$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft (raw, json) Hash identifier: ZrL5T7IZZe/N6ag1Ut2hF9WcgNySLwJFevUYWfEVOHQ= Subject key identifier: 1A:80:D4:1B:B0:20:ED:41:72:95:7E:D5:C8:1F:2B:DB:CF:9D:D5:25 Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Certificate serial: 0FAEBB7E06E4C587BAF68747CC4E43C8F6487CDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft Manifest number: 01EC Signing time: Wed 15 Apr 2026 17:00:05 +0000 Manifest this update: Wed 15 Apr 2026 16:55:05 +0000 Manifest next update: Sat 18 Apr 2026 19:57:05 +0000 Files and hashes: 1: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl (hash: DxweAL+bd4toVMQFhaU7VGolunI+GLpQoCY4sujBF24=) 2: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: OBSu5NWIqhavEgs//Z/O6dTCa3LFoSwUa21LGk85Vss=) 3: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 19:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ae:bb:7e:06:e4:c5:87:ba:f6:87:47:cc:4e:43:c8:f6:48:7c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Validity Not Before: Apr 15 16:55:05 2026 GMT Not After : Apr 18 19:57:05 2026 GMT Subject: CN=1A80D41BB020ED4172957ED5C81F2BDBCF9DD525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:74:05:88:06:cf:67:a8:e1:92:8b:b4:1a: 6e:23:3f:d5:4b:26:b8:17:0a:44:04:50:49:e4:26: 10:0b:a3:37:c5:6d:35:fb:81:bc:cf:77:3b:14:fa: 5a:a3:a9:51:0b:0f:6d:d9:43:fd:f2:ac:ed:e0:cb: ec:94:0a:79:78:c5:e2:a8:77:8b:66:a2:e7:75:98: a9:a3:71:e6:86:9c:98:ff:ea:86:c9:35:05:b0:a8: c2:a3:b0:db:fc:b9:59:99:ed:ab:17:df:09:05:ce: 3b:7c:40:52:32:97:af:f2:94:d5:4e:52:ba:99:7a: 96:32:af:ab:dc:ed:45:48:f6:e2:06:5d:f0:d2:ff: 46:2d:01:7e:bc:4f:4b:3c:13:21:5b:99:a7:3a:96: 9a:ce:a3:6b:fc:82:b6:54:17:c9:3c:2a:68:5e:57: ae:e6:35:f1:97:29:e3:2c:88:9e:f5:3a:12:d3:ee: ca:1d:a5:53:f4:d8:ab:56:ce:c5:03:3e:d8:d5:cb: fa:66:e4:f0:2d:d9:39:dd:08:5b:a7:16:e8:1f:e2: df:ad:5b:ed:1b:8f:a6:2e:82:86:ca:36:ef:74:a6: ef:c4:c4:69:2b:77:7d:0c:0f:12:53:68:67:15:8c: 3c:de:34:a5:c0:e1:35:58:26:51:b1:4b:10:eb:44: 9e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:80:D4:1B:B0:20:ED:41:72:95:7E:D5:C8:1F:2B:DB:CF:9D:D5:25 X509v3 Authority Key Identifier: keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6c:21:d1:63:95:d4:0a:d4:ea:96:48:35:dc:b7:b2:01:20: 95:a4:76:c3:e4:f1:a1:d1:5b:2a:db:2d:88:ca:c6:4a:11:f8: 35:8e:36:c5:3e:18:6d:b8:99:4e:02:9c:5b:cb:fc:71:e2:ac: 8b:94:58:f5:c6:09:9b:21:43:cf:47:aa:62:3d:99:37:a5:68: 8e:ed:b0:84:71:03:cd:f0:05:00:94:bc:f8:d7:f7:68:fa:39: 2c:85:ac:7f:11:a3:aa:42:51:dc:aa:5e:61:e1:ac:b1:15:59: 7d:45:b3:ea:a1:a1:a3:9e:3a:4e:ac:77:63:7f:11:f9:02:52: 2d:76:5c:01:d1:2c:85:7b:2d:e6:29:15:b7:67:52:96:5b:a8: fa:de:cd:1f:c2:57:42:34:6d:3c:00:57:6c:23:a8:d5:12:52: 93:7d:97:31:89:29:68:d5:e9:ce:4d:b8:61:e6:0f:f6:62:cc: d9:0a:72:f3:b4:18:c4:81:6e:06:4b:30:3d:f8:2e:2e:45:b8: a5:ad:7c:22:52:08:d4:73:b9:41:d4:c0:a3:78:d5:e2:9d:96: 61:f8:59:ad:6f:55:33:f8:e6:e8:bd:3c:4f:11:86:aa:21:7b: 80:3f:f7:a1:ed:e0:bf:2b:b6:d6:7d:00:cf:97:69:05:f7:8e: 92:91:59:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD667fgbkxYe69odHzE5DyPZIfN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAy ODcyQkZDMDAeFw0yNjA0MTUxNjU1MDVaFw0yNjA0MTgxOTU3MDVaMDMxMTAvBgNV BAMTKDFBODBENDFCQjAyMEVENDE3Mjk1N0VENUM4MUYyQkRCQ0Y5REQ1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflXQFiAbPZ6jhkou0Gm4jP9VL JrgXCkQEUEnkJhALozfFbTX7gbzPdzsU+lqjqVELD23ZQ/3yrO3gy+yUCnl4xeKo d4tmoud1mKmjceaGnJj/6obJNQWwqMKjsNv8uVmZ7asX3wkFzjt8QFIyl6/ylNVO UrqZepYyr6vc7UVI9uIGXfDS/0YtAX68T0s8EyFbmac6lprOo2v8grZUF8k8Kmhe V67mNfGXKeMsiJ71OhLT7sodpVP02KtWzsUDPtjVy/pm5PAt2TndCFunFugf4t+t W+0bj6YugobKNu90pu/ExGkrd30MDxJTaGcVjDzeNKXA4TVYJlGxSxDrRJ6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGoDUG7Ag7UFylX7VyB8r28+d1SUwHwYDVR0j BBgwFoAUixms4Kc5FJKxi+J6wB0qYChyv8AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY1MjlkYi05MzMwLTRlOTctYWRmMS1iMGRkZjFhNmU1OTkvMC84QjE5QUNFMEE3 MzkxNDkyQjE4QkUyN0FDMDFEMkE2MDI4NzJCRkMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAyODcy QkZDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJB NjAyODcyQkZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxsIdFjldQK1OqWSDXct7IBIJWkdsPk8aHR WyrbLYjKxkoR+DWONsU+GG24mU4CnFvL/HHirIuUWPXGCZshQ89HqmI9mTelaI7t sIRxA83wBQCUvPjX92j6OSyFrH8Ro6pCUdyqXmHhrLEVWX1Fs+qhoaOeOk6sd2N/ EfkCUi12XAHRLIV7LeYpFbdnUpZbqPrezR/CV0I0bTwAV2wjqNUSUpN9lzGJKWjV 6c5NuGHmD/ZizNkKcvO0GMSBbgZLMD34Li5FuKWtfCJSCNRzuUHUwKN41eKdlmH4 Wa1vVTP45ui9PE8Rhqohe4A/96Ht4L8rttZ9AM+XaQX3jpKRWWU= -----END CERTIFICATE-----Generated at Fri Apr 17 12:18:43 2026 by rpki-client