$ rpki-client -vvf repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft File: B8E13B8031811FE78FA73151056FBFABEE076814.mft (raw, json) Hash identifier: oStkP33ZvayqS4cX6XImCy/4WhyDCe5CqFyBM3uBONo= Subject key identifier: 4C:F0:9C:4F:97:43:A2:C6:2C:77:AE:95:24:7D:3F:28:1F:C8:A1:AE Authority key identifier: B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 Certificate issuer: /CN=B8E13B8031811FE78FA73151056FBFABEE076814 Certificate serial: 413981817295BA8C2607BFD24431954EFDCE40EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft Manifest number: 8E Signing time: Fri 17 Apr 2026 11:12:23 +0000 Manifest this update: Fri 17 Apr 2026 11:07:23 +0000 Manifest next update: Mon 20 Apr 2026 13:45:23 +0000 Files and hashes: 1: B8E13B8031811FE78FA73151056FBFABEE076814.crl (hash: nkNfNSuETkBF6G9F+6peEay1F1uQ6cSmdUI5MPp+zQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:39:81:81:72:95:ba:8c:26:07:bf:d2:44:31:95:4e:fd:ce:40:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E13B8031811FE78FA73151056FBFABEE076814 Validity Not Before: Apr 17 11:07:23 2026 GMT Not After : Apr 20 13:45:23 2026 GMT Subject: CN=4CF09C4F9743A2C62C77AE95247D3F281FC8A1AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:cf:76:5c:40:ed:a1:58:a0:e9:90:6e:07: d1:7f:fe:50:fc:f5:67:3a:7c:32:5b:74:18:f6:56: ae:9e:f7:e8:b4:71:52:49:1b:9e:94:fe:ae:05:44: 9b:d3:78:59:3d:73:4b:20:88:e8:72:8a:0b:2f:ef: 7b:18:15:dc:b8:54:81:36:f2:75:4d:f0:18:b5:50: ae:1a:ec:57:19:9f:a9:21:4f:5f:69:61:be:f7:3a: cd:95:02:2c:9f:3c:7a:21:d4:fe:8c:43:44:43:c5: 72:ca:46:00:94:4b:dd:5e:99:cb:09:7f:4a:09:44: 7b:49:08:f8:8c:24:2d:07:47:e6:af:c0:23:bf:b6: e7:52:e2:ea:77:2d:a4:46:fd:83:b1:e5:84:7c:e9: a1:6c:7b:ab:17:c5:7b:c2:18:c1:35:b5:f6:2e:53: cc:f1:46:d1:51:e3:51:fa:76:e8:a1:45:20:6d:a4: d7:17:66:76:0f:b8:52:a3:e0:fd:a5:a2:e1:10:5f: 80:4a:e7:b5:8d:fe:3f:12:e9:d0:3b:76:97:69:36: 53:be:51:76:88:d0:3a:c6:7e:af:f1:cd:fb:1f:5c: 8b:24:1b:32:99:19:c5:60:2e:4a:41:47:71:22:d6: a4:4f:15:03:15:a0:29:58:ec:d2:5d:48:a5:99:8b: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F0:9C:4F:97:43:A2:C6:2C:77:AE:95:24:7D:3F:28:1F:C8:A1:AE X509v3 Authority Key Identifier: keyid:B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:f5:dc:12:c1:a0:85:fc:5e:66:a8:d2:e8:21:cc:45:94:a1: 2b:9d:e2:c0:28:1e:72:ce:6a:bc:c2:62:53:94:4f:6b:1a:11: df:5f:d2:75:e7:48:1f:a9:93:49:ab:61:1d:a1:c2:3b:d2:c8: 25:07:51:62:1d:96:0f:b9:04:ad:11:f0:d4:c9:ab:1e:6e:ca: 3c:86:a9:4b:21:7e:7a:78:aa:d4:f9:4d:3c:a9:b6:ef:51:b7: 6e:ce:19:05:78:2e:c5:04:be:7a:c7:6d:fc:57:8a:1a:a5:ba: 22:1d:89:9f:70:1b:7a:cc:92:2f:df:98:dd:c0:cd:e4:b0:1e: c7:84:8b:2c:63:55:5b:9d:57:b5:76:14:34:40:e6:df:58:cf: 1a:12:44:3e:fe:8d:f1:20:df:e9:e1:ec:16:2b:57:55:db:ac: bf:88:65:ec:cf:39:9c:e4:d1:4f:6a:7c:17:ac:e6:13:34:f2: 52:39:be:6d:10:15:ac:52:9b:99:4c:99:52:50:c1:5c:6d:f6: 31:8e:3b:d5:58:65:61:a0:0b:0b:8a:20:b7:14:02:78:6c:bd: d4:ae:47:c4:6d:88:2a:d7:f4:b7:f9:a3:27:b3:06:83:b5:70: 3a:d5:55:28:d2:9f:70:c5:4e:e9:de:76:92:e1:16:30:13:8d: f7:a4:58:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTmBgXKVuowmB7/SRDGVTv3OQOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJF RTA3NjgxNDAeFw0yNjA0MTcxMTA3MjNaFw0yNjA0MjAxMzQ1MjNaMDMxMTAvBgNV BAMTKDRDRjA5QzRGOTc0M0EyQzYyQzc3QUU5NTI0N0QzRjI4MUZDOEExQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNs92XEDtoVig6ZBuB9F//lD8 9Wc6fDJbdBj2Vq6e9+i0cVJJG56U/q4FRJvTeFk9c0sgiOhyigsv73sYFdy4VIE2 8nVN8Bi1UK4a7FcZn6khT19pYb73Os2VAiyfPHoh1P6MQ0RDxXLKRgCUS91emcsJ f0oJRHtJCPiMJC0HR+avwCO/tudS4up3LaRG/YOx5YR86aFse6sXxXvCGME1tfYu U8zxRtFR41H6duihRSBtpNcXZnYPuFKj4P2louEQX4BK57WN/j8S6dA7dpdpNlO+ UXaI0DrGfq/xzfsfXIskGzKZGcVgLkpBR3Ei1qRPFQMVoClY7NJdSKWZi3nBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTPCcT5dDosYsd66VJH0/KB/Ioa4wHwYDVR0j BBgwFoAUuOE7gDGBH+ePpzFRBW+/q+4HaBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODdjMmI3ZS0yNjYzLTRkNjgtYjI1YS01ZmNmMDVlMDdiYjQvMC9COEUxM0I4MDMx ODExRkU3OEZBNzMxNTEwNTZGQkZBQkVFMDc2ODE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJFRTA3 NjgxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJG QUJFRTA3NjgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/13BLBoIX8Xmao0ughzEWUoSud4sAoHnLO arzCYlOUT2saEd9f0nXnSB+pk0mrYR2hwjvSyCUHUWIdlg+5BK0R8NTJqx5uyjyG qUshfnp4qtT5TTyptu9Rt27OGQV4LsUEvnrHbfxXihqluiIdiZ9wG3rMki/fmN3A zeSwHseEiyxjVVudV7V2FDRA5t9YzxoSRD7+jfEg3+nh7BYrV1XbrL+IZezPOZzk 0U9qfBes5hM08lI5vm0QFaxSm5lMmVJQwVxt9jGOO9VYZWGgCwuKILcUAnhsvdSu R8RtiCrX9Lf5oyezBoO1cDrVVSjSn3DFTunedpLhFjATjfekWA4= -----END CERTIFICATE-----Generated at Fri Apr 17 14:32:42 2026 by rpki-client