$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: q/yqJfrh8iHBKqWYV9ttnDbyK0iHJXRf83yEz7+UBFc= Subject key identifier: F0:E3:D8:20:ED:B5:BC:97:17:49:6A:5F:0C:50:C9:53:5F:55:39:BA Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 3DD4DFB4CF9667440274904FD91724364B1FE211 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 018B Signing time: Thu 16 Apr 2026 22:31:14 +0000 Manifest this update: Thu 16 Apr 2026 22:26:14 +0000 Manifest next update: Sun 19 Apr 2026 23:37:14 +0000 Files and hashes: 1: 3137352e3131312e39392e302f32342d3234203d3e20313534343130.roa (hash: A681M7W/Os54i9ou3p8OuHLz8QinEihQYy8uf/E43+0=) 2: 3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa (hash: zwjrrSSocCPkwpeZnvOXQTY6ZFKjf2v0QrVmVjzP5Ng=) 3: 3137352e3131312e39382e302f32342d3234203d3e20313534343130.roa (hash: tp/Jlsq88hd2XOTMKJfCJaaLDtcVuVyDPXkT0pr4Y9I=) 4: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: aia3nUPKEa96BWO7Pv3XlqoUwx8dHqiYGIZfz0yhZhg=) 5: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: AghOU/pgzXbwtlWCSLhXHXuJqGUCoPtZzcPl6UwSVVA=) 6: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: 34Ouz0ixDd4YTlAbhLSeoy6v/iuuBqjjgD1K4KKEuiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d4:df:b4:cf:96:67:44:02:74:90:4f:d9:17:24:36:4b:1f:e2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Apr 16 22:26:14 2026 GMT Not After : Apr 19 23:37:14 2026 GMT Subject: CN=F0E3D820EDB5BC9717496A5F0C50C9535F5539BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:d3:8a:de:39:8f:16:26:0c:9a:1f:91:aa: 26:07:fd:7e:28:e9:a7:a4:0c:4d:12:0d:eb:cc:f5: 96:1f:13:de:77:56:ee:1e:f0:d0:a8:ef:73:95:36: e2:50:b0:e7:73:d0:dd:a2:9f:d9:45:e7:20:e9:cb: 1a:ae:cd:cc:24:85:57:db:74:fb:09:26:2d:d4:f6: a4:2c:d1:ba:2a:79:4d:5f:a2:a1:a7:dd:db:cd:90: 89:41:d5:6e:f8:ab:61:29:64:55:bc:ab:3e:e7:d3: 85:f6:37:ed:bd:37:23:66:fb:b1:db:0b:23:4c:1e: 20:d9:e4:20:a3:7f:ae:fa:0e:d0:76:77:db:11:30: 3e:46:13:6f:a0:11:fe:d2:8f:85:5b:f0:90:e3:a4: 2f:26:1f:42:63:81:67:b8:ae:d9:c2:fa:03:e2:1d: 3f:89:06:df:f2:1d:11:a6:40:ac:40:6a:30:fd:af: 91:c1:14:7b:ff:ba:fe:8f:6e:71:e7:1d:9a:bb:ce: 29:92:1a:d5:0b:3f:34:61:9a:b5:bb:39:84:16:5e: f9:7d:e0:71:05:71:02:f3:9e:4c:6e:82:ca:85:46: 43:0d:fb:29:7a:68:3e:05:c8:e7:9d:56:38:39:a4: 0c:4e:5c:d1:93:f8:17:46:c3:e9:b3:3e:7b:8c:17: 17:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E3:D8:20:ED:B5:BC:97:17:49:6A:5F:0C:50:C9:53:5F:55:39:BA X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:58:47:df:d8:09:a5:37:91:76:fa:bb:28:7f:19:55:e7:26: bc:2e:ac:d1:b5:cb:74:08:c3:bd:6b:28:a4:ac:e7:99:c4:77: 57:fb:a2:e4:d3:c0:04:65:15:e0:a7:44:56:f8:1d:b4:37:fc: 3c:ff:7f:69:ca:38:8c:2e:cb:e1:86:f1:3d:22:ee:10:51:b7: cf:8a:30:49:45:4e:4f:32:93:e1:9b:d3:b6:d5:3b:e9:b9:52: a8:9f:24:1f:16:e8:fd:45:e0:9b:7b:e4:e3:c1:3a:bc:b2:14: 4f:e7:a2:32:1e:22:75:e8:3e:da:31:49:f9:8f:8a:5a:22:c9: 7e:c6:05:7a:4a:ef:89:18:af:21:3a:f4:04:da:e4:b4:bb:f9: af:25:4a:63:9d:e9:cf:4b:3b:6a:1c:17:30:91:59:a1:61:aa: 89:06:43:5e:a0:55:16:09:3c:f5:bb:a6:e4:21:87:05:01:d1: 1b:9d:27:0a:02:a1:68:60:eb:87:95:8c:cb:2a:7e:80:f4:9d: bd:8a:49:a7:32:ca:b0:1a:ea:fb:5a:ca:74:eb:38:48:00:4c: cf:42:eb:23:9e:2c:77:d2:0c:89:5a:f4:0e:8e:53:55:6c:c3: d4:34:81:ad:89:b5:ba:7b:d0:22:97:1f:20:6a:46:af:b3:3f: 66:4f:4d:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdTftM+WZ0QCdJBP2RckNksf4hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNjA0MTYyMjI2MTRaFw0yNjA0MTkyMzM3MTRaMDMxMTAvBgNV BAMTKEYwRTNEODIwRURCNUJDOTcxNzQ5NkE1RjBDNTBDOTUzNUY1NTM5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBrdOK3jmPFiYMmh+RqiYH/X4o 6aekDE0SDevM9ZYfE953Vu4e8NCo73OVNuJQsOdz0N2in9lF5yDpyxquzcwkhVfb dPsJJi3U9qQs0boqeU1foqGn3dvNkIlB1W74q2EpZFW8qz7n04X2N+29NyNm+7Hb CyNMHiDZ5CCjf676DtB2d9sRMD5GE2+gEf7Sj4Vb8JDjpC8mH0JjgWe4rtnC+gPi HT+JBt/yHRGmQKxAajD9r5HBFHv/uv6PbnHnHZq7zimSGtULPzRhmrW7OYQWXvl9 4HEFcQLznkxugsqFRkMN+yl6aD4FyOedVjg5pAxOXNGT+BdGw+mzPnuMFxdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8OPYIO21vJcXSWpfDFDJU19VObowHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFYR9/YCaU3kXb6uyh/GVXnJrwurNG1y3QI w71rKKSs55nEd1f7ouTTwARlFeCnRFb4HbQ3/Dz/f2nKOIwuy+GG8T0i7hBRt8+K MElFTk8yk+Gb07bVO+m5UqifJB8W6P1F4Jt75OPBOryyFE/nojIeInXoPtoxSfmP iloiyX7GBXpK74kYryE69ATa5LS7+a8lSmOd6c9LO2ocFzCRWaFhqokGQ16gVRYJ PPW7puQhhwUB0RudJwoCoWhg64eVjMsqfoD0nb2KSacyyrAa6vtaynTrOEgATM9C 6yOeLHfSDIla9A6OU1Vsw9Q0ga2Jtbp70CKXHyBqRq+zP2ZPTdc= -----END CERTIFICATE-----Generated at Fri Apr 17 15:53:17 2026 by rpki-client