$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft File: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft (raw, json) Hash identifier: QFY0UVuAqE7OqlUbRbTmLubfz1pKN8uP3SpeYHsK2ns= Subject key identifier: 50:5D:FF:87:10:55:AE:68:1D:F8:12:0C:A5:61:A8:BC:0A:37:1C:18 Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Certificate serial: 57A960D6BC86705BB62F1670B7132E0331E35A68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft Manifest number: 0265 Signing time: Tue 21 Apr 2026 07:20:00 +0000 Manifest this update: Tue 21 Apr 2026 07:15:00 +0000 Manifest next update: Fri 24 Apr 2026 10:22:00 +0000 Files and hashes: 1: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: 4KcX41CtOJMt4t76xcKkYT/+3plTpXoSzJ461Xo8YIo=) 2: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: UruVCT7EzglBLQOHOJwF47V7q6XPl9DE6uRKzVhhb/I=) 3: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl (hash: k9a9dCleK8d8dCAwEW40/5krD2yh0Hr9Ji+F4eZQzT0=) 4: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: vunLmdHHO6g+ZbAPo77lgTR1FOxa+TjAkWZuqlVfVlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 10:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a9:60:d6:bc:86:70:5b:b6:2f:16:70:b7:13:2e:03:31:e3:5a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Validity Not Before: Apr 21 07:15:00 2026 GMT Not After : Apr 24 10:22:00 2026 GMT Subject: CN=505DFF871055AE681DF8120CA561A8BC0A371C18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:d6:6a:54:5f:97:0f:a8:4d:d1:33:39:78: 56:12:09:0c:12:3e:03:1e:ab:b5:60:1f:94:e2:68: d6:f9:05:6a:33:53:c3:7a:a0:0f:00:f7:a7:a9:76: 49:13:6b:37:b1:b4:f4:6c:f0:76:29:f3:54:12:a8: 67:6e:0e:5c:ee:e4:05:7e:60:e6:d1:79:fd:59:d0: d8:08:5f:a6:b8:95:f4:c3:b1:db:6b:8f:07:41:9d: f4:4e:80:8f:f4:33:e3:10:d8:16:38:4a:0c:95:31: 8e:81:a6:6f:68:1d:b3:d7:4f:64:53:84:8a:12:ff: c6:41:96:23:86:83:d9:4d:05:03:db:58:24:ff:0e: be:36:10:3d:e6:34:b3:77:b9:23:f1:40:03:52:50: 4f:86:00:cf:85:54:81:8b:66:39:dc:a6:b5:26:08: d6:bc:39:cd:5b:35:90:1b:9a:12:9e:a6:28:06:24: 00:86:c1:fc:5a:fb:05:06:7d:6f:27:9c:0c:60:1d: 3c:29:cf:0f:89:09:3b:b2:ba:1f:5d:cf:92:36:d6: 28:83:a2:ab:c2:09:7b:b6:9f:d0:6b:c8:c1:b1:52: ef:37:77:4d:02:8d:83:3a:ce:e2:19:ea:72:8d:c0: dd:4f:b0:81:59:2c:01:18:68:72:e7:ef:e4:e5:b8: 3a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5D:FF:87:10:55:AE:68:1D:F8:12:0C:A5:61:A8:BC:0A:37:1C:18 X509v3 Authority Key Identifier: keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:3e:cf:8f:4e:e3:13:ff:1e:49:1e:3e:c2:7d:70:20:1f:93: df:13:68:2a:f3:52:95:4b:ed:9a:1c:59:d5:33:8e:89:27:be: dc:64:30:f8:2c:e0:1b:32:99:51:76:0a:e2:d5:da:99:6f:b0: 8c:24:63:c0:54:b2:ca:93:5c:b5:33:66:dc:fa:48:37:83:2b: 65:98:1f:03:54:e8:52:f4:a1:aa:97:09:d7:f5:b7:98:3f:40: 19:a0:3a:ae:69:17:17:5c:df:d2:dd:1c:e4:36:01:11:75:6a: fe:52:93:54:5b:51:83:4f:66:1c:a4:f4:da:f9:39:53:85:98: b7:dd:2c:f3:0d:47:23:ab:bf:36:8e:c4:78:06:6f:2a:ec:6f: 2b:c2:7c:f4:7e:9d:40:7a:07:96:bd:8f:3f:29:65:f1:c5:80: 30:d4:e8:b9:b1:ef:5e:64:8a:d5:46:3e:6a:66:20:ff:43:52: 2b:01:ef:42:ee:a5:66:8f:03:fa:be:91:17:f4:98:f5:9f:71: 8e:f7:41:41:3e:8d:cb:d8:4c:04:34:a1:62:fd:ea:4e:ed:78: 1b:23:ca:76:fc:22:d0:d2:e5:aa:54:ed:12:50:c5:9c:43:86: 89:8d:55:7f:38:e9:29:75:43:d0:1a:24:93:86:c2:24:ee:90: b7:da:4c:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6lg1ryGcFu2LxZwtxMuAzHjWmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0 MDhCQTkzRDAeFw0yNjA0MjEwNzE1MDBaFw0yNjA0MjQxMDIyMDBaMDMxMTAvBgNV BAMTKDUwNURGRjg3MTA1NUFFNjgxREY4MTIwQ0E1NjFBOEJDMEEzNzFDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoe9ZqVF+XD6hN0TM5eFYSCQwS PgMeq7VgH5TiaNb5BWozU8N6oA8A96epdkkTazextPRs8HYp81QSqGduDlzu5AV+ YObRef1Z0NgIX6a4lfTDsdtrjwdBnfROgI/0M+MQ2BY4SgyVMY6Bpm9oHbPXT2RT hIoS/8ZBliOGg9lNBQPbWCT/Dr42ED3mNLN3uSPxQANSUE+GAM+FVIGLZjncprUm CNa8Oc1bNZAbmhKepigGJACGwfxa+wUGfW8nnAxgHTwpzw+JCTuyuh9dz5I21iiD oqvCCXu2n9BryMGxUu83d00CjYM6zuIZ6nKNwN1PsIFZLAEYaHLn7+TluDrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUF3/hxBVrmgd+BIMpWGovAo3HBgwHwYDVR0j BBgwFoAUiyN7K8BYG1Vt1bSwhH+cg0CLqT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmIwYmRkNS02ZTMwLTRhMTAtYjk5My03N2Q0ODI1MWYzYTEvMC84QjIzN0IyQkMw NTgxQjU1NkRENUI0QjA4NDdGOUM4MzQwOEJBOTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0MDhC QTkzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiMGJkZDUtNmUzMC00YTEwLWI5 OTMtNzdkNDgyNTFmM2ExLzAvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlD ODM0MDhCQTkzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFE+z49O4xP/HkkePsJ9cCAfk98TaCrzUpVL 7ZocWdUzjoknvtxkMPgs4BsymVF2CuLV2plvsIwkY8BUssqTXLUzZtz6SDeDK2WY HwNU6FL0oaqXCdf1t5g/QBmgOq5pFxdc39LdHOQ2ARF1av5Sk1RbUYNPZhyk9Nr5 OVOFmLfdLPMNRyOrvzaOxHgGbyrsbyvCfPR+nUB6B5a9jz8pZfHFgDDU6Lmx715k itVGPmpmIP9DUisB70LupWaPA/q+kRf0mPWfcY73QUE+jcvYTAQ0oWL96k7teBsj ynb8ItDS5apU7RJQxZxDhomNVX846Sl1Q9AaJJOGwiTukLfaTA0= -----END CERTIFICATE-----Generated at Wed Apr 22 09:52:54 2026 by rpki-client