$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: ncp7WupSu7/+D4cxqrvkxUCknZ5XT4Ar/D7dqQ+kmOQ= Subject key identifier: 11:F5:23:4E:D2:EF:0B:C7:A3:09:1E:6D:54:5C:C7:8C:47:37:C0:89 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 70E22C409918003CD0775A178812F707956A84F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 056A Signing time: Thu 16 Apr 2026 00:00:44 +0000 Manifest this update: Wed 15 Apr 2026 23:55:44 +0000 Manifest next update: Sun 19 Apr 2026 02:47:44 +0000 Files and hashes: 1: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) 2: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: rcI+qxDRlVHymXzlcVTg2iSBwtk3G22eUbMXOr3ATMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e2:2c:40:99:18:00:3c:d0:77:5a:17:88:12:f7:07:95:6a:84:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Apr 15 23:55:44 2026 GMT Not After : Apr 19 02:47:44 2026 GMT Subject: CN=11F5234ED2EF0BC7A3091E6D545CC78C4737C089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9e:1a:42:87:81:9c:a1:db:f6:00:4f:71:4d: db:5d:f7:64:ce:88:86:6a:dc:69:1c:49:21:d0:62: 57:df:36:89:07:26:fa:51:07:c0:28:56:44:43:6d: bf:28:b3:73:69:11:94:09:bf:b9:1b:97:25:0d:05: f1:6c:8b:02:61:7f:4a:ab:ef:b3:22:ae:32:94:25: 59:4a:c9:d6:f8:74:6e:35:02:2e:02:31:86:24:56: e6:df:94:3b:ea:d0:00:f4:9c:20:8f:64:f3:01:71: a7:67:3e:81:fd:55:ea:77:46:5c:ea:96:53:35:ae: a6:e0:fa:63:ca:c7:5b:6d:1e:cb:88:68:c7:15:5e: d2:fa:b6:a2:26:5a:62:1f:99:00:10:17:57:9d:3a: 63:c1:6d:38:02:81:fc:dc:7e:17:21:50:ea:c6:97: 5f:13:cc:2a:aa:f7:70:cb:95:a5:e2:71:71:67:e6: 0f:db:aa:7c:12:30:a4:48:fd:bc:5c:f5:1d:a0:1e: 63:30:60:2c:17:ab:2c:cf:77:00:6f:52:e4:2c:21: 99:0b:49:02:04:23:ac:c0:4d:e1:83:65:ce:dc:57: da:e2:15:4c:d2:c6:d1:1f:ee:17:5c:ff:50:3c:f9: ce:a0:1d:ee:c4:d0:33:7c:68:b9:4e:1c:39:d5:7e: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F5:23:4E:D2:EF:0B:C7:A3:09:1E:6D:54:5C:C7:8C:47:37:C0:89 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b8:f6:42:1a:32:0a:b4:87:09:12:8e:4b:6d:51:f3:67:1a: bb:b9:ec:90:90:91:ca:27:f5:7c:c5:20:c0:53:49:0d:0c:b5: 5e:b1:fc:51:f4:32:1f:1a:17:16:95:dd:9b:91:2a:ce:e9:7b: 5c:84:04:d1:26:79:c7:2a:ca:e3:8a:a6:1d:39:ba:b1:30:34: 15:a3:e8:ca:6a:d0:1a:db:39:57:53:83:73:50:85:b8:ec:54: 5a:fa:3a:61:ee:80:9b:4d:6a:81:85:14:89:7b:eb:5a:b0:8d: f9:c8:23:b2:7d:b6:c1:14:b4:1e:15:e5:85:d1:d2:ab:7c:9e: 06:f6:41:88:02:60:ba:90:e0:e6:c4:27:2b:59:03:b2:70:92: fd:59:24:3f:f5:3f:55:83:fa:37:bb:8e:45:0c:8d:64:22:24: 1e:a6:d7:19:2e:0b:66:12:94:eb:78:fe:76:6f:37:c9:e7:0f: 80:8b:db:e6:8e:9d:76:ae:82:5d:1f:26:51:50:4b:86:f5:b3: 7d:36:8d:9d:07:40:3d:1a:6d:d3:36:12:56:62:ca:8b:70:c4: 9a:c9:68:2d:c0:37:1a:8c:b5:97:85:8f:cf:2c:5a:35:22:03: 97:8c:df:a6:bd:73:34:d9:11:1b:de:25:28:8e:29:1b:fb:23: 7c:32:37:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcOIsQJkYADzQd1oXiBL3B5VqhPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNjA0MTUyMzU1NDRaFw0yNjA0MTkwMjQ3NDRaMDMxMTAvBgNV BAMTKDExRjUyMzRFRDJFRjBCQzdBMzA5MUU2RDU0NUNDNzhDNDczN0MwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnhpCh4Gcodv2AE9xTdtd92TO iIZq3GkcSSHQYlffNokHJvpRB8AoVkRDbb8os3NpEZQJv7kblyUNBfFsiwJhf0qr 77MirjKUJVlKydb4dG41Ai4CMYYkVubflDvq0AD0nCCPZPMBcadnPoH9Vep3Rlzq llM1rqbg+mPKx1ttHsuIaMcVXtL6tqImWmIfmQAQF1edOmPBbTgCgfzcfhchUOrG l18TzCqq93DLlaXicXFn5g/bqnwSMKRI/bxc9R2gHmMwYCwXqyzPdwBvUuQsIZkL SQIEI6zATeGDZc7cV9riFUzSxtEf7hdc/1A8+c6gHe7E0DN8aLlOHDnVfuP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEfUjTtLvC8ejCR5tVFzHjEc3wIkwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+49kIaMgq0hwkSjkttUfNnGru57JCQkcon 9XzFIMBTSQ0MtV6x/FH0Mh8aFxaV3ZuRKs7pe1yEBNEmeccqyuOKph05urEwNBWj 6Mpq0BrbOVdTg3NQhbjsVFr6OmHugJtNaoGFFIl761qwjfnII7J9tsEUtB4V5YXR 0qt8ngb2QYgCYLqQ4ObEJytZA7Jwkv1ZJD/1P1WD+je7jkUMjWQiJB6m1xkuC2YS lOt4/nZvN8nnD4CL2+aOnXaugl0fJlFQS4b1s302jZ0HQD0abdM2ElZiyotwxJrJ aC3ANxqMtZeFj88sWjUiA5eM36a9czTZERveJSiOKRv7I3wyN8M= -----END CERTIFICATE-----Generated at Fri Apr 17 10:27:55 2026 by rpki-client