$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: b/vww3WxQaRfii8otc2CVV3WQMufqRv0GJ1f9VI4rus= Subject key identifier: DC:42:8B:48:C9:A1:C3:A3:86:EF:DD:EA:43:F2:64:6B:50:5A:0A:58 Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 4B91851CB8C87B589CCE613045C7372EC8C1A443 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: 012B Signing time: Mon 20 Apr 2026 06:12:41 +0000 Manifest this update: Mon 20 Apr 2026 06:07:41 +0000 Manifest next update: Thu 23 Apr 2026 14:08:41 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: zcdVZSiLzuXwzNXJqyWuf4sDbiVxTodHTiD95Tvz7k8=) 2: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: P95Qyv191+p7YoEkC6jDGL09lymx1IIwILfatz+6olM=) 3: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: b0d54b5VfP0y4Y/gj0JeZ9te1p1dA7COr+bHtkAFBE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:91:85:1c:b8:c8:7b:58:9c:ce:61:30:45:c7:37:2e:c8:c1:a4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Apr 20 06:07:41 2026 GMT Not After : Apr 23 14:08:41 2026 GMT Subject: CN=DC428B48C9A1C3A386EFDDEA43F2646B505A0A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2d:98:40:b7:61:09:99:19:13:f2:71:20:bf: 1d:c2:4d:46:34:52:3b:89:4d:29:1f:bc:59:34:83: 95:61:0b:ee:6a:64:52:fb:f0:f1:23:bb:ba:d9:71: ab:00:1f:27:7a:e4:92:5d:5a:df:02:fa:5f:73:e8: 40:15:c7:35:e3:ab:39:75:1a:cb:eb:c3:d3:1d:49: 1e:44:9e:20:dc:78:ef:82:e3:e6:77:60:8e:dd:99: 60:b7:7d:a2:1c:46:4c:38:7c:0b:8f:4f:67:e4:ca: 31:8a:1e:ab:46:55:b1:71:cd:46:fd:01:92:52:25: 10:0c:b6:6c:fc:0b:06:a4:94:81:39:21:f6:3c:c3: f7:30:b2:f4:66:26:96:6e:63:55:9d:16:f1:cc:a3: 36:7e:ad:d9:4a:cc:31:8e:4d:f0:ca:93:0a:16:35: 66:95:7c:92:ce:e9:93:1f:69:70:d2:2f:06:f3:87: 7f:b5:c9:94:ac:62:fa:7b:07:7f:6b:69:7b:1d:87: 18:3c:e5:93:69:8b:fa:02:2b:05:01:be:ef:34:c3: ed:32:3d:19:53:ad:3a:a7:38:54:8b:2b:92:56:78: 0e:9c:16:9f:08:d4:8d:62:c8:e4:17:38:04:b3:80: 3f:18:b9:e5:28:d3:c7:be:cb:33:bc:05:a6:54:21: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:42:8B:48:C9:A1:C3:A3:86:EF:DD:EA:43:F2:64:6B:50:5A:0A:58 X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ea:a1:49:10:d3:77:f8:e3:f9:ce:d1:80:26:92:cb:07:82: cc:de:d4:43:a9:7c:54:fc:d4:bc:4d:56:2e:44:69:52:56:15: 25:f8:9f:31:5c:8c:a3:81:37:97:45:10:21:05:bd:a2:17:b1: 9a:95:b6:34:1b:8c:63:7b:f4:14:8b:85:b8:08:05:88:17:30: 9f:c1:2a:d2:85:7e:0e:3c:95:8d:d1:7f:cb:71:27:10:6d:ae: b6:be:ba:27:f6:bf:31:9e:12:76:4f:b3:0e:77:70:37:00:de: 31:da:28:76:f0:3c:bf:b7:7c:20:0d:0a:a0:5b:70:a2:c5:e2: c2:ae:f0:67:ab:bb:e8:18:c6:78:79:4c:d5:d8:03:0c:e8:a7: 93:1e:81:88:ee:5d:8f:2d:a6:a5:cd:11:89:2a:dc:6a:b4:23: f3:85:d1:f8:bd:cc:01:09:2d:b3:e9:b8:9d:d7:9c:cd:ed:2c: e5:99:d7:2a:18:c5:87:05:97:35:2b:b8:8a:7f:5a:21:04:52: 38:11:18:77:42:bd:15:cc:37:68:b1:35:98:2b:6a:38:11:a7: c8:4a:ca:e7:f1:8d:e3:38:97:c7:56:b8:a0:4b:7b:76:1e:c8: 07:2f:2c:66:95:2e:71:cf:8f:9e:b6:ee:45:47:cf:42:16:3d: 45:7a:19:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5GFHLjIe1iczmEwRcc3LsjBpEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNjA0MjAwNjA3NDFaFw0yNjA0MjMxNDA4NDFaMDMxMTAvBgNV BAMTKERDNDI4QjQ4QzlBMUMzQTM4NkVGRERFQTQzRjI2NDZCNTA1QTBBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwLZhAt2EJmRkT8nEgvx3CTUY0 UjuJTSkfvFk0g5VhC+5qZFL78PEju7rZcasAHyd65JJdWt8C+l9z6EAVxzXjqzl1 Gsvrw9MdSR5EniDceO+C4+Z3YI7dmWC3faIcRkw4fAuPT2fkyjGKHqtGVbFxzUb9 AZJSJRAMtmz8CwaklIE5IfY8w/cwsvRmJpZuY1WdFvHMozZ+rdlKzDGOTfDKkwoW NWaVfJLO6ZMfaXDSLwbzh3+1yZSsYvp7B39raXsdhxg85ZNpi/oCKwUBvu80w+0y PRlTrTqnOFSLK5JWeA6cFp8I1I1iyOQXOASzgD8YueUo08e+yzO8BaZUIVq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3EKLSMmhw6OG793qQ/Jka1BaClgwHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/qoUkQ03f44/nO0YAmkssHgsze1EOpfFT8 1LxNVi5EaVJWFSX4nzFcjKOBN5dFECEFvaIXsZqVtjQbjGN79BSLhbgIBYgXMJ/B KtKFfg48lY3Rf8txJxBtrra+uif2vzGeEnZPsw53cDcA3jHaKHbwPL+3fCANCqBb cKLF4sKu8Geru+gYxnh5TNXYAwzop5MegYjuXY8tpqXNEYkq3Gq0I/OF0fi9zAEJ LbPpuJ3XnM3tLOWZ1yoYxYcFlzUruIp/WiEEUjgRGHdCvRXMN2ixNZgrajgRp8hK yufxjeM4l8dWuKBLe3YeyAcvLGaVLnHPj5627kVHz0IWPUV6GQQ= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:49 2026 by rpki-client