$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: cV4xe7elVnZbAmPoWkt0j7nBhDRGLcuCRL49zDNJdPM= Subject key identifier: 9F:6A:E4:C8:22:B6:5B:20:0A:D6:CE:11:C9:A2:FB:86:A9:59:CF:8A Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 7AA15161871D91B9BB0FA58B95152956581FC7DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: 0123 Signing time: Fri 17 Apr 2026 19:41:17 +0000 Manifest this update: Fri 17 Apr 2026 19:36:17 +0000 Manifest next update: Mon 20 Apr 2026 21:18:17 +0000 Files and hashes: 1: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: YThdgDwE0YEQkW42F8KPpTARevdM8oQcW+OCSvDhEdk=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a1:51:61:87:1d:91:b9:bb:0f:a5:8b:95:15:29:56:58:1f:c7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Apr 17 19:36:17 2026 GMT Not After : Apr 20 21:18:17 2026 GMT Subject: CN=9F6AE4C822B65B200AD6CE11C9A2FB86A959CF8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:02:cd:73:4f:b3:75:7f:ec:d7:12:98:23:ef: 45:12:6c:79:0e:29:b6:35:23:66:2c:56:8c:45:45: cc:40:9a:fa:bc:f0:b0:24:a5:30:0b:e6:2f:f4:43: 2e:2b:28:92:e2:b4:06:5b:1f:9e:b7:3c:bd:4e:6b: 25:ca:20:ed:72:f8:33:ee:b3:39:21:b8:83:85:c8: 3f:c4:f0:02:cb:1d:17:09:f8:5f:ab:7d:a1:d3:19: 57:9c:6f:5e:4c:54:07:83:01:0e:f5:9e:58:3b:37: eb:ce:5c:29:ca:df:a8:b0:18:11:6a:9d:bd:2e:02: e0:66:5c:38:64:80:8b:ee:c0:0d:95:89:65:dc:4e: 83:dd:7a:5e:a1:83:20:f6:56:82:02:4e:fc:29:21: b7:e4:9d:85:46:c3:3d:d0:1d:7b:e2:8b:5a:e6:6e: 4e:83:d8:c7:7d:61:87:92:86:d6:71:cc:31:a1:98: 53:6e:d5:8d:a3:8c:f6:af:0a:aa:80:ac:ba:e2:4e: e1:8b:d6:6a:53:48:dc:8b:f6:2e:8d:33:24:05:a0: d8:ef:27:26:b0:04:4b:98:f5:3e:01:10:d0:3d:81: ee:85:e3:06:d0:92:ff:43:c9:2d:80:8c:e2:43:f2: 38:a2:20:78:82:b3:30:d3:82:b3:ec:e6:21:a2:9b: 59:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6A:E4:C8:22:B6:5B:20:0A:D6:CE:11:C9:A2:FB:86:A9:59:CF:8A X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d2:20:af:bb:44:88:1d:7c:c9:85:ca:52:8d:1d:72:b8:34: 7f:53:1a:95:48:e3:ec:71:93:e0:52:2b:78:5e:26:4c:d0:e8: fd:4a:d5:d2:4b:dd:43:9c:4e:27:08:67:00:48:cf:7c:ad:b4: 83:2b:62:68:03:f1:21:b4:ff:34:20:e3:de:d1:64:f6:96:ef: ea:f3:5c:55:b2:5d:a5:2d:aa:1b:8d:68:e5:14:09:67:41:f1: a5:1a:08:b3:64:0d:87:ee:32:45:e9:38:56:72:a4:09:c7:31: f3:bc:5c:65:2f:d9:0e:d5:ea:d0:51:09:da:2d:d4:c0:00:d6: ec:9c:ec:bf:3b:15:19:9d:82:07:e9:fd:98:48:ea:fe:a4:95: 8c:a2:a5:b1:54:5e:92:be:41:c4:56:6b:73:39:00:3f:9a:6e: 2a:a6:d8:16:07:20:c3:a7:76:a1:fb:b1:43:d2:2b:cf:9f:a6: 84:3e:fd:80:d1:8d:59:c0:0f:6d:28:f5:e5:c8:1e:7b:8c:30: 52:e9:4b:06:24:6b:b6:9e:42:3c:a7:45:9f:c5:f7:69:a3:93: 94:16:6c:fd:7e:d7:47:39:09:cc:9b:32:c3:0d:d6:d8:d5:b0: 08:0b:c0:c1:11:61:22:65:4e:87:7c:63:1c:61:8f:f2:b3:83: bf:2e:62:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeqFRYYcdkbm7D6WLlRUpVlgfx9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNjA0MTcxOTM2MTdaFw0yNjA0MjAyMTE4MTdaMDMxMTAvBgNV BAMTKDlGNkFFNEM4MjJCNjVCMjAwQUQ2Q0UxMUM5QTJGQjg2QTk1OUNGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfAs1zT7N1f+zXEpgj70USbHkO KbY1I2YsVoxFRcxAmvq88LAkpTAL5i/0Qy4rKJLitAZbH563PL1OayXKIO1y+DPu szkhuIOFyD/E8ALLHRcJ+F+rfaHTGVecb15MVAeDAQ71nlg7N+vOXCnK36iwGBFq nb0uAuBmXDhkgIvuwA2ViWXcToPdel6hgyD2VoICTvwpIbfknYVGwz3QHXvii1rm bk6D2Md9YYeShtZxzDGhmFNu1Y2jjPavCqqArLriTuGL1mpTSNyL9i6NMyQFoNjv JyawBEuY9T4BENA9ge6F4wbQkv9DyS2AjOJD8jiiIHiCszDTgrPs5iGim1mdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn2rkyCK2WyAK1s4RyaL7hqlZz4owHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7SIK+7RIgdfMmFylKNHXK4NH9TGpVI4+xx k+BSK3heJkzQ6P1K1dJL3UOcTicIZwBIz3yttIMrYmgD8SG0/zQg497RZPaW7+rz XFWyXaUtqhuNaOUUCWdB8aUaCLNkDYfuMkXpOFZypAnHMfO8XGUv2Q7V6tBRCdot 1MAA1uyc7L87FRmdggfp/ZhI6v6klYyipbFUXpK+QcRWa3M5AD+abiqm2BYHIMOn dqH7sUPSK8+fpoQ+/YDRjVnAD20o9eXIHnuMMFLpSwYka7aeQjynRZ/F92mjk5QW bP1+10c5CcybMsMN1tjVsAgLwMERYSJlTod8Yxxhj/Kzg78uYmo= -----END CERTIFICATE-----Generated at Sat Apr 18 03:01:51 2026 by rpki-client