$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: NpQSPi+iRKfdTQYkO0YCWk3COk6VukGrtujlT4DSJlU= Subject key identifier: F1:CB:76:80:DD:95:23:8A:A4:B6:37:D0:53:86:42:6A:B6:9A:5D:05 Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 402CFCD28DB6660115B3FC5942AE02B53686185A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 01F3 Signing time: Thu 16 Apr 2026 17:01:35 +0000 Manifest this update: Thu 16 Apr 2026 16:56:35 +0000 Manifest next update: Sun 19 Apr 2026 17:30:35 +0000 Files and hashes: 1: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: MoFvv+++vTB85GXC2Kbs1Zs2yMHHdxOOMsOAsgFAkGY=) 2: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: 5Ehh8L7RAaUWOmALHvgTXF3uHWdXyAcF9GX6D/7Soqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2c:fc:d2:8d:b6:66:01:15:b3:fc:59:42:ae:02:b5:36:86:18:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Apr 16 16:56:35 2026 GMT Not After : Apr 19 17:30:35 2026 GMT Subject: CN=F1CB7680DD95238AA4B637D05386426AB69A5D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:09:39:c3:ac:a2:40:f0:3e:88:92:8a:3b:e0: 33:77:a6:03:d3:07:79:64:d0:46:2e:50:9f:ad:ab: 15:6e:bf:55:30:78:c1:55:90:8c:15:dd:06:eb:79: 30:69:6d:98:85:c7:5a:3b:c4:5b:be:7b:1a:f4:a4: 78:fc:da:61:03:9b:ea:ce:42:6a:67:1e:96:33:8c: 33:97:4f:5e:d9:c8:a2:1d:69:a6:fd:74:0e:a1:ab: 8d:c4:4a:8c:b8:fd:37:fd:8c:45:a5:bb:6d:c4:60: f5:fd:43:3f:9c:8b:ee:b4:ae:14:d9:c4:0a:b1:60: da:27:4d:39:f6:52:59:87:44:6b:25:35:68:bc:64: a0:61:9c:b8:77:1a:ef:8e:b3:cc:70:3e:02:8d:9f: 43:d9:1d:4a:47:7d:d8:6a:ba:14:c8:d0:f7:c0:6d: a8:21:76:fc:25:42:6e:96:d8:95:bf:a3:c5:66:57: cb:9e:72:72:e6:ef:11:21:6d:d9:a8:9c:6c:ab:6f: 23:88:1c:da:28:0c:ad:23:a4:05:e3:72:f2:c1:b3: f0:1d:0d:75:09:61:1b:af:66:0f:b1:ba:56:cb:a3: d7:43:2a:f6:77:5c:cf:15:f6:7c:4a:81:d6:43:e0: fd:c1:c3:56:36:43:4b:c4:e2:e4:15:01:5b:34:22: 92:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CB:76:80:DD:95:23:8A:A4:B6:37:D0:53:86:42:6A:B6:9A:5D:05 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c8:85:9b:df:b9:db:3a:93:4a:4c:34:82:af:a8:fa:e9:55: e2:02:6b:fb:26:ed:e8:96:28:6e:42:5c:4c:56:3f:fc:44:b1: 6e:3b:d9:8d:4a:6a:24:64:e0:92:24:a8:ab:59:22:2d:84:37: a5:95:76:96:30:12:b7:26:1a:58:7c:e1:9e:2e:2c:81:51:77: e5:28:15:35:04:ee:be:9c:06:18:18:4f:ac:47:a4:e0:9c:d0: 31:ec:62:37:7d:26:96:e2:ff:be:e9:ad:35:6e:5b:13:81:24: 35:59:0d:67:b1:50:cd:f3:41:ad:60:89:67:6d:db:ad:31:c6: 32:80:a1:0e:6c:66:10:4f:8a:75:11:65:f7:73:2d:93:34:e0: 4a:db:73:20:ea:14:c8:42:d7:bf:ea:01:48:85:dd:db:06:79: d1:38:c2:2c:bd:fb:49:fc:c0:21:6f:cd:cb:df:c8:da:d9:4b: ee:4e:40:35:18:d2:fb:19:e6:ff:40:17:a0:a8:a1:4b:69:64: 61:73:c7:8f:06:db:b6:a3:8c:4c:d4:7c:83:4e:ce:b1:ae:a4: f2:a2:7b:0f:88:ac:92:ed:ae:26:f9:15:a7:12:23:55:fb:30: 78:cf:05:22:a2:ab:4d:65:26:ab:1c:e5:d4:14:9c:97:bd:fe: 95:4b:d0:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCz80o22ZgEVs/xZQq4CtTaGGFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNjA0MTYxNjU2MzVaFw0yNjA0MTkxNzMwMzVaMDMxMTAvBgNV BAMTKEYxQ0I3NjgwREQ5NTIzOEFBNEI2MzdEMDUzODY0MjZBQjY5QTVEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7CTnDrKJA8D6Ikoo74DN3pgPT B3lk0EYuUJ+tqxVuv1UweMFVkIwV3QbreTBpbZiFx1o7xFu+exr0pHj82mEDm+rO QmpnHpYzjDOXT17ZyKIdaab9dA6hq43ESoy4/Tf9jEWlu23EYPX9Qz+ci+60rhTZ xAqxYNonTTn2UlmHRGslNWi8ZKBhnLh3Gu+Os8xwPgKNn0PZHUpHfdhquhTI0PfA baghdvwlQm6W2JW/o8VmV8uecnLm7xEhbdmonGyrbyOIHNooDK0jpAXjcvLBs/Ad DXUJYRuvZg+xulbLo9dDKvZ3XM8V9nxKgdZD4P3Bw1Y2Q0vE4uQVAVs0IpIlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8ct2gN2VI4qktjfQU4ZCaraaXQUwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7IhZvfuds6k0pMNIKvqPrpVeICa/sm7eiW KG5CXExWP/xEsW472Y1KaiRk4JIkqKtZIi2EN6WVdpYwErcmGlh84Z4uLIFRd+Uo FTUE7r6cBhgYT6xHpOCc0DHsYjd9Jpbi/77prTVuWxOBJDVZDWexUM3zQa1giWdt 260xxjKAoQ5sZhBPinURZfdzLZM04ErbcyDqFMhC17/qAUiF3dsGedE4wiy9+0n8 wCFvzcvfyNrZS+5OQDUY0vsZ5v9AF6CooUtpZGFzx48G27ajjEzUfINOzrGupPKi ew+IrJLtrib5FacSI1X7MHjPBSKiq01lJqsc5dQUnJe9/pVL0F0= -----END CERTIFICATE-----Generated at Fri Apr 17 22:47:24 2026 by rpki-client