$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: EPN9ZLbUvyl3du/yFOyM1gbqpQph40Z76wx4lVkFT9Q= Subject key identifier: 18:12:92:58:BE:94:B9:A3:37:A1:7A:95:4C:61:57:A1:9D:71:E8:9A Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 2B2DAB1776255AC113E53404E3D67B0384217CDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 02F2 Signing time: Sun 19 Apr 2026 08:50:03 +0000 Manifest this update: Sun 19 Apr 2026 08:45:03 +0000 Manifest next update: Wed 22 Apr 2026 19:10:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: 7KB4bod7Chd0oTj6wM8Eic/SCjVcwDUymxC+ediFaWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2d:ab:17:76:25:5a:c1:13:e5:34:04:e3:d6:7b:03:84:21:7c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Apr 19 08:45:03 2026 GMT Not After : Apr 22 19:10:03 2026 GMT Subject: CN=18129258BE94B9A337A17A954C6157A19D71E89A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:27:99:3e:43:93:6d:1f:46:fe:0c:76:64:9c: 5d:d8:77:ca:59:aa:8f:81:aa:23:2c:fd:1c:ca:39: 4b:1d:8a:11:7e:af:9b:9e:b3:8b:b2:f2:d3:80:92: f7:9f:f0:86:1a:87:ae:bd:59:41:f3:38:c0:8c:ad: 6a:f3:c3:82:d9:a0:d5:d8:84:42:29:b6:d8:03:f3: 8d:b7:d3:46:d1:53:40:a5:40:67:fa:a3:f7:f4:7c: 14:d4:26:43:2c:c4:72:63:5f:22:81:ee:4d:d8:b1: 58:9a:e9:bf:f8:d7:de:4a:7e:18:e5:3d:61:ff:3b: 0c:59:b4:b9:91:fe:2f:f5:ef:27:9a:d0:c8:65:05: f0:2a:ac:70:2c:55:dc:4e:5d:82:59:29:1c:1b:af: 22:32:6d:3c:17:a5:af:f2:ca:47:03:07:0a:bb:63: c8:2e:c5:3d:42:34:d8:fb:99:81:b9:d5:61:90:a6: c7:0d:9d:c3:9c:09:09:c2:c3:94:17:30:e5:88:07: d6:7f:7a:59:e5:c2:e6:9e:07:76:de:63:29:18:4c: c8:6c:09:bf:ef:eb:60:ea:9a:fe:3b:ee:67:72:64: c5:ef:61:c5:60:cd:c0:50:5f:a1:da:0a:ca:17:9c: 28:07:2d:df:dd:f5:46:8f:b1:25:70:e7:38:8c:9c: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:12:92:58:BE:94:B9:A3:37:A1:7A:95:4C:61:57:A1:9D:71:E8:9A X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:91:f0:35:88:4e:0a:c4:4d:76:f9:13:0f:21:3a:95:94:42: e5:5f:ae:e9:b9:47:28:fa:7e:ea:4d:15:9c:ca:fa:f6:e9:78: 38:26:53:bc:b3:75:7d:37:f9:5c:4f:95:ed:1f:a6:ef:3c:19: ef:0b:a6:1e:e5:b9:25:da:2d:73:ba:90:30:57:90:da:8b:ac: a1:a3:3a:e5:4e:be:20:1a:7b:c9:8e:26:3d:69:3c:91:15:d3: d9:8e:cb:81:0e:b2:56:e6:53:46:d9:e2:b9:7b:d1:6d:1e:f1: 16:a8:0b:34:0a:2f:b0:21:b5:11:dd:e9:1c:2b:52:2b:ff:a2: 43:09:33:45:8a:f7:54:34:f5:94:29:02:bb:34:96:fc:d4:86: 66:d2:41:d3:dc:a5:9c:ce:9b:fe:35:36:10:b9:8f:90:82:b4: 3e:d4:89:f5:31:18:fd:97:6b:cd:48:5d:1a:dd:65:43:80:45: e1:57:83:37:d3:10:32:fe:e7:20:dc:54:62:86:9c:14:a0:9f: f9:92:d4:a7:49:61:d5:ad:30:6c:cf:29:9d:11:fc:bd:09:1a: 84:ed:d9:b7:a2:f2:ea:04:18:b5:3c:3e:05:ff:49:74:ce:5b: 99:d9:72:84:24:d8:10:2d:c1:f2:d6:08:c0:b5:3e:04:cf:95: 12:0a:85:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKy2rF3YlWsET5TQE49Z7A4QhfN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNjA0MTkwODQ1MDNaFw0yNjA0MjIxOTEwMDNaMDMxMTAvBgNV BAMTKDE4MTI5MjU4QkU5NEI5QTMzN0ExN0E5NTRDNjE1N0ExOUQ3MUU4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgJ5k+Q5NtH0b+DHZknF3Yd8pZ qo+BqiMs/RzKOUsdihF+r5ues4uy8tOAkvef8IYah669WUHzOMCMrWrzw4LZoNXY hEIpttgD842300bRU0ClQGf6o/f0fBTUJkMsxHJjXyKB7k3YsVia6b/4195Kfhjl PWH/OwxZtLmR/i/17yea0MhlBfAqrHAsVdxOXYJZKRwbryIybTwXpa/yykcDBwq7 Y8guxT1CNNj7mYG51WGQpscNncOcCQnCw5QXMOWIB9Z/elnlwuaeB3beYykYTMhs Cb/v62Dqmv477mdyZMXvYcVgzcBQX6HaCsoXnCgHLd/d9UaPsSVw5ziMnFvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGBKSWL6UuaM3oXqVTGFXoZ1x6JowHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWR8DWITgrETXb5Ew8hOpWUQuVfrum5Ryj6 fupNFZzK+vbpeDgmU7yzdX03+VxPle0fpu88Ge8Lph7luSXaLXO6kDBXkNqLrKGj OuVOviAae8mOJj1pPJEV09mOy4EOslbmU0bZ4rl70W0e8RaoCzQKL7AhtRHd6Rwr Uiv/okMJM0WK91Q09ZQpArs0lvzUhmbSQdPcpZzOm/41NhC5j5CCtD7UifUxGP2X a81IXRrdZUOAReFXgzfTEDL+5yDcVGKGnBSgn/mS1KdJYdWtMGzPKZ0R/L0JGoTt 2bei8uoEGLU8PgX/SXTOW5nZcoQk2BAtwfLWCMC1PgTPlRIKhU0= -----END CERTIFICATE-----Generated at Sun Apr 19 11:00:00 2026 by rpki-client