$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: 3uz4l4qnbwlea+8QjXPagqsnwvQO52KYm7qMgTgabu8= Subject key identifier: CE:35:19:70:86:B4:9B:78:7B:19:4F:2C:7E:71:CE:88:16:A4:11:BE Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 4262B118866AF7B2286E1BF5F162B24EC9FB1CC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 03E5 Signing time: Wed 15 Apr 2026 15:10:48 +0000 Manifest this update: Wed 15 Apr 2026 15:05:48 +0000 Manifest next update: Sat 18 Apr 2026 23:38:48 +0000 Files and hashes: 1: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: ocKHDL2VvDkxz6ZVlOM+9i4FdJN0fELwwDCktcIMEf4=) 2: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: glmRxvHF4g4HTvz1muaudxYOmNWHdjodUPYRc5xhUvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 23:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:62:b1:18:86:6a:f7:b2:28:6e:1b:f5:f1:62:b2:4e:c9:fb:1c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Apr 15 15:05:48 2026 GMT Not After : Apr 18 23:38:48 2026 GMT Subject: CN=CE35197086B49B787B194F2C7E71CE8816A411BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:5f:14:d3:2c:a2:58:96:d2:5a:f3:a0:8c: b3:4b:b8:f4:90:c7:5b:cd:56:77:8e:a0:c2:e9:a6: 7b:28:ee:31:50:cc:cd:c7:38:08:c7:8f:af:55:5d: cf:87:fd:c1:95:e0:a3:24:1f:57:94:49:5d:72:6a: 5b:2d:cd:d1:a4:43:f6:e4:57:d9:f2:fa:0f:35:ae: dd:0c:9e:73:43:98:95:d0:17:c0:15:0e:9c:d7:14: 27:e4:33:46:64:13:79:5b:ab:dd:c4:81:3e:b4:58: 78:64:f6:03:a6:9f:ba:b8:4b:82:87:80:cc:4a:3b: f3:04:e8:10:0e:ca:ea:5b:bb:91:ca:9f:f2:73:c7: b6:36:be:0d:e1:c0:4f:88:bd:0f:f6:d2:e9:f1:ae: 81:e0:0b:f3:12:a1:2e:a3:1e:21:a9:f9:10:34:61: 6d:de:9f:bf:27:43:ee:c7:6d:52:17:2d:e3:dc:52: ad:65:bd:12:a1:34:82:29:83:20:f2:ab:5a:9d:6d: 82:b6:6f:1a:7d:66:ac:6d:57:e4:f8:fb:9d:d0:e2: c5:75:9b:3b:d0:a0:4f:70:f5:52:14:9c:b3:2f:bc: 25:29:4a:f3:3e:4e:94:f3:af:fb:15:4f:39:d8:39: 55:eb:10:1f:03:26:81:14:1e:64:2d:5e:fd:2a:2e: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:35:19:70:86:B4:9B:78:7B:19:4F:2C:7E:71:CE:88:16:A4:11:BE X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8f:78:5a:67:6c:61:58:33:ae:58:2d:57:d2:71:7d:47:9d: 14:83:fa:9f:8a:62:09:55:34:db:ea:6e:66:d7:d7:07:5f:42: c3:ce:6a:79:a1:44:6d:ae:1c:c9:6a:8a:d6:32:6a:01:6c:d5: 25:b3:c4:e2:21:61:5d:5b:6b:18:ac:65:5f:6f:6c:3c:53:ee: 00:6f:1c:71:83:7c:e9:a3:20:1e:84:8f:59:f7:0d:99:84:b3: 26:f5:fc:8c:c7:ac:8f:7c:17:84:df:6c:c1:81:7c:aa:8c:6f: c3:0e:03:ae:e1:53:7d:bb:69:68:51:4c:25:e6:c3:64:f3:f7: b3:4e:53:4e:95:ca:e1:40:61:ee:2b:b6:03:a7:01:2f:2a:e9: a3:14:98:87:0a:81:46:62:0f:00:01:9c:c8:2e:f7:7e:a2:00: 0e:79:e1:64:2d:f6:24:7b:f9:ee:dc:90:31:c1:e3:82:6d:13: 12:e5:f4:55:2b:e9:76:a4:6e:47:c9:02:f9:b1:96:22:1c:24: df:65:56:da:a9:45:97:9b:71:c1:de:a0:f2:f2:e5:72:38:c4: 1e:60:bf:3e:5f:18:9f:e9:e1:67:3b:03:cc:9a:2a:77:f9:82: cc:67:ee:f4:57:64:e6:3d:96:f0:57:63:90:6d:dd:8c:cb:56: 15:f4:f3:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmKxGIZq97Iobhv18WKyTsn7HMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNjA0MTUxNTA1NDhaFw0yNjA0MTgyMzM4NDhaMDMxMTAvBgNV BAMTKENFMzUxOTcwODZCNDlCNzg3QjE5NEYyQzdFNzFDRTg4MTZBNDExQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+18U0yyiWJbSWvOgjLNLuPSQ x1vNVneOoMLppnso7jFQzM3HOAjHj69VXc+H/cGV4KMkH1eUSV1yalstzdGkQ/bk V9ny+g81rt0MnnNDmJXQF8AVDpzXFCfkM0ZkE3lbq93EgT60WHhk9gOmn7q4S4KH gMxKO/ME6BAOyupbu5HKn/Jzx7Y2vg3hwE+IvQ/20unxroHgC/MSoS6jHiGp+RA0 YW3en78nQ+7HbVIXLePcUq1lvRKhNIIpgyDyq1qdbYK2bxp9ZqxtV+T4+53Q4sV1 mzvQoE9w9VIUnLMvvCUpSvM+TpTzr/sVTznYOVXrEB8DJoEUHmQtXv0qLrkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzjUZcIa0m3h7GU8sfnHOiBakEb4wHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCPeFpnbGFYM65YLVfScX1HnRSD+p+KYglV NNvqbmbX1wdfQsPOanmhRG2uHMlqitYyagFs1SWzxOIhYV1baxisZV9vbDxT7gBv HHGDfOmjIB6Ej1n3DZmEsyb1/IzHrI98F4TfbMGBfKqMb8MOA67hU327aWhRTCXm w2Tz97NOU06VyuFAYe4rtgOnAS8q6aMUmIcKgUZiDwABnMgu936iAA554WQt9iR7 +e7ckDHB44JtExLl9FUr6XakbkfJAvmxliIcJN9lVtqpRZebccHeoPLy5XI4xB5g vz5fGJ/p4Wc7A8yaKnf5gsxn7vRXZOY9lvBXY5Bt3YzLVhX08yo= -----END CERTIFICATE-----Generated at Fri Apr 17 18:29:19 2026 by rpki-client