$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json) Hash identifier: MuCfRZ1OwgkkckNtbCEObYtcOM4KBUuKg6skzX0m0K0= Subject key identifier: 22:AC:63:C6:EA:53:96:53:75:D9:A9:47:EB:AF:9B:1B:D4:20:06:A3 Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Certificate serial: 1E3CD054FE4C49608EB0249D2591450B251F7327 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft Manifest number: 0103 Signing time: Thu 16 Apr 2026 18:31:37 +0000 Manifest this update: Thu 16 Apr 2026 18:26:37 +0000 Manifest next update: Mon 20 Apr 2026 05:28:37 +0000 Files and hashes: 1: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: CXBjinMFmREkEXAtRRPxT0T/GaZmLYRkjxnoWDNgpGo=) 2: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: WLCShlxfdsF203Qx2wOYYjy6P8cT8pTLxL//5fp4yiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3c:d0:54:fe:4c:49:60:8e:b0:24:9d:25:91:45:0b:25:1f:73:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Validity Not Before: Apr 16 18:26:37 2026 GMT Not After : Apr 20 05:28:37 2026 GMT Subject: CN=22AC63C6EA53965375D9A947EBAF9B1BD42006A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:e0:d5:7f:c8:00:ea:4e:fb:11:d0:05:11: 8b:02:d8:6c:83:d9:ac:f3:15:57:cb:af:2f:ee:3f: c8:6b:10:ed:37:bd:4f:48:28:c7:75:14:e1:3f:01: 14:18:1d:93:1f:13:b8:1b:f1:62:a1:6f:40:7a:72: b9:3c:bd:bd:70:ef:92:bd:f5:e5:bb:38:4e:e2:1e: 45:cd:5f:ce:e3:0e:b7:39:08:9b:d0:37:a8:6f:f2: 02:87:b7:f9:08:6d:60:6b:7a:f5:17:65:45:f0:77: 2f:a1:f2:8c:c8:74:63:ae:b6:b2:47:16:9c:5a:dd: 25:cd:83:7e:02:e4:32:57:8d:ca:17:61:8d:06:68: c0:c6:db:53:11:41:4b:fa:9c:fb:23:1e:60:85:b3: b6:23:97:d1:ba:54:24:de:cb:27:77:3c:e5:73:d2: 0a:52:2a:c0:05:dd:4b:12:bf:83:96:5d:da:f2:4b: 46:74:c9:b5:87:92:e5:64:95:66:9d:62:6f:ff:b7: a5:1f:da:c3:8f:a1:76:91:3c:dd:2b:3e:80:74:7c: 5f:3e:c7:2a:bd:fd:ee:65:44:86:13:19:bd:40:c3: 36:9e:1d:ec:48:b0:62:c9:ba:e7:ce:ac:c7:fc:59: 97:93:b8:21:22:f1:09:3b:b7:9f:30:f1:2b:ea:79: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AC:63:C6:EA:53:96:53:75:D9:A9:47:EB:AF:9B:1B:D4:20:06:A3 X509v3 Authority Key Identifier: keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:92:5c:0b:bd:2d:fc:40:88:b7:39:bf:2c:47:58:71:6c:8b: 7e:30:eb:80:58:72:ae:ea:58:5d:7a:2a:8d:81:55:8e:fc:a6: 19:8f:8e:8a:45:f2:36:d8:5a:81:0c:4e:be:7c:9d:03:82:81: 26:e7:19:54:2e:8e:5f:6a:42:db:3e:aa:36:87:21:a9:a6:a2: 45:de:66:4b:a5:85:bb:4f:ef:a4:95:cd:ff:e8:b2:bb:f1:a4: f9:08:92:2d:f3:30:5e:d9:d3:1a:56:17:97:f9:71:28:86:d6: e7:1c:e1:e2:90:26:65:6b:66:95:e3:b0:48:90:2a:e0:fd:42: 49:2c:3d:55:a4:2d:be:dc:eb:ed:a7:56:12:35:50:23:d7:1b: 25:e7:19:a4:0c:2e:0c:31:65:01:eb:50:39:ba:88:df:bc:fc: af:a7:a5:a5:74:5b:17:a4:49:c5:0f:f9:90:61:5a:57:12:2b: 57:9c:f1:7c:a0:37:a7:da:b2:fc:dc:6c:b4:e4:22:cf:4e:97: f9:cd:d8:5d:03:fc:93:21:4f:95:b3:66:68:10:d4:1f:3d:e6: 1b:5e:37:44:04:0b:f3:53:4f:d3:c4:d2:06:cd:7e:6a:7e:4c: a7:b9:7a:f7:df:e3:e9:07:a5:00:11:45:0d:01:aa:f2:74:ad: 3e:ec:20:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjzQVP5MSWCOsCSdJZFFCyUfcycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw OEU4RDNENTAeFw0yNjA0MTYxODI2MzdaFw0yNjA0MjAwNTI4MzdaMDMxMTAvBgNV BAMTKDIyQUM2M0M2RUE1Mzk2NTM3NUQ5QTk0N0VCQUY5QjFCRDQyMDA2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JODVf8gA6k77EdAFEYsC2GyD 2azzFVfLry/uP8hrEO03vU9IKMd1FOE/ARQYHZMfE7gb8WKhb0B6crk8vb1w75K9 9eW7OE7iHkXNX87jDrc5CJvQN6hv8gKHt/kIbWBrevUXZUXwdy+h8ozIdGOutrJH Fpxa3SXNg34C5DJXjcoXYY0GaMDG21MRQUv6nPsjHmCFs7Yjl9G6VCTeyyd3POVz 0gpSKsAF3UsSv4OWXdryS0Z0ybWHkuVklWadYm//t6Uf2sOPoXaRPN0rPoB0fF8+ xyq9/e5lRIYTGb1AwzaeHexIsGLJuufOrMf8WZeTuCEi8Qk7t58w8SvqeSBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIqxjxupTllN12alH66+bG9QgBqMwHwYDVR0j BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4 RDNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExNmZiYzktYjMxYy00MjI1LWE2 OTctNGZlZGJjMjM0ZGI2LzAvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQy NDEwOEU4RDNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+SXAu9LfxAiLc5vyxHWHFsi34w64BYcq7q WF16Ko2BVY78phmPjopF8jbYWoEMTr58nQOCgSbnGVQujl9qQts+qjaHIammokXe ZkulhbtP76SVzf/osrvxpPkIki3zMF7Z0xpWF5f5cSiG1ucc4eKQJmVrZpXjsEiQ KuD9QkksPVWkLb7c6+2nVhI1UCPXGyXnGaQMLgwxZQHrUDm6iN+8/K+npaV0Wxek ScUP+ZBhWlcSK1ec8XygN6fasvzcbLTkIs9Ol/nN2F0D/JMhT5WzZmgQ1B895hte N0QEC/NTT9PE0gbNfmp+TKe5evff4+kHpQARRQ0BqvJ0rT7sIBw= -----END CERTIFICATE-----Generated at Fri Apr 17 22:00:51 2026 by rpki-client