$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json) Hash identifier: NzB78vIKSWfHEv/M0vCgqht+EkhxBHcI7894GDQUB88= Subject key identifier: F7:F8:7D:9C:85:11:B9:00:31:36:37:4C:E1:93:F2:A9:C8:13:D4:C7 Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Certificate issuer: /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Certificate serial: 0188FB3F6CC1D8BE84E95CEEF4ABBA388C15C12D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft Manifest number: 026F Signing time: Fri 17 Apr 2026 20:50:45 +0000 Manifest this update: Fri 17 Apr 2026 20:45:45 +0000 Manifest next update: Tue 21 Apr 2026 08:30:45 +0000 Files and hashes: 1: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: e1+g8THmvNEnlaoxGUshdkaz40jvvc3owgWKR87Y5mY=) 2: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: nXEHhJ8w6SXV+eCEbP2YrkovqQsEQKgULxh/UNhY8O8=) 3: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: WTqqW4cwushoWLyLWupS3yHzTC5AqZ4B8ENJ6k7wzI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 08:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:fb:3f:6c:c1:d8:be:84:e9:5c:ee:f4:ab:ba:38:8c:15:c1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Validity Not Before: Apr 17 20:45:45 2026 GMT Not After : Apr 21 08:30:45 2026 GMT Subject: CN=F7F87D9C8511B9003136374CE193F2A9C813D4C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8b:89:de:d0:b7:c3:be:31:f0:eb:89:39:80: 1f:56:25:3f:94:34:44:ef:f2:00:56:39:42:7e:c7: 37:db:1c:e4:43:91:51:67:c9:45:62:25:17:3a:c2: d4:c0:2c:07:99:eb:cb:f1:a3:92:3d:9d:2f:d8:d2: f0:58:e2:85:92:a3:78:c2:38:4d:b4:3c:ab:e4:e7: 5d:c7:58:8b:59:9c:88:01:8b:cf:c4:7f:ec:dc:6f: b7:9f:a2:76:24:9d:68:bd:17:e7:37:00:6b:1c:b7: a1:b3:4e:ae:66:46:d4:ab:4a:53:13:ff:72:9d:83: 10:fa:e3:33:cc:88:36:fd:5d:9e:d6:eb:a5:2a:b3: 3b:13:2e:b8:5b:6b:57:c4:f0:bd:92:8d:50:eb:95: 5c:20:3b:17:2d:21:1f:5d:e1:a3:6e:33:92:5e:22: 0f:e7:47:36:5c:e2:e3:a7:65:cd:25:8f:1d:05:c1: 48:b8:0f:60:c1:6b:df:bd:99:be:fb:70:c9:57:63: 48:43:45:2b:19:e8:fd:8c:07:f2:84:19:09:19:48: 14:35:bd:2c:82:42:5d:52:95:7e:49:8c:9c:53:7e: 4c:82:cf:e4:86:4d:0d:47:10:99:f4:09:65:ef:fe: 3c:82:4c:1e:48:93:e8:00:ba:3e:3d:3f:a4:28:33: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F8:7D:9C:85:11:B9:00:31:36:37:4C:E1:93:F2:A9:C8:13:D4:C7 X509v3 Authority Key Identifier: keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c2:5d:d4:74:2d:72:07:d4:e9:29:88:51:40:35:81:81:b2: a1:1c:60:3b:70:cc:e7:5e:e6:96:b3:3a:66:b0:f4:62:c7:e9: 1d:74:85:8d:4e:4a:9c:3d:3d:28:8c:d3:7c:54:7a:53:49:63: ae:2a:4c:47:d0:00:58:17:19:8b:93:97:77:8a:46:c4:76:88: 24:21:4f:cb:c8:2a:c5:cf:68:c5:1d:c0:35:dc:3f:1d:79:d3: ea:a0:83:82:79:37:17:dd:58:24:49:e2:ba:38:e4:24:29:f1: 12:93:a1:c8:64:ce:60:54:35:e8:33:8e:d8:8a:00:d7:28:af: 54:40:23:06:57:aa:d9:b2:a5:77:9f:96:90:e0:1e:32:95:ba: 65:ac:a1:00:76:f4:0b:72:e1:5b:8b:aa:20:17:61:a9:07:81: 92:34:c9:20:83:13:14:44:bf:4a:ae:9a:8b:1f:27:92:1b:e1: f5:49:c8:a9:44:66:41:27:39:bf:0e:3e:d4:0b:23:45:c9:75: 2a:30:d5:ff:5e:c4:a3:cf:e8:91:43:03:e9:46:23:c0:ca:06: 40:87:ef:fa:68:b5:d7:e1:78:13:f8:0b:b8:4f:3f:f0:dd:e5: d4:f1:6d:99:9c:7a:69:12:b4:65:f4:87:be:0b:d2:99:91:e9: ef:b6:e3:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYj7P2zB2L6E6Vzu9Ku6OIwVwS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF MURCM0RDQTAeFw0yNjA0MTcyMDQ1NDVaFw0yNjA0MjEwODMwNDVaMDMxMTAvBgNV BAMTKEY3Rjg3RDlDODUxMUI5MDAzMTM2Mzc0Q0UxOTNGMkE5QzgxM0Q0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsi4ne0LfDvjHw64k5gB9WJT+U NETv8gBWOUJ+xzfbHORDkVFnyUViJRc6wtTALAeZ68vxo5I9nS/Y0vBY4oWSo3jC OE20PKvk513HWItZnIgBi8/Ef+zcb7efonYknWi9F+c3AGsct6GzTq5mRtSrSlMT /3KdgxD64zPMiDb9XZ7W66UqszsTLrhba1fE8L2SjVDrlVwgOxctIR9d4aNuM5Je Ig/nRzZc4uOnZc0ljx0FwUi4D2DBa9+9mb77cMlXY0hDRSsZ6P2MB/KEGQkZSBQ1 vSyCQl1SlX5JjJxTfkyCz+SGTQ1HEJn0CWXv/jyCTB5Ik+gAuj49P6QoM1nnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9/h9nIURuQAxNjdM4ZPyqcgT1McwHwYDVR0j BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC M0RDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5 NEJFMURCM0RDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3CXdR0LXIH1OkpiFFANYGBsqEcYDtwzOde 5pazOmaw9GLH6R10hY1OSpw9PSiM03xUelNJY64qTEfQAFgXGYuTl3eKRsR2iCQh T8vIKsXPaMUdwDXcPx150+qgg4J5NxfdWCRJ4ro45CQp8RKTochkzmBUNegzjtiK ANcor1RAIwZXqtmypXeflpDgHjKVumWsoQB29Aty4VuLqiAXYakHgZI0ySCDExRE v0qumosfJ5Ib4fVJyKlEZkEnOb8OPtQLI0XJdSow1f9exKPP6JFDA+lGI8DKBkCH 7/potdfheBP4C7hPP/Dd5dTxbZmcemkStGX0h74L0pmR6e+246o= -----END CERTIFICATE-----Generated at Sun Apr 19 14:23:01 2026 by rpki-client