$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: W+bxkVxvw+M8MgYNZ9wiJrXz0ug+M9cv3xmMkj/lt88= Subject key identifier: 7D:FC:E8:8D:61:73:01:6E:DC:C8:DB:92:E6:97:9A:48:2B:FE:45:28 Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 35294F904E06DC01472A6BE466C04B8E6A6EB38C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 0262 Signing time: Sat 04 Apr 2026 04:22:37 +0000 Manifest this update: Sat 04 Apr 2026 04:17:37 +0000 Manifest next update: Tue 07 Apr 2026 15:47:37 +0000 Files and hashes: 1: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: IgizShDVF3XIdFoYQysMBd+RMZoTyStrHHHFv+jVVho=) 2: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: 14yXNvzN5znBr1LV/ksvBo10cYT6QOOmBIFy8py89lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Apr 2026 15:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:29:4f:90:4e:06:dc:01:47:2a:6b:e4:66:c0:4b:8e:6a:6e:b3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Apr 4 04:17:37 2026 GMT Not After : Apr 7 15:47:37 2026 GMT Subject: CN=7DFCE88D6173016EDCC8DB92E6979A482BFE4528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:89:6f:e5:3f:9d:d1:3c:01:11:c6:47:73: cc:ef:67:35:cf:0b:27:1b:36:06:90:a1:00:c9:8f: 35:32:d3:66:be:c8:b7:66:51:37:d0:de:65:63:51: f6:9a:fb:71:31:05:7f:05:bb:6c:c6:03:c4:fe:b0: b0:cc:21:3a:19:7b:89:6e:0e:8f:dc:b4:c2:a1:8c: 70:25:2b:be:de:2b:ec:fd:f1:8b:60:e0:4b:1b:e7: 6b:bb:d1:f4:c3:07:ed:f2:30:b6:e5:a1:87:45:a3: 62:72:14:8e:00:cd:d1:7c:7a:bd:a4:8e:cd:ab:df: 95:7f:b4:57:a8:89:e6:ff:a6:fe:30:38:33:7b:2e: d4:a0:7e:f7:5e:3f:92:2a:15:6a:cd:60:b7:24:17: ee:21:34:f7:ce:34:55:07:fa:be:ac:b2:f3:c9:46: 17:05:bc:69:a4:10:c8:b1:00:5f:90:3d:cf:6c:17: eb:41:94:bc:3b:86:4c:97:60:1f:28:a7:ca:de:77: e4:87:ef:02:f6:36:4e:50:1d:4f:47:f1:0e:6e:b2: c7:bf:e9:8e:68:32:7b:cf:79:f5:a0:d7:c1:30:fd: a8:9a:9a:d4:4c:23:ea:1b:78:a1:1d:cf:1e:14:36: 63:2d:7e:83:31:62:f6:b7:47:ce:b3:a9:73:91:5c: d6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FC:E8:8D:61:73:01:6E:DC:C8:DB:92:E6:97:9A:48:2B:FE:45:28 X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:bb:21:54:42:9a:3c:b7:96:66:2b:e1:25:9c:44:5b:b6:d9: 02:f2:ae:c3:94:93:f8:d1:6a:cd:0a:c9:54:17:3f:4c:7f:e1: a9:75:0f:89:35:a1:8b:05:45:db:da:90:e6:61:51:d9:f9:43: 95:07:9a:f6:8e:d0:84:a6:1a:52:22:a9:2e:ff:4f:75:48:9b: 1a:a9:70:39:73:3d:fb:fa:e5:58:bb:2d:a0:c8:13:b0:5d:5d: b7:10:da:30:48:22:f6:3e:45:a0:7a:75:ed:54:1c:87:a6:2b: 3f:ce:ad:f0:92:7d:71:48:2f:a3:9e:47:9a:a5:61:9b:d6:b6: 78:b3:40:04:0f:9b:0b:da:6b:e3:4a:38:2f:a3:bd:2a:45:06: 00:e3:30:94:aa:57:09:93:91:7a:ca:d7:f6:46:1a:55:8b:35: 75:d9:16:47:06:ff:09:b6:2c:4e:28:34:78:2a:1d:4f:4a:3b: dc:fe:91:c2:46:87:71:c8:fb:90:a4:46:11:85:1d:08:d1:5c: 9c:49:64:08:4d:5c:68:5b:98:8a:08:bd:f4:80:f4:84:43:64: 6c:63:3b:e9:3f:14:01:a1:49:a2:35:75:18:8a:b7:44:39:ef: f7:95:e7:23:e7:c0:b2:80:d4:a6:a3:e6:f4:1d:64:7d:6e:e4: 26:4f:e6:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNSlPkE4G3AFHKmvkZsBLjmpus4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNjA0MDQwNDE3MzdaFw0yNjA0MDcxNTQ3MzdaMDMxMTAvBgNV BAMTKDdERkNFODhENjE3MzAxNkVEQ0M4REI5MkU2OTc5QTQ4MkJGRTQ1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9j4lv5T+d0TwBEcZHc8zvZzXP CycbNgaQoQDJjzUy02a+yLdmUTfQ3mVjUfaa+3ExBX8Fu2zGA8T+sLDMIToZe4lu Do/ctMKhjHAlK77eK+z98Ytg4Esb52u70fTDB+3yMLbloYdFo2JyFI4AzdF8er2k js2r35V/tFeoieb/pv4wODN7LtSgfvdeP5IqFWrNYLckF+4hNPfONFUH+r6ssvPJ RhcFvGmkEMixAF+QPc9sF+tBlLw7hkyXYB8op8red+SH7wL2Nk5QHU9H8Q5usse/ 6Y5oMnvPefWg18Ew/aiamtRMI+obeKEdzx4UNmMtfoMxYva3R86zqXORXNa9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUffzojWFzAW7cyNuS5peaSCv+RSgwHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACS7IVRCmjy3lmYr4SWcRFu22QLyrsOUk/jR as0KyVQXP0x/4al1D4k1oYsFRdvakOZhUdn5Q5UHmvaO0ISmGlIiqS7/T3VImxqp cDlzPfv65Vi7LaDIE7BdXbcQ2jBIIvY+RaB6de1UHIemKz/OrfCSfXFIL6OeR5ql YZvWtnizQAQPmwvaa+NKOC+jvSpFBgDjMJSqVwmTkXrK1/ZGGlWLNXXZFkcG/wm2 LE4oNHgqHU9KO9z+kcJGh3HI+5CkRhGFHQjRXJxJZAhNXGhbmIoIvfSA9IRDZGxj O+k/FAGhSaI1dRiKt0Q57/eV5yPnwLKA1Kaj5vQdZH1u5CZP5t4= -----END CERTIFICATE-----Generated at Mon Apr 6 14:52:35 2026 by rpki-client