$ rpki-client -vvf repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft File: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft (raw, json) Hash identifier: dJ9XJBTGW3FRsAJ5284LizizJsU9PEilYoTPh03Xk5c= Subject key identifier: 2A:E9:43:DC:EE:09:38:D0:4A:05:89:66:43:12:6F:0E:6D:9A:7C:BB Authority key identifier: 82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA Certificate issuer: /CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA Certificate serial: 67E401B7E4BB21C36F18EFDC60AAA464B0694DAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft Manifest number: 0570 Signing time: Mon 27 Apr 2026 15:31:32 +0000 Manifest this update: Mon 27 Apr 2026 15:26:32 +0000 Manifest next update: Thu 30 Apr 2026 20:32:32 +0000 Files and hashes: 1: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl (hash: cu5vt5DqJ17nQ7BLFH6S6Wf9sltpGrD/uLJqenU7idw=) 2: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: EeVS/Wotu8QiYnhwHE/NjTJ1MQmj/cQtABdAbLQgSvo=) 3: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: UXCPnVMF20T3u89LBilCEmmt67UECY/psh8twg2H0Yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Apr 2026 20:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e4:01:b7:e4:bb:21:c3:6f:18:ef:dc:60:aa:a4:64:b0:69:4d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA Validity Not Before: Apr 27 15:26:32 2026 GMT Not After : Apr 30 20:32:32 2026 GMT Subject: CN=2AE943DCEE0938D04A05896643126F0E6D9A7CBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:5d:5f:df:6d:20:d7:ea:f8:22:05:62:19: ab:8b:5e:56:b6:23:b6:bd:de:c3:e5:6d:80:0f:0b: 42:25:53:9b:ab:77:41:cd:9c:36:bb:f5:18:0b:1b: 79:3b:f0:e1:6f:4c:0b:43:ca:0e:ca:81:7c:4b:46: 8d:c3:bc:84:28:04:49:81:15:e0:dc:27:89:64:40: 8b:ee:09:84:f1:67:fa:23:3d:d2:2d:36:40:cb:47: 94:b2:4c:f9:72:a3:0c:7c:ef:71:06:eb:13:fd:ee: 32:8e:2d:e9:f0:91:54:b4:df:84:4e:d7:4a:61:7a: b1:a2:7e:a8:55:41:91:a4:50:d3:23:89:3a:87:2f: 2d:54:bf:b8:fd:16:62:fe:cf:02:fd:f2:06:cc:32: db:8f:94:73:d0:15:ec:82:31:e7:d6:fd:fc:fc:3e: cc:fb:6f:2e:c1:1c:a7:cb:2f:bf:f3:fa:9e:84:fd: e4:66:f5:b6:61:8a:aa:41:85:7a:6c:b4:33:bd:a5: ed:64:f6:f5:63:ac:59:e0:3d:c1:28:6e:70:5a:44: 84:54:64:98:12:57:1e:d9:90:a0:87:5f:47:05:0f: 17:c6:a7:3e:35:b3:a4:d1:cf:4f:88:58:1c:e5:02: 99:ad:7c:01:a0:1a:2f:3a:83:e3:58:c5:36:5e:36: 5b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E9:43:DC:EE:09:38:D0:4A:05:89:66:43:12:6F:0E:6D:9A:7C:BB X509v3 Authority Key Identifier: keyid:82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9b:fa:e7:6b:32:8b:ba:ae:e3:9e:6f:ea:43:e1:2e:df:76: b6:c4:7d:25:ad:c0:29:49:8d:61:78:b1:4b:6a:84:05:2f:e7: 38:03:e0:2d:ef:fa:ed:45:44:28:ec:f4:87:03:3e:71:67:bd: 0a:f8:99:44:aa:1a:ab:46:2a:1a:b4:7e:57:cc:36:2f:6d:37: bf:3f:3c:87:e7:ad:85:bf:c1:1b:e6:8a:31:e2:1c:e6:91:1d: d2:82:ca:dc:cc:e1:1e:0f:c2:87:a3:14:d1:35:a4:cc:b8:3d: 28:e4:c2:1a:b9:1f:89:d1:da:72:56:ee:71:18:da:25:cc:58: 16:8f:c8:39:e1:ba:24:a8:03:d6:81:c1:5c:ea:05:72:a5:3c: 3f:28:ba:5d:6d:8a:e6:7d:fc:d1:ad:ca:db:84:06:1f:d8:df: 2b:48:58:8a:75:56:ab:77:43:b4:94:8f:0d:15:e9:99:cb:19: 80:09:f8:0b:5b:c6:66:e6:6d:49:85:7b:94:cd:ae:c6:e6:3d: 4c:75:b2:14:df:f8:12:40:d1:0f:3c:12:2a:85:4c:08:3f:09: 73:70:2d:c6:b2:a5:0d:9e:ce:2d:8c:ba:3e:97:23:9b:61:03: e6:91:59:86:1c:b6:c6:24:d8:bb:72:2b:47:ac:5b:64:e1:6a: c2:6b:9a:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+QBt+S7IcNvGO/cYKqkZLBpTa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlERUVC NEVDNjlDQTAeFw0yNjA0MjcxNTI2MzJaFw0yNjA0MzAyMDMyMzJaMDMxMTAvBgNV BAMTKDJBRTk0M0RDRUUwOTM4RDA0QTA1ODk2NjQzMTI2RjBFNkQ5QTdDQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHK11f320g1+r4IgViGauLXla2 I7a93sPlbYAPC0IlU5urd0HNnDa79RgLG3k78OFvTAtDyg7KgXxLRo3DvIQoBEmB FeDcJ4lkQIvuCYTxZ/ojPdItNkDLR5SyTPlyowx873EG6xP97jKOLenwkVS034RO 10pherGifqhVQZGkUNMjiTqHLy1Uv7j9FmL+zwL98gbMMtuPlHPQFeyCMefW/fz8 Psz7by7BHKfLL7/z+p6E/eRm9bZhiqpBhXpstDO9pe1k9vVjrFngPcEobnBaRIRU ZJgSVx7ZkKCHX0cFDxfGpz41s6TRz0+IWBzlApmtfAGgGi86g+NYxTZeNlvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKulD3O4JONBKBYlmQxJvDm2afLswHwYDVR0j BBgwFoAUgoT2HHdGIv7GR1nm13yd7rTsacowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTgxNDUwNy03MTc0LTRmMWUtODU2My1lZjUwMzcwOTEzYzkvMC84Mjg0RjYxQzc3 NDYyMkZFQzY0NzU5RTZENzdDOURFRUI0RUM2OUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlERUVCNEVD NjlDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE4MTQ1MDctNzE3NC00ZjFlLTg1 NjMtZWY1MDM3MDkxM2M5LzAvODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlE RUVCNEVDNjlDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOb+udrMou6ruOeb+pD4S7fdrbEfSWtwClJ jWF4sUtqhAUv5zgD4C3v+u1FRCjs9IcDPnFnvQr4mUSqGqtGKhq0flfMNi9tN78/ PIfnrYW/wRvmijHiHOaRHdKCytzM4R4PwoejFNE1pMy4PSjkwhq5H4nR2nJW7nEY 2iXMWBaPyDnhuiSoA9aBwVzqBXKlPD8oul1tiuZ9/NGtytuEBh/Y3ytIWIp1Vqt3 Q7SUjw0V6ZnLGYAJ+AtbxmbmbUmFe5TNrsbmPUx1shTf+BJA0Q88EiqFTAg/CXNw LcaypQ2ezi2Muj6XI5thA+aRWYYctsYk2LtyK0esW2ThasJrmsA= -----END CERTIFICATE-----Generated at Mon Apr 27 23:08:51 2026 by rpki-client