$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: ckztekbBRzylMo9Friu3W2rLCLpvUSLqpN9Cs037Dmc= Subject key identifier: 81:E1:F2:67:CE:B3:84:A9:B2:67:44:85:19:B6:2B:36:37:34:72:7E Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 4AA1102CCBEBBB1C923C266B4EADE426B49684BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: 014F Signing time: Tue 21 Apr 2026 13:21:15 +0000 Manifest this update: Tue 21 Apr 2026 13:16:15 +0000 Manifest next update: Fri 24 Apr 2026 16:31:15 +0000 Files and hashes: 1: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: 8cewFPLuyArtugKlZDxPydivdpl6gb8C4w3o7gohs6Q=) 2: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: XsyvDRA0TNZEIvbyLzo4xfiEE9IebAVqTJNT7CQxRoY=) 3: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: Evf83FHus1TbSWCHKF0zbs3cJHz5Pi+954L6mJq7rOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a1:10:2c:cb:eb:bb:1c:92:3c:26:6b:4e:ad:e4:26:b4:96:84:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Apr 21 13:16:15 2026 GMT Not After : Apr 24 16:31:15 2026 GMT Subject: CN=81E1F267CEB384A9B267448519B62B363734727E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4e:9c:20:d8:95:f9:ab:eb:6f:14:cf:11:e5: ef:81:cc:57:b5:a9:57:6a:cf:70:9f:41:21:58:6c: cc:2f:96:65:68:80:cf:57:2d:7b:b8:cc:74:91:ec: 5a:69:47:8f:03:71:d7:18:10:ab:09:c4:38:d3:e5: 60:e6:6b:66:28:33:e7:52:f6:20:1c:ce:4b:31:66: ac:cb:be:fd:fe:8d:00:54:8a:06:e5:5d:5f:b9:24: e4:66:4a:62:43:a4:b8:43:71:a4:61:52:52:25:3b: 2a:70:09:df:35:76:9b:7c:90:eb:ef:ae:3b:6e:47: a5:b6:cf:fc:94:67:96:f6:fc:4b:10:4c:9f:cc:df: d3:fb:01:a1:76:5e:62:31:58:96:ab:2a:0a:7a:43: 00:bc:96:4a:d4:5d:2e:5f:b8:90:94:d1:5c:77:ad: db:c1:f7:fc:c7:a0:47:68:66:87:03:08:a9:22:fe: 1c:b1:db:0c:dd:c7:11:c0:14:83:80:3d:e3:50:fe: b7:4a:59:42:16:2a:b3:55:fc:94:e5:c3:18:89:32: 50:7a:2e:b5:8a:d1:3b:7d:5e:f1:75:84:c0:04:4b: 23:59:83:02:db:6b:68:f5:a3:1f:28:82:3d:48:55: a1:c2:ad:e7:7e:74:49:83:7c:e8:d7:fe:8a:d2:a9: c3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E1:F2:67:CE:B3:84:A9:B2:67:44:85:19:B6:2B:36:37:34:72:7E X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f6:e3:90:1a:b4:f7:d1:09:99:53:7c:b3:17:7e:d3:b0:eb: 5d:ee:ea:3e:9c:3a:56:02:8a:07:49:19:80:57:e5:a5:05:85: e7:60:48:f4:1c:22:f3:33:e5:fe:64:d1:c6:b3:86:46:db:65: fb:5a:11:b4:b2:5f:a9:e1:ac:05:3b:18:dc:11:8f:7a:79:f9: ed:47:23:4a:de:a6:ef:8e:62:e4:b1:6c:03:4f:7c:76:89:1f: 76:93:47:43:98:8f:83:07:f0:67:7e:23:67:f8:37:d9:70:32: 0a:85:fe:47:d7:45:85:fa:2a:58:00:02:ee:e9:55:55:4a:ff: 9d:77:54:5f:6c:52:8b:d0:bf:a3:27:dc:9c:1f:53:77:a1:5b: bc:61:d7:06:58:f7:a4:18:36:c6:c7:d0:da:7f:e7:28:d4:4c: ae:ed:0a:82:53:37:bf:3c:6c:b4:3a:f1:8e:f7:25:98:06:55: 33:02:d2:ca:e8:b4:ce:04:ff:5c:31:f1:84:19:27:4a:91:3f: 61:fc:ba:d0:99:e6:24:d7:d8:0b:ff:d7:b7:52:b3:8d:c7:fa: 45:3a:b9:ad:b8:8c:5a:67:aa:08:44:56:a3:d0:e5:cd:c7:0a: 2e:77:24:b2:41:a6:bf:f7:45:4f:ff:cc:9f:36:6f:44:00:4b: 43:9f:fa:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqEQLMvruxySPCZrTq3kJrSWhL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNjA0MjExMzE2MTVaFw0yNjA0MjQxNjMxMTVaMDMxMTAvBgNV BAMTKDgxRTFGMjY3Q0VCMzg0QTlCMjY3NDQ4NTE5QjYyQjM2MzczNDcyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsTpwg2JX5q+tvFM8R5e+BzFe1 qVdqz3CfQSFYbMwvlmVogM9XLXu4zHSR7FppR48DcdcYEKsJxDjT5WDma2YoM+dS 9iAczksxZqzLvv3+jQBUigblXV+5JORmSmJDpLhDcaRhUlIlOypwCd81dpt8kOvv rjtuR6W2z/yUZ5b2/EsQTJ/M39P7AaF2XmIxWJarKgp6QwC8lkrUXS5fuJCU0Vx3 rdvB9/zHoEdoZocDCKki/hyx2wzdxxHAFIOAPeNQ/rdKWUIWKrNV/JTlwxiJMlB6 LrWK0Tt9XvF1hMAESyNZgwLba2j1ox8ogj1IVaHCred+dEmDfOjX/orSqcPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgeHyZ86zhKmyZ0SFGbYrNjc0cn4wHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABr245AatPfRCZlTfLMXftOw613u6j6cOlYC igdJGYBX5aUFhedgSPQcIvMz5f5k0cazhkbbZftaEbSyX6nhrAU7GNwRj3p5+e1H I0repu+OYuSxbANPfHaJH3aTR0OYj4MH8Gd+I2f4N9lwMgqF/kfXRYX6KlgAAu7p VVVK/513VF9sUovQv6Mn3JwfU3ehW7xh1wZY96QYNsbH0Np/5yjUTK7tCoJTN788 bLQ68Y73JZgGVTMC0srotM4E/1wx8YQZJ0qRP2H8utCZ5iTX2Av/17dSs43H+kU6 ua24jFpnqghEVqPQ5c3HCi53JLJBpr/3RU//zJ82b0QAS0Of+sQ= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:36 2026 by rpki-client