$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: ogauhl+0UACbjV5uLNuunONJmQ1pY6M/Ms/n2JC+f90= Subject key identifier: 08:4F:2B:C1:C8:0E:0E:1D:0F:BE:06:1E:8E:F2:29:65:B0:DF:96:65 Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 1AC8F9E4B2E4CF63F5B7DD1FB82A51AED5619924 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 02AD Signing time: Fri 17 Apr 2026 11:30:54 +0000 Manifest this update: Fri 17 Apr 2026 11:25:54 +0000 Manifest next update: Mon 20 Apr 2026 20:59:54 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: Kl30Dl9Fx78rLKl441fzzYni5e/AXjEL9E2EKQjrZGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c8:f9:e4:b2:e4:cf:63:f5:b7:dd:1f:b8:2a:51:ae:d5:61:99:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Apr 17 11:25:54 2026 GMT Not After : Apr 20 20:59:54 2026 GMT Subject: CN=084F2BC1C80E0E1D0FBE061E8EF22965B0DF9665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:7f:80:da:76:0e:4e:54:a2:49:2e:8c:e6: f3:3b:54:d0:ce:39:2d:8a:a9:0f:d8:12:98:a3:05: 68:97:05:12:db:a8:ab:b8:f0:2f:cf:55:90:57:a0: d8:3d:60:0c:3b:9f:c4:6c:c1:10:1c:d8:22:bd:22: a0:de:c0:6f:e9:35:68:97:4d:9b:22:48:30:c1:e0: e5:8b:39:6d:b2:67:9b:8f:81:d6:40:89:7a:32:dc: a7:18:68:87:5a:bb:b9:7c:67:26:76:75:91:7c:5a: a8:97:1f:d4:42:45:1e:30:e9:9d:aa:61:9c:67:f6: b6:32:e8:4f:e5:b6:25:1f:1c:10:2f:75:9b:fc:d4: 29:a4:23:8e:3a:2f:7d:54:cb:55:93:a9:a4:af:fa: 74:c0:48:77:0f:0f:f9:e4:76:9f:5c:72:b9:ca:d0: ce:49:52:14:88:81:24:e1:79:b0:fb:a5:a3:94:c2: de:47:5f:c6:6f:50:a3:34:7e:d7:88:72:26:44:13: e1:d6:a3:d7:25:fc:19:17:be:3c:e2:3f:ee:c3:49: 7e:57:02:63:a9:fe:0c:1f:85:e2:f0:e5:b1:69:66: 2e:45:2f:dd:2b:07:0d:ca:21:02:1a:9a:18:54:2a: d1:67:5a:c1:6c:f8:08:7d:6d:a3:8b:f2:7d:b0:b2: ea:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4F:2B:C1:C8:0E:0E:1D:0F:BE:06:1E:8E:F2:29:65:B0:DF:96:65 X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9d:6d:a4:40:1b:5c:93:84:92:cf:71:62:f9:d9:0f:f7:4a: 7e:9e:e9:63:96:db:3c:2f:ba:ea:8d:7e:d5:4f:fa:75:f8:02: 73:0e:82:95:bb:67:a2:9e:03:98:4c:e6:fc:e0:1d:e1:a5:43: 53:75:aa:21:cc:83:2d:81:70:57:bc:f7:aa:5b:6f:37:32:14: ab:64:51:7f:21:83:5d:21:90:4f:82:90:a1:4e:b6:a1:80:e6: ac:68:7b:a3:66:aa:52:36:0c:f9:fd:b5:11:f9:56:6b:27:12: f2:60:45:1b:85:cd:29:11:f5:af:86:23:65:ce:ed:cf:24:16: 54:10:97:dc:3e:53:40:d8:2f:35:68:ee:6f:76:67:ac:cc:79: ac:9a:2e:78:94:5e:a5:56:cf:b8:12:2a:a8:05:20:1e:f0:f8: 35:8e:3a:2f:0b:af:6f:1e:6d:58:b3:e6:f3:71:55:3c:ad:23: be:17:61:73:07:cc:d3:25:4d:cb:fe:5d:4d:7d:14:4c:12:d0: bb:d5:4d:6d:33:3a:76:eb:0a:d6:14:df:9d:4a:4b:69:e2:ce: 87:4a:9d:a0:c3:03:0b:73:e6:e5:3a:5a:5d:05:e2:48:21:1b: b9:fc:a7:84:4f:a4:c4:8c:69:03:c5:86:6b:6b:81:97:ab:99: 30:4a:cd:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsj55LLkz2P1t90fuCpRrtVhmSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNjA0MTcxMTI1NTRaFw0yNjA0MjAyMDU5NTRaMDMxMTAvBgNV BAMTKDA4NEYyQkMxQzgwRTBFMUQwRkJFMDYxRThFRjIyOTY1QjBERjk2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhH+A2nYOTlSiSS6M5vM7VNDO OS2KqQ/YEpijBWiXBRLbqKu48C/PVZBXoNg9YAw7n8RswRAc2CK9IqDewG/pNWiX TZsiSDDB4OWLOW2yZ5uPgdZAiXoy3KcYaIdau7l8ZyZ2dZF8WqiXH9RCRR4w6Z2q YZxn9rYy6E/ltiUfHBAvdZv81CmkI446L31Uy1WTqaSv+nTASHcPD/nkdp9ccrnK 0M5JUhSIgSThebD7paOUwt5HX8ZvUKM0fteIciZEE+HWo9cl/BkXvjziP+7DSX5X AmOp/gwfheLw5bFpZi5FL90rBw3KIQIamhhUKtFnWsFs+Ah9baOL8n2wsurJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCE8rwcgODh0PvgYejvIpZbDflmUwHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJydbaRAG1yThJLPcWL52Q/3Sn6e6WOW2zwv uuqNftVP+nX4AnMOgpW7Z6KeA5hM5vzgHeGlQ1N1qiHMgy2BcFe896pbbzcyFKtk UX8hg10hkE+CkKFOtqGA5qxoe6NmqlI2DPn9tRH5VmsnEvJgRRuFzSkR9a+GI2XO 7c8kFlQQl9w+U0DYLzVo7m92Z6zMeayaLniUXqVWz7gSKqgFIB7w+DWOOi8Lr28e bViz5vNxVTytI74XYXMHzNMlTcv+XU19FEwS0LvVTW0zOnbrCtYU351KS2nizodK naDDAwtz5uU6Wl0F4kghG7n8p4RPpMSMaQPFhmtrgZermTBKzT0= -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:40 2026 by rpki-client