$ rpki-client -vvf repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft File: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft (raw, json) Hash identifier: 62tPypsQx64lp9xpCR9QNIEClWva6Kj1w9ENf+zUqIE= Subject key identifier: 08:63:B8:10:D6:E0:F2:EA:F1:5E:F4:4A:C3:F2:C3:75:2A:72:74:CA Authority key identifier: 8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 Certificate issuer: /CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Certificate serial: 22E47D1A095A87FC5E4BB3B4ED2992FC820DA70F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft Manifest number: 0567 Signing time: Sat 18 Apr 2026 22:01:29 +0000 Manifest this update: Sat 18 Apr 2026 21:56:29 +0000 Manifest next update: Wed 22 Apr 2026 02:50:29 +0000 Files and hashes: 1: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: Gj57tszoKsJPmI3zlTc36/bgp48+5kiHS2p+sUe73DE=) 2: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl (hash: dukwuckbl4Zbr4kdxys7IeJeMO57lnLjKIK6GxtbFOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 02:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e4:7d:1a:09:5a:87:fc:5e:4b:b3:b4:ed:29:92:fc:82:0d:a7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Validity Not Before: Apr 18 21:56:29 2026 GMT Not After : Apr 22 02:50:29 2026 GMT Subject: CN=0863B810D6E0F2EAF15EF44AC3F2C3752A7274CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:60:09:fc:8e:45:98:77:28:08:64:9d:87: 73:10:18:36:7c:69:60:d7:c4:72:a7:6d:21:a1:ab: cd:30:32:74:c6:d5:fe:f6:ab:d4:2d:24:11:ce:cb: 13:9e:fc:5e:c8:0a:a4:97:9e:e1:0b:16:42:54:7c: 1d:c3:b2:87:38:36:5a:e7:a1:01:5f:75:5c:38:dc: cc:7a:84:8a:55:a3:bc:79:e4:e6:b1:ab:1b:b1:19: 0a:76:7c:85:ab:38:11:1e:2d:64:af:36:69:56:2d: f3:6e:55:c3:66:c6:18:53:7f:ad:cc:17:4f:c4:63: 69:8b:44:0a:f2:31:af:80:61:d6:b6:af:cf:ca:ea: ca:2e:78:e7:89:0e:33:14:05:d1:ea:7b:d8:f5:c5: c7:04:db:77:76:9a:48:82:a3:40:34:cd:83:9a:cd: ea:40:71:e9:d2:30:63:fb:cd:fb:5d:5e:81:12:07: 27:f5:18:b3:0a:94:31:70:6b:f7:6f:66:c6:e3:d4: ec:37:55:5f:fa:79:64:eb:68:b6:8a:de:cd:44:af: 60:05:0d:84:0b:95:b4:16:2c:63:71:1c:55:93:01: 79:89:d1:82:df:34:64:8f:f5:0f:e3:dc:92:09:5b: 5e:65:a8:42:e4:3d:d5:f0:49:de:77:04:7e:fe:c6: c9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:63:B8:10:D6:E0:F2:EA:F1:5E:F4:4A:C3:F2:C3:75:2A:72:74:CA X509v3 Authority Key Identifier: keyid:8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:6c:aa:af:12:b1:db:29:d6:ed:e8:50:14:bd:0e:e6:e4:08: 8e:8c:4e:21:12:c8:45:86:ad:b2:55:56:cc:7b:64:99:dc:0a: f6:74:f7:6d:38:34:ec:d1:dc:89:77:0b:ca:80:50:1a:d6:78: 08:58:27:61:77:00:6b:8e:8d:f0:50:64:28:39:4d:77:90:08: e1:a6:c3:0d:01:27:b8:ed:15:40:79:46:f1:2b:1c:25:ae:79: fb:8f:89:92:04:56:28:9e:07:cc:39:9c:b6:91:27:18:99:2a: 06:26:a7:61:35:76:c6:40:37:bb:06:82:ad:50:c2:5a:77:a5: 99:f0:a7:2f:44:b0:27:ac:ea:37:d4:19:6a:75:a2:47:b7:26: 41:1d:73:c0:47:24:61:ec:48:2c:20:b7:ec:68:31:a1:d0:5f: 0e:b7:62:7c:8c:8d:b3:be:a1:01:9c:6e:ad:eb:f2:07:0a:fb: f9:a5:80:0b:13:49:3a:17:04:63:fe:ae:c1:5b:4e:80:88:4b: fb:95:ff:1a:d5:8a:3c:29:d5:e7:14:6d:29:52:16:16:60:dc: 07:0c:e5:1a:ed:87:24:6a:d4:84:f1:57:27:47:a1:8e:b5:21: f2:86:0e:15:52:f1:4a:a7:ae:a6:c3:cc:d8:91:d4:2e:10:09: fb:8b:54:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuR9Gglah/xeS7O07SmS/IINpw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0 MkU4RDk4OTAeFw0yNjA0MTgyMTU2MjlaFw0yNjA0MjIwMjUwMjlaMDMxMTAvBgNV BAMTKDA4NjNCODEwRDZFMEYyRUFGMTVFRjQ0QUMzRjJDMzc1MkE3Mjc0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvoWAJ/I5FmHcoCGSdh3MQGDZ8 aWDXxHKnbSGhq80wMnTG1f72q9QtJBHOyxOe/F7ICqSXnuELFkJUfB3Dsoc4Nlrn oQFfdVw43Mx6hIpVo7x55OaxqxuxGQp2fIWrOBEeLWSvNmlWLfNuVcNmxhhTf63M F0/EY2mLRAryMa+AYda2r8/K6soueOeJDjMUBdHqe9j1xccE23d2mkiCo0A0zYOa zepAcenSMGP7zftdXoESByf1GLMKlDFwa/dvZsbj1Ow3VV/6eWTraLaK3s1Er2AF DYQLlbQWLGNxHFWTAXmJ0YLfNGSP9Q/j3JIJW15lqELkPdXwSd53BH7+xsm1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCGO4ENbg8urxXvRKw/LDdSpydMowHwYDVR0j BBgwFoAUiyZkWMfe/PaSbc30U8hKHULo2YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWUzYjFkOC1iZjE5LTQ2ZTMtYjYwOS0wZDE2MDk4OGRhYzgvMC84QjI2NjQ1OEM3 REVGQ0Y2OTI2RENERjQ1M0M4NEExRDQyRThEOTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0MkU4 RDk4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTllM2IxZDgtYmYxOS00NmUzLWI2 MDktMGQxNjA5ODhkYWM4LzAvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRB MUQ0MkU4RDk4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZsqq8Ssdsp1u3oUBS9DubkCI6MTiESyEWG rbJVVsx7ZJncCvZ09204NOzR3Il3C8qAUBrWeAhYJ2F3AGuOjfBQZCg5TXeQCOGm ww0BJ7jtFUB5RvErHCWuefuPiZIEViieB8w5nLaRJxiZKgYmp2E1dsZAN7sGgq1Q wlp3pZnwpy9EsCes6jfUGWp1oke3JkEdc8BHJGHsSCwgt+xoMaHQXw63YnyMjbO+ oQGcbq3r8gcK+/mlgAsTSToXBGP+rsFbToCIS/uV/xrVijwp1ecUbSlSFhZg3AcM 5RrthyRq1ITxVydHoY61IfKGDhVS8UqnrqbDzNiR1C4QCfuLVBk= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:11 2026 by rpki-client