$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: 84xpvbFAUV1aTS432wYYKQd4IVL8pX174QVX4Bg7saQ= Subject key identifier: 7E:65:24:EB:38:99:1C:B6:40:77:29:11:CC:09:0C:B4:69:CA:7A:AA Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 36BF25A00CEE35E65BA34F472EF0049F7CD5B818 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 0241 Signing time: Sat 18 Apr 2026 16:31:37 +0000 Manifest this update: Sat 18 Apr 2026 16:26:37 +0000 Manifest next update: Tue 21 Apr 2026 23:14:37 +0000 Files and hashes: 1: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: 139p82e+dIlWH0Mkg8Qp25VHKWu/SBzoYWuVS/KH7VE=) 2: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: TWfIXIVXp0lanaqdmCjliuWn+ETz7xwRfOIaJAb7cvA=) 3: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: GkGrk3uoqwZ411t/pDhy3mlwE7XrelZ7UpYea4pdtg4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 23:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:bf:25:a0:0c:ee:35:e6:5b:a3:4f:47:2e:f0:04:9f:7c:d5:b8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Apr 18 16:26:37 2026 GMT Not After : Apr 21 23:14:37 2026 GMT Subject: CN=7E6524EB38991CB640772911CC090CB469CA7AAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:26:39:52:44:92:e0:b6:00:d5:65:c5:26:0f: d6:1c:8d:eb:e0:d5:5a:63:4a:43:19:da:63:83:79: 72:39:9a:bf:0f:f6:ff:62:94:59:b4:60:33:6d:4a: 38:5d:bd:54:9b:36:b2:09:2d:3f:7a:05:9c:5b:15: 17:85:02:25:48:cb:c8:d3:58:be:7d:e5:71:fc:8b: 3f:32:22:15:88:5d:a0:c7:f9:93:b1:c0:38:01:63: 96:ad:4b:12:d6:c0:35:05:04:75:c1:e1:7c:51:73: 07:2d:35:42:34:52:d4:c7:45:81:5e:c1:30:3d:6d: 9e:c6:a9:67:5a:c9:d8:be:74:24:fe:12:33:24:8a: 92:ac:79:e5:f6:cc:ef:94:bf:87:a4:d4:9d:53:b3: a8:db:56:e4:61:84:63:06:88:22:36:ac:67:be:a6: 9a:3e:70:03:2a:51:f3:95:d1:79:c8:ce:52:ac:01: 4f:b2:04:35:1e:da:bd:92:8f:47:b6:21:cf:ea:18: 8f:7a:b9:5c:de:92:bc:4f:e9:2b:1d:3f:ef:af:04: 94:30:6f:0e:7e:f2:78:f8:9a:7e:de:d3:c1:7f:9e: 93:d4:a7:44:14:92:09:80:d7:ba:f6:c0:f7:40:f1: c4:52:8e:bf:12:1e:ed:a4:93:03:00:a3:5a:e1:65: c2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:65:24:EB:38:99:1C:B6:40:77:29:11:CC:09:0C:B4:69:CA:7A:AA X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:5f:cf:70:2c:77:b1:c1:a6:37:5a:c6:11:a4:04:04:8a:1c: c2:e2:7c:ed:55:bc:4c:20:ec:70:5a:11:de:e7:09:44:c7:71: 49:cc:2e:f7:b9:f7:1b:df:77:d2:fd:17:a5:79:f2:87:dc:db: 55:f5:a7:51:4e:ba:cb:8c:81:26:12:27:cb:a2:5f:f1:0a:d1: 41:1d:bc:cb:a6:07:dc:e5:55:19:ed:87:21:68:81:91:c4:34: 0c:e9:05:43:9c:52:cb:f6:e9:57:cf:6f:fb:5a:bc:eb:ea:23: 26:dc:67:71:43:93:ca:30:f2:e1:bb:68:44:b1:de:05:be:74: 3e:03:5e:82:85:73:c1:a0:09:ed:bb:91:e9:35:83:45:f0:69: a8:0c:3a:d5:dc:af:b4:c6:53:28:b1:99:38:fd:31:4c:bf:38: 84:df:9d:1a:46:ab:22:8d:3b:ed:ed:98:83:7c:1e:8a:15:e7: 3a:d0:e7:fb:69:3c:ae:f0:3e:12:d0:61:76:19:32:9a:ca:56: 8e:42:8b:4c:55:01:da:2c:a8:f5:e0:a7:87:38:6b:ba:0c:a4: 80:0b:48:c7:06:9c:bb:c3:8b:f8:aa:dc:45:78:11:59:9c:bf: 93:6e:02:e6:45:2f:1d:7c:02:57:d8:11:aa:e7:c1:ea:1a:17: 84:e3:92:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNr8loAzuNeZbo09HLvAEn3zVuBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNjA0MTgxNjI2MzdaFw0yNjA0MjEyMzE0MzdaMDMxMTAvBgNV BAMTKDdFNjUyNEVCMzg5OTFDQjY0MDc3MjkxMUNDMDkwQ0I0NjlDQTdBQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmJjlSRJLgtgDVZcUmD9Ycjevg 1VpjSkMZ2mODeXI5mr8P9v9ilFm0YDNtSjhdvVSbNrIJLT96BZxbFReFAiVIy8jT WL595XH8iz8yIhWIXaDH+ZOxwDgBY5atSxLWwDUFBHXB4XxRcwctNUI0UtTHRYFe wTA9bZ7GqWdaydi+dCT+EjMkipKseeX2zO+Uv4ek1J1Ts6jbVuRhhGMGiCI2rGe+ ppo+cAMqUfOV0XnIzlKsAU+yBDUe2r2Sj0e2Ic/qGI96uVzekrxP6SsdP++vBJQw bw5+8nj4mn7e08F/npPUp0QUkgmA17r2wPdA8cRSjr8SHu2kkwMAo1rhZcIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfmUk6ziZHLZAdykRzAkMtGnKeqowHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpfz3Asd7HBpjdaxhGkBASKHMLifO1VvEwg 7HBaEd7nCUTHcUnMLve59xvfd9L9F6V58ofc21X1p1FOusuMgSYSJ8uiX/EK0UEd vMumB9zlVRnthyFogZHENAzpBUOcUsv26VfPb/tavOvqIybcZ3FDk8ow8uG7aESx 3gW+dD4DXoKFc8GgCe27kek1g0XwaagMOtXcr7TGUyixmTj9MUy/OITfnRpGqyKN O+3tmIN8HooV5zrQ5/tpPK7wPhLQYXYZMprKVo5Ci0xVAdosqPXgp4c4a7oMpIAL SMcGnLvDi/iq3EV4EVmcv5NuAuZFLx18AlfYEarnweoaF4Tjkjk= -----END CERTIFICATE-----Generated at Sun Apr 19 13:00:50 2026 by rpki-client