoYO322WcE9pDOJhT6J21/trPTB3xi118F+9FAPL1MadYQdVMFdOzz6WN Lc5Mhfb2ubpteoVtSdkadMOLFMYdHAn8iq7aMOyJfi5JhROfEELB/rQZy6zttRnx rYD+u1YqHmWdWIY/GAehyfzYv7Ar3PeAJWJ27lQeSDx6lkOZ9rBCotLou1KldYyp HcyXLZYl6KpC7LLOpXNBTm7/ev1RGEMF7AC4avgnu7yBKWRORS1xaFcKYxMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuQIk9WuS6BvhpAuMoW+69eP91eAwHwYDVR0j BBgwFoAUjZVs8d9WhQyc9hc9+QFBqcakaGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMC84RDk1NkNGMURG NTY4NTBDOUNGNjE3M0RGOTAxNDFBOUM2QTQ2ODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlDNkE0 Njg2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQx QTlDNkE0Njg2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfQWP6dwt9X7aju/vdIcCLjvrhVGXRrfUfW kg7t/u7yFReoH04aZODwFrTmWbBRZ9TPLBBMiEIcWJFvyARN/JPZ7xBV+/anx/e+ FQVHRSlyebA9aewgolQHIq3n1gS6zOMbwGmX1NWUxa0baam3T2MrqpTnktgDu7DE mlcwBKnby6CQpy6BIw+sz2DkP0eCAKu/BGsdrti/NkSjl/jUrkJX3cOjAe4cjrhF d7fR+B6IHJJYowYxYyLhMT7FTmzn6OnqjEk/5UljUIW2tFcEN0q+Up8wHdK1z7XX ZQgISHr2wFRSD2cfjH9xzt+zC8QOcupgvqeDrD2GLOSzWgqIydo= -----END CERTIFICATE-----Generated at Fri Apr 17 18:06:25 2026 by rpki-client