$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: L0ZUUAS8wUO6d2yXPgHgMgdEJLwqp6SkD+YcUTM3s6A= Subject key identifier: 80:19:2B:48:70:AB:C3:3D:1F:A7:FE:A5:DB:EC:C9:4D:01:F4:86:D6 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 6D80A23A3A9021CF02BF6DDA189E896BEE6EE992 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 04FD Signing time: Sat 18 Apr 2026 05:41:46 +0000 Manifest this update: Sat 18 Apr 2026 05:36:46 +0000 Manifest next update: Tue 21 Apr 2026 11:12:46 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: U79nTjfiC8HD+iQOv3IV7MiB9YHnoz3VpB4qDEOm1KE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:80:a2:3a:3a:90:21:cf:02:bf:6d:da:18:9e:89:6b:ee:6e:e9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Apr 18 05:36:46 2026 GMT Not After : Apr 21 11:12:46 2026 GMT Subject: CN=80192B4870ABC33D1FA7FEA5DBECC94D01F486D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:05:cc:a7:04:80:72:08:91:4e:1f:70:79: a7:a5:ff:f1:eb:44:d1:f6:8a:01:5a:77:4e:af:0f: 2a:14:31:87:6a:7a:17:76:99:c6:7e:a6:61:35:09: 2a:b7:02:62:dd:2c:21:8f:61:f0:de:96:e3:0b:3b: fd:eb:a6:3c:b5:bf:e4:e1:c3:83:37:cf:36:b0:78: 15:3b:67:ad:d6:c5:8e:d0:92:e0:42:d4:8f:8d:68: ed:7c:71:a2:83:1e:86:19:d9:4a:ef:47:b9:1b:ca: c8:26:31:37:3f:6b:26:c3:c7:14:1b:01:72:51:5f: 1b:cb:70:2a:6f:ea:22:1a:72:14:09:13:78:82:10: df:8f:95:b9:0d:bd:11:3e:67:ad:99:04:72:e7:96: f1:e3:67:d3:06:1c:70:68:88:84:35:03:54:26:05: bf:2a:97:43:91:da:d9:94:e6:51:89:ad:83:e1:09: 76:4b:c9:15:b6:8c:26:71:d0:60:c6:13:ef:b5:e3: 0a:be:d0:91:c3:61:69:77:2d:25:57:1a:49:c8:e0: 38:e4:28:72:b9:b9:02:b9:dd:90:7e:00:13:96:71: 89:79:4b:9e:60:67:c8:88:4c:a3:fc:9d:64:22:9c: 74:5e:71:b0:95:e5:32:23:7e:4a:14:70:95:e6:11: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:19:2B:48:70:AB:C3:3D:1F:A7:FE:A5:DB:EC:C9:4D:01:F4:86:D6 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:6e:12:3d:27:08:57:ae:77:ee:53:46:85:4b:8b:cd:6a:3a: 88:e0:72:c9:e8:4e:45:d3:ae:06:59:84:dd:0b:bd:99:de:7c: bc:1a:a3:f8:2b:75:27:65:4c:58:99:ba:cf:fc:53:d1:47:d5: cb:ea:b9:5d:f8:c0:10:18:81:e4:9c:ba:7f:50:cf:8c:f3:d1: 6b:d7:4b:83:1f:b7:db:23:74:0a:f6:c8:db:ec:df:f2:6b:60: 11:32:7d:f1:f2:ce:b1:2b:ab:3d:16:9f:70:c2:aa:0d:fd:85: 48:d7:01:4e:38:e6:31:4a:92:6f:d9:88:d9:68:d6:e2:de:cb: c4:6d:6e:69:a4:1b:5e:b3:33:df:d6:ed:15:b0:a5:e3:dd:a2: 57:c4:73:ca:86:d3:2c:75:ad:d5:ec:09:19:75:3e:eb:17:2b: bb:60:3e:ac:84:f2:26:c9:5e:29:fa:01:c5:32:05:6d:6c:af: ae:25:49:8f:b7:5d:f6:5c:db:7b:a4:fc:c4:5b:d1:ca:45:d3: 63:89:8a:bd:1e:6b:6f:a9:c2:b7:f3:be:30:b3:24:9c:9c:39: 03:ba:3f:1e:76:c9:bc:07:22:21:aa:80:74:63:d6:48:d8:12: 52:1c:a9:50:b3:33:64:29:71:94:d5:f8:d9:14:c7:56:57:0c: ac:98:ef:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYCiOjqQIc8Cv23aGJ6Ja+5u6ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNjA0MTgwNTM2NDZaFw0yNjA0MjExMTEyNDZaMDMxMTAvBgNV BAMTKDgwMTkyQjQ4NzBBQkMzM0QxRkE3RkVBNURCRUNDOTREMDFGNDg2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8gXMpwSAcgiRTh9weael//Hr RNH2igFad06vDyoUMYdqehd2mcZ+pmE1CSq3AmLdLCGPYfDeluMLO/3rpjy1v+Th w4M3zzaweBU7Z63WxY7QkuBC1I+NaO18caKDHoYZ2UrvR7kbysgmMTc/aybDxxQb AXJRXxvLcCpv6iIachQJE3iCEN+PlbkNvRE+Z62ZBHLnlvHjZ9MGHHBoiIQ1A1Qm Bb8ql0OR2tmU5lGJrYPhCXZLyRW2jCZx0GDGE++14wq+0JHDYWl3LSVXGknI4Djk KHK5uQK53ZB+ABOWcYl5S55gZ8iITKP8nWQinHRecbCV5TIjfkoUcJXmEY3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgBkrSHCrwz0fp/6l2+zJTQH0htYwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJuEj0nCFeud+5TRoVLi81qOojgcsnoTkXT rgZZhN0LvZnefLwao/grdSdlTFiZus/8U9FH1cvquV34wBAYgeScun9Qz4zz0WvX S4Mft9sjdAr2yNvs3/JrYBEyffHyzrErqz0Wn3DCqg39hUjXAU445jFKkm/ZiNlo 1uLey8RtbmmkG16zM9/W7RWwpePdolfEc8qG0yx1rdXsCRl1PusXK7tgPqyE8ibJ Xin6AcUyBW1sr64lSY+3XfZc23uk/MRb0cpF02OJir0ea2+pwrfzvjCzJJycOQO6 Px52ybwHIiGqgHRj1kjYElIcqVCzM2QpcZTV+NkUx1ZXDKyY7zM= -----END CERTIFICATE-----Generated at Sun Apr 19 10:20:55 2026 by rpki-client