$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: dwbEGKIRZwTBEOlAHMAGeh99g1SsHSy+8kE5cPijaVE= Subject key identifier: 12:12:C6:3E:1B:AB:78:3B:65:BE:09:5A:9C:20:58:65:F4:48:9A:50 Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 33FCF14D8B8DFB250965A9F3A95AC118C629FC9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 027A Signing time: Wed 15 Apr 2026 22:11:55 +0000 Manifest this update: Wed 15 Apr 2026 22:06:55 +0000 Manifest next update: Sun 19 Apr 2026 01:45:55 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: 2fYiSsT3WU3ag3bGe8AwZiQwNlm28RFHjg7UEpOX9oM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fc:f1:4d:8b:8d:fb:25:09:65:a9:f3:a9:5a:c1:18:c6:29:fc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Apr 15 22:06:55 2026 GMT Not After : Apr 19 01:45:55 2026 GMT Subject: CN=1212C63E1BAB783B65BE095A9C205865F4489A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:13:c7:b2:06:2e:bc:a5:35:a4:6d:0b:c7: 54:17:f0:ea:48:69:34:45:e2:cc:a5:79:5f:11:66: 11:ac:60:21:12:75:b1:d7:05:95:b6:fa:fc:65:78: 8a:57:c7:62:56:9e:d8:6c:20:97:ca:4a:18:d3:f9: a3:5a:7c:17:d9:39:c1:45:d0:a1:4e:42:c8:6b:e4: 6d:d5:c2:c6:67:20:5b:36:d0:0d:df:ae:d0:70:dc: 24:bc:c1:2d:99:cf:f3:f3:13:2f:de:d2:ff:3d:b9: f5:c4:15:d8:2a:c4:cd:4a:af:92:7c:41:d7:13:c5: cc:1d:4f:31:ca:4e:4d:8e:d9:28:fe:ba:ef:7f:86: 56:d6:1e:de:2e:d4:72:4f:4a:25:a3:bd:fd:0b:93: 40:30:cc:d5:4e:83:c8:e4:97:c7:27:03:49:a8:7d: 9e:03:a5:48:93:3d:78:db:3e:2e:56:28:fc:ed:ac: 64:7a:e1:41:ad:ec:ba:a3:cc:4c:b0:fa:94:27:ed: 38:c1:d1:ee:db:2b:a3:7e:ad:7d:3f:f4:27:2a:2d: 6a:82:70:21:ad:ac:23:ee:ae:42:e3:fa:b6:86:ae: 06:b2:78:4a:09:98:bc:f4:89:d4:04:40:b5:87:5e: b5:5d:9e:8d:f8:49:7b:22:2d:95:16:94:fe:a8:eb: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:12:C6:3E:1B:AB:78:3B:65:BE:09:5A:9C:20:58:65:F4:48:9A:50 X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f7:e5:33:dd:f6:24:34:6a:3a:a7:ec:22:61:f2:12:6d:e3: d8:97:96:c7:19:2a:11:12:ab:79:42:73:89:05:90:d9:f4:a7: e3:87:80:6c:b4:4e:1b:35:25:4b:b2:36:11:90:51:1a:a7:2f: c5:2a:bb:35:d5:08:c6:cf:77:24:50:18:25:f8:b4:3b:db:12: 7a:d3:9f:41:35:fc:9b:a9:f9:53:65:e6:e8:64:db:12:69:e3: c5:e5:40:d7:fb:b9:1d:4f:4a:01:27:f2:fd:1b:02:f4:a8:e3: b1:bd:20:6d:f4:78:d0:a5:e1:7f:d3:54:7f:21:c8:c9:29:a7: e6:89:76:b7:0a:54:bb:e1:19:de:97:2e:98:37:97:e8:30:42: d2:e5:cc:81:95:9c:6e:2e:12:c8:38:f7:0b:ed:5a:39:08:7d: ce:8c:03:25:b9:50:16:cd:7e:99:ed:3d:97:eb:61:e1:93:32: 62:bf:2b:0b:28:5a:75:03:02:92:93:5f:43:7e:56:20:5b:ea: 04:47:86:59:1a:96:6d:07:78:fe:04:bb:9b:ad:75:6e:2c:ae: 64:da:a5:88:c8:7d:85:d7:aa:85:41:0a:31:25:d1:53:90:6f: 1c:d3:67:0c:67:c4:9a:b5:6d:6e:b4:4e:ac:8d:8d:84:4b:d2: 9d:76:25:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/zxTYuN+yUJZanzqVrBGMYp/J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNjA0MTUyMjA2NTVaFw0yNjA0MTkwMTQ1NTVaMDMxMTAvBgNV BAMTKDEyMTJDNjNFMUJBQjc4M0I2NUJFMDk1QTlDMjA1ODY1RjQ0ODlBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRhPHsgYuvKU1pG0Lx1QX8OpI aTRF4syleV8RZhGsYCESdbHXBZW2+vxleIpXx2JWnthsIJfKShjT+aNafBfZOcFF 0KFOQshr5G3VwsZnIFs20A3frtBw3CS8wS2Zz/PzEy/e0v89ufXEFdgqxM1Kr5J8 QdcTxcwdTzHKTk2O2Sj+uu9/hlbWHt4u1HJPSiWjvf0Lk0AwzNVOg8jkl8cnA0mo fZ4DpUiTPXjbPi5WKPztrGR64UGt7LqjzEyw+pQn7TjB0e7bK6N+rX0/9CcqLWqC cCGtrCPurkLj+raGrgayeEoJmLz0idQEQLWHXrVdno34SXsiLZUWlP6o68A7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEhLGPhureDtlvglanCBYZfRImlAwHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACL35TPd9iQ0ajqn7CJh8hJt49iXlscZKhES q3lCc4kFkNn0p+OHgGy0Ths1JUuyNhGQURqnL8UquzXVCMbPdyRQGCX4tDvbEnrT n0E1/Jup+VNl5uhk2xJp48XlQNf7uR1PSgEn8v0bAvSo47G9IG30eNCl4X/TVH8h yMkpp+aJdrcKVLvhGd6XLpg3l+gwQtLlzIGVnG4uEsg49wvtWjkIfc6MAyW5UBbN fpntPZfrYeGTMmK/KwsoWnUDApKTX0N+ViBb6gRHhlkalm0HeP4Eu5utdW4srmTa pYjIfYXXqoVBCjEl0VOQbxzTZwxnxJq1bW60TqyNjYRL0p12Jak= -----END CERTIFICATE-----Generated at Fri Apr 17 22:25:50 2026 by rpki-client