$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: pv/W7ZZQvkUL65hMA1nB8hSWQ+1ZHLa8bgnaKuPFwFw= Subject key identifier: 2F:84:47:D5:F1:C5:EA:E6:FE:10:34:C8:B7:CD:C7:23:CD:C3:43:69 Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 3CD3E26B369074A3B13DA72AEA7F44502A7029EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 018C Signing time: Thu 16 Apr 2026 02:30:05 +0000 Manifest this update: Thu 16 Apr 2026 02:25:05 +0000 Manifest next update: Sun 19 Apr 2026 08:52:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: a6H4YWe9OKyzDzubrROkAhlV3+pAf8XGN9/P/nYD0v8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d3:e2:6b:36:90:74:a3:b1:3d:a7:2a:ea:7f:44:50:2a:70:29:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Apr 16 02:25:05 2026 GMT Not After : Apr 19 08:52:05 2026 GMT Subject: CN=2F8447D5F1C5EAE6FE1034C8B7CDC723CDC34369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:0b:bc:04:05:ed:be:d9:d4:32:5a:e5:4e: af:18:85:90:6d:d3:3b:45:95:88:ea:d9:76:4f:65: cd:f5:c2:74:73:ad:75:2f:09:70:9d:44:82:8b:b3: 1e:a6:9b:0a:c5:43:41:7c:97:be:00:f6:96:8b:32: 19:31:1d:7e:39:82:82:52:eb:af:7e:5c:12:05:de: 7f:b8:c5:2c:3d:ae:3b:ac:05:87:df:70:7b:8f:03: 84:5f:7a:a1:60:b4:61:37:96:75:67:fe:50:23:13: 7e:7d:fb:27:59:2a:67:88:58:4a:03:63:9f:e3:90: 10:bf:34:45:e5:8e:87:4e:29:8b:c8:c3:08:9d:98: 8f:35:49:bb:9d:71:ad:fa:1a:c4:c4:d8:aa:ec:5f: f7:82:d9:8b:fe:9f:27:c9:d7:2c:28:87:e2:db:31: f7:51:97:ab:ee:1b:3a:3c:f4:64:39:66:03:a8:81: ac:03:64:76:57:2d:df:31:56:c0:34:7b:c3:4a:24: e1:ba:3a:09:5c:dc:a8:37:8e:c2:8e:dc:56:20:03: 31:e0:39:2b:e9:db:dc:2d:ff:bc:04:6d:cf:d1:5d: 67:63:22:9d:b4:f4:b2:df:f3:ad:ea:c2:22:f7:e7: 34:c8:5d:01:b6:e9:fa:65:46:f7:b5:cb:cb:d5:f7: be:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:84:47:D5:F1:C5:EA:E6:FE:10:34:C8:B7:CD:C7:23:CD:C3:43:69 X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ed:c0:46:aa:69:cb:50:2d:64:74:d9:98:f5:21:56:ea:03: 69:8a:ba:c3:9b:f1:91:35:f1:e7:c0:79:48:e9:e1:e3:b7:1d: a2:ee:0f:37:fb:b8:26:76:ad:15:85:71:5f:f4:c0:57:73:ab: 5a:39:4c:08:26:a4:09:58:7c:fe:bc:b9:40:43:4a:f7:8e:ac: e1:85:26:e6:63:fc:0b:e7:99:02:b1:d8:19:ea:9f:87:83:dc: dd:37:03:ad:0e:07:dc:2c:09:f3:4b:2d:70:fb:9d:dc:7f:c5: fe:b3:69:15:22:45:7d:42:1e:d1:c6:57:e6:a2:bc:5e:06:5d: cf:36:64:f0:d2:83:bd:4d:27:87:1d:a9:44:46:67:7b:3d:1d: b2:5e:f0:b2:97:93:d1:41:03:b4:6b:d1:b2:5b:0a:ba:b0:e0: 5f:36:2f:e7:6f:72:e2:84:26:ad:2f:26:1c:ec:91:43:9b:2f: 8b:88:ac:9f:97:59:64:71:8f:43:ba:9b:d1:63:ed:8d:b2:2a: ae:78:f1:89:46:f5:2f:94:8b:df:df:6e:de:34:57:0a:53:5c: 81:52:61:ad:fe:86:74:4f:c3:9c:b7:c2:8e:73:6c:10:da:8a: df:f6:99:95:8c:0a:a7:92:ff:c7:19:63:b1:f0:f3:46:ee:55: c5:84:dc:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNPiazaQdKOxPacq6n9EUCpwKe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNjA0MTYwMjI1MDVaFw0yNjA0MTkwODUyMDVaMDMxMTAvBgNV BAMTKDJGODQ0N0Q1RjFDNUVBRTZGRTEwMzRDOEI3Q0RDNzIzQ0RDMzQzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSwu8BAXtvtnUMlrlTq8YhZBt 0ztFlYjq2XZPZc31wnRzrXUvCXCdRIKLsx6mmwrFQ0F8l74A9paLMhkxHX45goJS 669+XBIF3n+4xSw9rjusBYffcHuPA4RfeqFgtGE3lnVn/lAjE359+ydZKmeIWEoD Y5/jkBC/NEXljodOKYvIwwidmI81Sbudca36GsTE2KrsX/eC2Yv+nyfJ1ywoh+Lb MfdRl6vuGzo89GQ5ZgOogawDZHZXLd8xVsA0e8NKJOG6Oglc3Kg3jsKO3FYgAzHg OSvp29wt/7wEbc/RXWdjIp209LLf863qwiL35zTIXQG26fplRve1y8vV9755AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4RH1fHF6ub+EDTIt83HI83DQ2kwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrtwEaqactQLWR02Zj1IVbqA2mKusOb8ZE1 8efAeUjp4eO3HaLuDzf7uCZ2rRWFcV/0wFdzq1o5TAgmpAlYfP68uUBDSveOrOGF JuZj/AvnmQKx2Bnqn4eD3N03A60OB9wsCfNLLXD7ndx/xf6zaRUiRX1CHtHGV+ai vF4GXc82ZPDSg71NJ4cdqURGZ3s9HbJe8LKXk9FBA7Rr0bJbCrqw4F82L+dvcuKE Jq0vJhzskUObL4uIrJ+XWWRxj0O6m9Fj7Y2yKq548YlG9S+Ui9/fbt40VwpTXIFS Ya3+hnRPw5y3wo5zbBDait/2mZWMCqeS/8cZY7Hw80buVcWE3KU= -----END CERTIFICATE-----Generated at Fri Apr 17 20:51:43 2026 by rpki-client