$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: wKrW9UH4ep7OZWECRcaBz8XAHSRxiDzRL+A/mJkbD+E= Subject key identifier: 64:F7:00:EF:66:1A:A5:A7:57:15:6A:63:98:05:AE:8A:05:90:11:84 Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 40DE6F77AD6987FB7F596C4F17C29C54EA2BA9DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 0236 Signing time: Fri 17 Apr 2026 11:42:17 +0000 Manifest this update: Fri 17 Apr 2026 11:37:17 +0000 Manifest next update: Mon 20 Apr 2026 15:33:17 +0000 Files and hashes: 1: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: iULKdZ+8YBgk+IOzMqKF0bAFFPZHjP7Zi+XVSi5s7yc=) 2: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: 9XVDbfy2RloAUQyc372zb1+YO9y/B7M1qgkjz9Fg6m4=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: mvjYp+1vrLLE5z7eCg/M+MdscRpVan6q1wn/N7ffyk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:de:6f:77:ad:69:87:fb:7f:59:6c:4f:17:c2:9c:54:ea:2b:a9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Apr 17 11:37:17 2026 GMT Not After : Apr 20 15:33:17 2026 GMT Subject: CN=64F700EF661AA5A757156A639805AE8A05901184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:83:5a:6c:a3:33:13:e3:c2:6a:88:e0:0c: 01:a9:30:a3:c3:fa:f8:ac:d1:2a:83:4e:fa:18:f8: 50:47:f1:ab:61:13:9f:49:b5:62:bc:a9:1c:40:46: 63:bb:1c:7b:19:7f:2e:5b:af:91:3c:44:27:40:0e: ed:ed:8b:49:c1:7f:b3:2d:6f:47:7b:c3:2b:58:b3: 67:ad:d8:c0:22:9a:d0:41:33:fe:21:87:ce:20:e7: c0:6b:fc:2f:90:0d:a6:3c:2d:e1:85:20:72:02:25: 01:9f:ba:4d:b6:62:1b:1b:a4:af:44:15:0e:63:86: e9:f7:d8:07:93:f6:d7:d4:4a:6c:15:1c:ee:e9:9f: 4f:f8:3b:94:5f:b6:03:f6:11:ed:ec:cb:9c:dd:43: c9:5f:ef:1f:69:0e:41:1b:7c:28:cc:d9:cf:68:bb: 40:ca:f4:b0:fc:7f:61:50:90:f3:02:37:53:af:3c: eb:fe:cc:c3:28:43:ec:3b:ad:b5:5f:3f:3e:9a:91: 45:39:d5:f9:90:d5:49:2a:56:b6:a6:24:fc:2d:e3: fb:2a:1a:ce:60:61:bc:ca:84:6d:83:50:90:81:d4: bd:07:f6:51:0a:a5:cd:8b:48:6b:d6:12:7d:fe:33: cb:17:13:12:07:01:e2:01:96:37:fc:ca:d7:e2:1a: f9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F7:00:EF:66:1A:A5:A7:57:15:6A:63:98:05:AE:8A:05:90:11:84 X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:06:f6:81:21:a4:73:1c:b3:c3:1c:39:26:3a:10:a3:6a:70: 5b:6c:85:a5:b5:a4:d5:fa:e8:8c:38:bf:63:9c:72:c4:74:86: 10:38:56:57:30:f0:4d:58:d8:cc:71:7c:40:1e:a4:24:33:b5: b3:e8:33:f9:4b:66:6d:12:bf:0d:54:c1:cd:50:d6:a3:dd:cc: ee:03:27:50:e7:9c:e9:a7:d6:2b:42:e1:21:f2:8e:46:25:20: a4:0d:fb:77:f1:9d:f6:a3:62:c7:dc:54:70:1b:86:72:23:23: 9a:93:a5:a0:fc:eb:d6:77:63:3e:de:fd:f2:86:bd:d9:2b:57: 44:11:70:c3:b5:69:8e:d6:51:6e:2d:d6:93:d2:95:36:b6:ab: f6:f9:f4:01:38:74:9d:44:91:95:ff:87:93:8b:1c:6b:eb:8c: 29:ab:05:2c:86:21:33:3f:89:d9:50:51:9d:c1:1c:25:8a:94: 40:a3:cd:8c:cd:4a:3e:8c:48:8a:ed:4f:93:e7:10:62:c4:18: d7:37:93:58:0b:71:59:f1:eb:3b:1d:0f:eb:af:dd:4d:72:16: ff:9b:2e:e0:7a:29:6e:40:4d:f5:7e:26:5a:59:cf:1c:ae:93: b6:01:4b:ae:47:ee:45:4d:58:fb:c8:c0:b1:54:c1:68:8a:77: 3f:15:e2:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQN5vd61ph/t/WWxPF8KcVOorqdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNjA0MTcxMTM3MTdaFw0yNjA0MjAxNTMzMTdaMDMxMTAvBgNV BAMTKDY0RjcwMEVGNjYxQUE1QTc1NzE1NkE2Mzk4MDVBRThBMDU5MDExODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eYNabKMzE+PCaojgDAGpMKPD +vis0SqDTvoY+FBH8athE59JtWK8qRxARmO7HHsZfy5br5E8RCdADu3ti0nBf7Mt b0d7wytYs2et2MAimtBBM/4hh84g58Br/C+QDaY8LeGFIHICJQGfuk22YhsbpK9E FQ5jhun32AeT9tfUSmwVHO7pn0/4O5RftgP2Ee3sy5zdQ8lf7x9pDkEbfCjM2c9o u0DK9LD8f2FQkPMCN1OvPOv+zMMoQ+w7rbVfPz6akUU51fmQ1UkqVramJPwt4/sq Gs5gYbzKhG2DUJCB1L0H9lEKpc2LSGvWEn3+M8sXExIHAeIBljf8ytfiGvmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZPcA72YapadXFWpjmAWuigWQEYQwHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEG9oEhpHMcs8McOSY6EKNqcFtshaW1pNX6 6Iw4v2OccsR0hhA4Vlcw8E1Y2MxxfEAepCQztbPoM/lLZm0Svw1Uwc1Q1qPdzO4D J1DnnOmn1itC4SHyjkYlIKQN+3fxnfajYsfcVHAbhnIjI5qTpaD869Z3Yz7e/fKG vdkrV0QRcMO1aY7WUW4t1pPSlTa2q/b59AE4dJ1EkZX/h5OLHGvrjCmrBSyGITM/ idlQUZ3BHCWKlECjzYzNSj6MSIrtT5PnEGLEGNc3k1gLcVnx6zsdD+uv3U1yFv+b LuB6KW5ATfV+JlpZzxyuk7YBS65H7kVNWPvIwLFUwWiKdz8V4lk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:12:39 2026 by rpki-client