$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft File: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft (raw, json) Hash identifier: ZucwoHM22sYuNyLebvZVcTMTO8mbQb9niB+9A+xAHF0= Subject key identifier: C3:B3:5B:89:15:F5:74:5F:5C:6F:85:2B:45:D2:C1:C9:EC:0F:9B:2F Authority key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 Certificate issuer: /CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Certificate serial: 69588232FF442DFD2914767501B590B3EAE4B70D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft Manifest number: E8 Signing time: Wed 22 Apr 2026 06:30:55 +0000 Manifest this update: Wed 22 Apr 2026 06:25:55 +0000 Manifest next update: Sat 25 Apr 2026 09:01:55 +0000 Files and hashes: 1: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl (hash: viR4e5qz9I1LCo26IZczeu8zA5U/g7rOGiVPmdlLFwg=) 2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: +4jn9yUTCERVA3g9fI3ooLPb8eRAkmcilsOk4E3ZshQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 09:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:58:82:32:ff:44:2d:fd:29:14:76:75:01:b5:90:b3:ea:e4:b7:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Validity Not Before: Apr 22 06:25:55 2026 GMT Not After : Apr 25 09:01:55 2026 GMT Subject: CN=C3B35B8915F5745F5C6F852B45D2C1C9EC0F9B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:79:88:c0:76:f2:0e:af:d4:c6:db:3f:02: 1d:a6:68:9e:df:25:da:70:07:c5:8a:9e:6d:9f:71: cd:28:9f:1e:7b:63:48:6a:2f:fb:f3:14:cb:f9:7e: 03:e9:67:8f:f2:18:3a:d1:3b:2a:99:fe:3e:d4:d4: 47:be:67:fc:84:a4:30:22:0c:30:e4:47:3a:2a:ae: 03:56:65:a7:b9:2e:e9:3f:01:0c:aa:72:f2:de:86: 35:a0:ec:c8:d6:a1:30:a6:a1:f0:0c:10:53:fd:d6: c9:3e:55:f6:26:41:4c:b2:d9:b9:c1:78:20:14:f0: b4:75:fc:dc:a9:8f:38:0c:65:0f:27:e2:e5:1b:15: a0:74:38:fe:d5:94:cf:a3:3f:10:3b:5b:8c:d0:7e: 17:4a:2a:36:a9:5c:24:0a:f8:86:1d:f6:de:b7:17: 7e:b1:7a:30:6f:35:cc:a9:74:c2:42:76:ac:e3:34: c6:9a:98:45:83:7a:f2:0a:26:f3:93:f7:2c:3c:29: 39:55:9a:02:02:49:15:74:c3:15:a9:60:0c:f5:c2: d6:fa:61:b5:c9:d7:c0:2e:92:6d:e0:09:24:9e:f7: d2:20:5d:33:b1:bf:b0:85:cc:0b:3c:09:91:1a:b6: c9:30:45:7e:09:19:90:ad:2a:41:86:30:43:b6:4a: 81:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B3:5B:89:15:F5:74:5F:5C:6F:85:2B:45:D2:C1:C9:EC:0F:9B:2F X509v3 Authority Key Identifier: keyid:A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ab:95:7d:f3:5c:a9:e4:9a:4d:30:0b:cc:8f:ba:d0:dd:c0: 79:b5:f6:14:cd:3c:35:34:1d:61:fb:26:a2:10:09:f0:e2:14: 5d:93:a9:e2:69:fa:17:26:d7:35:7a:00:ce:b0:3e:fa:1b:ec: 4e:f4:06:41:16:17:62:33:43:2e:e7:b1:20:5b:e6:42:02:26: d2:1a:2a:37:15:ae:ca:79:a4:c8:f0:fa:53:5d:99:51:a7:01: 37:88:41:f6:32:1d:6d:6d:23:0f:9d:de:dd:3a:2d:ce:3a:13: 03:ab:4b:06:98:bc:5d:fa:71:9a:3b:33:20:b9:16:a3:5a:9c: c6:76:bc:07:f1:09:e1:13:c5:13:cd:11:14:4f:32:e1:cc:a4: 28:47:3f:d4:70:aa:e0:49:76:b6:5d:54:b2:00:15:2f:9f:0f: f4:b0:32:ca:33:a3:26:97:c8:5a:31:43:82:9a:71:ae:7b:9d: ec:ac:1d:8f:42:80:8e:48:ec:49:72:a3:77:a7:b6:6c:a1:29: 94:69:cd:a9:e1:44:56:51:11:89:52:c4:b4:d7:3e:06:34:7c: ef:c1:38:39:a3:49:6c:4b:95:fe:ef:83:36:d9:51:88:c6:b4: 05:70:9f:52:04:ad:35:6f:be:bb:85:3d:af:07:60:79:4f:1d: 01:6f:e1:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaViCMv9ELf0pFHZ1AbWQs+rktw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEy RTE1Nzc4MjAeFw0yNjA0MjIwNjI1NTVaFw0yNjA0MjUwOTAxNTVaMDMxMTAvBgNV BAMTKEMzQjM1Qjg5MTVGNTc0NUY1QzZGODUyQjQ1RDJDMUM5RUMwRjlCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXXmIwHbyDq/Uxts/Ah2maJ7f JdpwB8WKnm2fcc0onx57Y0hqL/vzFMv5fgPpZ4/yGDrROyqZ/j7U1Ee+Z/yEpDAi DDDkRzoqrgNWZae5Luk/AQyqcvLehjWg7MjWoTCmofAMEFP91sk+VfYmQUyy2bnB eCAU8LR1/NypjzgMZQ8n4uUbFaB0OP7VlM+jPxA7W4zQfhdKKjapXCQK+IYd9t63 F36xejBvNcypdMJCdqzjNMaamEWDevIKJvOT9yw8KTlVmgICSRV0wxWpYAz1wtb6 YbXJ18Aukm3gCSSe99IgXTOxv7CFzAs8CZEatskwRX4JGZCtKkGGMEO2SoEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw7NbiRX1dF9cb4UrRdLByewPmy8wHwYDVR0j BBgwFoAUqOZJK17+k2LCzNscJdoCKi4Vd4IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMS9BOEU2NDkyQjVF RkU5MzYyQzJDQ0RCMUMyNURBMDIyQTJFMTU3NzgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEyRTE1 Nzc4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAy MkEyRTE1Nzc4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAirlX3zXKnkmk0wC8yPutDdwHm19hTNPDU0 HWH7JqIQCfDiFF2TqeJp+hcm1zV6AM6wPvob7E70BkEWF2IzQy7nsSBb5kICJtIa KjcVrsp5pMjw+lNdmVGnATeIQfYyHW1tIw+d3t06Lc46EwOrSwaYvF36cZo7MyC5 FqNanMZ2vAfxCeETxRPNERRPMuHMpChHP9RwquBJdrZdVLIAFS+fD/SwMsozoyaX yFoxQ4Kaca57neysHY9CgI5I7Elyo3entmyhKZRpzanhRFZREYlSxLTXPgY0fO/B ODmjSWxLlf7vgzbZUYjGtAVwn1IErTVvvruFPa8HYHlPHQFv4Tg= -----END CERTIFICATE-----Generated at Wed Apr 22 10:26:32 2026 by rpki-client