$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: fpnWQGA4UgL8bGQK0lyJZHZMs/DB3SpriQE54pwv7NA= Subject key identifier: D5:D7:CA:40:3D:DE:3A:CF:F9:8B:C5:A3:6A:32:92:1F:D0:10:DE:83 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 7E5D917E36D31AC3625CC177AE64942653F9DCF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 0348 Signing time: Sat 18 Apr 2026 07:50:46 +0000 Manifest this update: Sat 18 Apr 2026 07:45:46 +0000 Manifest next update: Tue 21 Apr 2026 15:20:46 +0000 Files and hashes: 1: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: dm9jPBsp2YuqlE2fIk4L1gGsQglJCHv0SILw+yhja7s=) 2: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: E7SXMeinhYEx1nTb2SA2Sxos/hegF9SdTdiRzIK1k28=) 3: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 7dKSNEM+R7mVlaRlryOrYIy/UF51jWYewiOClTImGdg=) 4: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: pYma4CnUYsvh/GHuj1AR+RzC7f0+QOGrW+zKFaT9Mpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 15:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5d:91:7e:36:d3:1a:c3:62:5c:c1:77:ae:64:94:26:53:f9:dc:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Apr 18 07:45:46 2026 GMT Not After : Apr 21 15:20:46 2026 GMT Subject: CN=D5D7CA403DDE3ACFF98BC5A36A32921FD010DE83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:5b:0b:40:c6:90:1b:aa:86:1f:c6:cd:55: b5:59:23:f2:81:5e:23:b3:4a:cb:7d:d2:be:a6:9c: 40:3c:fb:33:04:e5:5b:dd:19:b6:3d:ca:64:41:37: f9:42:f2:41:c9:6c:18:a4:bc:02:a1:56:7c:98:fe: bf:34:30:09:b1:7c:54:86:45:a8:ae:36:4b:99:cf: da:b0:a0:68:b3:27:e5:0e:ff:5e:47:a5:f1:64:1e: 1b:e9:5f:9b:bc:43:e8:3c:47:c7:ed:cb:59:11:6c: 55:00:a8:6c:1d:bf:4d:4d:27:da:e0:88:89:df:27: 38:e9:c9:9a:51:f5:7f:71:4d:aa:64:9e:a0:2c:9a: 67:13:dc:68:ee:4c:6a:a9:d9:2d:a7:58:af:2a:66: 96:39:d8:1c:b6:90:6f:1a:1a:82:14:a5:4d:a9:7c: 00:e4:7f:43:0a:d7:53:0f:d5:11:1d:8e:23:9d:e2: 9c:d9:19:5a:62:34:dc:de:6a:09:80:71:e5:6c:18: 0f:d8:da:6f:26:c7:13:bc:a8:f9:0d:19:70:b0:bf: a5:e5:82:4c:cf:cb:86:7e:47:28:60:c6:74:85:5c: dd:34:94:9b:f6:ed:66:96:6b:32:50:de:fc:ad:09: cb:84:f7:11:0d:97:05:7d:f5:d5:e3:94:a1:e4:51: 56:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D7:CA:40:3D:DE:3A:CF:F9:8B:C5:A3:6A:32:92:1F:D0:10:DE:83 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:9d:04:ab:91:2c:89:3c:6a:64:f6:c2:d6:ed:1d:7b:68:54: 53:50:11:b2:fc:87:9a:d3:e2:ae:76:6f:13:5d:ec:7f:51:69: 81:e9:10:1e:4b:8b:f3:b2:c4:ab:89:a0:20:d8:4d:4d:dc:a3: 1d:71:78:13:29:e9:1d:14:ca:35:dd:e6:17:70:6c:79:a2:c9: ff:16:27:fd:7b:74:c2:8a:0e:08:cf:65:1e:5d:e0:27:e0:8c: dd:ab:d4:d6:80:b1:09:bf:4e:0f:17:0c:76:82:a1:ce:9b:1a: da:0b:7b:49:4a:5c:3a:d7:ec:23:b9:0b:c8:34:63:6e:a9:4d: c3:ec:cf:dd:24:44:83:43:34:5e:19:cf:b8:0a:01:a3:4c:14: 58:38:9b:02:ae:2d:88:66:eb:d1:8d:ee:a2:2c:49:75:b4:2f: f3:4a:d4:59:2c:29:7e:04:3e:d5:c4:1e:61:60:55:84:e3:be: df:13:02:ab:51:35:7e:56:e4:a0:22:89:36:85:8b:94:c1:12: 54:82:19:eb:56:5f:ee:48:3f:73:2e:07:6f:88:14:8f:8b:0c: 14:c5:ac:1a:8a:54:b3:0b:ad:1e:2e:97:55:aa:bb:35:47:34: 8a:8a:92:54:21:f0:ae:c9:e7:fd:96:b5:c7:65:9c:68:83:82: 9d:4d:79:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfl2RfjbTGsNiXMF3rmSUJlP53PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNjA0MTgwNzQ1NDZaFw0yNjA0MjExNTIwNDZaMDMxMTAvBgNV BAMTKEQ1RDdDQTQwM0RERTNBQ0ZGOThCQzVBMzZBMzI5MjFGRDAxMERFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWaVsLQMaQG6qGH8bNVbVZI/KB XiOzSst90r6mnEA8+zME5VvdGbY9ymRBN/lC8kHJbBikvAKhVnyY/r80MAmxfFSG RaiuNkuZz9qwoGizJ+UO/15HpfFkHhvpX5u8Q+g8R8fty1kRbFUAqGwdv01NJ9rg iInfJzjpyZpR9X9xTapknqAsmmcT3GjuTGqp2S2nWK8qZpY52By2kG8aGoIUpU2p fADkf0MK11MP1REdjiOd4pzZGVpiNNzeagmAceVsGA/Y2m8mxxO8qPkNGXCwv6Xl gkzPy4Z+RyhgxnSFXN00lJv27WaWazJQ3vytCcuE9xENlwV99dXjlKHkUVbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1dfKQD3eOs/5i8WjajKSH9AQ3oMwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACdBKuRLIk8amT2wtbtHXtoVFNQEbL8h5rT 4q52bxNd7H9RaYHpEB5Li/OyxKuJoCDYTU3cox1xeBMp6R0UyjXd5hdwbHmiyf8W J/17dMKKDgjPZR5d4CfgjN2r1NaAsQm/Tg8XDHaCoc6bGtoLe0lKXDrX7CO5C8g0 Y26pTcPsz90kRINDNF4Zz7gKAaNMFFg4mwKuLYhm69GN7qIsSXW0L/NK1FksKX4E PtXEHmFgVYTjvt8TAqtRNX5W5KAiiTaFi5TBElSCGetWX+5IP3MuB2+IFI+LDBTF rBqKVLMLrR4ul1WquzVHNIqKklQh8K7J5/2WtcdlnGiDgp1Nedk= -----END CERTIFICATE-----Generated at Sun Apr 19 10:34:13 2026 by rpki-client