$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: FN8njTEY38kmA+PnpdS31WKoxR7QKDf7m+RnGuyhrKQ= Subject key identifier: DB:68:83:8C:B0:5A:2B:98:5D:30:E2:7F:3B:08:58:B2:E9:9A:D9:C3 Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 0A2E1692820C9DE79E4BE8C771053744FA2B543D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 0263 Signing time: Thu 16 Apr 2026 03:21:05 +0000 Manifest this update: Thu 16 Apr 2026 03:16:05 +0000 Manifest next update: Sun 19 Apr 2026 07:10:05 +0000 Files and hashes: 1: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: B3sxkBPzK/Nc3SHvXSkC83QZ2Fsorz3IRf1Rn+lBIEU=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: ocW0arB4ppBKqQq8wWUZFlq20RoyvQnisb1mkxrdk08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2e:16:92:82:0c:9d:e7:9e:4b:e8:c7:71:05:37:44:fa:2b:54:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Apr 16 03:16:05 2026 GMT Not After : Apr 19 07:10:05 2026 GMT Subject: CN=DB68838CB05A2B985D30E27F3B0858B2E99AD9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:04:38:6b:ea:1d:1e:80:0e:06:25:07:35: 27:17:bc:ec:a0:be:df:9b:56:25:79:19:bb:d8:d6: b8:77:19:85:6a:c1:41:38:1a:9b:47:3f:69:81:5e: 2b:3c:26:94:55:3b:5f:41:f2:a0:52:3b:11:ad:58: a8:d1:3b:c9:61:8d:14:44:12:45:bc:9f:c6:53:c3: 5e:37:73:53:38:0b:95:46:ae:27:fe:ef:b1:fc:88: 9c:1e:1b:6b:61:23:62:bf:b5:2f:89:9c:1d:48:aa: 19:34:13:bc:c6:ab:0f:e0:a9:5c:bf:60:9c:63:3f: 24:85:f5:f4:c7:e8:7f:da:39:3e:e5:37:87:5a:e7: 67:73:7b:1e:57:20:76:7b:15:04:72:98:79:42:3b: 2a:bf:72:1a:71:42:b8:71:2e:88:b9:99:73:9e:06: a8:c6:80:e8:15:fa:cf:3d:84:1a:d9:d4:88:b2:28: a9:e0:7b:b3:d8:89:82:08:16:a7:b9:b2:f2:4d:c6: 66:8f:1a:bb:1a:7b:93:c8:eb:8b:3d:bd:5a:84:5a: 7e:db:9b:ce:be:db:fc:4c:f0:55:c1:3a:c8:24:e5: 45:63:0d:f9:75:7e:41:10:00:36:b7:4f:a2:86:79: 96:8f:2f:64:ae:f5:bd:ef:d5:d1:33:ae:38:38:47: 6a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:68:83:8C:B0:5A:2B:98:5D:30:E2:7F:3B:08:58:B2:E9:9A:D9:C3 X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:29:31:9a:c9:1c:87:fb:43:f1:e8:93:47:23:c6:b0:4a:a5: 6d:9d:a2:2d:fa:98:f5:34:c7:c5:fc:f5:63:46:8a:31:64:34: 63:57:18:cb:16:bf:b0:19:4b:86:c8:37:67:86:c4:62:0c:c4: a4:89:dc:b6:ea:cd:b7:df:17:d1:4f:ba:da:e3:17:65:88:80: 5a:96:44:16:83:e3:15:56:1a:d8:6e:5e:be:7b:19:47:75:93: ac:bf:c4:0a:3c:94:bc:04:4c:af:9a:8b:ad:51:e2:44:64:35: 4e:12:73:12:58:28:bb:f3:33:af:7d:e4:f9:81:0e:23:22:17: 29:d7:9f:65:4a:14:d7:b8:f3:d1:59:7e:6a:6a:01:3e:24:d0: 69:1c:3e:be:74:62:98:5f:c3:7e:14:b6:21:70:c6:52:48:ea: ef:89:9e:14:c3:8f:bc:b5:2d:b5:16:44:28:a6:5a:04:e4:f6: 37:7c:47:4a:1d:e9:39:ce:f8:f4:e3:25:2c:63:d1:04:25:39: 54:2a:2b:b7:d9:81:ac:c7:8b:70:0c:63:88:f5:dd:56:b4:3a: b6:73:54:93:00:7e:b0:f2:35:b7:dd:19:f4:fc:2c:93:bf:77: 69:c0:24:1e:fb:47:65:fe:7d:e9:3b:1b:68:ca:b3:d5:0f:5d: 37:1a:10:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCi4WkoIMneeeS+jHcQU3RPorVD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNjA0MTYwMzE2MDVaFw0yNjA0MTkwNzEwMDVaMDMxMTAvBgNV BAMTKERCNjg4MzhDQjA1QTJCOTg1RDMwRTI3RjNCMDg1OEIyRTk5QUQ5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR9QQ4a+odHoAOBiUHNScXvOyg vt+bViV5GbvY1rh3GYVqwUE4GptHP2mBXis8JpRVO19B8qBSOxGtWKjRO8lhjRRE EkW8n8ZTw143c1M4C5VGrif+77H8iJweG2thI2K/tS+JnB1Iqhk0E7zGqw/gqVy/ YJxjPySF9fTH6H/aOT7lN4da52dzex5XIHZ7FQRymHlCOyq/chpxQrhxLoi5mXOe BqjGgOgV+s89hBrZ1IiyKKnge7PYiYIIFqe5svJNxmaPGrsae5PI64s9vVqEWn7b m86+2/xM8FXBOsgk5UVjDfl1fkEQADa3T6KGeZaPL2Su9b3v1dEzrjg4R2qJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU22iDjLBaK5hdMOJ/OwhYsuma2cMwHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMpMZrJHIf7Q/Hok0cjxrBKpW2doi36mPU0 x8X89WNGijFkNGNXGMsWv7AZS4bIN2eGxGIMxKSJ3LbqzbffF9FPutrjF2WIgFqW RBaD4xVWGthuXr57GUd1k6y/xAo8lLwETK+ai61R4kRkNU4ScxJYKLvzM6995PmB DiMiFynXn2VKFNe489FZfmpqAT4k0GkcPr50Yphfw34UtiFwxlJI6u+JnhTDj7y1 LbUWRCimWgTk9jd8R0od6TnO+PTjJSxj0QQlOVQqK7fZgazHi3AMY4j13Va0OrZz VJMAfrDyNbfdGfT8LJO/d2nAJB77R2X+fek7G2jKs9UPXTcaEBs= -----END CERTIFICATE-----Generated at Sat Apr 18 00:02:22 2026 by rpki-client