$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: +A2Mdghfr30GaUDdcxSgybhAYT7OzNt34JTG/oFC10s= Subject key identifier: B7:B5:B6:C7:DA:B0:0D:88:CF:23:0D:58:E4:36:39:C1:70:93:FB:BE Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 1B6B0284C553E1F6582C92DD80FEAD0A220A7581 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 02C3 Signing time: Tue 21 Apr 2026 07:00:51 +0000 Manifest this update: Tue 21 Apr 2026 06:55:51 +0000 Manifest next update: Fri 24 Apr 2026 13:49:51 +0000 Files and hashes: 1: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: nL/HZGA0E7GxsNtQZwq3/bQqUnFo5wNCWdHlAXFVa2g=) 2: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: aI45yKhAru9VHfZlQWe/rwkciB33mSYkuVbNTgyinfk=) 3: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: yWTDE82TnfF5L84wPnLqcfwK2atY8mcjQo83XGLQn3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6b:02:84:c5:53:e1:f6:58:2c:92:dd:80:fe:ad:0a:22:0a:75:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Apr 21 06:55:51 2026 GMT Not After : Apr 24 13:49:51 2026 GMT Subject: CN=B7B5B6C7DAB00D88CF230D58E43639C17093FBBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c7:c8:b2:9d:36:dd:0e:29:6e:02:71:c2:a7: b9:60:d7:13:ea:a5:c4:a4:06:3e:c0:45:66:2c:22: 3f:ac:cf:03:d0:eb:b5:48:26:2c:3d:46:98:de:37: e8:26:78:ed:9f:4b:3d:00:60:3c:28:2a:f0:c6:c8: d4:f0:83:53:7b:72:0c:f2:b1:6e:bc:b4:e2:94:d9: ba:53:93:cf:de:6a:60:64:b7:8a:1b:07:65:78:69: d8:bb:80:e5:c9:81:70:7b:12:48:52:4e:82:5e:48: 30:5c:64:f5:1d:f9:ff:f0:a2:3e:d3:bc:60:ea:19: 2e:42:40:a0:50:73:39:5b:68:1c:8b:cd:b7:d8:98: 3d:b7:e4:b7:56:c3:d5:e4:43:77:15:39:3a:e7:52: 0b:34:89:35:53:6b:4c:7d:6c:82:ce:df:68:ad:01: 8b:c9:82:b3:a4:de:58:b8:03:c4:5a:f9:ac:c1:20: 8c:3e:57:e0:86:ce:d6:b7:d1:1b:8d:db:17:77:d9: 3c:d3:9d:c8:d1:8b:61:31:5d:b2:e8:13:dd:d9:bd: b2:46:0f:9a:4d:a8:b5:55:41:41:f3:05:a2:d7:10: d1:47:6d:63:c9:d0:38:08:0b:b9:93:ea:51:6a:26: 73:72:f2:72:dc:05:ba:3c:4c:d5:12:72:4d:93:25: 52:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B5:B6:C7:DA:B0:0D:88:CF:23:0D:58:E4:36:39:C1:70:93:FB:BE X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e2:72:b4:3e:e4:08:a2:64:54:71:f7:a4:50:68:4c:f7:5b: 31:3d:50:b7:76:a3:6c:0c:78:3e:46:ee:7e:c9:86:22:ca:33: 74:cd:52:0e:2d:6d:de:cc:9d:ba:e7:41:81:ec:15:61:3d:9c: b9:55:7f:08:7d:0d:3b:7f:b9:9f:d8:93:f4:44:35:98:36:71: 6f:cb:30:67:b0:5e:30:9f:ab:31:bb:a7:0e:64:10:a3:30:53: 7c:6b:72:6d:f8:31:32:4c:1b:cc:50:e3:61:4a:b2:18:7d:62: c0:3e:92:a3:f7:c1:9d:fd:b7:33:18:d8:98:71:95:33:a1:ae: 2d:e3:cc:2c:dd:ad:50:c0:4d:4e:5a:91:c7:f6:65:0c:2b:b1: fb:48:7d:1b:99:65:e8:a0:2d:8e:06:57:83:3c:94:24:cd:1f: 01:cb:7e:3f:40:ed:33:77:bb:33:22:a4:bf:11:ca:0b:6d:37: ec:2c:7c:48:fb:fa:63:c1:5b:a5:2c:51:99:16:98:09:71:97: 85:b6:e5:33:cc:a7:42:b2:bf:ef:ef:55:ad:9f:ae:6d:bc:86: 45:00:e2:b6:1f:a7:c7:f3:86:55:45:6b:40:07:9d:94:89:e7: bc:90:48:76:23:be:70:37:bf:a9:9c:f6:75:40:f5:07:bb:cc: e4:83:88:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2sChMVT4fZYLJLdgP6tCiIKdYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNjA0MjEwNjU1NTFaFw0yNjA0MjQxMzQ5NTFaMDMxMTAvBgNV BAMTKEI3QjVCNkM3REFCMDBEODhDRjIzMEQ1OEU0MzYzOUMxNzA5M0ZCQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDex8iynTbdDiluAnHCp7lg1xPq pcSkBj7ARWYsIj+szwPQ67VIJiw9RpjeN+gmeO2fSz0AYDwoKvDGyNTwg1N7cgzy sW68tOKU2bpTk8/eamBkt4obB2V4adi7gOXJgXB7EkhSToJeSDBcZPUd+f/woj7T vGDqGS5CQKBQczlbaByLzbfYmD235LdWw9XkQ3cVOTrnUgs0iTVTa0x9bILO32it AYvJgrOk3li4A8Ra+azBIIw+V+CGzta30RuN2xd32TzTncjRi2ExXbLoE93ZvbJG D5pNqLVVQUHzBaLXENFHbWPJ0DgIC7mT6lFqJnNy8nLcBbo8TNUSck2TJVJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt7W2x9qwDYjPIw1Y5DY5wXCT+74wHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnicrQ+5AiiZFRx96RQaEz3WzE9ULd2o2wM eD5G7n7JhiLKM3TNUg4tbd7MnbrnQYHsFWE9nLlVfwh9DTt/uZ/Yk/RENZg2cW/L MGewXjCfqzG7pw5kEKMwU3xrcm34MTJMG8xQ42FKshh9YsA+kqP3wZ39tzMY2Jhx lTOhri3jzCzdrVDATU5akcf2ZQwrsftIfRuZZeigLY4GV4M8lCTNHwHLfj9A7TN3 uzMipL8RygttN+wsfEj7+mPBW6UsUZkWmAlxl4W25TPMp0Kyv+/vVa2frm28hkUA 4rYfp8fzhlVFa0AHnZSJ57yQSHYjvnA3v6mc9nVA9Qe7zOSDiH4= -----END CERTIFICATE-----Generated at Wed Apr 22 07:27:12 2026 by rpki-client