$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft File: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft (raw, json) Hash identifier: x8oqgi2Dmo+S0S54tzzMtkjO5rJHNfSGJajCK24lc30= Subject key identifier: F0:0C:27:56:75:B3:BA:85:66:23:DB:C0:08:37:F5:0D:EB:73:D6:65 Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 6205DCD1E7169D0F88A5E32BDEDAE29A6F463CA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft Manifest number: 0154 Signing time: Thu 16 Apr 2026 18:01:50 +0000 Manifest this update: Thu 16 Apr 2026 17:56:50 +0000 Manifest next update: Sun 19 Apr 2026 22:41:50 +0000 Files and hashes: 1: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: auTxlOGyUx1cy5HvSX5DnWx3cFTubm306blClFP2M7g=) 2: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl (hash: Jfl/62l6bZ4/0S6VP7g3IdCXn+68SLf7vfT1+elhZu8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 22:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:05:dc:d1:e7:16:9d:0f:88:a5:e3:2b:de:da:e2:9a:6f:46:3c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: Apr 16 17:56:50 2026 GMT Not After : Apr 19 22:41:50 2026 GMT Subject: CN=F00C275675B3BA856623DBC00837F50DEB73D665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:f5:05:36:e1:1d:e0:93:34:8e:48:33:b9: 68:b2:32:ff:5e:86:9e:53:6c:e0:27:57:0e:0a:40: 17:ca:f5:72:a3:4b:b5:83:49:ca:c2:e3:18:45:b3: bb:73:dd:c8:29:eb:71:1b:a5:13:2f:cc:17:10:18: d4:7c:0d:2f:62:f2:fc:0d:72:4f:02:da:cb:30:e5: 42:25:b5:2e:1e:29:b1:a1:a5:ba:59:21:f3:0d:7a: ab:ed:10:5b:fa:f0:f5:2c:76:3c:2b:14:fc:07:07: 59:29:68:92:c6:92:25:a7:45:fd:7e:58:82:90:11: d0:d4:b1:e8:81:82:6e:37:f8:90:11:b1:86:85:4b: 6a:c5:a3:b6:c4:a1:a5:cf:11:3b:41:9f:be:6f:38: f7:c4:d9:cf:70:53:be:15:e9:6c:e3:49:80:cd:52: 6a:f1:fe:23:fd:1c:a9:9b:9c:1b:4b:a2:3d:7a:84: 40:fe:9e:0c:1a:91:b5:7e:75:71:72:19:f6:46:9a: 52:7b:2d:bc:68:3c:f8:10:4e:39:0f:69:37:86:1f: 39:d9:bb:61:a4:07:61:0f:22:c6:78:29:30:c2:da: 6b:cc:b5:d7:ac:38:d3:64:f5:73:86:1f:8c:8d:38: 93:95:09:13:b1:fd:69:95:81:69:2c:a0:34:29:00: 59:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0C:27:56:75:B3:BA:85:66:23:DB:C0:08:37:F5:0D:EB:73:D6:65 X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3d:2b:0d:4b:ff:41:1d:f8:32:1f:64:71:da:a3:b3:ff:c0: ec:5a:6c:45:e3:8a:0e:a5:e7:07:96:68:02:1b:a0:9b:4a:b5: f3:ec:24:46:e2:a0:a7:89:c3:e6:d3:7c:cb:52:b3:b1:94:3a: d5:57:28:c5:af:9a:ad:6c:ed:64:f4:82:dc:00:53:aa:7c:50: 53:f1:99:0e:a8:5d:85:c2:81:65:54:00:8e:6b:d8:7a:4d:75: 97:44:5a:72:6f:39:ca:05:32:0d:f0:83:0d:10:31:7c:ae:5a: 09:4c:27:ed:93:9b:af:28:20:69:de:90:8b:c9:c4:a1:b2:dd: e8:f4:d7:bb:83:05:7a:2d:4a:d0:b5:ab:c8:cb:be:a4:11:dc: 1d:99:11:d0:0e:c8:f6:29:55:4c:e6:47:b5:b1:85:25:60:ad: d1:bc:65:b7:77:b6:a6:02:e7:1e:e5:92:e7:61:70:8d:89:88: e2:c9:5e:97:6e:70:ee:3b:5a:10:fd:a1:f3:b4:9d:d2:6c:03: f6:46:7e:ff:1d:48:e4:4a:f6:07:90:fa:96:ff:3b:81:9d:71: 46:60:66:e7:e2:4e:9a:e8:a6:b7:d7:22:12:d3:6c:ea:e9:05: ee:20:3c:10:77:c0:4d:a8:53:80:58:fb:9a:da:3e:04:b6:7a: 55:d8:0b:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgXc0ecWnQ+IpeMr3trimm9GPKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNjA0MTYxNzU2NTBaFw0yNjA0MTkyMjQxNTBaMDMxMTAvBgNV BAMTKEYwMEMyNzU2NzVCM0JBODU2NjIzREJDMDA4MzdGNTBERUI3M0Q2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1vUFNuEd4JM0jkgzuWiyMv9e hp5TbOAnVw4KQBfK9XKjS7WDScrC4xhFs7tz3cgp63EbpRMvzBcQGNR8DS9i8vwN ck8C2ssw5UIltS4eKbGhpbpZIfMNeqvtEFv68PUsdjwrFPwHB1kpaJLGkiWnRf1+ WIKQEdDUseiBgm43+JARsYaFS2rFo7bEoaXPETtBn75vOPfE2c9wU74V6WzjSYDN Umrx/iP9HKmbnBtLoj16hED+ngwakbV+dXFyGfZGmlJ7LbxoPPgQTjkPaTeGHznZ u2GkB2EPIsZ4KTDC2mvMtdesONNk9XOGH4yNOJOVCROx/WmVgWksoDQpAFlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8AwnVnWzuoVmI9vACDf1Detz1mUwHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjA3MDAtOTExNi00YTA1LThm NmItZDhlZGFmZGI3MmVjLzAvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2 RTc3NkQ0MDlDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk9Kw1L/0Ed+DIfZHHao7P/wOxabEXjig6l 5weWaAIboJtKtfPsJEbioKeJw+bTfMtSs7GUOtVXKMWvmq1s7WT0gtwAU6p8UFPx mQ6oXYXCgWVUAI5r2HpNdZdEWnJvOcoFMg3wgw0QMXyuWglMJ+2Tm68oIGnekIvJ xKGy3ej017uDBXotStC1q8jLvqQR3B2ZEdAOyPYpVUzmR7WxhSVgrdG8Zbd3tqYC 5x7lkudhcI2JiOLJXpducO47WhD9ofO0ndJsA/ZGfv8dSORK9geQ+pb/O4GdcUZg ZufiTproprfXIhLTbOrpBe4gPBB3wE2oU4BY+5raPgS2elXYCxY= -----END CERTIFICATE-----Generated at Fri Apr 17 16:00:30 2026 by rpki-client