$ rpki-client -vvf repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft File: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft (raw, json) Hash identifier: XRaa61fL/dqJsWYmjJh0xPW9Zkc3ukp8MNyn2edKx3A= Subject key identifier: C8:61:10:40:A7:86:AD:74:65:3B:DB:08:E9:34:6D:79:9D:EE:8B:41 Authority key identifier: F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 Certificate issuer: /CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Certificate serial: 3945A8ED7CCC32AFEDD49EB54F8F924BAFCEC28A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft Manifest number: 0169 Signing time: Wed 15 Apr 2026 19:42:20 +0000 Manifest this update: Wed 15 Apr 2026 19:37:20 +0000 Manifest next update: Sat 18 Apr 2026 22:52:20 +0000 Files and hashes: 1: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl (hash: NNZ3fG+8IdrzHVv+qQug+klTOsRGelwHmLWOOY6yqLA=) 2: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: JcnToFV1Tdf0hSLWS9PFNPrwPJ5SIH11d0CkEuHYi9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:45:a8:ed:7c:cc:32:af:ed:d4:9e:b5:4f:8f:92:4b:af:ce:c2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Validity Not Before: Apr 15 19:37:20 2026 GMT Not After : Apr 18 22:52:20 2026 GMT Subject: CN=C8611040A786AD74653BDB08E9346D799DEE8B41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:80:92:c4:91:1f:b2:8d:c1:ae:3a:19:68: 29:b0:6a:a9:61:b0:e5:53:72:4e:40:59:e3:3a:9f: 9a:15:83:49:11:9b:22:e2:4f:7b:7f:4e:86:b2:8f: a9:4e:46:b5:2f:2e:89:3f:ff:b5:31:10:5f:3b:06: 42:a3:10:7d:67:c4:83:ca:3d:24:82:08:45:4b:9b: 04:4f:c9:dc:44:bb:0c:9b:ad:56:ff:e6:14:3f:43: 9e:10:f8:1c:df:0e:e2:15:d0:d5:c9:95:e8:c2:a5: 89:64:a4:0d:c6:c8:a9:a3:a5:d8:6d:c7:6b:36:6d: 06:35:0b:48:45:6a:c9:70:1d:06:43:a4:4a:20:a7: 6a:65:cb:79:08:72:db:54:1e:b9:6c:ae:b2:f9:45: 57:82:bb:e3:bb:a4:7d:2b:ed:53:49:3a:96:42:ff: 4d:e4:38:79:f7:58:6c:00:f1:dd:db:8a:d9:1d:f6: 8e:bb:96:ce:0d:52:97:f6:67:ad:77:b4:3a:88:ad: c4:04:aa:26:02:d6:e9:81:88:cd:94:56:52:84:75: 2e:05:39:62:12:7a:c7:35:00:3e:af:0f:14:55:51: bf:55:5c:07:41:94:b6:69:c1:69:b3:8d:04:1f:5d: 2a:c9:ea:da:58:5c:fc:ad:af:80:d1:72:3f:cc:83: 1d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:61:10:40:A7:86:AD:74:65:3B:DB:08:E9:34:6D:79:9D:EE:8B:41 X509v3 Authority Key Identifier: keyid:F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d9:39:e2:d7:a8:17:07:f5:08:11:79:0d:81:67:04:0f:e7: 9a:a6:58:9e:ee:c0:b1:c4:51:e9:a7:9f:42:fb:45:82:f9:3d: cc:e3:de:fa:50:7f:38:99:5a:48:05:6d:b3:e2:53:a2:13:06: d5:16:53:c0:b9:8f:e6:42:c6:4d:f7:6b:42:01:ad:f8:98:ab: 8d:59:5b:4a:98:01:39:80:00:e1:6d:cb:dc:64:7e:45:08:5d: 21:60:9d:4d:d4:ec:7b:6e:98:5b:bc:13:d1:27:ca:59:c7:67: aa:0e:3f:69:e6:8c:35:4f:bc:90:67:86:a4:2c:4a:5d:66:06: 38:1c:7f:fa:f8:b2:8e:48:99:6f:7b:90:4d:dd:ec:e1:44:44: 43:e8:45:9b:b6:d9:1f:09:d3:9a:1d:e2:aa:2d:a8:ca:be:70: f8:73:13:13:8d:e8:ba:a7:e8:74:85:46:4d:4d:53:8b:14:1b: fd:1a:1b:ab:0b:2c:c9:05:27:7a:de:ca:60:98:fa:78:f8:4c: 44:ba:e0:b3:db:b3:58:35:7e:06:4b:e3:27:b8:66:7d:a2:46: 47:70:a2:6b:86:9e:1b:82:30:b7:73:d9:14:a6:11:90:68:f6: d7:85:db:14:a6:a2:83:79:23:b2:fa:0a:3b:b1:c2:05:bf:89: a4:5f:e0:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUWo7XzMMq/t1J61T4+SS6/OwoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5 MzI1MjE2OTAeFw0yNjA0MTUxOTM3MjBaFw0yNjA0MTgyMjUyMjBaMDMxMTAvBgNV BAMTKEM4NjExMDQwQTc4NkFENzQ2NTNCREIwOEU5MzQ2RDc5OURFRThCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xoCSxJEfso3BrjoZaCmwaqlh sOVTck5AWeM6n5oVg0kRmyLiT3t/Toayj6lORrUvLok//7UxEF87BkKjEH1nxIPK PSSCCEVLmwRPydxEuwybrVb/5hQ/Q54Q+BzfDuIV0NXJlejCpYlkpA3GyKmjpdht x2s2bQY1C0hFaslwHQZDpEogp2ply3kIcttUHrlsrrL5RVeCu+O7pH0r7VNJOpZC /03kOHn3WGwA8d3bitkd9o67ls4NUpf2Z613tDqIrcQEqiYC1umBiM2UVlKEdS4F OWISesc1AD6vDxRVUb9VXAdBlLZpwWmzjQQfXSrJ6tpYXPytr4DRcj/Mgx1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyGEQQKeGrXRlO9sI6TRteZ3ui0EwHwYDVR0j BBgwFoAU+Mnnmt3eKSi8X6J8PWIcHZMlIWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2M4OTFkNy00ZmNjLTQ3NzAtODJkNC0zNjdiODdiYjU1MWUvMC9GOEM5RTc5QURE REUyOTI4QkM1RkEyN0MzRDYyMUMxRDkzMjUyMTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5MzI1 MjE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFD MUQ5MzI1MjE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvZOeLXqBcH9QgReQ2BZwQP55qmWJ7uwLHE Uemnn0L7RYL5Pczj3vpQfziZWkgFbbPiU6ITBtUWU8C5j+ZCxk33a0IBrfiYq41Z W0qYATmAAOFty9xkfkUIXSFgnU3U7HtumFu8E9EnylnHZ6oOP2nmjDVPvJBnhqQs Sl1mBjgcf/r4so5ImW97kE3d7OFEREPoRZu22R8J05od4qotqMq+cPhzExON6Lqn 6HSFRk1NU4sUG/0aG6sLLMkFJ3reymCY+nj4TES64LPbs1g1fgZL4ye4Zn2iRkdw omuGnhuCMLdz2RSmEZBo9teF2xSmooN5I7L6CjuxwgW/iaRf4EI= -----END CERTIFICATE-----Generated at Fri Apr 17 21:34:37 2026 by rpki-client