$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: pwO01G6jMt43QUJdsa4I5RzL9kzlQ5NXSU8uagTtOhQ= Subject key identifier: 85:CD:8A:35:85:56:67:DC:7E:13:C3:5F:C7:9E:03:0E:45:35:80:40 Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 42B3CF8D24BF8D04D20A2E25E5DC4EB893161B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 0332 Signing time: Sat 18 Apr 2026 21:01:04 +0000 Manifest this update: Sat 18 Apr 2026 20:56:04 +0000 Manifest next update: Wed 22 Apr 2026 07:17:04 +0000 Files and hashes: 1: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: Gma5LJ8sjU6zw1KeV9MnDrUWrOgWRnW8QTtBnwO/tVU=) 2: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: ino1QDYQDx2pfUj3BL+ZlKpPJfUhXo1WbnH0JMrs73I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b3:cf:8d:24:bf:8d:04:d2:0a:2e:25:e5:dc:4e:b8:93:16:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Apr 18 20:56:04 2026 GMT Not After : Apr 22 07:17:04 2026 GMT Subject: CN=85CD8A35855667DC7E13C35FC79E030E45358040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:07:6b:bc:2d:4b:14:08:b2:4a:19:7f:11: 9d:80:81:b2:28:a9:fc:b4:03:53:84:85:80:21:63: b0:f6:81:83:58:f1:6c:e2:2a:30:e8:99:bb:16:d8: c0:b3:39:3f:7a:17:24:69:cb:c4:40:07:83:9d:45: 38:a0:46:fb:04:fe:99:b0:cf:d6:d1:67:89:c1:ac: fe:de:a4:67:21:91:b7:2c:19:91:eb:d0:20:78:83: 1a:ce:a4:23:fd:a9:11:20:48:8d:1a:13:15:28:e9: ce:fd:6e:c4:c6:b9:1c:ff:aa:8b:89:81:9c:c6:3c: 4a:a5:0e:e5:7e:a1:f4:8a:65:6b:4a:00:ae:85:80: da:c1:97:54:18:5e:d3:c7:f4:dc:bf:87:a0:68:29: 5d:5f:7b:51:d1:a9:73:ba:91:dd:b9:d7:6c:46:27: 5e:4d:44:02:0a:36:db:35:15:4c:13:8e:c4:3b:bb: b8:26:8e:0a:fc:ae:ad:7c:a8:57:e0:f0:9f:1c:ff: d5:c9:dd:56:d2:e7:6e:61:99:bb:9a:45:83:5b:16: f2:db:09:67:67:66:e3:29:97:d3:6f:cf:77:59:4c: fc:29:78:db:b5:a4:a3:c6:65:18:1c:53:6a:37:b3: 16:de:75:51:e0:47:03:0d:3f:01:2c:55:05:1f:23: b7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CD:8A:35:85:56:67:DC:7E:13:C3:5F:C7:9E:03:0E:45:35:80:40 X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:09:a8:3d:77:b7:de:0f:84:2c:1f:15:66:6f:2b:48:b8:bb: 72:e5:de:a7:d4:e2:e7:8d:13:9b:68:55:54:bc:cc:95:e0:3c: d8:25:6d:ca:7d:4d:80:8a:b4:8b:5f:e8:32:b5:79:5b:5e:34: 0c:21:49:24:c9:1f:30:42:41:4f:9e:67:20:55:cb:7e:5c:ad: cf:c8:aa:11:56:1b:3a:1f:a9:8e:82:9d:d4:44:5c:d2:29:87: a1:b9:b5:e1:ae:82:bf:96:53:80:7b:39:a4:5e:dd:f9:2b:c6: 7a:46:74:c3:c6:4b:ee:e3:c0:e1:a8:2b:53:f2:a9:02:98:b2: d7:ba:0c:43:fe:ab:93:a3:ea:71:62:ef:47:76:db:71:29:dd: cb:da:48:b1:7c:c9:e5:8c:8b:bb:97:89:ee:7d:8b:17:07:74: 39:dc:0c:3a:11:60:c7:59:81:61:5d:50:44:c2:a3:94:81:2a: f1:aa:29:c3:b8:e7:ad:70:dc:ed:ba:39:65:95:31:78:53:cf: 44:09:94:e3:0d:bb:08:63:68:0e:ba:eb:dd:38:52:cb:69:15: 2a:52:6c:7b:ae:cc:75:97:48:47:2c:02:1f:d9:8a:90:34:f7: 8a:07:d3:52:74:fc:e2:df:d2:a8:15:d7:66:93:9e:7c:59:b1: f3:c5:30:32 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITQrPPjSS/jQTSCi4l5dxOuJMWGzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4REMyRUQwODcwQTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhB NTIyQUY0MB4XDTI2MDQxODIwNTYwNFoXDTI2MDQyMjA3MTcwNFowMzExMC8GA1UE AxMoODVDRDhBMzU4NTU2NjdEQzdFMTNDMzVGQzc5RTAzMEU0NTM1ODA0MDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcgB2u8LUsUCLJKGX8RnYCBsiip /LQDU4SFgCFjsPaBg1jxbOIqMOiZuxbYwLM5P3oXJGnLxEAHg51FOKBG+wT+mbDP 1tFnicGs/t6kZyGRtywZkevQIHiDGs6kI/2pESBIjRoTFSjpzv1uxMa5HP+qi4mB nMY8SqUO5X6h9Ipla0oAroWA2sGXVBhe08f03L+HoGgpXV97UdGpc7qR3bnXbEYn Xk1EAgo22zUVTBOOxDu7uCaOCvyurXyoV+Dwnxz/1cndVtLnbmGZu5pFg1sW8tsJ Z2dm4ymX02/Pd1lM/Cl427Wko8ZlGBxTajezFt51UeBHAw0/ASxVBR8jt4ECAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSFzYo1hVZn3H4Tw1/HngMORTWAQDAfBgNVHSME GDAWgBSNwu0IcKAFFSYG4ua+trbHilIq9DAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5 MTliODBkLTQ2OTMtNDA5NS1hOWUzLTQxMmUxMjgyOGZmMi8wLzhEQzJFRDA4NzBB MDA1MTUyNjA2RTJFNkJFQjZCNkM3OEE1MjJBRjQuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi84REMyRUQwODcwQTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIy QUY0LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84OTE5YjgwZC00NjkzLTQwOTUtYTll My00MTJlMTI4MjhmZjIvMC84REMyRUQwODcwQTAwNTE1MjYwNkUyRTZCRUI2QjZD NzhBNTIyQUY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAZQmoPXe33g+ELB8VZm8rSLi7cuXep9Ti540T m2hVVLzMleA82CVtyn1NgIq0i1/oMrV5W140DCFJJMkfMEJBT55nIFXLflytz8iq EVYbOh+pjoKd1ERc0imHobm14a6Cv5ZTgHs5pF7d+SvGekZ0w8ZL7uPA4agrU/Kp Apiy17oMQ/6rk6PqcWLvR3bbcSndy9pIsXzJ5YyLu5eJ7n2LFwd0OdwMOhFgx1mB YV1QRMKjlIEq8aopw7jnrXDc7bo5ZZUxeFPPRAmU4w27CGNoDrrr3ThSy2kVKlJs e67MdZdIRywCH9mKkDT3igfTUnT84t/SqBXXZpOefFmx88UwMg== -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:02 2026 by rpki-client