$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft File: C8AC2212A272ECEAE88D5232072578922C0E2E05.mft (raw, json) Hash identifier: /NGQonplOXyK+MfBNz3b5A9X3WUeCn3hAaBZWNBGrxQ= Subject key identifier: C0:FC:CE:75:06:82:D0:16:C5:35:66:00:D1:D9:8B:C2:A8:F8:34:19 Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Certificate serial: 6FABC54D86B646734065AE1BF66F0730D8355C69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft Manifest number: 0426 Signing time: Thu 16 Apr 2026 00:40:06 +0000 Manifest this update: Thu 16 Apr 2026 00:35:06 +0000 Manifest next update: Sun 19 Apr 2026 08:55:06 +0000 Files and hashes: 1: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: gNg3pSVKH2ZGTQUKj2gYHIgoAzjmyWJ8bVXnPWnC+00=) 2: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 7+14GGdnKYA1ZHAWIx7SieKlT4Qpyh9xXAdG5rCu8fQ=) 3: C8AC2212A272ECEAE88D5232072578922C0E2E05.crl (hash: Zd4KUebeAmb+3hZXDar4Xf9dadyAqo/LmLjewX3T6lU=) 4: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: gVPQrVQX9oWdBIjWPQSJvyIQ3AEVj+vaeGmFfblKRbs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ab:c5:4d:86:b6:46:73:40:65:ae:1b:f6:6f:07:30:d8:35:5c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Validity Not Before: Apr 16 00:35:06 2026 GMT Not After : Apr 19 08:55:06 2026 GMT Subject: CN=C0FCCE750682D016C5356600D1D98BC2A8F83419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:64:38:aa:79:d5:8e:08:41:fa:2f:f3:7e: e7:f1:5d:ed:a5:33:42:e3:b6:e0:96:8d:92:bb:1f: 2d:46:08:5b:58:58:68:cd:ea:97:b5:ab:20:ee:c2: ae:44:99:17:d4:d6:2f:a4:12:f5:d9:dc:5d:97:e2: e9:34:30:57:bd:9f:ec:2f:09:c3:b7:1a:ad:e8:4e: fc:2a:5b:c3:9a:5a:71:ae:70:ba:28:a4:f7:e5:57: 24:bd:5e:55:07:b7:f0:54:e7:3f:3f:7e:09:a6:45: b5:2c:55:fd:8b:dd:4d:b3:ee:44:f4:8c:58:6a:cc: 3e:28:99:ef:e5:c9:18:e2:dc:a0:61:9b:f6:17:97: 3f:e1:ac:90:4c:67:7e:17:73:53:bc:c0:02:06:72: f4:41:56:6e:4e:9f:55:b2:b6:19:d9:dd:a1:89:fc: ae:0c:e6:93:37:ae:04:21:54:ad:66:0b:14:86:7a: 3e:75:ae:90:84:b5:2e:e1:60:7d:88:71:36:c5:67: 79:74:e3:7b:31:a0:d8:fa:8f:b5:ee:2c:9d:57:bf: c0:a1:90:d9:18:3d:94:cc:e3:4f:95:8a:55:f4:f6: 57:76:d4:f9:3d:2b:98:63:44:78:e8:a1:b3:e3:55: e6:f2:be:87:97:03:1a:58:75:16:ba:b3:9c:3e:c8: 13:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FC:CE:75:06:82:D0:16:C5:35:66:00:D1:D9:8B:C2:A8:F8:34:19 X509v3 Authority Key Identifier: keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:11:87:1c:a6:34:32:65:6a:d0:c1:b6:27:db:2d:42:62:e4: 1c:91:48:87:a5:41:47:9d:af:ae:93:78:e1:68:7b:e5:11:74: 12:1e:6a:7d:77:8c:e7:34:79:06:ce:4c:3f:09:61:52:5a:95: 2f:55:f8:fe:fe:06:d9:ae:91:1c:78:1a:7b:ce:d2:dc:51:62: ba:d1:72:e4:ff:f1:43:dd:2a:82:0a:8a:b5:fb:fd:3c:c2:c0: fb:b7:06:d5:d2:d2:40:10:d7:24:25:f9:f9:1e:c0:ec:2e:0c: e9:a5:96:43:4b:52:11:58:74:3b:20:3c:d6:73:5c:76:e7:57: 3b:4f:f3:ff:43:d9:67:f6:7f:7b:d8:26:f5:28:2a:5f:9b:87: 93:8a:a6:4f:a3:ba:31:da:b4:32:9b:08:a2:25:e9:15:d0:e4: 2d:ca:ab:89:dd:72:73:2e:25:0e:1a:b0:ca:40:2a:50:d4:32: 64:0f:49:17:20:83:6e:20:6d:60:7e:65:ce:ba:02:2d:58:6e: b3:f4:54:7f:9a:05:be:fc:b5:06:a0:82:07:e3:41:55:f1:c7: d3:76:14:b4:bd:6d:f0:7b:48:5d:bc:29:1b:80:c8:7e:45:d1: 30:7d:62:92:ab:fb:df:db:6b:01:e2:ba:a1:65:b0:d6:34:c1: dc:91:09:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6vFTYa2RnNAZa4b9m8HMNg1XGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIy QzBFMkUwNTAeFw0yNjA0MTYwMDM1MDZaFw0yNjA0MTkwODU1MDZaMDMxMTAvBgNV BAMTKEMwRkNDRTc1MDY4MkQwMTZDNTM1NjYwMEQxRDk4QkMyQThGODM0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yGQ4qnnVjghB+i/zfufxXe2l M0LjtuCWjZK7Hy1GCFtYWGjN6pe1qyDuwq5EmRfU1i+kEvXZ3F2X4uk0MFe9n+wv CcO3Gq3oTvwqW8OaWnGucLoopPflVyS9XlUHt/BU5z8/fgmmRbUsVf2L3U2z7kT0 jFhqzD4ome/lyRji3KBhm/YXlz/hrJBMZ34Xc1O8wAIGcvRBVm5On1WythnZ3aGJ /K4M5pM3rgQhVK1mCxSGej51rpCEtS7hYH2IcTbFZ3l043sxoNj6j7XuLJ1Xv8Ch kNkYPZTM40+VilX09ld21Pk9K5hjRHjoobPjVebyvoeXAxpYdRa6s5w+yBPXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwPzOdQaC0BbFNWYA0dmLwqj4NBkwHwYDVR0j BBgwFoAUyKwiEqJy7OrojVIyByV4kiwOLgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFlOTIzOC00MjY3LTQ4ZWYtYjAyZS0xZDdkMDQ0MDA5NDEvMC9DOEFDMjIxMkEy NzJFQ0VBRTg4RDUyMzIwNzI1Nzg5MjJDMEUyRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIyQzBF MkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4 OTIyQzBFMkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYRhxymNDJlatDBtifbLUJi5ByRSIelQUed r66TeOFoe+URdBIean13jOc0eQbOTD8JYVJalS9V+P7+BtmukRx4GnvO0txRYrrR cuT/8UPdKoIKirX7/TzCwPu3BtXS0kAQ1yQl+fkewOwuDOmllkNLUhFYdDsgPNZz XHbnVztP8/9D2Wf2f3vYJvUoKl+bh5OKpk+jujHatDKbCKIl6RXQ5C3Kq4ndcnMu JQ4asMpAKlDUMmQPSRcgg24gbWB+Zc66Ai1YbrP0VH+aBb78tQagggfjQVXxx9N2 FLS9bfB7SF28KRuAyH5F0TB9YpKr+9/bawHiuqFlsNY0wdyRCaw= -----END CERTIFICATE-----Generated at Fri Apr 17 11:59:19 2026 by rpki-client