$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: w0WzEOpV7HdiVHQoWWLG4c018ieroeOKbzumy0M02+I= Subject key identifier: DC:C3:27:3A:DB:77:41:F4:54:A8:83:18:DD:92:6F:86:40:B4:21:1D Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 3D6BDA2F8D181FF8C53F7FBF663F45A9E00BC46C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 056A Signing time: Fri 17 Apr 2026 08:52:12 +0000 Manifest this update: Fri 17 Apr 2026 08:47:12 +0000 Manifest next update: Mon 20 Apr 2026 17:10:12 +0000 Files and hashes: 1: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) 2: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) 3: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: YkL8EEx82JIRnTIKOucAp/GTQ/UiKU1WSmbnlem2FqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6b:da:2f:8d:18:1f:f8:c5:3f:7f:bf:66:3f:45:a9:e0:0b:c4:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Apr 17 08:47:12 2026 GMT Not After : Apr 20 17:10:12 2026 GMT Subject: CN=DCC3273ADB7741F454A88318DD926F8640B4211D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:98:dc:34:f2:ef:bf:5b:54:5d:02:89:41:46: 1c:bf:8d:7b:1a:aa:a4:41:be:eb:0a:33:7f:d4:4d: 97:2b:65:fa:92:4c:eb:ef:ed:aa:e5:81:2b:0f:e5: da:fb:da:ed:81:f2:9b:9e:e3:20:8b:3e:25:b7:94: 1e:19:3f:12:ba:92:93:c9:88:01:8f:b6:f3:40:11: 19:3b:7a:66:76:72:c2:a1:38:f4:1b:e4:0c:10:66: c5:e6:31:33:b4:1d:a5:dc:a5:b0:ee:38:48:b2:18: 54:c9:f0:87:5e:02:6d:1a:d4:64:b0:46:6c:6a:34: 99:44:34:5f:69:09:3a:8a:90:c9:9d:2e:a9:7c:75: 9a:aa:07:03:1b:01:e4:eb:1d:ef:2e:a1:9e:a0:35: c5:c1:db:3c:7b:b4:a5:a9:20:53:09:a2:c0:fd:d5: cc:af:57:5d:69:64:7d:1d:1c:ef:a7:43:d4:0b:07: f8:3e:e6:68:b7:ce:bb:7c:e9:11:e8:95:54:db:ea: ba:29:46:3e:4c:2b:c2:22:d4:25:d7:72:5b:b7:e0: 87:0f:72:2c:3a:55:39:00:0d:cd:56:99:1c:30:ad: c9:7f:51:8e:e2:1f:76:9a:fd:85:fc:50:0b:73:9e: b0:03:eb:a6:8d:8a:ed:ea:41:e9:9a:2d:c6:9c:1a: 22:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C3:27:3A:DB:77:41:F4:54:A8:83:18:DD:92:6F:86:40:B4:21:1D X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:b5:c5:13:13:95:e5:39:87:e0:dc:54:56:fa:a1:bb:27:fa: ca:f6:85:b2:9d:b3:ac:a8:ba:62:03:66:d3:1f:90:ea:66:79: 9a:fd:f4:d1:ae:c3:36:75:fd:68:26:0c:fc:1c:60:4b:37:9e: 35:8b:17:de:17:fc:bf:b7:86:7a:46:d0:b6:38:f9:90:ef:14: cc:24:4a:70:55:3c:0d:10:58:31:9f:31:ec:9e:74:b1:0f:3c: af:39:b2:0c:dc:81:12:53:01:23:5d:d2:9a:d6:26:da:0f:40: 09:85:9e:fc:27:ce:89:86:a8:d8:c9:b0:20:fa:11:44:94:b8: 0d:80:74:3b:eb:66:f4:ac:19:63:66:b3:bf:c9:ad:38:09:d1: 90:aa:48:a2:50:c5:48:93:f2:88:6d:f3:36:5a:3a:ee:1c:2d: 45:03:70:76:e5:94:e3:04:f4:85:ca:9f:1f:60:34:ca:d4:b0: 3d:29:40:12:fd:7c:a4:07:a6:9a:a6:96:ad:de:2e:c5:bf:56: fc:9d:7f:33:2f:2e:b0:54:1d:fe:c2:1d:3a:82:cd:fd:a6:bc: 69:85:38:9a:1b:3d:8e:12:b4:92:cd:e9:18:1a:21:bb:7f:87: a2:13:72:97:a5:9d:41:a2:e6:36:11:5c:04:79:0e:b5:0c:c5: 67:8c:9f:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWvaL40YH/jFP3+/Zj9FqeALxGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNjA0MTcwODQ3MTJaFw0yNjA0MjAxNzEwMTJaMDMxMTAvBgNV BAMTKERDQzMyNzNBREI3NzQxRjQ1NEE4ODMxOEREOTI2Rjg2NDBCNDIxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0mNw08u+/W1RdAolBRhy/jXsa qqRBvusKM3/UTZcrZfqSTOvv7arlgSsP5dr72u2B8pue4yCLPiW3lB4ZPxK6kpPJ iAGPtvNAERk7emZ2csKhOPQb5AwQZsXmMTO0HaXcpbDuOEiyGFTJ8IdeAm0a1GSw RmxqNJlENF9pCTqKkMmdLql8dZqqBwMbAeTrHe8uoZ6gNcXB2zx7tKWpIFMJosD9 1cyvV11pZH0dHO+nQ9QLB/g+5mi3zrt86RHolVTb6ropRj5MK8Ii1CXXclu34IcP ciw6VTkADc1WmRwwrcl/UY7iH3aa/YX8UAtznrAD66aNiu3qQemaLcacGiI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3MMnOtt3QfRUqIMY3ZJvhkC0IR0wHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANm1xRMTleU5h+DcVFb6obsn+sr2hbKds6yo umIDZtMfkOpmeZr99NGuwzZ1/WgmDPwcYEs3njWLF94X/L+3hnpG0LY4+ZDvFMwk SnBVPA0QWDGfMeyedLEPPK85sgzcgRJTASNd0prWJtoPQAmFnvwnzomGqNjJsCD6 EUSUuA2AdDvrZvSsGWNms7/JrTgJ0ZCqSKJQxUiT8oht8zZaOu4cLUUDcHbllOME 9IXKnx9gNMrUsD0pQBL9fKQHppqmlq3eLsW/VvydfzMvLrBUHf7CHTqCzf2mvGmF OJobPY4StJLN6RgaIbt/h6ITcpelnUGi5jYRXAR5DrUMxWeMn7w= -----END CERTIFICATE-----Generated at Sun Apr 19 10:58:47 2026 by rpki-client