$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json) Hash identifier: /92TRduxaZXyWaJYth7qMQhkKu1+u3U1Vxx5qMYw8T8= Subject key identifier: E4:86:DC:B9:E1:7B:32:13:4A:A2:1F:F1:AB:25:8F:0E:EE:9D:2D:80 Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Certificate serial: 6D3D4F1E3E1308BB58486E4C7953C9F53A736FA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft Manifest number: 020A Signing time: Fri 17 Apr 2026 15:50:47 +0000 Manifest this update: Fri 17 Apr 2026 15:45:47 +0000 Manifest next update: Mon 20 Apr 2026 17:40:47 +0000 Files and hashes: 1: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: 4aA8UHvWdn6b+e9rvE0qvRNLuWwKk2SM0xhNOkJ4w/s=) 2: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: M2pP6ahlU7JXhA082MXat/dcIAOA4PcVw9EnQTXlE1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3d:4f:1e:3e:13:08:bb:58:48:6e:4c:79:53:c9:f5:3a:73:6f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Validity Not Before: Apr 17 15:45:47 2026 GMT Not After : Apr 20 17:40:47 2026 GMT Subject: CN=E486DCB9E17B32134AA21FF1AB258F0EEE9D2D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:73:7a:11:7a:bd:8a:7a:0e:7b:ad:de:27:b2: ab:58:e4:46:c3:55:e7:32:30:fe:28:20:7c:ba:a6: 5a:76:29:fe:dd:03:5f:8a:39:b0:51:c8:af:de:18: 7a:d2:41:20:a1:aa:6e:7c:88:c1:77:ed:5c:08:f0: b8:9b:11:ff:ed:19:06:3b:5b:51:5b:15:a9:f6:88: 86:47:32:46:8b:1d:cb:eb:9d:2b:eb:4b:c1:5f:83: 3d:18:57:60:8b:d1:c8:23:6b:ba:87:03:4f:01:28: 1a:68:41:00:a4:7d:43:a6:bf:2f:9a:00:5d:84:9a: 09:b1:77:30:a3:af:d6:70:6a:d1:6f:90:8d:d9:2f: d9:7c:4a:03:9e:af:3d:30:ab:59:75:1b:2c:6f:3c: ed:0e:fb:9a:59:ce:29:83:97:2b:64:b2:0d:89:a4: ac:97:fd:91:7a:17:1d:2f:c1:f9:89:fd:6a:fb:3b: 16:40:1c:c6:4c:5f:5d:04:81:e5:87:04:7d:c3:80: d0:3b:a3:fe:98:43:c0:f1:dd:3c:d1:e8:6f:12:d4: 38:21:fb:10:3f:50:48:67:66:73:ee:09:40:d2:bc: 80:22:86:c4:9d:be:9d:41:75:7c:c4:bf:2d:c2:03: 4c:52:45:1c:b1:db:a9:55:a5:0b:1b:ed:b8:68:00: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:86:DC:B9:E1:7B:32:13:4A:A2:1F:F1:AB:25:8F:0E:EE:9D:2D:80 X509v3 Authority Key Identifier: keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7f:87:a7:b7:5d:1d:ba:95:21:7c:6b:04:d4:fe:be:32:05: 79:6b:9a:f2:70:eb:80:38:da:19:b3:c5:52:fa:c5:98:57:4f: bc:a9:db:73:af:6d:93:eb:4f:8d:2d:41:f7:fa:8e:c9:30:c1: 47:4e:80:9d:3b:e9:bf:9e:aa:32:9c:7f:93:60:9a:72:04:f5: a9:11:65:cd:5a:b1:62:f6:73:34:1d:0a:b5:4d:8a:7d:d5:03: dd:ea:4d:e3:77:9a:61:52:82:d2:a9:4f:76:2c:61:5e:5f:6b: 38:09:d5:84:d9:a6:b6:e4:9c:5f:25:31:fe:68:3b:27:95:21: dd:0b:76:78:c1:5a:21:f5:90:e5:b1:35:c2:13:2a:e0:87:15: 13:7b:af:3b:28:9d:b7:33:18:c9:bf:39:68:30:a2:9d:af:ba: 2c:61:2f:74:03:c5:c5:09:4a:67:61:b5:6c:47:f7:fb:03:63: 79:56:ac:be:f7:9a:75:a6:6d:63:5e:ed:eb:5e:d0:bf:8e:e7: 19:d9:12:1a:03:24:f5:fb:c1:83:70:7d:72:b9:d3:d4:74:48: 0d:e4:68:cb:3f:92:62:7d:b4:95:cc:07:b7:13:f0:83:82:1b: 2a:9b:ee:13:d8:be:24:8d:76:89:40:45:93:36:5d:0e:aa:ba: ce:57:ef:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbT1PHj4TCLtYSG5MeVPJ9Tpzb6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1 OUQ2RUE5QjAeFw0yNjA0MTcxNTQ1NDdaFw0yNjA0MjAxNzQwNDdaMDMxMTAvBgNV BAMTKEU0ODZEQ0I5RTE3QjMyMTM0QUEyMUZGMUFCMjU4RjBFRUU5RDJEODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMc3oRer2Keg57rd4nsqtY5EbD VecyMP4oIHy6plp2Kf7dA1+KObBRyK/eGHrSQSChqm58iMF37VwI8LibEf/tGQY7 W1FbFan2iIZHMkaLHcvrnSvrS8Ffgz0YV2CL0cgja7qHA08BKBpoQQCkfUOmvy+a AF2EmgmxdzCjr9ZwatFvkI3ZL9l8SgOerz0wq1l1GyxvPO0O+5pZzimDlytksg2J pKyX/ZF6Fx0vwfmJ/Wr7OxZAHMZMX10EgeWHBH3DgNA7o/6YQ8Dx3TzR6G8S1Dgh +xA/UEhnZnPuCUDSvIAihsSdvp1BdXzEvy3CA0xSRRyx26lVpQsb7bhoAGwhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5IbcueF7MhNKoh/xqyWPDu6dLYAwHwYDVR0j BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2 RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAh/h6e3XR26lSF8awTU/r4yBXlrmvJw64A4 2hmzxVL6xZhXT7yp23OvbZPrT40tQff6jskwwUdOgJ076b+eqjKcf5NgmnIE9akR Zc1asWL2czQdCrVNin3VA93qTeN3mmFSgtKpT3YsYV5fazgJ1YTZprbknF8lMf5o OyeVId0LdnjBWiH1kOWxNcITKuCHFRN7rzsonbczGMm/OWgwop2vuixhL3QDxcUJ SmdhtWxH9/sDY3lWrL73mnWmbWNe7ete0L+O5xnZEhoDJPX7wYNwfXK509R0SA3k aMs/kmJ9tJXMB7cT8IOCGyqb7hPYviSNdolARZM2XQ6qus5X7yk= -----END CERTIFICATE-----Generated at Sat Apr 18 03:04:32 2026 by rpki-client