$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: 8Wu03/scPNjp8urWkxOV6s9sOPCenTyvRDGX2zF1qGE= Subject key identifier: 04:F6:2E:BC:0C:33:C4:A7:C4:C8:AF:4C:29:D3:6A:C2:92:E1:94:21 Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 4D6696BA8EAF33D220109C320E79B16C7DF0637F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 0265 Signing time: Mon 20 Apr 2026 10:41:06 +0000 Manifest this update: Mon 20 Apr 2026 10:36:06 +0000 Manifest next update: Thu 23 Apr 2026 14:15:06 +0000 Files and hashes: 1: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: V+UzC29NTVDUV2GsUkhgmiBFIXnMy/dHGgl32ERe6LA=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: ocW0arB4ppBKqQq8wWUZFlq20RoyvQnisb1mkxrdk08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:66:96:ba:8e:af:33:d2:20:10:9c:32:0e:79:b1:6c:7d:f0:63:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Apr 20 10:36:06 2026 GMT Not After : Apr 23 14:15:06 2026 GMT Subject: CN=04F62EBC0C33C4A7C4C8AF4C29D36AC292E19421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:57:a0:e3:05:99:6f:06:74:f5:c0:5a:8b: 66:ba:c8:7d:36:71:3e:c1:e9:9d:89:9b:6a:27:c6: 03:44:c3:7e:bd:70:77:cc:ff:ac:57:db:d3:06:63: 7b:ea:71:f5:bf:90:c0:ae:a0:65:b1:b5:8f:fb:bb: 30:7a:07:b5:66:cd:a1:49:e5:09:dd:93:90:e1:fc: d3:a8:08:e4:94:55:e8:c3:7c:fa:72:46:ca:c8:82: 00:b3:e3:15:55:72:fe:69:cc:80:bf:ef:03:c2:a6: 88:0a:a6:f7:7b:ee:28:d9:a3:d8:40:d9:5f:3a:6b: b1:e0:03:2f:0c:71:fc:0a:8e:29:58:ae:aa:a2:ac: 4f:15:60:09:5d:28:2b:28:e0:6d:42:3d:6a:1e:ae: c1:86:a8:17:72:fd:c2:4d:63:6b:c1:87:f6:4f:20: 23:f2:51:49:73:c8:6a:cf:a0:83:52:41:7e:e5:e4: 50:28:90:d3:6f:05:6c:ca:a6:8d:88:1e:68:ad:f3: 4c:00:af:7e:52:a3:04:69:0e:1a:c5:39:a1:fc:10: a6:04:a0:68:74:fd:ab:72:9d:d5:29:40:9c:a9:95: 90:1f:53:a8:15:9b:8c:08:3f:08:6f:db:75:b9:f0: 9d:f5:17:fb:c7:7d:b6:69:81:e8:f5:e4:6a:58:dd: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F6:2E:BC:0C:33:C4:A7:C4:C8:AF:4C:29:D3:6A:C2:92:E1:94:21 X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:08:a9:65:57:c4:fb:42:ad:01:64:9d:a7:36:20:ca:1e:0e: 3a:81:97:a5:17:0a:ce:6e:24:d9:cc:cb:c6:49:92:4c:24:89: e9:9a:8c:79:5c:05:73:27:b2:c0:04:c5:19:ec:59:b3:6b:f9: 41:d8:24:b4:81:4e:df:d3:22:be:ad:31:75:99:34:34:29:12: 75:1c:b4:15:3d:87:ef:ab:48:07:0b:55:49:6e:e7:03:b8:51: b1:6e:b5:b7:57:4a:ba:e3:e5:68:7d:b0:82:8c:57:58:fa:d7: 44:5a:91:c3:07:25:c5:98:bc:8e:bf:ae:f6:67:cf:1d:9c:ba: c9:e6:be:88:53:5f:93:84:59:df:68:6c:3f:65:9c:66:e4:57: 76:96:08:68:3e:74:81:f8:40:43:4e:b7:97:7b:fd:ec:ef:66: ae:17:e8:5e:7c:be:bb:3b:54:c5:71:d6:16:ea:d8:75:91:8f: bb:bc:32:b4:af:cc:8b:9e:19:e4:1f:f2:21:b6:c8:88:5e:51: b2:75:38:ee:e4:dc:eb:bf:d0:2e:cf:6d:78:da:a9:db:11:9f: db:7f:49:9e:3b:e5:f9:ca:9d:7c:41:a2:b6:c5:c1:ad:cd:08: 16:cb:a3:90:31:a1:03:f7:03:66:e5:6b:8a:9a:30:f0:bb:c6: bc:19:45:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTWaWuo6vM9IgEJwyDnmxbH3wY38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNjA0MjAxMDM2MDZaFw0yNjA0MjMxNDE1MDZaMDMxMTAvBgNV BAMTKDA0RjYyRUJDMEMzM0M0QTdDNEM4QUY0QzI5RDM2QUMyOTJFMTk0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgXVeg4wWZbwZ09cBai2a6yH02 cT7B6Z2Jm2onxgNEw369cHfM/6xX29MGY3vqcfW/kMCuoGWxtY/7uzB6B7VmzaFJ 5Qndk5Dh/NOoCOSUVejDfPpyRsrIggCz4xVVcv5pzIC/7wPCpogKpvd77ijZo9hA 2V86a7HgAy8McfwKjilYrqqirE8VYAldKCso4G1CPWoersGGqBdy/cJNY2vBh/ZP ICPyUUlzyGrPoINSQX7l5FAokNNvBWzKpo2IHmit80wAr35SowRpDhrFOaH8EKYE oGh0/atyndUpQJyplZAfU6gVm4wIPwhv23W58J31F/vHfbZpgej15GpY3RGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPYuvAwzxKfEyK9MKdNqwpLhlCEwHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0IqWVXxPtCrQFknac2IMoeDjqBl6UXCs5u JNnMy8ZJkkwkiemajHlcBXMnssAExRnsWbNr+UHYJLSBTt/TIr6tMXWZNDQpEnUc tBU9h++rSAcLVUlu5wO4UbFutbdXSrrj5Wh9sIKMV1j610RakcMHJcWYvI6/rvZn zx2cusnmvohTX5OEWd9obD9lnGbkV3aWCGg+dIH4QENOt5d7/ezvZq4X6F58vrs7 VMVx1hbq2HWRj7u8MrSvzIueGeQf8iG2yIheUbJ1OO7k3Ou/0C7PbXjaqdsRn9t/ SZ475fnKnXxBorbFwa3NCBbLo5AxoQP3A2bla4qaMPC7xrwZRaM= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:54 2026 by rpki-client