$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json) Hash identifier: zmo6lWc4CUQvH7OzID+6BNd+neMxOLIqnoGuIcVNG30= Subject key identifier: EA:FF:C9:44:1C:1A:63:72:E1:08:6F:0A:91:D4:35:03:4B:32:B9:2A Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Certificate serial: 1B7ACD75F0AA1EF402A171FE7A9FDD072035AEAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft Manifest number: 056E Signing time: Mon 27 Apr 2026 15:42:25 +0000 Manifest this update: Mon 27 Apr 2026 15:37:25 +0000 Manifest next update: Fri 01 May 2026 00:48:25 +0000 Files and hashes: 1: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: hoeu6PPcSnkQBizLLhAvKAnSA0tpkVqJ2Picc1Izxro=) 2: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: LxNIC9GUMk4NDV//CAiwhidJ9aXKaAFBBW+ysgKoUy0=) 3: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (hash: 9T03XiS2C6Ixb+0gY6hBiP7ITeOtcYnJd0bPsi6ffrI=) 4: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: EV88jOIELhWBAVSmJqvptwA4m5UyL3dS/vav1cA94d8=) 5: 3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (hash: fC+4pLH4upbRJiJYtSpDhyvCOyqsm8KVDJLsLZlAJfs=) 6: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (hash: 3VPC2jTp4UheTC+oF+eJLG0wRoEjVA5eKjIxD8N5Uh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Apr 2026 17:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7a:cd:75:f0:aa:1e:f4:02:a1:71:fe:7a:9f:dd:07:20:35:ae:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Validity Not Before: Apr 27 15:37:25 2026 GMT Not After : May 1 00:48:25 2026 GMT Subject: CN=EAFFC9441C1A6372E1086F0A91D435034B32B92A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:63:8a:4d:db:3f:6a:39:f6:9c:9a:11:35: bd:07:32:80:dd:47:d0:3d:75:3d:8b:30:3e:33:ac: 7f:2d:80:10:78:b7:eb:64:f7:07:60:44:ee:b2:4c: a1:c6:7a:aa:cf:fa:4e:e0:b2:2d:34:9f:c3:f7:f9: aa:3d:3e:bc:88:7a:a8:54:48:f6:be:d7:0b:e1:34: f6:dc:b3:e5:85:c4:e4:2e:38:78:86:ba:e0:21:92: 8a:1e:5f:07:1b:53:54:f9:30:b5:47:26:a8:8a:da: 1c:15:5a:2c:91:87:36:81:c0:53:b5:4b:57:60:ff: a3:0c:2c:f6:10:c2:72:1c:26:5e:94:f9:c4:33:1f: 6c:e8:d6:f7:a5:32:b8:c5:91:6a:e0:33:7c:0d:43: 28:97:6f:31:60:02:6b:3d:80:66:ff:aa:be:56:ea: 1d:3a:bd:e6:a9:8c:8a:0e:78:57:4b:94:87:85:d1: 59:df:62:9a:3d:4e:94:06:fb:27:a3:92:16:d5:d6: a6:7a:66:4b:3e:a1:8e:13:9a:31:26:e1:af:49:45: 83:03:aa:cb:3a:aa:f9:13:de:15:dd:09:ce:df:ac: 62:5f:f8:45:52:b1:23:b5:17:87:29:56:69:66:e3: 52:d2:58:dd:56:25:c0:d9:12:15:6b:15:36:31:61: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FF:C9:44:1C:1A:63:72:E1:08:6F:0A:91:D4:35:03:4B:32:B9:2A X509v3 Authority Key Identifier: keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d3:05:9d:17:1a:42:7e:9c:74:36:5b:dc:fa:4c:6b:ad:62: 2a:3b:ea:00:24:4e:6c:1d:0a:98:c3:85:4d:20:9e:9b:b5:48: ef:a2:69:47:b8:03:be:06:45:b1:83:13:f8:c2:d8:9f:53:dc: 8b:af:a5:cd:83:e0:b9:1c:03:32:85:e1:ce:7d:d3:7d:31:02: 1a:e6:da:06:88:24:ea:51:71:74:01:66:f7:39:ce:67:a4:7f: 2b:8f:5d:bb:a2:e1:88:e1:75:95:d8:49:42:fe:c3:ba:c5:1b: ec:2f:84:f0:78:d7:2b:be:8e:c1:b8:6c:f9:ba:63:e0:92:88: e5:81:2b:78:9d:c5:55:dd:66:83:b3:05:ee:12:16:19:2d:f0: cc:d1:1b:0b:99:0a:e1:25:39:64:1b:22:a5:de:58:37:55:10: 85:80:d7:bd:95:bf:73:61:14:e7:d7:47:58:bd:ad:45:3c:eb: 8f:d0:cf:28:88:11:75:83:45:90:1c:c6:5d:b5:03:01:73:53: 38:26:b0:e1:a9:1c:83:54:cf:a7:08:3d:35:cf:05:82:60:82: cd:09:d4:80:9d:1d:4c:5f:4f:fd:e9:34:fe:41:9c:3e:1f:78: 36:4a:c9:4b:c4:b7:d6:31:c8:9c:f4:3f:c9:8b:d7:19:62:e3: 81:83:44:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3rNdfCqHvQCoXH+ep/dByA1rqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1 NjNERkU3MjAeFw0yNjA0MjcxNTM3MjVaFw0yNjA1MDEwMDQ4MjVaMDMxMTAvBgNV BAMTKEVBRkZDOTQ0MUMxQTYzNzJFMTA4NkYwQTkxRDQzNTAzNEIzMkI5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGa2OKTds/ajn2nJoRNb0HMoDd R9A9dT2LMD4zrH8tgBB4t+tk9wdgRO6yTKHGeqrP+k7gsi00n8P3+ao9PryIeqhU SPa+1wvhNPbcs+WFxOQuOHiGuuAhkooeXwcbU1T5MLVHJqiK2hwVWiyRhzaBwFO1 S1dg/6MMLPYQwnIcJl6U+cQzH2zo1velMrjFkWrgM3wNQyiXbzFgAms9gGb/qr5W 6h06veapjIoOeFdLlIeF0VnfYpo9TpQG+yejkhbV1qZ6Zks+oY4TmjEm4a9JRYMD qss6qvkT3hXdCc7frGJf+EVSsSO1F4cpVmlm41LSWN1WJcDZEhVrFTYxYWc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6v/JRBwaY3LhCG8KkdQ1A0syuSowHwYDVR0j BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE RkU3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0 NjU1NjNERkU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHTBZ0XGkJ+nHQ2W9z6TGutYio76gAkTmwd CpjDhU0gnpu1SO+iaUe4A74GRbGDE/jC2J9T3Iuvpc2D4LkcAzKF4c59030xAhrm 2gaIJOpRcXQBZvc5zmekfyuPXbui4YjhdZXYSUL+w7rFG+wvhPB41yu+jsG4bPm6 Y+CSiOWBK3idxVXdZoOzBe4SFhkt8MzRGwuZCuElOWQbIqXeWDdVEIWA172Vv3Nh FOfXR1i9rUU864/QzyiIEXWDRZAcxl21AwFzUzgmsOGpHINUz6cIPTXPBYJggs0J 1ICdHUxfT/3pNP5BnD4feDZKyUvEt9YxyJz0P8mL1xli44GDRCc= -----END CERTIFICATE-----Generated at Mon Apr 27 18:25:02 2026 by rpki-client