$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: 9j/BCUFrkbK2P3pU7iGO0qRvU+pWUX44nY7sUyeFIkQ= Subject key identifier: B0:E9:42:ED:9A:61:4F:B5:A9:D0:95:84:EC:6E:8D:8E:54:7B:AE:77 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 549662643C8DE79D0F0D0499BFED6982BA98DEF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 01D3 Signing time: Fri 17 Apr 2026 08:03:01 +0000 Manifest this update: Fri 17 Apr 2026 07:58:01 +0000 Manifest next update: Mon 20 Apr 2026 10:11:01 +0000 Files and hashes: 1: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: Z9S1H+2xvhXoZUS/iMWBmgjFaL9lis6LV0OH2s0BXms=) 2: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: 4bo1QGeibGqlWV5rzwY6UTsC4OpagnBRtWFzFniQb48=) 3: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: Jsa5mONFKfbW9JjrTtWbF4tGdCTEFlwd0LxoeaSVB18=) 4: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: mwXZGvsiqYO8BjZGzGEqdxUw+nTF/7mJPJXCsYgA+E8=) 5: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: SBnQR+zv8l07BbYG06eTb7vfRhUvVUWA8zTkQAxpGrY=) 6: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: OecE9eeqTbFl7AcU2bScbuInBGGXJT8BS6r2GNlTSNE=) 7: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: x9MCZttTue+cYhxUjO5XSQ4IfqCo93/MquC3mZFzDsc=) 8: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: cEu0EjirS4vOm7fpY+AgTseXh1mis9QznqiCF2QTlk4=) 9: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: Iuld+CayAuiyUbfcBqEb7SFSDGgwxHfqE3ICBoz43Vs=) 10: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: i8YeqA66jLTHkrWq3WhHNQrrw6cEUvyy58nchkz4ulc=) 11: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: 0ltPqdq7g3DXR79aG8XW0FVNRDWNUpomlQCmCJWpgEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:96:62:64:3c:8d:e7:9d:0f:0d:04:99:bf:ed:69:82:ba:98:de:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Apr 17 07:58:01 2026 GMT Not After : Apr 20 10:11:01 2026 GMT Subject: CN=B0E942ED9A614FB5A9D09584EC6E8D8E547BAE77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:f4:5e:db:07:4d:fe:19:8d:a8:e9:3f:30: b9:44:b6:9d:68:4d:42:4c:a3:12:5f:14:90:b4:33: c3:c4:9f:19:42:2b:84:9d:96:a3:5a:9f:37:10:55: d1:8f:16:d0:50:0f:10:52:30:2f:25:f6:08:8b:01: 44:b9:5d:03:2d:97:1e:8f:81:30:e3:0f:25:b7:a1: 63:e5:50:e3:d0:9c:8c:e2:39:fb:45:48:37:27:c0: d7:17:44:4c:4b:47:64:ed:73:a3:6a:01:58:92:28: c4:cd:64:b0:40:7b:1d:38:c8:c2:57:76:bc:bf:27: af:72:aa:07:f1:19:36:dd:e0:cb:01:fc:a4:2f:14: ce:cd:6d:01:22:fa:81:8b:cc:50:bd:17:27:19:bf: b1:b3:46:aa:fc:fb:8c:52:c4:b9:19:a6:eb:41:c0: 9d:18:b7:ff:65:b1:99:58:b7:35:b9:7f:1e:b4:93: 55:25:ac:e4:e2:4d:fa:05:ba:c2:a9:c4:1b:b5:82: e8:d6:64:2a:5c:75:2b:1c:69:1c:76:34:5c:36:d3: 67:75:a9:a6:c6:f9:2b:82:5d:c3:ec:ee:62:bf:83: a0:c9:ed:a0:89:12:23:b7:d0:9a:38:91:3f:88:9f: 1b:5e:ad:eb:a4:03:b1:2b:9a:02:0b:ac:cd:6a:ce: 36:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E9:42:ED:9A:61:4F:B5:A9:D0:95:84:EC:6E:8D:8E:54:7B:AE:77 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:82:0b:cb:86:7b:19:df:f7:4d:74:bc:61:eb:0d:32:2d:f4: d0:ec:dd:13:dd:d9:38:a8:0f:8a:69:d0:f6:2a:47:33:50:63: c6:bc:83:85:08:54:1e:3f:fb:ac:40:c0:8d:12:8f:fc:19:98: a3:04:0f:5f:b3:17:ba:36:ab:b1:46:f1:96:44:7c:48:52:c2: 2b:25:ed:d2:01:4a:bf:c7:11:67:c2:f7:bd:ae:13:96:0f:3b: e1:c2:29:a1:e9:0b:ac:bb:86:3a:8e:76:d9:0b:b6:ea:53:5a: 36:3f:81:8b:97:62:ba:85:5b:37:64:b5:d0:bf:da:d7:b5:c0: 5a:14:96:31:0f:29:de:5a:a3:7f:c5:84:4e:58:5d:ec:a7:1d: 15:cc:5b:9d:18:29:07:b2:73:a7:35:e0:52:91:b1:94:f2:d4: 12:9c:f6:3a:62:d0:61:07:d2:11:08:09:73:e7:fb:92:77:f4: 4c:5a:d6:01:bb:d5:1a:d3:d9:b7:19:1c:00:77:15:7e:6f:db: 57:79:87:fb:d5:9a:2c:9d:c5:01:6b:5b:1f:c9:21:7c:68:7d: 85:2d:f6:06:0f:e1:5e:1e:e5:89:f2:c5:c1:9c:78:3d:e6:65: c9:10:15:0a:71:ac:46:5c:82:cc:45:39:c7:3f:bf:3f:74:72: 63:5c:e9:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJZiZDyN550PDQSZv+1pgrqY3vEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNjA0MTcwNzU4MDFaFw0yNjA0MjAxMDExMDFaMDMxMTAvBgNV BAMTKEIwRTk0MkVEOUE2MTRGQjVBOUQwOTU4NEVDNkU4RDhFNTQ3QkFFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9P/Re2wdN/hmNqOk/MLlEtp1o TUJMoxJfFJC0M8PEnxlCK4SdlqNanzcQVdGPFtBQDxBSMC8l9giLAUS5XQMtlx6P gTDjDyW3oWPlUOPQnIziOftFSDcnwNcXRExLR2Ttc6NqAViSKMTNZLBAex04yMJX dry/J69yqgfxGTbd4MsB/KQvFM7NbQEi+oGLzFC9FycZv7GzRqr8+4xSxLkZputB wJ0Yt/9lsZlYtzW5fx60k1UlrOTiTfoFusKpxBu1gujWZCpcdSscaRx2NFw202d1 qabG+SuCXcPs7mK/g6DJ7aCJEiO30Jo4kT+InxtereukA7ErmgILrM1qzjYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsOlC7ZphT7Wp0JWE7G6NjlR7rncwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+CC8uGexnf9010vGHrDTIt9NDs3RPd2Tio D4pp0PYqRzNQY8a8g4UIVB4/+6xAwI0Sj/wZmKMED1+zF7o2q7FG8ZZEfEhSwisl 7dIBSr/HEWfC972uE5YPO+HCKaHpC6y7hjqOdtkLtupTWjY/gYuXYrqFWzdktdC/ 2te1wFoUljEPKd5ao3/FhE5YXeynHRXMW50YKQeyc6c14FKRsZTy1BKc9jpi0GEH 0hEICXPn+5J39Exa1gG71RrT2bcZHAB3FX5v21d5h/vVmiydxQFrWx/JIXxofYUt 9gYP4V4e5YnyxcGceD3mZckQFQpxrEZcgsxFOcc/vz90cmNc6V4= -----END CERTIFICATE-----Generated at Sat Apr 18 01:29:04 2026 by rpki-client