$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: Bt5nklnTHEh7DIViAif+k+ANpquobt0gHdA/QEIAl7o= Subject key identifier: 32:56:13:A6:42:D6:70:09:FD:BF:44:CD:DD:82:6D:02:48:29:9A:7E Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 2161926FD32186A0190904139E7D5F66A09A3A5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 0274 Signing time: Wed 15 Apr 2026 20:20:54 +0000 Manifest this update: Wed 15 Apr 2026 20:15:54 +0000 Manifest next update: Sun 19 Apr 2026 04:45:54 +0000 Files and hashes: 1: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: IIoYt7c4/YLrzS0isPZ2Ykj1sJajtRT8sj3+EjYSb5M=) 2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: l2B2aK7iKjtGlm+JZBsaRQ0Oiz1msVZD+MDO3SYRf38=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:61:92:6f:d3:21:86:a0:19:09:04:13:9e:7d:5f:66:a0:9a:3a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Apr 15 20:15:54 2026 GMT Not After : Apr 19 04:45:54 2026 GMT Subject: CN=325613A642D67009FDBF44CDDD826D0248299A7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:93:39:58:cd:84:bb:84:ce:15:c9:33:26:df: 91:7f:17:f7:04:7f:c1:96:d8:b3:95:0a:5f:82:3e: 15:80:17:4a:2d:67:56:64:3f:bf:65:00:67:72:0d: 0f:97:00:2a:59:d3:a0:c4:7f:ce:9b:fd:06:6d:6b: bd:96:4c:d6:0f:53:03:4b:40:1c:47:78:7c:17:47: e6:3c:e6:0a:ea:33:a8:fa:47:64:e0:28:e3:4b:15: ad:56:6d:97:a0:bd:97:f3:dd:69:d2:76:e6:80:fa: 81:e6:bc:e7:7c:cc:cb:ab:c3:3f:1f:6e:94:f7:0b: bb:f6:87:63:b8:bf:49:b7:45:8c:f8:eb:06:1d:fc: 1d:b6:fa:1f:ed:66:e0:e4:e6:de:7b:78:09:af:e7: cb:fd:31:8a:ab:80:1b:6f:2f:b3:ab:d2:56:c2:40: 40:be:e7:c7:c7:b1:9b:07:f5:af:1a:64:41:e7:14: 91:79:3a:1e:19:a4:55:d1:f5:43:50:94:9d:8a:2a: 3c:7b:18:41:51:8e:ee:27:17:de:15:c1:5b:7e:fd: cb:f8:61:61:ae:bc:fa:51:a2:87:30:00:fb:fe:55: b9:da:c4:c9:23:a4:29:43:e7:32:e9:b2:2c:01:78: e0:a3:47:0a:e9:b7:78:4b:ae:f9:77:6a:c9:12:f9: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:56:13:A6:42:D6:70:09:FD:BF:44:CD:DD:82:6D:02:48:29:9A:7E X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cb:f5:9c:9b:60:79:7a:af:eb:c3:51:f0:b1:64:dc:e7:9b: 90:19:16:73:9b:4f:f3:8f:30:d4:6c:6f:21:2e:5a:5a:83:1f: 6b:4c:b4:a7:09:98:cd:10:cf:93:48:d2:08:5b:5c:15:54:10: ca:8a:19:89:2c:0d:ed:af:59:4f:38:70:0a:02:67:47:b9:50: eb:52:84:1c:f4:19:9d:22:05:c6:5c:db:82:0d:6d:54:ee:86: ab:99:43:9f:4a:b3:ee:49:a6:09:1c:01:c4:e7:fb:6e:40:42: 87:23:84:b0:d2:21:e6:9d:cb:ea:5d:37:71:f4:f9:ee:20:f3: 9f:45:cc:ff:51:e0:85:fe:9c:60:27:25:a8:7a:a8:b8:91:57: 5b:ab:51:30:0a:1f:b9:2d:cb:60:29:c7:fb:48:08:b6:ba:82: 92:88:44:3c:3a:40:db:95:aa:02:56:75:1d:73:16:e3:3f:61: 89:69:f8:e3:fd:45:72:f3:cd:61:bf:05:3f:a3:8a:02:60:69: 10:6f:27:38:40:15:c7:ab:8e:3b:3d:7e:4e:81:c0:fe:3a:1d: d8:5c:84:9b:af:3c:84:67:59:45:d1:db:7a:9d:7d:78:ce:d7: 60:38:ea:11:e1:e4:62:36:a0:03:02:43:73:5d:23:0b:12:ab: 4d:50:cc:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWGSb9MhhqAZCQQTnn1fZqCaOlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNjA0MTUyMDE1NTRaFw0yNjA0MTkwNDQ1NTRaMDMxMTAvBgNV BAMTKDMyNTYxM0E2NDJENjcwMDlGREJGNDRDREREODI2RDAyNDgyOTlBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkzlYzYS7hM4VyTMm35F/F/cE f8GW2LOVCl+CPhWAF0otZ1ZkP79lAGdyDQ+XACpZ06DEf86b/QZta72WTNYPUwNL QBxHeHwXR+Y85grqM6j6R2TgKONLFa1WbZegvZfz3WnSduaA+oHmvOd8zMurwz8f bpT3C7v2h2O4v0m3RYz46wYd/B22+h/tZuDk5t57eAmv58v9MYqrgBtvL7Or0lbC QEC+58fHsZsH9a8aZEHnFJF5Oh4ZpFXR9UNQlJ2KKjx7GEFRju4nF94VwVt+/cv4 YWGuvPpRoocwAPv+VbnaxMkjpClD5zLpsiwBeOCjRwrpt3hLrvl3askS+RgtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMlYTpkLWcAn9v0TN3YJtAkgpmn4wHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3L9ZybYHl6r+vDUfCxZNznm5AZFnObT/OP MNRsbyEuWlqDH2tMtKcJmM0Qz5NI0ghbXBVUEMqKGYksDe2vWU84cAoCZ0e5UOtS hBz0GZ0iBcZc24INbVTuhquZQ59Ks+5JpgkcAcTn+25AQocjhLDSIeady+pdN3H0 +e4g859FzP9R4IX+nGAnJah6qLiRV1urUTAKH7kty2Apx/tICLa6gpKIRDw6QNuV qgJWdR1zFuM/YYlp+OP9RXLzzWG/BT+jigJgaRBvJzhAFcerjjs9fk6BwP46Hdhc hJuvPIRnWUXR23qdfXjO12A46hHh5GI2oAMCQ3NdIwsSq01QzEM= -----END CERTIFICATE-----Generated at Fri Apr 17 17:21:13 2026 by rpki-client