$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: AcxqXLfEknkZsKTWHKLx7AUP8Rn1KKts79CIZ2M8628= Subject key identifier: 86:8E:34:7A:17:4E:5D:40:E9:26:53:EC:4F:59:B7:2D:CB:A5:9C:C0 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 42FB4570A01E3A26F19F350BBF863049D3131EE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 04AE Signing time: Sun 05 Apr 2026 22:31:35 +0000 Manifest this update: Sun 05 Apr 2026 22:26:35 +0000 Manifest next update: Thu 09 Apr 2026 04:58:35 +0000 Files and hashes: 1: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 706QiyM3dAZxixrKBtydGO3JlPrNbGJU4Z6sEiZVN2w=) 2: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: fxRWeEdUZsQcOgrNyDGJ7oXqFe+EeQD/MHcFmS1cl7s=) 3: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: THVSHOfDNgrFd49wZlYvuTuPkWSURiIGaUg0EUGrcPM=) 4: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: oA1/Ov34tFnTBiEcGH3RWrSv4X4UvLMVE/ShovilnOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 Apr 2026 04:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fb:45:70:a0:1e:3a:26:f1:9f:35:0b:bf:86:30:49:d3:13:1e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Apr 5 22:26:35 2026 GMT Not After : Apr 9 04:58:35 2026 GMT Subject: CN=868E347A174E5D40E92653EC4F59B72DCBA59CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:60:89:e4:46:78:90:f8:8a:0b:9f:2d:4a:19: da:6c:6b:92:ac:25:d8:4b:71:b2:b6:96:7b:f0:ec: 02:91:64:26:d5:52:21:1b:92:1f:34:21:0d:fc:fe: 5f:3e:18:97:9d:a3:39:30:2c:2c:3f:8c:29:34:1c: 9d:97:73:7e:97:3d:26:78:ed:27:df:e8:63:6a:d4: 15:b6:23:c0:37:84:8e:b3:19:5e:b6:c6:72:67:4a: c8:9f:80:bc:67:da:81:37:16:05:ab:b5:8d:b3:d4: 3f:42:ba:ea:5c:be:da:91:68:2c:dd:d3:91:20:6f: ce:67:dc:9b:9d:26:08:a4:bf:fa:6f:5e:5b:b2:f0: 13:78:a2:9a:9f:19:6a:cf:43:76:c6:6f:27:3f:0d: 44:d6:ec:05:cf:60:a9:f2:b8:75:1a:31:99:d4:b2: 8d:a6:92:c1:4b:0a:d5:a1:a3:19:e3:3b:c0:9e:a4: 7a:e1:66:11:99:dc:fc:fa:72:6a:da:c5:18:1e:21: 45:62:88:fd:0b:c1:10:3b:d6:df:1a:6f:51:28:52: 2c:3b:36:f3:b9:b2:ae:32:f4:e6:fb:2b:14:ff:4f: c2:f5:8b:a4:8c:a2:80:7d:d4:a0:e6:ce:d6:3a:f5: 59:ed:25:71:de:7d:6d:50:20:b7:13:19:0d:2d:3a: 33:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8E:34:7A:17:4E:5D:40:E9:26:53:EC:4F:59:B7:2D:CB:A5:9C:C0 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:1c:c1:f1:fd:50:92:fd:44:34:a6:54:20:44:72:f7:47:97: 7a:97:67:7c:ca:27:b2:ba:a4:b0:3d:96:32:6f:aa:57:71:02: db:b2:cd:e8:d9:eb:41:90:f8:c7:9d:9e:51:48:f2:47:ed:c7: 9c:4f:2d:06:eb:bc:dd:0b:3d:d8:f0:e1:93:71:44:61:f3:7a: ab:4f:38:84:02:07:eb:67:c7:bc:d7:56:b1:31:b6:d3:97:2f: f3:bc:6e:e6:1a:ac:e3:86:ae:1f:5c:8c:69:98:98:75:24:bb: ca:f9:4b:df:e6:af:ad:2c:f2:54:06:69:5a:d0:c9:3f:9e:eb: b6:60:89:39:a3:93:91:91:77:1e:3a:d9:e9:c3:5f:67:23:5b: ab:25:36:64:41:0a:08:22:8e:41:62:e2:ab:fe:8c:c9:26:7e: 00:25:89:ea:72:43:72:8a:8f:6e:fd:4f:27:9c:1a:9a:d2:1d: 2b:8c:23:e5:e0:99:ec:0f:11:ca:f4:c5:4d:45:4c:30:1b:11: 2c:50:83:77:99:5b:f2:d6:c0:95:d9:0d:54:e5:95:41:32:86: ce:c7:7e:02:1e:8d:bb:87:3b:c7:bf:a9:e6:0b:10:be:0d:c9: e1:9d:04:eb:d2:94:21:b2:75:a5:1f:5b:57:52:96:72:6d:4d: 60:1e:f6:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvtFcKAeOibxnzULv4YwSdMTHuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNjA0MDUyMjI2MzVaFw0yNjA0MDkwNDU4MzVaMDMxMTAvBgNV BAMTKDg2OEUzNDdBMTc0RTVENDBFOTI2NTNFQzRGNTlCNzJEQ0JBNTlDQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYYInkRniQ+IoLny1KGdpsa5Ks JdhLcbK2lnvw7AKRZCbVUiEbkh80IQ38/l8+GJedozkwLCw/jCk0HJ2Xc36XPSZ4 7Sff6GNq1BW2I8A3hI6zGV62xnJnSsifgLxn2oE3FgWrtY2z1D9CuupcvtqRaCzd 05Egb85n3JudJgikv/pvXluy8BN4opqfGWrPQ3bGbyc/DUTW7AXPYKnyuHUaMZnU so2mksFLCtWhoxnjO8CepHrhZhGZ3Pz6cmraxRgeIUViiP0LwRA71t8ab1EoUiw7 NvO5sq4y9Ob7KxT/T8L1i6SMooB91KDmztY69VntJXHefW1QILcTGQ0tOjOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUho40ehdOXUDpJlPsT1m3LculnMAwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEcwfH9UJL9RDSmVCBEcvdHl3qXZ3zKJ7K6 pLA9ljJvqldxAtuyzejZ60GQ+MednlFI8kftx5xPLQbrvN0LPdjw4ZNxRGHzeqtP OIQCB+tnx7zXVrExttOXL/O8buYarOOGrh9cjGmYmHUku8r5S9/mr60s8lQGaVrQ yT+e67ZgiTmjk5GRdx462enDX2cjW6slNmRBCggijkFi4qv+jMkmfgAliepyQ3KK j279TyecGprSHSuMI+XgmewPEcr0xU1FTDAbESxQg3eZW/LWwJXZDVTllUEyhs7H fgIejbuHO8e/qeYLEL4NyeGdBOvSlCGydaUfW1dSlnJtTWAe9sk= -----END CERTIFICATE-----Generated at Mon Apr 6 13:56:53 2026 by rpki-client