$ rpki-client -vvf repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft File: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft (raw, json) Hash identifier: OHpiPWCBhVg8G3KNjSMTbSi5KteoMxyXhKBC3qCkPa4= Subject key identifier: FC:43:6A:77:CE:5D:2A:50:DA:2F:D4:02:25:EB:B9:95:B6:BB:89:19 Authority key identifier: 8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC Certificate issuer: /CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Certificate serial: 7C6472E6393A6D8B9B4C0DA8025D04EC3D8B743D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft Manifest number: 8F Signing time: Sun 19 Apr 2026 01:01:23 +0000 Manifest this update: Sun 19 Apr 2026 00:56:23 +0000 Manifest next update: Wed 22 Apr 2026 10:09:23 +0000 Files and hashes: 1: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl (hash: blEHbaRi67MVlCPg4ezLyu9ZpKiBx8tf8Obd9AJQEz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:64:72:e6:39:3a:6d:8b:9b:4c:0d:a8:02:5d:04:ec:3d:8b:74:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Validity Not Before: Apr 19 00:56:23 2026 GMT Not After : Apr 22 10:09:23 2026 GMT Subject: CN=FC436A77CE5D2A50DA2FD40225EBB995B6BB8919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:74:50:24:89:81:87:10:e3:3b:15:87:ba: 49:7c:77:3c:7b:24:fd:e0:49:71:c1:75:d0:99:77: b8:51:af:73:3b:c2:0b:cb:15:1f:64:42:a5:aa:c9: a0:5a:75:4f:10:8e:5a:26:7f:7b:d7:ef:13:ee:53: 28:6b:c0:4a:b9:c7:9d:45:e2:e6:a6:e2:5b:3e:f7: cb:67:ae:7f:8d:2b:5c:e4:d1:33:cb:4c:df:66:4b: 62:72:e4:df:a9:20:0c:b0:d1:e7:bc:be:b0:57:f9: 9c:33:c9:97:40:f1:ff:68:f8:d8:96:30:28:32:fa: fd:f8:4f:cd:1f:9e:46:a1:1f:75:30:1b:b2:a7:60: ac:a9:77:04:15:79:33:6b:7f:1a:43:2a:92:5b:4a: 9f:ec:b2:8d:24:f1:fa:9d:67:f1:40:2d:7c:a9:be: 82:8c:c8:dc:0f:a6:47:12:c0:95:57:04:18:0c:2f: 64:2c:90:5f:4d:36:61:21:3b:f7:f4:6a:b2:c2:23: a1:16:5b:ba:f0:d1:54:eb:6c:9e:e1:ce:83:c5:ff: 47:96:5b:f7:cc:68:31:77:c1:17:71:71:08:ba:97: ce:8d:a5:20:de:34:80:a2:74:98:8d:c3:c6:3a:cf: 62:e6:d1:de:48:da:04:fb:b3:1a:c0:d1:86:ed:a8: e1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:43:6A:77:CE:5D:2A:50:DA:2F:D4:02:25:EB:B9:95:B6:BB:89:19 X509v3 Authority Key Identifier: keyid:8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:86:f5:05:19:fe:d4:f0:83:17:fd:d1:7a:0b:50:9c:a5:4a: b1:ca:2d:80:26:0a:89:bc:c9:d6:ce:8d:d2:7a:f6:26:96:81: ef:38:da:6e:9b:30:11:e4:0c:70:e4:d7:11:52:54:eb:7f:8f: 15:64:e9:2b:53:cf:96:e8:b3:93:33:58:26:6c:56:d2:ba:87: 75:7d:13:87:b6:1d:29:e0:36:6a:91:e7:00:3c:a4:34:8c:80: 43:9a:c0:92:2c:d6:9b:db:b1:de:b5:bd:8c:77:e7:32:1c:ca: 0d:b0:ef:2f:66:36:96:a1:41:d3:a5:1d:37:ab:49:b6:bf:60: 3f:12:dc:4b:11:a5:47:97:18:aa:25:6a:b7:70:53:50:61:9c: e7:ce:a0:ad:8a:fc:68:87:20:be:5e:8a:70:09:e4:e0:57:ec: b7:7b:bc:7f:b5:13:0c:49:db:65:71:b2:68:7e:ce:d8:f3:e8: 0b:fd:00:7d:84:fd:79:08:19:c3:5e:f5:06:42:4f:9e:f3:c3: 20:06:41:be:b1:04:b5:29:f8:ec:c4:aa:82:96:2d:08:80:62: 3c:b7:c0:b7:38:d4:30:c5:69:07:e6:17:a8:28:e0:ce:3a:f7: 35:64:89:e6:2d:aa:f0:6c:3c:57:a1:c0:42:06:95:38:cb:d3: 1e:21:1f:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfGRy5jk6bYubTA2oAl0E7D2LdD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVD OTkzQzZFQzAeFw0yNjA0MTkwMDU2MjNaFw0yNjA0MjIxMDA5MjNaMDMxMTAvBgNV BAMTKEZDNDM2QTc3Q0U1RDJBNTBEQTJGRDQwMjI1RUJCOTk1QjZCQjg5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CXRQJImBhxDjOxWHukl8dzx7 JP3gSXHBddCZd7hRr3M7wgvLFR9kQqWqyaBadU8Qjlomf3vX7xPuUyhrwEq5x51F 4uam4ls+98tnrn+NK1zk0TPLTN9mS2Jy5N+pIAyw0ee8vrBX+ZwzyZdA8f9o+NiW MCgy+v34T80fnkahH3UwG7KnYKypdwQVeTNrfxpDKpJbSp/sso0k8fqdZ/FALXyp voKMyNwPpkcSwJVXBBgML2QskF9NNmEhO/f0arLCI6EWW7rw0VTrbJ7hzoPF/0eW W/fMaDF3wRdxcQi6l86NpSDeNICidJiNw8Y6z2Lm0d5I2gT7sxrA0YbtqOFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ENqd85dKlDaL9QCJeu5lba7iRkwHwYDVR0j BBgwFoAUjMfkokYn0BH8NbP+i26aJcmTxuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2QyNTFjYS1hMDVlLTRmYmUtOTNiYi1iNTQ2OWFlZjk2YTIvMC84Q0M3RTRBMjQ2 MjdEMDExRkMzNUIzRkU4QjZFOUEyNUM5OTNDNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVDOTkz QzZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlB MjVDOTkzQzZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCG9QUZ/tTwgxf90XoLUJylSrHKLYAmCom8 ydbOjdJ69iaWge842m6bMBHkDHDk1xFSVOt/jxVk6StTz5bos5MzWCZsVtK6h3V9 E4e2HSngNmqR5wA8pDSMgEOawJIs1pvbsd61vYx35zIcyg2w7y9mNpahQdOlHTer Sba/YD8S3EsRpUeXGKolardwU1BhnOfOoK2K/GiHIL5einAJ5OBX7Ld7vH+1EwxJ 22Vxsmh+ztjz6Av9AH2E/XkIGcNe9QZCT57zwyAGQb6xBLUp+OzEqoKWLQiAYjy3 wLc41DDFaQfmF6go4M469zVkieYtqvBsPFehwEIGlTjL0x4hH7U= -----END CERTIFICATE-----Generated at Sun Apr 19 11:36:36 2026 by rpki-client