$ rpki-client -vvf repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft File: 8910B51FCAA7F54124A76AF839CE19F4055A1061.mft (raw, json) Hash identifier: 1wbrzJgEld8Dgjx1LnAvzBeYPq877iT0AdBvhOCg67Y= Subject key identifier: 87:0C:B4:38:41:E1:B2:57:41:AB:80:B1:B0:AC:60:2B:36:F2:87:83 Authority key identifier: 89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 Certificate issuer: /CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Certificate serial: 78B62DE19A88AAD45755E57109B3B49D38065366 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft Manifest number: 0127 Signing time: Mon 20 Apr 2026 06:01:56 +0000 Manifest this update: Mon 20 Apr 2026 05:56:56 +0000 Manifest next update: Thu 23 Apr 2026 07:06:56 +0000 Files and hashes: 1: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: BD9874huussdd9AhnhjODm64dILqVkWxIW7wjOoaAMQ=) 2: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: z0YgoG/ujpHrwuWoXrEZAv8nwDL/OBeAUxVX0QCVaBM=) 3: 8910B51FCAA7F54124A76AF839CE19F4055A1061.crl (hash: HB1nKihEt/wf2KSBxYt+VNED36gZUgVuTv/TiCzeU+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 07:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b6:2d:e1:9a:88:aa:d4:57:55:e5:71:09:b3:b4:9d:38:06:53:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Validity Not Before: Apr 20 05:56:56 2026 GMT Not After : Apr 23 07:06:56 2026 GMT Subject: CN=870CB43841E1B25741AB80B1B0AC602B36F28783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:f3:26:95:36:12:f8:3e:b2:55:2a:1a:42: c3:51:8f:2d:81:bb:9d:a9:e9:17:1b:c6:a0:6c:7f: b9:68:c4:f1:5b:0d:30:23:6e:f5:50:4f:80:6c:bc: 29:61:a3:3e:c4:7d:80:1d:cf:c9:7d:ec:2d:b1:74: 27:2a:c4:7b:50:6f:66:79:ae:85:44:0f:a1:82:9d: 2a:81:aa:b0:46:eb:52:44:6c:52:65:57:7a:e7:b1: 28:22:75:1a:0d:1f:42:45:ca:5f:4a:eb:ed:89:94: d5:3e:cd:11:ca:2d:66:91:c1:6f:15:6c:7b:a5:e2: f5:ea:fb:8f:db:91:df:36:40:50:03:ab:a4:c3:cd: db:f8:b9:7f:20:3e:b9:ac:c7:44:47:d2:6c:a2:8c: bd:6b:d0:17:2b:5e:11:4c:5b:83:b2:09:98:d6:2f: 22:1e:56:09:00:97:25:9a:5d:8a:73:ea:0e:1b:0a: 70:6d:15:ce:62:6e:e3:53:5f:65:ae:31:93:78:a0: ad:fb:4a:d5:93:fe:4f:07:45:1a:49:9b:98:36:49: 49:e4:fb:d9:f5:9a:6b:6f:26:7d:93:23:ba:b2:77: e2:d2:fd:f0:6c:62:ad:e1:30:90:7a:92:c6:72:3b: 23:79:52:84:6c:77:e4:16:4a:75:02:c9:7a:81:99: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0C:B4:38:41:E1:B2:57:41:AB:80:B1:B0:AC:60:2B:36:F2:87:83 X509v3 Authority Key Identifier: keyid:89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:04:ae:2b:df:24:c2:7d:83:e3:d5:dc:88:aa:03:4f:4a:23: b1:ab:bc:2d:fe:4f:ad:e8:2a:ca:50:eb:55:98:82:02:47:cd: 1e:f0:f9:49:28:9f:ba:25:d9:05:ba:86:b1:59:18:1c:f1:3f: 9d:b3:73:27:38:62:0e:7b:ba:9f:c7:98:62:22:a9:59:e0:c7: 39:ee:fd:7c:58:f5:3c:b1:95:f2:a1:cb:0a:40:3f:a8:50:42: 7d:ff:ff:9e:e7:f0:0b:14:d6:a7:25:5f:4c:56:74:a5:2f:1f: 1a:12:5f:06:98:48:4b:4c:94:25:cf:2a:3a:eb:d0:2b:b2:7c: e1:4a:37:11:43:62:e9:26:f6:73:69:0d:7a:9f:23:da:32:f5: 52:dd:d8:83:d0:da:f7:56:4c:2c:f8:57:2c:fe:95:74:cc:95: 62:d6:92:51:21:66:5b:83:14:df:c8:ba:63:75:27:9e:4e:23: 83:2b:50:52:f6:e9:6c:e1:3a:a9:36:c0:95:e7:4a:99:74:ae: ed:e7:15:c5:54:e6:1d:10:21:82:8f:17:f1:5a:e0:5f:c1:4b: ee:ea:bc:ec:e3:9e:4d:3d:38:a4:94:10:ff:ec:ed:d1:92:e4: 79:bb:31:6c:d3:0b:b9:b7:28:21:b0:eb:5a:e3:33:5d:58:73: 2f:c4:76:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLYt4ZqIqtRXVeVxCbO0nTgGU2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQw NTVBMTA2MTAeFw0yNjA0MjAwNTU2NTZaFw0yNjA0MjMwNzA2NTZaMDMxMTAvBgNV BAMTKDg3MENCNDM4NDFFMUIyNTc0MUFCODBCMUIwQUM2MDJCMzZGMjg3ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2PMmlTYS+D6yVSoaQsNRjy2B u52p6RcbxqBsf7loxPFbDTAjbvVQT4BsvClhoz7EfYAdz8l97C2xdCcqxHtQb2Z5 roVED6GCnSqBqrBG61JEbFJlV3rnsSgidRoNH0JFyl9K6+2JlNU+zRHKLWaRwW8V bHul4vXq+4/bkd82QFADq6TDzdv4uX8gPrmsx0RH0myijL1r0BcrXhFMW4OyCZjW LyIeVgkAlyWaXYpz6g4bCnBtFc5ibuNTX2WuMZN4oK37StWT/k8HRRpJm5g2SUnk +9n1mmtvJn2TI7qyd+LS/fBsYq3hMJB6ksZyOyN5UoRsd+QWSnUCyXqBmYMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhwy0OEHhsldBq4CxsKxgKzbyh4MwHwYDVR0j BBgwFoAUiRC1H8qn9UEkp2r4Oc4Z9AVaEGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTQwMzQwOS1iZjA0LTQyZTktOTU2Ny1iMDZlYzgyM2Q5MDEvMC84OTEwQjUxRkNB QTdGNTQxMjRBNzZBRjgzOUNFMTlGNDA1NUExMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQwNTVB MTA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzE0MDM0MDktYmYwNC00MmU5LTk1 NjctYjA2ZWM4MjNkOTAxLzAvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5 RjQwNTVBMTA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8ErivfJMJ9g+PV3IiqA09KI7GrvC3+T63o KspQ61WYggJHzR7w+Ukon7ol2QW6hrFZGBzxP52zcyc4Yg57up/HmGIiqVngxznu /XxY9TyxlfKhywpAP6hQQn3//57n8AsU1qclX0xWdKUvHxoSXwaYSEtMlCXPKjrr 0CuyfOFKNxFDYukm9nNpDXqfI9oy9VLd2IPQ2vdWTCz4Vyz+lXTMlWLWklEhZluD FN/IumN1J55OI4MrUFL26WzhOqk2wJXnSpl0ru3nFcVU5h0QIYKPF/Fa4F/BS+7q vOzjnk09OKSUEP/s7dGS5Hm7MWzTC7m3KCGw61rjM11Ycy/Edqo= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:23 2026 by rpki-client