$ rpki-client -vvf repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft File: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft (raw, json) Hash identifier: C4BkKDLyhxHX7jdsFNhVHnFZvawXEI2GJMLa8CUwJTs= Subject key identifier: E8:61:FB:5B:08:D4:46:54:9C:C6:B9:CA:C9:1C:11:75:37:10:DE:29 Authority key identifier: F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 Certificate issuer: /CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Certificate serial: 3832F6E9BC3A27903CF7E9145BB3B537C67220E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft Manifest number: 016B Signing time: Mon 20 Apr 2026 07:52:15 +0000 Manifest this update: Mon 20 Apr 2026 07:47:15 +0000 Manifest next update: Thu 23 Apr 2026 13:12:15 +0000 Files and hashes: 1: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl (hash: 24dgdaC0ZvgZjqx6XWVi50KT7PqYlLImuQN0hQF/9KY=) 2: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: JcnToFV1Tdf0hSLWS9PFNPrwPJ5SIH11d0CkEuHYi9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 13:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:32:f6:e9:bc:3a:27:90:3c:f7:e9:14:5b:b3:b5:37:c6:72:20:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Validity Not Before: Apr 20 07:47:15 2026 GMT Not After : Apr 23 13:12:15 2026 GMT Subject: CN=E861FB5B08D446549CC6B9CAC91C11753710DE29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:a9:3a:80:05:a4:bc:58:39:f3:1b:6d:68: d5:d7:ce:90:b2:86:39:a8:4a:be:9a:77:b4:07:ba: 84:49:03:bf:b3:10:cc:9b:2f:b1:ed:c5:39:c8:c0: 1f:25:5d:75:d8:cd:b8:70:29:77:b7:27:5a:cb:c8: 93:81:2e:0c:7b:7a:e4:d1:e1:95:89:45:89:50:82: 82:1c:69:03:dd:66:92:1a:61:b1:c8:e3:6a:7c:33: 4c:75:4a:95:c6:05:cb:94:63:20:05:1b:77:fe:f8: ed:0e:24:4a:07:1e:06:d6:df:2d:b2:70:8c:2d:33: 2f:9f:26:27:f1:c5:56:f9:23:02:b5:7d:5b:e0:66: e0:36:48:6d:54:1d:b2:ed:71:b0:41:70:c2:36:09: 3a:ab:11:24:43:f9:21:bd:5c:2e:83:af:e0:ab:c5: 12:be:41:53:0f:6c:a0:93:35:c8:27:e7:f3:2a:bf: 51:5e:7a:bb:5a:84:a1:d3:22:0e:cd:c7:c3:7e:e2: 37:c3:bf:60:52:45:8f:d9:b7:1c:52:94:21:83:64: b1:ba:29:ee:0d:16:95:06:71:49:be:47:d9:a3:7f: 1c:f6:96:45:b2:af:37:aa:61:56:86:4e:9b:b0:4d: 7e:55:80:d1:f1:ff:76:7b:d5:93:c0:6f:21:49:58: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:61:FB:5B:08:D4:46:54:9C:C6:B9:CA:C9:1C:11:75:37:10:DE:29 X509v3 Authority Key Identifier: keyid:F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:57:18:31:43:7a:55:0f:99:98:a8:6f:bb:24:96:d6:bc:d3: 24:a6:5e:64:18:f7:85:bc:0e:7a:e4:97:14:96:97:15:f7:dc: 06:00:eb:44:df:25:22:2d:d3:71:3e:98:92:8f:fc:b5:fc:99: 23:6f:07:ad:af:0d:80:11:39:24:d3:4e:87:3d:9e:39:e4:38: 3e:27:7c:f6:2f:b0:f0:c1:67:98:bb:bd:24:07:42:ad:8c:d6: 30:f0:a3:d2:9f:bf:20:46:f9:91:16:fc:82:30:62:bd:5b:3d: cf:e3:67:8a:97:b4:7d:a3:73:bb:72:f8:57:d5:35:cf:d5:59: 77:41:70:c6:86:cb:db:d9:1e:01:46:1d:cc:07:c6:25:f2:f9: 6c:d8:9c:e6:db:f5:f5:4b:e1:14:48:2e:3f:6e:b5:24:9c:c1: d7:eb:e0:bf:67:da:ea:28:c0:67:ce:15:2e:7e:f0:e2:ba:1c: 7f:77:a7:f1:a4:73:ff:8b:11:b3:30:47:28:26:28:0b:05:07: e4:0c:2e:35:69:7c:3d:33:c4:c6:26:9a:28:38:74:da:ba:64: e1:17:41:48:66:28:0d:5d:af:92:2a:ec:24:69:ba:0c:dc:ca: b3:2e:64:16:55:02:30:a4:5b:15:6b:e6:49:79:ff:cc:64:9b: 5b:61:8d:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODL26bw6J5A89+kUW7O1N8ZyIOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5 MzI1MjE2OTAeFw0yNjA0MjAwNzQ3MTVaFw0yNjA0MjMxMzEyMTVaMDMxMTAvBgNV BAMTKEU4NjFGQjVCMDhENDQ2NTQ5Q0M2QjlDQUM5MUMxMTc1MzcxMERFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9d6k6gAWkvFg58xttaNXXzpCy hjmoSr6ad7QHuoRJA7+zEMybL7HtxTnIwB8lXXXYzbhwKXe3J1rLyJOBLgx7euTR 4ZWJRYlQgoIcaQPdZpIaYbHI42p8M0x1SpXGBcuUYyAFG3f++O0OJEoHHgbW3y2y cIwtMy+fJifxxVb5IwK1fVvgZuA2SG1UHbLtcbBBcMI2CTqrESRD+SG9XC6Dr+Cr xRK+QVMPbKCTNcgn5/Mqv1FeertahKHTIg7Nx8N+4jfDv2BSRY/ZtxxSlCGDZLG6 Ke4NFpUGcUm+R9mjfxz2lkWyrzeqYVaGTpuwTX5VgNHx/3Z71ZPAbyFJWKHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6GH7WwjURlScxrnKyRwRdTcQ3ikwHwYDVR0j BBgwFoAU+Mnnmt3eKSi8X6J8PWIcHZMlIWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2M4OTFkNy00ZmNjLTQ3NzAtODJkNC0zNjdiODdiYjU1MWUvMC9GOEM5RTc5QURE REUyOTI4QkM1RkEyN0MzRDYyMUMxRDkzMjUyMTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5MzI1 MjE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFD MUQ5MzI1MjE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRXGDFDelUPmZiob7sklta80ySmXmQY94W8 DnrklxSWlxX33AYA60TfJSIt03E+mJKP/LX8mSNvB62vDYAROSTTToc9njnkOD4n fPYvsPDBZ5i7vSQHQq2M1jDwo9KfvyBG+ZEW/IIwYr1bPc/jZ4qXtH2jc7ty+FfV Nc/VWXdBcMaGy9vZHgFGHcwHxiXy+WzYnObb9fVL4RRILj9utSScwdfr4L9n2uoo wGfOFS5+8OK6HH93p/Gkc/+LEbMwRygmKAsFB+QMLjVpfD0zxMYmmig4dNq6ZOEX QUhmKA1dr5Iq7CRpugzcyrMuZBZVAjCkWxVr5kl5/8xkm1thjWI= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:19 2026 by rpki-client