$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft File: F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft (raw, json) Hash identifier: yFh2YGpMgwGRSrlXb6TJqhzuOAAr027qOY6/5m11WQ4= Subject key identifier: D6:6D:BE:83:DE:48:AA:A8:EE:5D:35:12:BB:B1:52:4E:65:74:8C:E7 Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 Certificate issuer: /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Certificate serial: 5F73B1F0199289D8B0E58694BA14FBD649C87684 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft Manifest number: 0500 Signing time: Sat 18 Apr 2026 09:32:06 +0000 Manifest this update: Sat 18 Apr 2026 09:27:06 +0000 Manifest next update: Tue 21 Apr 2026 16:15:06 +0000 Files and hashes: 1: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: 0gt4Ot6+F7fSlrKRykoZVwa5I+j2zIdyxVjYLmEYd1w=) 2: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: MbvKBjhGVKXrhTAYqLQTkHHlmqfGdIcd1OSrPlpqfSU=) 3: F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl (hash: DV9P9J2rQLAziajMYV/yaQ8yzEOATUHucNJKX3hrkjg=) 4: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: APKnqzs0AhNltyzReDLYt5pEaL3GFsO7SJudc2pHP5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 16:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:73:b1:f0:19:92:89:d8:b0:e5:86:94:ba:14:fb:d6:49:c8:76:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Validity Not Before: Apr 18 09:27:06 2026 GMT Not After : Apr 21 16:15:06 2026 GMT Subject: CN=D66DBE83DE48AAA8EE5D3512BBB1524E65748CE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:28:9b:5c:7d:3c:40:c5:76:3e:ec:65:f9: 80:e6:dd:f6:49:cb:74:56:48:fd:5a:35:54:68:2e: d7:0b:13:d5:f1:b1:b8:99:41:f2:1e:64:9c:e2:63: 58:ab:18:e4:93:c8:09:7b:1c:19:d0:11:87:e6:a5: f2:b2:60:5f:72:dd:f8:94:c0:6e:9e:25:27:b0:6a: d3:dc:c1:f2:a6:9d:d7:db:eb:5f:4b:ef:f4:56:83: 3c:33:72:ca:7e:05:df:ec:b0:33:8f:25:0e:25:80: b5:4b:a0:2a:65:14:3e:cb:a0:ad:16:a7:90:43:f6: 91:5f:a9:dd:03:73:30:e4:5b:57:b1:be:94:2b:12: 02:c4:0c:5d:0c:bf:01:93:1b:0c:7b:83:63:c7:7d: da:46:32:89:4e:5d:b5:23:ba:a9:2c:e8:09:77:46: 5c:73:cd:5a:1d:d0:26:ff:3a:25:26:c1:b1:a1:84: 2b:c8:da:28:00:86:55:94:49:c7:8b:5d:bc:72:ff: f1:6e:e7:2b:80:bd:96:6a:ab:cf:e2:50:55:e1:20: 20:88:24:4a:00:91:d2:a8:bf:f6:40:da:8b:1e:ef: 8d:1d:5c:e1:75:3e:4d:f0:2e:42:08:fe:c3:d1:85: a5:9c:11:ac:09:49:64:e8:90:12:16:70:2e:f3:b2: 99:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6D:BE:83:DE:48:AA:A8:EE:5D:35:12:BB:B1:52:4E:65:74:8C:E7 X509v3 Authority Key Identifier: keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:27:f7:65:0b:e1:d0:b5:94:36:ef:43:3e:b3:bc:7f:e4:d2: e4:cd:ee:b4:8d:e3:7b:c6:5d:a8:25:68:25:67:2c:4a:5f:03: 01:06:ee:39:9f:b7:c0:b3:d1:c9:eb:41:17:f3:0a:e7:7b:fd: 94:63:fb:05:56:28:a5:ce:30:00:b4:07:2b:a7:d7:5e:2c:9b: 7d:48:6e:a1:3d:7f:f0:a4:e3:bb:ff:45:05:28:05:68:6c:68: e0:e1:23:01:d5:7a:57:88:43:af:9a:0f:98:2e:19:4c:27:2b: 3f:d0:a1:08:b0:ac:31:47:0b:67:6f:d1:de:cb:87:68:9b:19: 66:56:19:7d:83:0b:15:9c:1d:53:56:40:d9:00:5c:37:e3:33: 0e:87:e0:a4:59:27:eb:2e:74:40:d9:7d:78:94:37:e3:73:53: 1c:f9:83:71:3c:6c:8f:6d:f1:1e:d7:6d:99:f5:e1:da:90:15: 5f:4b:3a:ef:d0:3e:b6:09:b0:e3:e2:6f:f9:b1:c9:94:a7:38: 6c:b2:68:59:e3:fe:b0:2d:27:d4:20:86:10:54:a2:9c:57:68: 36:fe:df:d3:4d:f0:1e:25:d6:95:48:a0:56:09:fc:e9:56:46: 25:5f:30:d8:2f:0b:54:b5:51:47:37:2d:72:87:7e:76:83:64: 1d:78:a9:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX3Ox8BmSidiw5YaUuhT71knIdoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMw NjI0MDc1MTAeFw0yNjA0MTgwOTI3MDZaFw0yNjA0MjExNjE1MDZaMDMxMTAvBgNV BAMTKEQ2NkRCRTgzREU0OEFBQThFRTVEMzUxMkJCQjE1MjRFNjU3NDhDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClnCibXH08QMV2Puxl+YDm3fZJ y3RWSP1aNVRoLtcLE9XxsbiZQfIeZJziY1irGOSTyAl7HBnQEYfmpfKyYF9y3fiU wG6eJSewatPcwfKmndfb619L7/RWgzwzcsp+Bd/ssDOPJQ4lgLVLoCplFD7LoK0W p5BD9pFfqd0DczDkW1exvpQrEgLEDF0MvwGTGwx7g2PHfdpGMolOXbUjuqks6Al3 RlxzzVod0Cb/OiUmwbGhhCvI2igAhlWUSceLXbxy//Fu5yuAvZZqq8/iUFXhICCI JEoAkdKov/ZA2ose740dXOF1Pk3wLkII/sPRhaWcEawJSWTokBIWcC7zspk9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1m2+g95IqqjuXTUSu7FSTmV0jOcwHwYDVR0j BBgwFoAU+PKiyIXUd952pbLnXWmdXAYkB1EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMC9GOEYyQTJDODg1 RDQ3N0RFNzZBNUIyRTc1RDY5OUQ1QzA2MjQwNzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMwNjI0 MDc1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlE NUMwNjI0MDc1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALon92UL4dC1lDbvQz6zvH/k0uTN7rSN43vG XaglaCVnLEpfAwEG7jmft8Cz0cnrQRfzCud7/ZRj+wVWKKXOMAC0Byun114sm31I bqE9f/Ck47v/RQUoBWhsaODhIwHVeleIQ6+aD5guGUwnKz/QoQiwrDFHC2dv0d7L h2ibGWZWGX2DCxWcHVNWQNkAXDfjMw6H4KRZJ+sudEDZfXiUN+NzUxz5g3E8bI9t 8R7XbZn14dqQFV9LOu/QPrYJsOPib/mxyZSnOGyyaFnj/rAtJ9QghhBUopxXaDb+ 39NN8B4l1pVIoFYJ/OlWRiVfMNgvC1S1UUc3LXKHfnaDZB14qaI= -----END CERTIFICATE-----Generated at Sun Apr 19 10:24:34 2026 by rpki-client