$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: LjP/vTSzpq4dVWlIwNvhd6VHw28DA/rt9C3j1DvJsMk= Subject key identifier: C7:FC:56:AC:B4:75:48:B5:B8:25:CE:A8:DB:16:B5:78:07:4B:B4:ED Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 45E762218048B1E72857228310C2E7E4C2E20E5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 0395 Signing time: Fri 17 Apr 2026 13:31:32 +0000 Manifest this update: Fri 17 Apr 2026 13:26:32 +0000 Manifest next update: Mon 20 Apr 2026 15:50:32 +0000 Files and hashes: 1: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: aoFY6984qhaqjJ94eBjzwXX8IdA5jlCxpxMTwShZz4Q=) 2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 0IdcwPtxZArM5JrmLtgkLYtthS0u5GSXZS6q7IiPcxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e7:62:21:80:48:b1:e7:28:57:22:83:10:c2:e7:e4:c2:e2:0e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Apr 17 13:26:32 2026 GMT Not After : Apr 20 15:50:32 2026 GMT Subject: CN=C7FC56ACB47548B5B825CEA8DB16B578074BB4ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:1d:88:8e:cb:05:7a:c3:34:7a:1e:fb:d0: 9a:46:54:4d:a3:77:b6:eb:1d:f6:e3:9f:80:94:f5: 7a:58:eb:e2:ce:df:2a:b3:31:0e:a3:fa:cf:c5:00: 59:82:19:81:fb:c6:6c:a7:a3:18:b6:68:71:6a:bd: 45:f4:3d:55:9f:ae:e2:44:e8:d3:38:e7:96:32:33: 00:d6:ed:40:b5:af:48:bc:29:60:75:f9:f4:06:25: fa:b6:94:e6:b3:1f:6a:38:0d:46:dc:03:0c:9c:9e: 86:4c:81:ec:61:35:5d:aa:a0:49:40:0f:26:ab:f7: ac:d1:35:20:d2:83:64:57:d6:f6:8a:ab:14:ea:9a: 00:65:12:61:00:04:f9:59:80:33:c8:18:8f:a6:60: 70:2f:73:b6:71:a6:25:5f:54:88:50:38:ad:4b:aa: 77:7c:33:7f:4e:2e:df:d1:86:da:3d:61:80:08:3a: 9d:5d:d0:cf:ec:34:77:f2:f2:8e:25:b7:e8:c0:51: 75:d4:40:09:84:e7:36:e2:8d:e5:46:5e:fc:78:3c: 45:0c:9b:03:e3:0d:34:16:84:89:61:61:56:9c:ef: 79:62:9d:fb:cd:9c:f6:2d:92:f2:2a:49:61:36:14: 39:60:42:71:4e:f8:b9:be:56:cb:0e:ec:6f:cf:54: 04:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FC:56:AC:B4:75:48:B5:B8:25:CE:A8:DB:16:B5:78:07:4B:B4:ED X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d5:de:35:1a:84:ef:e0:e9:1b:29:03:bc:ec:93:09:ea:59: 7c:b2:d8:28:ca:45:a2:59:14:1a:d4:d4:bf:6b:76:d5:53:72: e7:a2:ff:c3:7f:2d:0f:22:ea:4c:aa:d5:31:11:5e:17:61:f1: a9:25:38:e4:07:ff:a1:3a:e6:46:63:98:9d:2b:88:32:04:1c: 5b:d5:68:9d:49:eb:70:b7:28:63:d4:96:bf:cd:ba:58:5c:01: 34:dc:74:5a:aa:68:23:02:e5:05:83:32:f9:62:3a:20:6e:23: 49:81:ac:91:b5:14:83:06:c0:7d:bd:6c:18:b5:33:71:43:e1: 0e:0d:d9:0b:6e:9c:e3:2b:20:c1:08:ef:61:b5:f2:4d:cd:6d: ed:59:11:8b:d7:c0:97:79:02:14:60:7f:43:ab:f0:bc:c8:c6: 3e:87:db:3e:ed:dd:39:75:68:7b:ec:46:19:96:e8:c0:b3:f3: 92:cc:cd:da:e8:53:ef:9e:de:01:0a:4a:fa:82:7b:13:27:92: 63:7b:ea:16:c0:f1:18:65:00:cc:6e:b8:a1:fb:be:30:ce:37: 1d:46:92:94:a3:8e:48:b5:9d:72:07:ea:ae:ea:f4:ea:c0:e4: 9a:a1:08:42:a1:ec:46:f8:d2:ed:68:e7:ad:b8:19:16:21:21: 39:57:3d:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURediIYBIsecoVyKDEMLn5MLiDlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNjA0MTcxMzI2MzJaFw0yNjA0MjAxNTUwMzJaMDMxMTAvBgNV BAMTKEM3RkM1NkFDQjQ3NTQ4QjVCODI1Q0VBOERCMTZCNTc4MDc0QkI0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJh2IjssFesM0eh770JpGVE2j d7brHfbjn4CU9XpY6+LO3yqzMQ6j+s/FAFmCGYH7xmynoxi2aHFqvUX0PVWfruJE 6NM455YyMwDW7UC1r0i8KWB1+fQGJfq2lOazH2o4DUbcAwycnoZMgexhNV2qoElA Dyar96zRNSDSg2RX1vaKqxTqmgBlEmEABPlZgDPIGI+mYHAvc7ZxpiVfVIhQOK1L qnd8M39OLt/Rhto9YYAIOp1d0M/sNHfy8o4lt+jAUXXUQAmE5zbijeVGXvx4PEUM mwPjDTQWhIlhYVac73linfvNnPYtkvIqSWE2FDlgQnFO+Lm+VssO7G/PVAS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx/xWrLR1SLW4Jc6o2xa1eAdLtO0wHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvV3jUahO/g6RspA7zskwnqWXyy2CjKRaJZ FBrU1L9rdtVTcuei/8N/LQ8i6kyq1TERXhdh8aklOOQH/6E65kZjmJ0riDIEHFvV aJ1J63C3KGPUlr/NulhcATTcdFqqaCMC5QWDMvliOiBuI0mBrJG1FIMGwH29bBi1 M3FD4Q4N2QtunOMrIMEI72G18k3Nbe1ZEYvXwJd5AhRgf0Or8LzIxj6H2z7t3Tl1 aHvsRhmW6MCz85LMzdroU++e3gEKSvqCexMnkmN76hbA8RhlAMxuuKH7vjDONx1G kpSjjki1nXIH6q7q9OrA5JqhCEKh7Eb40u1o5624GRYhITlXPTI= -----END CERTIFICATE-----Generated at Fri Apr 17 22:03:02 2026 by rpki-client