$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: xKywBrwkvG34p26itAtw9fBa5X9oddom/9OSev98WWc= Subject key identifier: 9A:94:DC:EF:FF:69:56:C0:B6:A6:9C:62:C0:A0:93:B7:CC:7B:6C:07 Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 190E4CDC9F2E6EDC3DF2A7DF2CDC783D9DD2B9AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 0456 Signing time: Fri 17 Apr 2026 18:32:15 +0000 Manifest this update: Fri 17 Apr 2026 18:27:15 +0000 Manifest next update: Mon 20 Apr 2026 22:43:15 +0000 Files and hashes: 1: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: piwF7+ON2R793sJiaX+4aFfo5D7cOZdp7goWhivyjxE=) 2: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: KVwH011dlZc3IXDi8gzEodPaCumdIrRAGWx2k4W6RHE=) 3: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 4K0py4cnYyh8vI10iLQo1yG8FCXY4pSX4oMXyg6m2pw=) 4: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: U5t1gz5Lu8bYdTDoG7TIErUjYPNGo4xQEu5agXugT3k=) 5: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: bezCvX8XgFSa6OMSK27HUjxxwyFifSYbogKsMqbTNHQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 22:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0e:4c:dc:9f:2e:6e:dc:3d:f2:a7:df:2c:dc:78:3d:9d:d2:b9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Apr 17 18:27:15 2026 GMT Not After : Apr 20 22:43:15 2026 GMT Subject: CN=9A94DCEFFF6956C0B6A69C62C0A093B7CC7B6C07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:69:4f:64:9c:79:50:94:19:d4:f6:25:bf:35: 92:73:64:6f:37:a9:0a:a3:b2:36:b5:d9:5a:5b:bb: 11:41:c7:d5:c4:53:61:83:24:72:0f:e6:21:6d:22: 8f:fd:28:e2:36:9f:4c:f3:57:29:28:69:dc:38:92: 72:be:68:6c:1f:fc:bf:4c:fd:a3:1a:29:41:b1:f1: 0f:82:78:24:bb:44:64:42:cd:e4:c4:a1:43:60:5c: 94:35:86:40:42:76:c9:3c:e0:85:f2:0c:e5:ae:5d: 87:d3:97:d8:d2:b2:51:11:7f:25:06:d9:71:6a:cd: 83:22:6d:63:07:87:b9:ec:45:0a:17:0a:87:2d:31: 05:41:c2:fc:d1:9b:d5:2e:fb:92:19:87:3c:be:3e: 64:58:84:30:8a:a6:0a:db:40:3f:83:f0:5c:51:47: d4:a9:6e:34:19:44:45:d4:bb:23:78:00:93:1e:9c: 25:4d:a3:93:49:40:cf:b9:4c:88:fd:ac:1e:ef:b2: c5:0f:12:4c:c6:08:2a:75:e1:27:dc:1a:f9:15:89: b4:c5:7d:29:a1:bc:04:90:74:2f:6f:c9:32:06:5e: 7d:92:a7:1c:d6:5a:19:82:38:ee:9b:6c:df:8a:e1: bf:dd:9a:9c:4b:0a:e3:d1:fc:4c:40:e3:ff:4c:61: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:94:DC:EF:FF:69:56:C0:B6:A6:9C:62:C0:A0:93:B7:CC:7B:6C:07 X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:4e:e2:4c:d8:3a:55:7a:09:1c:27:e9:ee:3d:ef:b8:70:82: 0c:b3:be:c8:31:8a:e2:e3:7d:0a:8c:b3:f5:10:19:4f:e8:4f: b9:da:32:78:3e:37:cc:b3:0d:5b:35:a2:0d:b2:33:66:fd:84: ae:12:b9:f5:f3:4e:58:a7:06:99:21:66:d0:fa:26:08:ff:e7: 91:d1:2b:50:0f:8c:46:9e:6a:07:fd:e9:6e:5f:3a:df:a5:68: 99:50:c2:9c:cc:eb:84:95:d9:d0:fa:0d:d8:c8:80:ea:31:de: c9:8d:5d:53:64:66:3a:3d:4f:26:84:91:10:91:01:df:69:4d: ab:91:f2:3b:56:4f:b8:f7:01:46:4d:c7:5a:88:17:73:51:66: 39:d8:39:94:e2:34:3d:54:da:bc:ba:e3:4b:dd:3b:d4:fe:1e: b3:d2:82:8c:1c:ce:ba:ed:77:9d:6e:aa:25:60:b0:98:86:c3: 32:e7:f2:3c:aa:7e:41:30:13:99:f3:98:3f:31:e9:52:8b:d0: 5f:62:30:c1:ad:d8:2c:18:7c:a8:e6:ef:4f:2b:77:37:37:93: 83:07:ac:eb:c7:77:fb:7b:56:f1:78:a5:81:cb:22:2b:e1:e6: 35:a7:39:0f:92:d9:31:59:88:64:0d:08:1e:09:0f:a0:fb:86: 62:96:a0:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGQ5M3J8ubtw98qffLNx4PZ3SuaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNjA0MTcxODI3MTVaFw0yNjA0MjAyMjQzMTVaMDMxMTAvBgNV BAMTKDlBOTREQ0VGRkY2OTU2QzBCNkE2OUM2MkMwQTA5M0I3Q0M3QjZDMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwaU9knHlQlBnU9iW/NZJzZG83 qQqjsja12VpbuxFBx9XEU2GDJHIP5iFtIo/9KOI2n0zzVykoadw4knK+aGwf/L9M /aMaKUGx8Q+CeCS7RGRCzeTEoUNgXJQ1hkBCdsk84IXyDOWuXYfTl9jSslERfyUG 2XFqzYMibWMHh7nsRQoXCoctMQVBwvzRm9Uu+5IZhzy+PmRYhDCKpgrbQD+D8FxR R9SpbjQZREXUuyN4AJMenCVNo5NJQM+5TIj9rB7vssUPEkzGCCp14SfcGvkVibTF fSmhvASQdC9vyTIGXn2SpxzWWhmCOO6bbN+K4b/dmpxLCuPR/ExA4/9MYV+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmpTc7/9pVsC2ppxiwKCTt8x7bAcwHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJO4kzYOlV6CRwn6e4977hwggyzvsgxiuLj fQqMs/UQGU/oT7naMng+N8yzDVs1og2yM2b9hK4SufXzTlinBpkhZtD6Jgj/55HR K1APjEaeagf96W5fOt+laJlQwpzM64SV2dD6DdjIgOox3smNXVNkZjo9TyaEkRCR Ad9pTauR8jtWT7j3AUZNx1qIF3NRZjnYOZTiND1U2ry640vdO9T+HrPSgowczrrt d51uqiVgsJiGwzLn8jyqfkEwE5nzmD8x6VKL0F9iMMGt2CwYfKjm708rdzc3k4MH rOvHd/t7VvF4pYHLIivh5jWnOQ+S2TFZiGQNCB4JD6D7hmKWoMU= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:57 2026 by rpki-client