$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft File: 08435803278DC5796EE67697996454D656195D4C.mft (raw, json) Hash identifier: TzOPxxfv8y1fGS5hyYD8epx7NytyFqfLFwLT9FShVbc= Subject key identifier: E8:AD:87:5E:21:B3:CC:BE:F6:5C:B3:49:43:2C:F2:65:74:1A:CF:A7 Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C Certificate issuer: /CN=08435803278DC5796EE67697996454D656195D4C Certificate serial: 6B2E03DAB47AF12E73358A31F2675B99F1144D1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft Manifest number: 0156 Signing time: Wed 15 Apr 2026 14:40:52 +0000 Manifest this update: Wed 15 Apr 2026 14:35:52 +0000 Manifest next update: Sat 18 Apr 2026 22:05:52 +0000 Files and hashes: 1: 08435803278DC5796EE67697996454D656195D4C.crl (hash: DbZAIGpgoAFy8XGc7SBiprqGiQyIKmnbIT8dy+oASAA=) 2: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: ULnMVXnjf0tvwwqkUSO96TMRqJiDiyS4pTW21akFxig=) 3: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: lyCZVXNuC0Xf+K13v95LugLimZC5psd3n6Znwu42Lhs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2e:03:da:b4:7a:f1:2e:73:35:8a:31:f2:67:5b:99:f1:14:4d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08435803278DC5796EE67697996454D656195D4C Validity Not Before: Apr 15 14:35:52 2026 GMT Not After : Apr 18 22:05:52 2026 GMT Subject: CN=E8AD875E21B3CCBEF65CB349432CF265741ACFA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d1:ee:4a:31:41:c6:ec:e3:64:0f:c7:77:50: e7:71:91:91:88:ec:48:a1:37:8a:fe:6b:f3:87:a5: ce:ae:dc:4d:1b:da:7f:a4:24:a9:4f:e4:1b:01:12: 16:44:de:84:73:46:79:2b:da:dc:9c:ad:9a:f8:0e: 91:79:c5:82:f3:b8:c6:a9:02:f9:e5:50:ec:77:90: 33:b6:0b:22:26:91:74:37:f5:e3:47:5f:28:0d:c7: 49:44:f1:74:68:d0:83:3c:5a:ca:87:59:fb:90:f9: 64:d0:9b:bf:27:b1:9e:6f:c0:d5:55:85:34:c5:b2: 3d:fe:8c:44:3f:dd:51:e1:db:66:53:93:4e:45:6f: 03:7e:cf:c3:dd:26:a3:c9:b0:56:c3:47:06:bf:87: 58:4a:10:4d:6a:46:eb:22:cb:d0:d3:06:6d:b2:21: 91:aa:52:c6:45:5a:21:0b:ce:b0:2d:7b:22:3e:d7: 78:3a:22:b7:19:61:1e:53:96:05:7a:42:9c:33:91: 10:1d:e1:17:a3:ba:76:78:4a:8b:e9:a1:8a:c9:a2: 47:06:37:db:96:52:cf:cd:85:af:70:51:ad:f1:f7: aa:e1:3e:16:73:d4:b7:4f:f5:b7:b3:32:95:a3:c0: db:48:e2:89:02:95:e2:ab:96:7c:cf:12:12:5d:a5: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AD:87:5E:21:B3:CC:BE:F6:5C:B3:49:43:2C:F2:65:74:1A:CF:A7 X509v3 Authority Key Identifier: keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:58:d3:77:a6:e5:2f:9e:6d:d3:bb:63:bd:89:67:78:bd:77: 2b:73:30:88:2e:74:fd:6c:2e:13:5a:59:05:7d:53:3e:a8:a6: e4:d7:a8:82:36:02:4c:dc:d9:d1:77:c7:38:56:94:f7:ad:4d: 96:14:e1:70:82:b6:22:3a:22:1d:8f:ea:2b:ba:29:c4:ec:30: 80:e4:bf:36:05:16:64:96:7f:aa:b9:96:83:41:a6:e1:df:9f: dc:11:1a:34:80:3c:3d:74:f0:76:e1:26:61:1f:48:5d:5f:64: 48:ce:da:df:48:53:48:dd:dd:de:2b:af:2c:2e:dd:58:cc:8c: fc:d5:85:da:70:4c:9f:96:b9:82:3a:32:3c:fc:ad:b9:23:2a: a1:5b:43:83:71:72:ee:8f:a1:94:ab:25:f7:73:3d:d8:8c:77: 9c:8b:4b:01:d1:4c:9f:e6:6e:ba:69:61:cb:35:9f:89:66:4a: 86:aa:76:17:a6:6e:30:93:1f:a9:1a:09:71:cd:20:7e:84:d2: 41:47:27:8a:cd:f2:22:2b:24:bf:bb:96:ff:98:78:ac:e8:35: 4a:8d:96:2f:71:c3:6a:72:77:f6:61:2b:f3:a4:f7:4d:11:2d: 17:75:a1:8a:1a:18:c2:60:22:8e:2e:16:51:31:84:ae:cb:9f: 48:55:a5:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUay4D2rR68S5zNYox8mdbmfEUTR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1 NjE5NUQ0QzAeFw0yNjA0MTUxNDM1NTJaFw0yNjA0MTgyMjA1NTJaMDMxMTAvBgNV BAMTKEU4QUQ4NzVFMjFCM0NDQkVGNjVDQjM0OTQzMkNGMjY1NzQxQUNGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc0e5KMUHG7ONkD8d3UOdxkZGI 7EihN4r+a/OHpc6u3E0b2n+kJKlP5BsBEhZE3oRzRnkr2tycrZr4DpF5xYLzuMap AvnlUOx3kDO2CyImkXQ39eNHXygNx0lE8XRo0IM8WsqHWfuQ+WTQm78nsZ5vwNVV hTTFsj3+jEQ/3VHh22ZTk05FbwN+z8PdJqPJsFbDRwa/h1hKEE1qRusiy9DTBm2y IZGqUsZFWiELzrAteyI+13g6IrcZYR5TlgV6QpwzkRAd4RejunZ4SovpoYrJokcG N9uWUs/Nha9wUa3x96rhPhZz1LdP9bezMpWjwNtI4okCleKrlnzPEhJdpXChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6K2HXiGzzL72XLNJQyzyZXQaz6cwHwYDVR0j BBgwFoAUCENYAyeNxXlu5naXmWRU1lYZXUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzBkNjI5YS05NmVkLTQ1MWEtODc4Ny0zNDEyMjI4MmE3MDYvMC8wODQzNTgwMzI3 OERDNTc5NkVFNjc2OTc5OTY0NTRENjU2MTk1RDRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1NjE5 NUQ0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0 RDY1NjE5NUQ0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJY03em5S+ebdO7Y72JZ3i9dytzMIgudP1s LhNaWQV9Uz6opuTXqII2Akzc2dF3xzhWlPetTZYU4XCCtiI6Ih2P6iu6KcTsMIDk vzYFFmSWf6q5loNBpuHfn9wRGjSAPD108HbhJmEfSF1fZEjO2t9IU0jd3d4rrywu 3VjMjPzVhdpwTJ+WuYI6Mjz8rbkjKqFbQ4Nxcu6PoZSrJfdzPdiMd5yLSwHRTJ/m brppYcs1n4lmSoaqdhembjCTH6kaCXHNIH6E0kFHJ4rN8iIrJL+7lv+YeKzoNUqN li9xw2pyd/ZhK/Ok900RLRd1oYoaGMJgIo4uFlExhK7Ln0hVpaU= -----END CERTIFICATE-----Generated at Fri Apr 17 23:06:19 2026 by rpki-client