$ rpki-client -vvf repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft File: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft (raw, json) Hash identifier: vV66Pld1bZbzrgWL60Plxo/nN0ja7f/gUYNhntr1z2I= Subject key identifier: 3A:4F:95:8C:F5:5E:1C:3A:F9:21:EE:1C:A3:0A:7F:18:34:9F:55:F4 Authority key identifier: 0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF Certificate issuer: /CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Certificate serial: 377303366DE6BB7492FA80E1F875EF1E3303128B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft Manifest number: 66 Signing time: Tue 21 Apr 2026 05:21:14 +0000 Manifest this update: Tue 21 Apr 2026 05:16:14 +0000 Manifest next update: Fri 24 Apr 2026 14:13:14 +0000 Files and hashes: 1: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: UIZ03usfq2XFdSk/q+e6qEltdDYNXrFthkIDpbSov1g=) 2: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl (hash: oKS5u5Mz6YrK+nsAUDCgjCC+L2KERGopCN4PZm3kt8U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:73:03:36:6d:e6:bb:74:92:fa:80:e1:f8:75:ef:1e:33:03:12:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Validity Not Before: Apr 21 05:16:14 2026 GMT Not After : Apr 24 14:13:14 2026 GMT Subject: CN=3A4F958CF55E1C3AF921EE1CA30A7F18349F55F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:80:ef:89:72:4c:fe:a1:af:53:50:0e:13: 09:69:03:f7:b0:da:cc:7b:20:d6:1a:92:d4:3b:d8: aa:9b:fd:8b:97:5d:ff:82:31:89:23:4a:50:f7:30: 7c:c9:80:8c:24:40:bd:61:de:9a:d8:dd:b5:1b:0b: 53:03:34:b9:39:94:94:08:6b:96:77:ae:48:83:63: 9e:4e:79:54:68:4c:8c:01:86:95:08:e4:bf:0a:47: 9e:9e:e2:14:5d:44:38:37:87:ac:e7:1a:1f:0d:b9: 44:92:fc:58:96:ed:3e:17:a3:eb:64:85:7d:8c:62: af:5c:da:cb:44:c2:be:d9:c9:04:1d:f8:63:a4:9d: cc:27:11:27:de:d3:fe:e6:99:ff:8a:3e:9d:d6:e5: 6a:18:54:63:4d:a7:d7:3b:a0:b2:48:86:68:3d:82: cd:f2:16:e0:da:d4:e9:2c:dd:7b:86:97:be:43:07: 78:67:1a:3e:7b:2f:cc:5f:7d:8e:3e:e4:d7:12:45: 49:04:72:73:86:34:b0:ff:5e:04:95:29:2a:f0:5d: 5b:6d:7a:ea:4e:85:6f:d4:b2:09:c5:ce:2f:e7:22: 55:35:2d:65:fe:40:a7:67:cc:25:fb:07:e6:0d:73: 18:ed:ab:b0:95:ac:93:18:92:e0:de:a3:fc:f8:c2: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4F:95:8C:F5:5E:1C:3A:F9:21:EE:1C:A3:0A:7F:18:34:9F:55:F4 X509v3 Authority Key Identifier: keyid:0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a1:9f:2d:cb:12:a0:6f:54:dd:02:95:65:93:40:9c:31:26: af:76:38:9a:33:15:da:38:23:02:ce:b1:d8:70:d4:c9:8e:d3: b7:25:0b:a1:43:54:43:72:e4:6e:ad:a3:67:c8:94:c2:0e:dd: 7d:b3:16:d8:62:0e:7c:66:f0:f5:02:ad:9c:aa:df:87:22:1a: 42:2a:81:b7:e0:2f:fa:45:11:ab:3a:e3:6e:73:f0:df:ea:a3: 2e:46:07:28:20:fd:53:ed:d8:0c:4c:1c:10:52:f4:d7:4f:f9: 35:23:0a:0b:b4:17:96:81:42:7c:bc:1c:6f:67:53:b7:a7:d2: 67:af:b5:fc:8a:4f:70:a3:e5:74:0f:21:dd:e7:e1:11:13:f0: a2:6e:fe:30:87:a6:9d:00:35:0d:ef:7b:20:ce:0d:10:5d:ba: 2e:65:e6:c9:a2:bb:90:72:db:82:4b:43:de:52:30:c1:5f:c1: 4e:d8:c8:c9:0e:47:b6:ee:3a:9c:4a:9c:2b:4a:a5:bd:e5:d1: ef:0c:36:86:c1:f1:a1:3b:9c:7a:6b:32:1c:20:de:9d:aa:f0: 4b:29:d6:cb:52:81:99:d9:d0:a7:9f:9e:2b:46:4a:1f:7c:da: 05:c9:a6:57:31:7c:05:34:4e:6e:7f:54:95:9e:a2:4f:4f:28: 17:1d:c1:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3MDNm3mu3SS+oDh+HXvHjMDEoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5 MkEyREJGRjAeFw0yNjA0MjEwNTE2MTRaFw0yNjA0MjQxNDEzMTRaMDMxMTAvBgNV BAMTKDNBNEY5NThDRjU1RTFDM0FGOTIxRUUxQ0EzMEE3RjE4MzQ5RjU1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9IDviXJM/qGvU1AOEwlpA/ew 2sx7INYaktQ72Kqb/YuXXf+CMYkjSlD3MHzJgIwkQL1h3prY3bUbC1MDNLk5lJQI a5Z3rkiDY55OeVRoTIwBhpUI5L8KR56e4hRdRDg3h6znGh8NuUSS/FiW7T4Xo+tk hX2MYq9c2stEwr7ZyQQd+GOkncwnESfe0/7mmf+KPp3W5WoYVGNNp9c7oLJIhmg9 gs3yFuDa1Oks3XuGl75DB3hnGj57L8xffY4+5NcSRUkEcnOGNLD/XgSVKSrwXVtt eupOhW/UsgnFzi/nIlU1LWX+QKdnzCX7B+YNcxjtq7CVrJMYkuDeo/z4wi+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOk+VjPVeHDr5Ie4cowp/GDSfVfQwHwYDVR0j BBgwFoAUCowLtF+EEvfy3C9EL1/Ot5Ki2/8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmNjNjJhZS0yMGM4LTQ5NzQtYWFlOS1iMTA4ZGY4ZTJmNTkvMC8wQThDMEJCNDVG ODQxMkY3RjJEQzJGNDQyRjVGQ0VCNzkyQTJEQkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5MkEy REJGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNF Qjc5MkEyREJGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2hny3LEqBvVN0ClWWTQJwxJq92OJozFdo4 IwLOsdhw1MmO07clC6FDVENy5G6to2fIlMIO3X2zFthiDnxm8PUCrZyq34ciGkIq gbfgL/pFEas6425z8N/qoy5GBygg/VPt2AxMHBBS9NdP+TUjCgu0F5aBQny8HG9n U7en0mevtfyKT3Cj5XQPId3n4RET8KJu/jCHpp0ANQ3veyDODRBdui5l5smiu5By 24JLQ95SMMFfwU7YyMkOR7buOpxKnCtKpb3l0e8MNobB8aE7nHprMhwg3p2q8Esp 1stSgZnZ0KefnitGSh982gXJplcxfAU0Tm5/VJWeok9PKBcdwaE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:05 2026 by rpki-client