$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft File: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft (raw, json) Hash identifier: W7PNCpSItpulpAeappeBjUx5cHDJa7knOzXrfdj4UUs= Subject key identifier: 7D:E7:F3:C6:4E:2F:D4:9F:C7:17:19:04:29:02:A9:B4:01:DB:F2:40 Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 Certificate issuer: /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Certificate serial: 4C1890CFC4AF0B079748E42F222954E40695E249 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft Manifest number: 0263 Signing time: Sun 05 Apr 2026 12:12:00 +0000 Manifest this update: Sun 05 Apr 2026 12:07:00 +0000 Manifest next update: Wed 08 Apr 2026 18:18:00 +0000 Files and hashes: 1: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: rIYCgafp/WEWzvlvx7yaeEO/w4xXICOq4QKmq/Vz29E=) 2: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl (hash: bCuJv8M0xa4vFa3Lb4Hd5fPvW7VS8Jyf5zxyWvxF3As=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Apr 2026 18:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:18:90:cf:c4:af:0b:07:97:48:e4:2f:22:29:54:e4:06:95:e2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Validity Not Before: Apr 5 12:07:00 2026 GMT Not After : Apr 8 18:18:00 2026 GMT Subject: CN=7DE7F3C64E2FD49FC71719042902A9B401DBF240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:e6:cb:8c:68:25:db:27:b0:80:a4:98:01: bd:62:89:9c:7e:bd:d4:77:49:5f:31:90:e1:cf:03: b3:88:15:32:25:ca:d0:a2:51:40:67:c9:21:1b:61: 16:e7:22:c2:63:ea:fa:87:4b:76:01:94:1d:c8:36: 36:7a:a9:a7:06:c8:37:07:4e:4a:44:cc:5f:5d:e2: cf:95:92:66:4a:25:fb:31:0c:d0:b0:b0:b8:94:ec: 18:bb:f7:03:9f:2c:06:d3:b2:00:8a:1c:b7:e5:44: bc:4d:d2:6f:41:28:62:11:4c:22:70:7b:01:df:4d: dd:2a:cc:6a:3d:ef:a0:9b:ae:0b:57:6f:29:4f:e9: a3:fa:a2:63:bb:96:0b:a3:03:79:9b:5e:dc:97:88: 1f:66:07:3b:ce:90:3c:f5:11:da:3b:63:b5:27:fb: fc:ec:2f:cb:03:6b:7f:6a:64:b7:f3:ca:a9:20:a5: cd:24:09:1b:9a:83:f2:c4:18:00:96:b8:4d:48:f1: 89:c3:e8:28:e9:d7:d5:6d:ff:03:1b:a1:20:0a:0c: ff:47:7a:ae:e0:79:8e:55:ec:1b:24:16:dc:f2:bd: cf:b0:6b:b6:c9:c3:88:e7:58:ce:06:6e:a1:6a:5d: 51:01:98:aa:31:1f:a7:54:f0:b0:27:e7:3b:54:56: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E7:F3:C6:4E:2F:D4:9F:C7:17:19:04:29:02:A9:B4:01:DB:F2:40 X509v3 Authority Key Identifier: keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7c:61:2b:67:b9:6b:d8:ae:cf:e9:8d:56:2c:26:ca:c3:c6: 24:8e:ad:c1:b9:7d:60:2d:30:4f:c7:25:07:1c:fa:84:26:10: e2:0f:41:ea:01:16:3a:a0:e7:aa:ed:92:15:2d:84:71:36:eb: a2:e9:20:e0:9e:c5:8e:68:01:c6:bb:79:c3:76:ca:33:ee:e8: ff:a0:5b:3a:c5:4a:3f:b0:b8:73:e8:b0:bb:fe:d2:5a:58:ef: d6:29:55:40:82:f9:02:9a:fe:73:d8:67:f6:e0:d8:4c:c2:c5: a6:64:d7:7a:de:bf:af:58:ee:f1:3b:47:c0:3e:a3:0c:82:ab: 14:5b:90:25:e7:a4:03:3c:c5:e0:d9:d1:58:ae:1c:48:6f:52: 5c:75:d7:81:2a:6e:c0:5d:4c:76:44:0a:51:9a:aa:fd:cc:cb: 95:f5:f2:dc:16:bf:46:cc:0b:b5:33:14:e7:6e:cb:ba:b5:e3: 55:65:91:16:b3:f6:ef:c1:6f:57:ce:b4:04:61:57:24:21:a5: 82:f4:c5:63:60:29:8f:96:d1:e7:a9:34:0f:34:73:6a:b7:f0: 9e:cc:6f:7e:e7:0a:03:20:79:2d:aa:27:29:15:d0:1a:78:8a: 87:f5:f4:4c:52:fc:4e:20:b1:0d:f2:16:ea:54:a3:c2:f2:dd: ed:96:6d:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBiQz8SvCweXSOQvIilU5AaV4kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG MDNGMTFBNzAeFw0yNjA0MDUxMjA3MDBaFw0yNjA0MDgxODE4MDBaMDMxMTAvBgNV BAMTKDdERTdGM0M2NEUyRkQ0OUZDNzE3MTkwNDI5MDJBOUI0MDFEQkYyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPP+bLjGgl2yewgKSYAb1iiZx+ vdR3SV8xkOHPA7OIFTIlytCiUUBnySEbYRbnIsJj6vqHS3YBlB3INjZ6qacGyDcH TkpEzF9d4s+VkmZKJfsxDNCwsLiU7Bi79wOfLAbTsgCKHLflRLxN0m9BKGIRTCJw ewHfTd0qzGo976CbrgtXbylP6aP6omO7lgujA3mbXtyXiB9mBzvOkDz1Edo7Y7Un +/zsL8sDa39qZLfzyqkgpc0kCRuag/LEGACWuE1I8YnD6Cjp19Vt/wMboSAKDP9H eq7geY5V7BskFtzyvc+wa7bJw4jnWM4GbqFqXVEBmKoxH6dU8LAn5ztUVtJvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfefzxk4v1J/HFxkEKQKptAHb8kAwHwYDVR0j BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1 NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG MTFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBD RDFGMDNGMTFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJN8YStnuWvYrs/pjVYsJsrDxiSOrcG5fWAt ME/HJQcc+oQmEOIPQeoBFjqg56rtkhUthHE266LpIOCexY5oAca7ecN2yjPu6P+g WzrFSj+wuHPosLv+0lpY79YpVUCC+QKa/nPYZ/bg2EzCxaZk13rev69Y7vE7R8A+ owyCqxRbkCXnpAM8xeDZ0ViuHEhvUlx114EqbsBdTHZEClGaqv3My5X18twWv0bM C7UzFOduy7q141VlkRaz9u/Bb1fOtARhVyQhpYL0xWNgKY+W0eepNA80c2q38J7M b37nCgMgeS2qJykV0Bp4iof19ExS/E4gsQ3yFupUo8Ly3e2Wbdc= -----END CERTIFICATE-----Generated at Mon Apr 6 14:53:31 2026 by rpki-client