$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: 3PbV0mrWCuw9GdRaloCjF0KuBmZDmStLMmzQXdKkQhw= Subject key identifier: 3A:BE:69:DD:9C:4D:CF:4A:1D:A8:FF:DE:2C:C9:63:ED:54:EE:94:90 Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 2C4B027D2C108D392FAC72C804BC9898BE67FAFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 0267 Signing time: Thu 16 Apr 2026 00:12:49 +0000 Manifest this update: Thu 16 Apr 2026 00:07:49 +0000 Manifest next update: Sun 19 Apr 2026 09:36:49 +0000 Files and hashes: 1: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: 7fkojH6n2YaQPmJ/Ybq74NDq6TVC49fhQCYqq7bvmOY=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: IgizShDVF3XIdFoYQysMBd+RMZoTyStrHHHFv+jVVho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 09:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4b:02:7d:2c:10:8d:39:2f:ac:72:c8:04:bc:98:98:be:67:fa:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Apr 16 00:07:49 2026 GMT Not After : Apr 19 09:36:49 2026 GMT Subject: CN=3ABE69DD9C4DCF4A1DA8FFDE2CC963ED54EE9490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:55:59:b3:70:be:b9:14:10:1b:56:a0:31: 26:cc:b4:39:1c:7a:49:a7:90:52:ca:bf:d9:68:87: 79:ec:55:6f:dd:39:d8:14:01:a8:b7:7c:9e:86:1e: 94:f3:c3:b0:75:77:7e:6d:54:a2:f0:f8:d1:1a:62: f9:3c:bb:2e:90:bd:36:f6:b4:ed:ac:67:e6:92:32: b7:b1:82:70:82:bd:4a:d6:06:23:33:e6:16:a6:5e: a8:76:8e:e9:5f:30:b4:e0:a1:94:09:03:5a:75:4c: 65:04:33:f6:46:cd:ec:ab:42:23:27:23:e6:21:f1: 72:83:78:fd:47:a6:be:56:a2:40:25:cb:9d:9e:4d: e6:92:c9:a7:92:a2:04:e2:1c:f4:a9:29:4d:d4:27: e2:93:1f:e4:5e:0d:a8:3c:eb:40:e8:93:7c:47:e2: 2b:03:af:43:78:7b:3f:1d:8d:47:2c:b6:c0:49:0a: e6:9d:9e:94:7d:f1:39:d9:c7:16:5e:41:fb:ef:c2: 63:38:65:73:bf:54:f7:ba:97:5b:e8:e4:5e:12:4b: 4b:69:46:37:9d:86:97:3c:61:0f:57:9a:4c:7f:a4: a8:aa:65:e5:92:b6:d9:fa:a2:a5:35:94:c1:0d:cc: e8:cf:48:de:de:7f:89:b8:30:f6:fa:01:b8:a3:e9: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BE:69:DD:9C:4D:CF:4A:1D:A8:FF:DE:2C:C9:63:ED:54:EE:94:90 X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:26:d2:5f:4e:31:88:46:67:86:42:2e:1d:66:3e:7f:87:49: f6:4e:8a:1b:b3:56:27:50:af:cd:2a:e0:c0:3a:1d:39:02:45: 8c:1c:b9:6f:e1:db:4e:79:b3:2e:a8:8c:32:9b:fe:22:ff:53: 8e:6e:fe:7b:97:a9:b7:c2:9e:56:2f:50:7f:74:78:54:ed:6c: d2:62:c5:ff:ad:1d:34:30:27:52:25:01:ed:2c:69:24:c0:c7: 0f:4e:38:4f:9c:05:ca:1f:4a:69:00:d6:0b:58:6a:b9:3b:49: c0:88:83:6a:ff:8b:c6:ca:aa:5a:a0:e7:64:bb:26:37:ea:e7: 0b:20:4b:2a:d2:63:15:87:af:78:6d:e6:1c:8b:2c:4f:87:df: 3b:7a:54:4d:24:7f:ff:85:97:20:b6:3d:d2:80:32:22:da:cd: fc:ae:c0:51:5d:ea:fd:cd:b2:b6:4e:4f:ff:6f:67:a5:3b:8e: 6a:5d:09:ac:fe:a9:49:37:0c:40:13:c6:dd:56:ae:b0:95:6f: 9c:ae:46:75:5e:dc:30:5d:ed:58:ea:49:fd:b6:45:77:26:e6: 5a:c5:62:5c:cc:f5:d6:8f:87:0e:06:a9:c9:c0:a8:a3:54:c4: c3:c4:71:6c:05:43:86:e7:cb:86:41:c9:cb:c9:a5:01:e9:1d: 7e:2c:ff:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULEsCfSwQjTkvrHLIBLyYmL5n+vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNjA0MTYwMDA3NDlaFw0yNjA0MTkwOTM2NDlaMDMxMTAvBgNV BAMTKDNBQkU2OUREOUM0RENGNEExREE4RkZERTJDQzk2M0VENTRFRTk0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4W1VZs3C+uRQQG1agMSbMtDkc ekmnkFLKv9loh3nsVW/dOdgUAai3fJ6GHpTzw7B1d35tVKLw+NEaYvk8uy6QvTb2 tO2sZ+aSMrexgnCCvUrWBiMz5hamXqh2julfMLTgoZQJA1p1TGUEM/ZGzeyrQiMn I+Yh8XKDeP1Hpr5WokAly52eTeaSyaeSogTiHPSpKU3UJ+KTH+ReDag860Dok3xH 4isDr0N4ez8djUcstsBJCuadnpR98TnZxxZeQfvvwmM4ZXO/VPe6l1vo5F4SS0tp Rjedhpc8YQ9Xmkx/pKiqZeWSttn6oqU1lMENzOjPSN7ef4m4MPb6Abij6TI7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOr5p3ZxNz0odqP/eLMlj7VTulJAwHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABom0l9OMYhGZ4ZCLh1mPn+HSfZOihuzVidQ r80q4MA6HTkCRYwcuW/h2055sy6ojDKb/iL/U45u/nuXqbfCnlYvUH90eFTtbNJi xf+tHTQwJ1IlAe0saSTAxw9OOE+cBcofSmkA1gtYark7ScCIg2r/i8bKqlqg52S7 Jjfq5wsgSyrSYxWHr3ht5hyLLE+H3zt6VE0kf/+FlyC2PdKAMiLazfyuwFFd6v3N srZOT/9vZ6U7jmpdCaz+qUk3DEATxt1WrrCVb5yuRnVe3DBd7VjqSf22RXcm5lrF YlzM9daPhw4GqcnAqKNUxMPEcWwFQ4bny4ZBycvJpQHpHX4s/wM= -----END CERTIFICATE-----Generated at Sat Apr 18 02:47:31 2026 by rpki-client