$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft File: 8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json) Hash identifier: H7Lr7LuIbmDaa5m2G20WhhIk2wskd0EpoVOYKicniSg= Subject key identifier: B6:60:3D:0A:72:EA:1A:59:4C:7E:38:5E:C9:C5:9F:2D:44:D0:94:BF Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Certificate issuer: /CN=8A78F143A2E18078229313E44ACE70165360440C Certificate serial: 1166F7D4610B0A1946DB7BFCEAEB251D8BD104DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft Manifest number: 013B Signing time: Mon 20 Apr 2026 16:11:02 +0000 Manifest this update: Mon 20 Apr 2026 16:06:02 +0000 Manifest next update: Thu 23 Apr 2026 17:22:02 +0000 Files and hashes: 1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: oPF999l/k8LqTENgRcuqdqgDTqM6D1YObD7swS0ASaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:66:f7:d4:61:0b:0a:19:46:db:7b:fc:ea:eb:25:1d:8b:d1:04:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C Validity Not Before: Apr 20 16:06:02 2026 GMT Not After : Apr 23 17:22:02 2026 GMT Subject: CN=B6603D0A72EA1A594C7E385EC9C59F2D44D094BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:da:e8:fd:04:f9:b3:1b:08:06:eb:ac:81:56: fa:49:71:e8:29:ba:9f:74:0c:04:69:7c:26:a7:63: ed:a8:4e:42:d0:71:77:4d:00:d2:df:1e:37:f0:d0: 23:82:51:a7:ee:3a:12:15:9e:a1:7b:55:7e:af:1d: c6:7c:b6:04:1b:2f:76:4c:2f:33:0a:3f:c2:c1:0a: aa:79:48:d3:c3:5c:2b:1b:c5:f2:a6:7d:00:81:8f: 7c:1e:9f:46:8f:75:cb:03:88:8b:ab:2f:1e:ae:46: c9:1c:79:be:d6:50:c7:cb:75:17:1b:75:5e:70:a3: bc:af:c7:f8:5d:ab:e7:6d:78:62:9e:ff:b8:49:27: 17:c3:3f:bc:02:95:b3:f0:ad:ca:19:5f:7f:2c:19: 46:39:39:c3:bf:77:91:5c:ba:c5:63:80:fc:7c:88: 23:9d:2d:bc:a8:24:f5:25:5c:d3:cd:bf:eb:c3:71: 3c:7d:64:08:38:d4:6e:d9:0f:0a:03:b3:41:6a:1e: ef:ac:be:70:bf:51:b8:ce:c8:bf:6b:6c:46:1c:8f: 38:82:8b:15:b9:c8:3b:8f:83:14:43:66:13:5a:b6: fc:50:85:dc:b8:6f:68:cb:29:91:f5:26:c0:71:bd: f3:34:30:25:f8:fd:e6:c4:10:67:55:75:b9:4a:b9: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:60:3D:0A:72:EA:1A:59:4C:7E:38:5E:C9:C5:9F:2D:44:D0:94:BF X509v3 Authority Key Identifier: keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cf:bf:34:70:aa:ea:60:71:62:73:84:99:3b:5a:9c:b9:95: 62:b7:d8:8d:c4:94:e0:85:da:24:24:98:38:f6:e0:29:50:d6: 6d:88:bf:3e:0d:f8:ca:d7:09:af:2f:67:5c:c4:ee:ab:e0:71: 42:4b:95:af:d5:ce:db:db:38:a6:1c:71:9f:4f:db:70:9d:b9: 6b:20:c7:06:46:b4:51:e8:d0:36:4a:65:b0:34:bf:fc:0c:e7: 5c:de:dc:d1:b0:3d:2a:4e:75:06:ef:49:3d:30:d9:39:24:bd: 15:b5:7c:83:65:67:27:77:6b:c9:74:56:20:4b:48:be:10:34: bc:e1:b3:f8:98:0b:b6:72:81:35:1d:5b:95:db:45:54:fe:7b: 00:3d:95:c8:f1:32:aa:63:6d:d9:55:5f:24:06:d8:fb:7c:20: 76:85:83:3c:4a:d0:c4:b4:2a:32:f0:3b:6b:04:a2:85:9d:3f: 65:50:0d:eb:95:79:40:da:07:c9:aa:a6:df:90:4c:d5:04:9e: 0b:53:be:64:ea:89:5a:1a:20:05:dc:44:f3:b1:25:d0:a3:56: ae:78:89:10:fb:83:8e:81:d5:c6:ee:9d:2b:86:25:2a:16:1a: 81:51:82:9e:14:0f:e9:7f:c3:fb:ad:0d:d0:9a:bb:d4:50:f4: e1:08:1c:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWb31GELChlG23v86uslHYvRBN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1 MzYwNDQwQzAeFw0yNjA0MjAxNjA2MDJaFw0yNjA0MjMxNzIyMDJaMDMxMTAvBgNV BAMTKEI2NjAzRDBBNzJFQTFBNTk0QzdFMzg1RUM5QzU5RjJENDREMDk0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc2uj9BPmzGwgG66yBVvpJcegp up90DARpfCanY+2oTkLQcXdNANLfHjfw0COCUafuOhIVnqF7VX6vHcZ8tgQbL3ZM LzMKP8LBCqp5SNPDXCsbxfKmfQCBj3wen0aPdcsDiIurLx6uRskceb7WUMfLdRcb dV5wo7yvx/hdq+dteGKe/7hJJxfDP7wClbPwrcoZX38sGUY5OcO/d5FcusVjgPx8 iCOdLbyoJPUlXNPNv+vDcTx9ZAg41G7ZDwoDs0FqHu+svnC/UbjOyL9rbEYcjziC ixW5yDuPgxRDZhNatvxQhdy4b2jLKZH1JsBxvfM0MCX4/ebEEGdVdblKuZG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtmA9CnLqGllMfjheycWfLUTQlL8wHwYDVR0j BBgwFoAUinjxQ6LhgHgikxPkSs5wFlNgRAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMC84QTc4RjE0M0Ey RTE4MDc4MjI5MzEzRTQ0QUNFNzAxNjUzNjA0NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1MzYw NDQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcw MTY1MzYwNDQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7PvzRwqupgcWJzhJk7Wpy5lWK32I3ElOCF 2iQkmDj24ClQ1m2Ivz4N+MrXCa8vZ1zE7qvgcUJLla/VztvbOKYccZ9P23CduWsg xwZGtFHo0DZKZbA0v/wM51ze3NGwPSpOdQbvST0w2TkkvRW1fINlZyd3a8l0ViBL SL4QNLzhs/iYC7ZygTUdW5XbRVT+ewA9lcjxMqpjbdlVXyQG2Pt8IHaFgzxK0MS0 KjLwO2sEooWdP2VQDeuVeUDaB8mqpt+QTNUEngtTvmTqiVoaIAXcRPOxJdCjVq54 iRD7g46B1cbunSuGJSoWGoFRgp4UD+l/w/utDdCau9RQ9OEIHGA= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:54 2026 by rpki-client