$ rpki-client -vvf repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft File: 08632F1EBF41728D3E177234FCD8C0B9A988898B.mft (raw, json) Hash identifier: atFJiVsX6A20tHhrKpoDFQLM0G4BUaKOWBd8IrkKjUI= Subject key identifier: E8:84:C9:97:43:29:19:DC:69:36:1B:74:E0:1F:80:10:EB:83:3B:E8 Authority key identifier: 08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B Certificate issuer: /CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Certificate serial: 1CDDEE71C7592A4A5990625D29CE9086D96F6600 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft Manifest number: 01DE Signing time: Wed 15 Apr 2026 08:10:51 +0000 Manifest this update: Wed 15 Apr 2026 08:05:51 +0000 Manifest next update: Sat 18 Apr 2026 19:37:51 +0000 Files and hashes: 1: 08632F1EBF41728D3E177234FCD8C0B9A988898B.crl (hash: 8NH0Z5vKpM2rI1BJXw2v+QFQWM3k4yZhNoM8OvvMrcU=) 2: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: i7fFsmSBkeSKbyW/TTm9TcNtd1h8Ec2ngRNSViv1V60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 19:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:dd:ee:71:c7:59:2a:4a:59:90:62:5d:29:ce:90:86:d9:6f:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Validity Not Before: Apr 15 08:05:51 2026 GMT Not After : Apr 18 19:37:51 2026 GMT Subject: CN=E884C997432919DC69361B74E01F8010EB833BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:c2:ef:18:f3:b7:e5:1d:d9:8b:0b:c8:30: 17:3c:e9:ae:6e:fa:51:60:58:6e:71:7a:ea:a1:f3: 58:28:44:db:d4:25:41:a7:a8:86:dd:06:a9:8e:02: e5:05:df:17:14:2a:16:c1:c1:b7:c8:d4:97:b3:28: 99:28:f5:14:80:a3:3c:27:c6:b4:5f:5b:cd:5a:27: 2a:19:5c:e6:d1:33:d0:92:b4:e2:2c:c6:6f:e4:11: 41:35:7f:8d:d6:0e:42:b9:50:c9:a6:4b:dc:88:ee: f0:47:f7:db:a4:21:d1:02:29:7c:d2:6f:b6:0b:9f: 16:49:0a:d5:4d:17:fe:a6:1d:10:41:8c:36:91:07: 20:7e:44:38:43:b0:8f:64:88:c8:d3:6c:eb:db:86: 5b:1d:23:3f:c1:a4:21:5f:13:1b:ce:e7:fa:66:cc: c6:25:d4:9e:b5:33:e4:39:73:1a:11:1e:2e:a4:59: 80:33:18:4e:7b:d1:70:0d:81:39:62:db:43:c5:49: d8:5d:74:9c:af:b0:26:c6:20:30:dd:e1:4a:65:c1: 1e:62:f3:cc:a0:50:36:eb:ef:a8:82:53:dc:43:8a: 74:23:13:7e:47:2b:fc:13:01:b1:0d:5b:ef:44:c8: 1a:62:a8:a7:d0:df:8a:62:77:43:01:8d:91:1a:5b: ef:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:84:C9:97:43:29:19:DC:69:36:1B:74:E0:1F:80:10:EB:83:3B:E8 X509v3 Authority Key Identifier: keyid:08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:02:84:3f:dc:2c:de:dc:07:95:c8:00:65:50:57:1e:18:8e: 06:3d:84:f9:ac:cb:e5:5e:f4:71:d5:cb:93:f3:8c:3f:a9:46: 90:13:f7:a5:64:5a:47:51:39:48:b7:5c:81:8c:d5:b0:0e:63: 2c:0d:95:0e:e5:db:3e:7b:1d:ea:ac:a0:a4:e5:8b:ac:3e:31: 39:1e:47:cb:3c:13:e3:4b:9f:72:88:3f:90:ba:2c:82:4f:5e: e6:d6:e9:a6:bb:24:e8:2f:11:ab:4b:cf:20:0e:41:21:ae:a2: ef:fc:e7:a7:ba:1e:5f:74:6c:6b:c8:e3:fc:05:b5:1a:b6:ac: 18:ca:bf:2c:17:ea:c1:22:40:00:4d:38:15:c1:1f:d7:81:f3: 77:aa:83:ef:1c:c6:17:9b:03:01:25:9e:d3:de:02:e5:03:37: 22:90:39:c6:b1:2c:d6:7e:79:46:1a:f3:36:77:ab:e6:2e:b2: 4f:d0:9e:a4:34:d3:7b:a6:03:e8:8f:37:83:3c:29:ce:3c:b3: cf:b1:0a:e4:02:90:12:47:40:84:5b:1f:32:a3:db:ce:7d:54: c9:a4:90:c5:75:dc:10:46:08:eb:94:26:88:a8:11:3b:f0:4d: af:42:3c:66:4c:13:8b:82:fc:2f:37:08:48:ba:74:77:2f:ea: 7c:bb:41:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHN3uccdZKkpZkGJdKc6QhtlvZgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlB OTg4ODk4QjAeFw0yNjA0MTUwODA1NTFaFw0yNjA0MTgxOTM3NTFaMDMxMTAvBgNV BAMTKEU4ODRDOTk3NDMyOTE5REM2OTM2MUI3NEUwMUY4MDEwRUI4MzNCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOcLvGPO35R3ZiwvIMBc86a5u +lFgWG5xeuqh81goRNvUJUGnqIbdBqmOAuUF3xcUKhbBwbfI1JezKJko9RSAozwn xrRfW81aJyoZXObRM9CStOIsxm/kEUE1f43WDkK5UMmmS9yI7vBH99ukIdECKXzS b7YLnxZJCtVNF/6mHRBBjDaRByB+RDhDsI9kiMjTbOvbhlsdIz/BpCFfExvO5/pm zMYl1J61M+Q5cxoRHi6kWYAzGE570XANgTli20PFSdhddJyvsCbGIDDd4UplwR5i 88ygUDbr76iCU9xDinQjE35HK/wTAbENW+9EyBpiqKfQ34pid0MBjZEaW+/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ITJl0MpGdxpNht04B+AEOuDO+gwHwYDVR0j BBgwFoAUCGMvHr9Bco0+F3I0/NjAuamIiYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjZiZjM3Yy1kOGFkLTRlMDMtYTA2YS00NDA4MTU3Y2Y1N2UvMC8wODYzMkYxRUJG NDE3MjhEM0UxNzcyMzRGQ0Q4QzBCOUE5ODg4OThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlBOTg4 ODk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMw QjlBOTg4ODk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwChD/cLN7cB5XIAGVQVx4YjgY9hPmsy+Ve 9HHVy5PzjD+pRpAT96VkWkdROUi3XIGM1bAOYywNlQ7l2z57HeqsoKTli6w+MTke R8s8E+NLn3KIP5C6LIJPXubW6aa7JOgvEatLzyAOQSGuou/856e6Hl90bGvI4/wF tRq2rBjKvywX6sEiQABNOBXBH9eB83eqg+8cxhebAwElntPeAuUDNyKQOcaxLNZ+ eUYa8zZ3q+Yusk/QnqQ003umA+iPN4M8Kc48s8+xCuQCkBJHQIRbHzKj2859VMmk kMV13BBGCOuUJoioETvwTa9CPGZME4uC/C83CEi6dHcv6ny7QSQ= -----END CERTIFICATE-----Generated at Fri Apr 17 18:05:46 2026 by rpki-client