$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: vxNNxdrOVCGbMHbDtq4/SAQjY3ytW1pbDK+ObAEPOLM= Subject key identifier: A2:C6:7C:0B:AF:C4:6B:30:84:5F:6F:8B:EE:46:62:C5:80:A3:5C:FF Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 04A4D9216A0F5E0639EC291DB5DC9E4A4231E4DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 0564 Signing time: Thu 16 Apr 2026 01:44:59 +0000 Manifest this update: Thu 16 Apr 2026 01:39:59 +0000 Manifest next update: Sun 19 Apr 2026 09:01:59 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) 2: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: si5B9WIEUpAUXfjNBGl+lsvrM999hujPNn5/p4XBZnM=) 3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 09:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a4:d9:21:6a:0f:5e:06:39:ec:29:1d:b5:dc:9e:4a:42:31:e4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Apr 16 01:39:59 2026 GMT Not After : Apr 19 09:01:59 2026 GMT Subject: CN=A2C67C0BAFC46B30845F6F8BEE4662C580A35CFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:97:8a:4e:54:1d:3f:e3:99:ce:9b:f1:6b: 90:09:dc:08:e6:b6:cf:c8:8b:4f:69:13:9c:82:9e: b0:92:c9:5c:a7:d2:9c:39:e6:a1:d0:9d:93:d0:3b: d4:50:4b:f2:5b:5e:63:84:a7:69:26:df:bf:c8:3d: 2f:7d:52:84:87:89:a1:dc:d6:27:da:a7:2d:62:66: c5:9b:5c:c7:a7:47:52:9c:af:95:44:4a:e4:01:5c: e3:af:d0:b9:cd:2a:ad:2b:a7:16:30:db:51:24:d1: 19:75:07:2c:f8:a2:e9:80:0c:22:5c:9c:82:bb:b7: 01:7d:5a:d5:69:03:14:b2:5d:19:72:03:a6:e6:32: 87:cf:82:e0:87:fa:d9:88:42:ce:f5:f7:85:c0:61: c3:20:79:68:7c:b6:ae:83:e6:84:cc:3c:80:dc:6e: 30:6d:70:ea:de:98:c6:31:da:1d:ba:02:75:9d:0d: 23:81:45:24:e2:f9:6e:39:22:92:bb:1b:ad:06:b1: 59:ba:12:3b:0f:27:54:b7:57:e3:9b:25:6c:cf:16: d4:83:b5:2c:8a:95:04:4b:f7:49:bf:ca:2e:5d:9f: 4b:ae:c1:bf:20:fe:1c:bf:bf:8a:c7:f2:fc:af:47: 6b:4a:8d:bf:61:50:17:3b:e7:03:48:00:ad:e9:8a: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C6:7C:0B:AF:C4:6B:30:84:5F:6F:8B:EE:46:62:C5:80:A3:5C:FF X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0e:93:87:4c:9f:d5:37:0e:44:86:04:1b:6d:0e:6f:e0:5d: b1:b2:26:1f:9d:30:44:b9:cb:6e:7a:b2:5b:ad:5f:a4:1b:bf: 1d:6d:c3:c5:b1:ff:01:f4:29:34:c1:25:15:60:b3:93:66:93: 3d:81:7e:e9:45:30:26:42:b2:8a:66:24:e5:27:45:0e:71:0d: 08:11:8b:d5:6f:50:df:89:76:c8:3f:fd:0d:6b:e3:f0:11:c9: c5:72:56:dc:e0:55:9e:0c:3b:39:55:dc:7f:7c:86:2e:70:2d: 72:e8:b8:17:db:a7:14:46:bf:f3:ff:8b:af:28:4b:3e:4a:96: 92:26:7f:4e:81:3f:29:68:fc:e3:dc:66:63:05:98:89:62:b8: df:3e:07:9c:ab:ee:13:3e:01:e2:f5:23:56:80:d8:79:bc:6c: 0e:18:c1:1e:4f:a7:31:26:bc:fa:2e:f2:80:30:a7:91:db:bd: c8:a3:aa:59:c7:40:fc:94:51:1b:ec:86:13:a4:cc:bb:db:c7: ec:63:eb:77:9a:ba:80:03:6b:3c:b3:71:8d:c2:67:f1:3d:f5: 5f:f8:0d:95:30:1d:87:b0:52:4a:8d:90:6e:38:78:0a:2e:19: 6a:78:72:f1:45:e4:56:44:7f:57:b1:e5:fd:d3:a8:f1:59:a1: df:01:0d:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKTZIWoPXgY57CkdtdyeSkIx5N8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNjA0MTYwMTM5NTlaFw0yNjA0MTkwOTAxNTlaMDMxMTAvBgNV BAMTKEEyQzY3QzBCQUZDNDZCMzA4NDVGNkY4QkVFNDY2MkM1ODBBMzVDRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqVpeKTlQdP+OZzpvxa5AJ3Ajm ts/Ii09pE5yCnrCSyVyn0pw55qHQnZPQO9RQS/JbXmOEp2km37/IPS99UoSHiaHc 1ifapy1iZsWbXMenR1Kcr5VESuQBXOOv0LnNKq0rpxYw21Ek0Rl1Byz4oumADCJc nIK7twF9WtVpAxSyXRlyA6bmMofPguCH+tmIQs7194XAYcMgeWh8tq6D5oTMPIDc bjBtcOremMYx2h26AnWdDSOBRSTi+W45IpK7G60GsVm6EjsPJ1S3V+ObJWzPFtSD tSyKlQRL90m/yi5dn0uuwb8g/hy/v4rH8vyvR2tKjb9hUBc75wNIAK3pij+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUosZ8C6/EazCEX2+L7kZixYCjXP8wHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAOk4dMn9U3DkSGBBttDm/gXbGyJh+dMES5 y256slutX6Qbvx1tw8Wx/wH0KTTBJRVgs5Nmkz2BfulFMCZCsopmJOUnRQ5xDQgR i9VvUN+Jdsg//Q1r4/ARycVyVtzgVZ4MOzlV3H98hi5wLXLouBfbpxRGv/P/i68o Sz5KlpImf06BPylo/OPcZmMFmIliuN8+B5yr7hM+AeL1I1aA2Hm8bA4YwR5PpzEm vPou8oAwp5HbvcijqlnHQPyUURvshhOkzLvbx+xj63eauoADazyzcY3CZ/E99V/4 DZUwHYewUkqNkG44eAouGWp4cvFF5FZEf1ex5f3TqPFZod8BDao= -----END CERTIFICATE-----Generated at Fri Apr 17 19:28:15 2026 by rpki-client