$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: 01OxDEjuppGdEHnsBw0kd50MvGzp/0C0ouDhit6cPBM= Subject key identifier: F8:A8:6C:1F:50:3B:87:2C:51:1E:77:D4:81:E0:8A:01:2F:64:9E:AF Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 6D5E718D0E0D3CFD075C447358722D386CCD1D77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: EC Signing time: Fri 17 Apr 2026 20:32:11 +0000 Manifest this update: Fri 17 Apr 2026 20:27:11 +0000 Manifest next update: Tue 21 Apr 2026 06:57:11 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: VngBioguzUsXAuZKxIapaase4HynUZjUngh0EsFTDPo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 06:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5e:71:8d:0e:0d:3c:fd:07:5c:44:73:58:72:2d:38:6c:cd:1d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Apr 17 20:27:11 2026 GMT Not After : Apr 21 06:57:11 2026 GMT Subject: CN=F8A86C1F503B872C511E77D481E08A012F649EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a7:da:5b:84:74:29:40:b0:c6:3b:2d:f8:cc: 3e:60:6f:f8:3d:7d:bc:22:72:6d:b9:f4:6b:98:28: d3:6b:67:61:76:7e:97:f3:e3:56:8d:63:c0:9d:f9: d2:bf:83:32:7e:d8:7e:9f:c5:ee:d7:7b:90:15:d6: 7e:5d:8d:48:d0:15:44:60:76:1e:07:53:7a:63:6f: d7:4c:59:30:24:fa:a9:43:b0:a1:6c:d1:1e:e1:ce: a8:4b:dc:2a:1d:a4:43:61:71:27:e8:ed:cf:00:78: 38:91:c4:28:72:ad:19:81:7b:4e:95:bf:49:da:e1: 20:4b:a9:0e:48:70:ba:6c:66:f9:57:1f:8c:e0:be: ea:11:f4:c7:3d:30:6b:b3:77:b6:6a:cb:b6:33:1e: 0f:70:7a:2d:7e:47:bd:a6:1a:f3:46:21:01:2b:ff: b5:53:1a:52:b0:2c:8d:64:3a:7d:f0:e4:74:e1:2d: 67:1a:61:0d:60:ba:a5:cb:23:e7:f7:64:27:12:00: a6:ef:14:70:20:56:24:42:f2:b7:c4:36:9e:79:21: 59:08:70:45:72:fa:2b:ea:19:e9:8a:fa:0b:e0:f6: 34:48:d3:bd:9c:49:09:bc:65:ed:92:b3:ed:96:eb: f3:5d:e7:ad:e9:1b:5f:ee:47:6f:c4:c6:29:1f:2b: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A8:6C:1F:50:3B:87:2C:51:1E:77:D4:81:E0:8A:01:2F:64:9E:AF X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:00:0b:b7:32:49:6d:0d:5b:03:15:83:70:9a:aa:66:75:42: 8c:2d:9f:6a:7e:47:f6:75:e5:97:26:31:e9:81:84:9b:c2:56: fa:3f:80:6a:70:77:c9:aa:d7:91:8f:c0:15:63:6f:dd:e1:f3: 93:3c:b3:23:2e:36:03:c0:73:40:df:08:f2:f3:d3:04:9f:54: bf:fd:ac:b1:e6:c6:d3:b5:d2:e8:38:bd:1a:4a:f2:88:93:11: a6:b3:63:d8:11:b9:f4:e6:02:e4:b3:13:40:09:c0:00:60:af: c7:59:26:15:b5:87:4d:58:a2:d9:9a:9d:b4:fd:e8:00:fc:8d: 12:ea:1a:b0:cd:92:bf:b4:40:54:39:b7:a0:cd:6a:35:9a:21: a9:a1:87:13:3e:8f:76:02:f2:4d:38:12:ee:ef:ba:fc:53:d5: f1:8e:82:82:72:47:7c:cd:96:81:0c:cc:00:10:43:5f:dc:a2: 1a:76:bf:c9:1b:5f:8d:13:62:62:86:b2:0b:46:64:6f:02:b9: f3:dd:6f:82:6e:38:d1:3b:45:75:3c:1f:e4:cd:31:cd:a0:8c: f1:f9:91:74:c7:0a:48:c4:b5:4c:7f:67:da:45:5c:bd:f2:a9: cb:14:41:6a:f9:96:a0:27:35:c3:82:fe:3b:cb:2a:d7:ab:88: d4:e0:3f:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbV5xjQ4NPP0HXERzWHItOGzNHXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNjA0MTcyMDI3MTFaFw0yNjA0MjEwNjU3MTFaMDMxMTAvBgNV BAMTKEY4QTg2QzFGNTAzQjg3MkM1MTFFNzdENDgxRTA4QTAxMkY2NDlFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdp9pbhHQpQLDGOy34zD5gb/g9 fbwicm259GuYKNNrZ2F2fpfz41aNY8Cd+dK/gzJ+2H6fxe7Xe5AV1n5djUjQFURg dh4HU3pjb9dMWTAk+qlDsKFs0R7hzqhL3CodpENhcSfo7c8AeDiRxChyrRmBe06V v0na4SBLqQ5IcLpsZvlXH4zgvuoR9Mc9MGuzd7Zqy7YzHg9wei1+R72mGvNGIQEr /7VTGlKwLI1kOn3w5HThLWcaYQ1guqXLI+f3ZCcSAKbvFHAgViRC8rfENp55IVkI cEVy+ivqGemK+gvg9jRI072cSQm8Ze2Ss+2W6/Nd563pG1/uR2/ExikfK5UzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+KhsH1A7hyxRHnfUgeCKAS9knq8wHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcAC7cySW0NWwMVg3CaqmZ1Qowtn2p+R/Z1 5ZcmMemBhJvCVvo/gGpwd8mq15GPwBVjb93h85M8syMuNgPAc0DfCPLz0wSfVL/9 rLHmxtO10ug4vRpK8oiTEaazY9gRufTmAuSzE0AJwABgr8dZJhW1h01YotmanbT9 6AD8jRLqGrDNkr+0QFQ5t6DNajWaIamhhxM+j3YC8k04Eu7vuvxT1fGOgoJyR3zN loEMzAAQQ1/cohp2v8kbX40TYmKGsgtGZG8CufPdb4JuONE7RXU8H+TNMc2gjPH5 kXTHCkjEtUx/Z9pFXL3yqcsUQWr5lqAnNcOC/jvLKteriNTgP7Y= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:54 2026 by rpki-client