$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft File: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft (raw, json) Hash identifier: Tseeo37sAfQyTGVDu1OXDGnpJ1vY5hPGDDJX4O2D66s= Subject key identifier: D4:8C:74:E6:7D:C8:ED:70:23:B9:B6:41:FD:B0:65:16:CA:82:49:CE Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 4C71C27C032CCAD7E9AE0E316ED3438EF757BA99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft Manifest number: 010C Signing time: Thu 16 Apr 2026 01:42:53 +0000 Manifest this update: Thu 16 Apr 2026 01:37:53 +0000 Manifest next update: Sun 19 Apr 2026 07:50:53 +0000 Files and hashes: 1: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl (hash: SNTyX7V/OaDEuLodwvKqrcPHGS7d4vEWLCjZoG85N3M=) 2: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: NLnyyxEhnshl8M0vZmmh6y422VBLzdBQzG682UNLOQc=) 3: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: OJeztSNPa6Ny2Jrl9pv1yxSSkQT/t6rbcjh/ieoX/VA=) 4: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: 9NuukBIDDZ7f6DuKuIwjkGDhtnMzcPyVVkUYuDF3dPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:71:c2:7c:03:2c:ca:d7:e9:ae:0e:31:6e:d3:43:8e:f7:57:ba:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Apr 16 01:37:53 2026 GMT Not After : Apr 19 07:50:53 2026 GMT Subject: CN=D48C74E67DC8ED7023B9B641FDB06516CA8249CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:34:c2:b4:33:ea:56:f8:8d:76:d3:dc:ef: d7:63:cf:2e:ce:69:b3:0c:6d:29:78:70:2c:55:00: 16:e8:f6:8f:88:bc:cc:9c:f1:2f:e4:42:4b:a2:83: ff:46:77:c8:b6:2a:67:15:45:c8:ae:20:6b:c4:85: a3:9d:b0:d0:8e:9e:bb:8e:ce:ba:33:e3:ed:11:7f: 1c:61:72:c2:30:8f:c4:f3:b5:b2:3a:18:ad:19:1d: f7:3a:6f:c0:6e:c7:28:d3:4c:11:15:92:18:c5:a6: a6:a9:ae:60:1d:d2:79:d6:92:f1:40:71:be:a5:6e: 97:bd:00:26:57:83:5c:1f:fb:6e:f1:ed:31:f5:ff: d3:71:4d:cb:f0:4a:68:54:70:f4:8e:fe:d7:e9:56: 05:3e:ce:ab:c7:b1:f4:33:ea:ab:f5:57:ec:d7:5a: 7f:e0:01:30:1d:7e:0e:1b:ee:0b:3e:aa:06:4b:58: fd:71:1e:6e:14:9e:35:69:3b:3c:4c:b7:33:88:d0: 36:87:43:ca:1d:81:60:ba:b9:83:3c:c5:67:a4:fe: 64:60:b0:77:b0:ed:1e:0b:25:85:1d:93:b6:a9:d2: 6a:ec:82:91:a7:e8:4f:53:08:65:d3:8c:88:ca:c3: 3d:30:9c:f3:05:12:07:fe:5d:86:51:aa:ae:f3:55: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8C:74:E6:7D:C8:ED:70:23:B9:B6:41:FD:B0:65:16:CA:82:49:CE X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:86:7e:a7:e4:90:5c:d4:8c:2c:9b:02:ec:66:58:60:8a:9e: d8:60:b3:ff:36:fc:d8:76:40:9b:21:c3:e2:4e:7e:80:62:32: 1c:f9:89:12:61:07:79:36:50:75:83:6d:c3:7d:68:96:5f:07: be:47:8d:18:58:be:ea:9b:45:89:55:12:22:65:01:c1:e7:9c: 15:2f:27:8a:37:22:f3:65:e0:50:bd:ee:97:3d:b2:bc:73:bf: 7e:08:df:3a:68:02:5c:8a:48:7a:cb:37:06:cb:02:d9:a1:5e: db:ab:9d:d4:3a:38:aa:ab:86:1b:b5:01:95:b1:6f:3e:a7:26: fe:54:69:11:ed:59:25:0c:12:af:f3:ad:f1:04:2b:d4:ae:77: b8:c9:67:22:b3:13:b6:9b:9f:8d:e3:80:37:6a:1a:14:f4:8e: b0:61:31:21:ad:57:16:8a:fd:5f:64:6c:2b:9c:1a:b2:b9:2f: 42:1d:8f:c1:ec:30:e4:0e:25:9a:b5:bb:70:ce:88:a6:31:b3: fe:04:30:88:07:a6:00:35:c1:6c:b5:18:dc:37:4e:f2:e5:c7: 56:38:92:d0:2c:bf:80:d0:14:fa:1b:ac:21:a0:03:71:fd:a6: f2:b5:1d:56:13:bd:db:da:16:2e:f7:99:e9:e6:0b:2c:c9:c8: e0:cc:2c:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHHCfAMsytfprg4xbtNDjvdXupkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNjA0MTYwMTM3NTNaFw0yNjA0MTkwNzUwNTNaMDMxMTAvBgNV BAMTKEQ0OEM3NEU2N0RDOEVENzAyM0I5QjY0MUZEQjA2NTE2Q0E4MjQ5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJszTCtDPqVviNdtPc79djzy7O abMMbSl4cCxVABbo9o+IvMyc8S/kQkuig/9Gd8i2KmcVRciuIGvEhaOdsNCOnruO zroz4+0RfxxhcsIwj8TztbI6GK0ZHfc6b8BuxyjTTBEVkhjFpqaprmAd0nnWkvFA cb6lbpe9ACZXg1wf+27x7TH1/9NxTcvwSmhUcPSO/tfpVgU+zqvHsfQz6qv1V+zX Wn/gATAdfg4b7gs+qgZLWP1xHm4UnjVpOzxMtzOI0DaHQ8odgWC6uYM8xWek/mRg sHew7R4LJYUdk7ap0mrsgpGn6E9TCGXTjIjKwz0wnPMFEgf+XYZRqq7zVUdTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Ix05n3I7XAjubZB/bBlFsqCSc4wHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVG QzBFOUIyREEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGGfqfkkFzUjCybAuxmWGCKnthgs/82/Nh2 QJshw+JOfoBiMhz5iRJhB3k2UHWDbcN9aJZfB75HjRhYvuqbRYlVEiJlAcHnnBUv J4o3IvNl4FC97pc9srxzv34I3zpoAlyKSHrLNwbLAtmhXturndQ6OKqrhhu1AZWx bz6nJv5UaRHtWSUMEq/zrfEEK9Sud7jJZyKzE7abn43jgDdqGhT0jrBhMSGtVxaK /V9kbCucGrK5L0Idj8HsMOQOJZq1u3DOiKYxs/4EMIgHpgA1wWy1GNw3TvLlx1Y4 ktAsv4DQFPobrCGgA3H9pvK1HVYTvdvaFi73menmCyzJyODMLMM= -----END CERTIFICATE-----Generated at Fri Apr 17 17:07:35 2026 by rpki-client