$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: pZLfm5LLRiObfCqragM8ktSRGV4Zfx+vR1bZd2H1lKY= Subject key identifier: CC:32:7E:20:93:69:10:ED:34:25:41:B1:64:E3:71:00:A6:87:E8:BC Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 770CB9326CC1B1024668FD7DF13E4F56770F4A44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: 0126 Signing time: Mon 20 Apr 2026 13:50:51 +0000 Manifest this update: Mon 20 Apr 2026 13:45:51 +0000 Manifest next update: Thu 23 Apr 2026 18:23:51 +0000 Files and hashes: 1: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: /bqEvHyYq+2+uIHs8Fzhl0x+MNXirZ7UOPOMiG1Opv8=) 2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0c:b9:32:6c:c1:b1:02:46:68:fd:7d:f1:3e:4f:56:77:0f:4a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Apr 20 13:45:51 2026 GMT Not After : Apr 23 18:23:51 2026 GMT Subject: CN=CC327E20936910ED342541B164E37100A687E8BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:15:7e:6f:23:e1:c8:3e:49:d8:72:29:d7: 57:d3:ba:2a:9c:14:2f:ac:44:2f:ac:71:5b:e5:29: f6:dc:29:6c:a1:06:d9:aa:66:f8:6f:4a:4e:2a:cb: 9d:d8:6e:82:09:85:97:81:86:5c:20:ca:a2:0e:35: e9:a2:24:20:d9:bd:37:66:42:e5:a9:f5:9e:6b:a3: 22:b1:6a:13:d3:df:d9:c6:f5:f9:d7:d4:eb:8f:ca: 00:e2:37:74:df:c1:6b:79:f7:c2:2b:cc:42:6e:c2: 67:90:b2:98:f3:a5:c4:f9:9a:56:e8:cd:9a:be:f8: f3:00:74:4d:bc:02:8c:16:b1:37:1a:76:82:ac:bc: 59:fa:aa:22:f6:94:9a:eb:83:6d:8b:00:17:15:86: ec:c4:ac:11:40:84:9f:72:77:0d:74:59:34:fc:ca: f0:14:9c:09:f4:f3:c2:71:b1:94:87:82:7d:67:f4: b3:d8:dd:a6:ee:04:29:80:af:c7:1b:2d:9f:2a:fc: de:be:18:61:90:b3:84:0c:a4:59:34:9d:c8:c2:b0: bf:d3:c3:f9:b5:a8:6c:e3:43:46:28:98:29:7d:b4: 7f:b6:ed:0b:aa:34:fe:85:dd:5b:14:91:f7:a5:76: 01:ad:fa:98:43:a5:aa:d3:71:de:ff:8c:da:ff:91: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:32:7E:20:93:69:10:ED:34:25:41:B1:64:E3:71:00:A6:87:E8:BC X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:87:ec:97:22:dd:70:c3:91:77:03:b4:a2:95:ab:93:6f:0b: 7f:23:86:e6:cb:15:cf:32:0e:b3:82:43:98:97:73:e6:86:79: 68:77:c9:76:ea:f5:14:3c:80:46:cf:bc:1d:3a:b3:68:66:52: ac:24:c8:c8:7e:f0:51:97:d0:56:aa:26:09:19:e3:f7:66:b2: f3:1a:ce:04:9b:03:07:75:8c:21:58:96:c5:75:a4:c6:b5:58: e1:ea:80:4a:41:1d:20:78:e3:bf:3d:d8:17:db:f3:18:6c:ac: 64:57:bb:45:41:41:e8:38:c9:19:a5:09:96:a7:9a:36:d2:61: cd:55:2f:2b:0b:ab:c9:a5:42:0c:12:fe:3c:27:0b:14:cf:7e: 18:c0:c6:dd:63:aa:bd:a0:b4:57:87:7c:0f:81:21:6e:46:13: d1:9c:fe:55:1e:99:50:86:5d:fa:c4:7d:47:65:0d:74:23:64: c2:89:76:c8:c2:47:2c:38:9f:f8:ca:28:11:89:25:24:a5:b6: 68:10:64:a7:53:c1:73:76:47:ea:38:4d:b2:54:f0:6a:bd:0f: 89:67:14:8e:0a:d4:27:66:a0:17:49:dc:85:29:43:47:50:9b: a8:92:50:21:2f:c0:b9:c4:1e:83:46:b2:ec:d0:e2:b7:67:0e: d7:93:4f:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwy5MmzBsQJGaP198T5PVncPSkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNjA0MjAxMzQ1NTFaFw0yNjA0MjMxODIzNTFaMDMxMTAvBgNV BAMTKENDMzI3RTIwOTM2OTEwRUQzNDI1NDFCMTY0RTM3MTAwQTY4N0U4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRBV+byPhyD5J2HIp11fTuiqc FC+sRC+scVvlKfbcKWyhBtmqZvhvSk4qy53YboIJhZeBhlwgyqIONemiJCDZvTdm QuWp9Z5royKxahPT39nG9fnX1OuPygDiN3TfwWt598IrzEJuwmeQspjzpcT5mlbo zZq++PMAdE28AowWsTcadoKsvFn6qiL2lJrrg22LABcVhuzErBFAhJ9ydw10WTT8 yvAUnAn088JxsZSHgn1n9LPY3abuBCmAr8cbLZ8q/N6+GGGQs4QMpFk0ncjCsL/T w/m1qGzjQ0YomCl9tH+27QuqNP6F3VsUkfeldgGt+phDparTcd7/jNr/kaOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzDJ+IJNpEO00JUGxZONxAKaH6LwwHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2H7Jci3XDDkXcDtKKVq5NvC38jhubLFc8y DrOCQ5iXc+aGeWh3yXbq9RQ8gEbPvB06s2hmUqwkyMh+8FGX0FaqJgkZ4/dmsvMa zgSbAwd1jCFYlsV1pMa1WOHqgEpBHSB447892Bfb8xhsrGRXu0VBQeg4yRmlCZan mjbSYc1VLysLq8mlQgwS/jwnCxTPfhjAxt1jqr2gtFeHfA+BIW5GE9Gc/lUemVCG XfrEfUdlDXQjZMKJdsjCRyw4n/jKKBGJJSSltmgQZKdTwXN2R+o4TbJU8Gq9D4ln FI4K1CdmoBdJ3IUpQ0dQm6iSUCEvwLnEHoNGsuzQ4rdnDteTT/g= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:43 2026 by rpki-client