$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: R6BqCn0fgPVyUYunksISf95BAV0UqhiAuCQTfY5mNts= Subject key identifier: 7A:6E:6C:6F:4D:F7:24:AB:4B:71:BB:3A:E6:CF:A0:F6:4C:6C:06:72 Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 5B438211253C100272E6D201774EBE9A7656142F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: 0125 Signing time: Tue 21 Apr 2026 22:41:16 +0000 Manifest this update: Tue 21 Apr 2026 22:36:16 +0000 Manifest next update: Sat 25 Apr 2026 07:49:16 +0000 Files and hashes: 1: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: fsjNYEB9+CRMS2NZiERniwDIvJU9Aia0aKLBmQmoya0=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 07:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:43:82:11:25:3c:10:02:72:e6:d2:01:77:4e:be:9a:76:56:14:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Apr 21 22:36:16 2026 GMT Not After : Apr 25 07:49:16 2026 GMT Subject: CN=7A6E6C6F4DF724AB4B71BB3AE6CFA0F64C6C0672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:d1:67:ad:6a:5d:80:64:b2:af:70:20:96: fa:0a:4a:7d:d4:9d:82:32:69:d2:5e:43:ac:cf:37: ab:07:6b:e9:64:63:74:60:76:63:15:76:09:86:ea: bc:27:23:5e:fd:eb:9c:10:3c:e1:e9:5d:1c:3a:9b: c2:c7:90:fe:44:90:9f:10:02:d0:6a:2a:bb:0f:3d: f6:f4:79:69:1f:27:b2:2f:47:08:87:a8:e1:b7:64: 7f:4b:8e:24:06:10:6a:d1:f0:f2:79:1b:00:3c:c8: f9:2d:4a:86:2e:a8:50:d7:65:85:b0:02:14:4a:f8: 96:7f:6a:33:f8:ae:2f:a0:ad:81:c4:88:26:f2:c1: 78:c6:37:ed:db:03:df:b7:bc:00:af:1c:9c:c9:d2: 09:28:8b:cc:33:e6:c8:37:1c:13:b2:8a:98:29:8c: c5:dd:cf:41:e6:5c:b0:b8:0a:91:59:46:b7:21:c2: 9f:46:6e:2e:31:e2:fb:29:6a:7f:93:ea:79:5b:1b: ae:f7:9a:a5:c5:c0:7f:14:1e:4b:e2:03:8f:dd:80: c3:62:6c:ad:15:88:7b:98:59:23:c8:e8:9c:66:fd: 17:d9:80:1b:2e:77:e0:ea:31:b2:29:57:f6:21:82: a8:18:c6:1b:ec:f9:97:97:0f:11:fb:57:8c:b2:94: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6E:6C:6F:4D:F7:24:AB:4B:71:BB:3A:E6:CF:A0:F6:4C:6C:06:72 X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:22:1a:a9:d9:8a:9c:3c:14:c0:8b:4c:24:ae:4d:0a:d3:cd: 2c:18:07:f3:a3:b5:b3:a5:5b:f8:07:1d:a4:cb:aa:33:d8:a3: 75:d4:cf:60:d9:8d:97:21:b8:73:e9:a5:9d:05:fe:95:59:54: f3:74:c0:6b:ea:36:23:ec:79:0c:fa:e4:a5:aa:73:f0:10:cf: ee:97:e2:a7:07:3b:d6:2c:03:2b:77:22:9e:fe:38:a6:6e:c0: c4:86:81:6c:e3:00:2c:6a:f5:5e:c3:27:00:ba:4f:a6:16:32: bf:ad:3e:c9:52:f9:b7:80:13:64:b2:91:9a:ef:cc:fe:75:e5: 6c:44:0b:5d:eb:16:c4:32:df:00:80:7e:66:23:89:0a:8f:a2: d7:fa:5d:b0:62:53:32:6d:a2:79:54:cf:6f:df:ea:76:6a:6a: 32:0f:00:43:f2:17:1b:87:d1:93:1e:67:7c:74:e8:bb:39:b5: f3:bf:3b:86:88:fa:0f:40:3e:db:3c:b6:03:37:53:ac:fa:6f: 25:c0:c6:50:e4:63:5a:79:39:27:7f:f1:35:98:88:a5:0e:8a: 01:0a:94:be:2f:af:cb:95:a4:61:ba:ff:6a:ee:8b:d8:7d:22: e1:ff:f9:e3:3a:a6:c0:31:14:1a:37:92:b1:1b:de:00:b0:a0: 25:87:f2:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0OCESU8EAJy5tIBd06+mnZWFC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNjA0MjEyMjM2MTZaFw0yNjA0MjUwNzQ5MTZaMDMxMTAvBgNV BAMTKDdBNkU2QzZGNERGNzI0QUI0QjcxQkIzQUU2Q0ZBMEY2NEM2QzA2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFtFnrWpdgGSyr3AglvoKSn3U nYIyadJeQ6zPN6sHa+lkY3RgdmMVdgmG6rwnI17965wQPOHpXRw6m8LHkP5EkJ8Q AtBqKrsPPfb0eWkfJ7IvRwiHqOG3ZH9LjiQGEGrR8PJ5GwA8yPktSoYuqFDXZYWw AhRK+JZ/ajP4ri+grYHEiCbywXjGN+3bA9+3vACvHJzJ0gkoi8wz5sg3HBOyipgp jMXdz0HmXLC4CpFZRrchwp9Gbi4x4vspan+T6nlbG673mqXFwH8UHkviA4/dgMNi bK0ViHuYWSPI6Jxm/RfZgBsud+DqMbIpV/YhgqgYxhvs+ZeXDxH7V4yylHr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUem5sb033JKtLcbs65s+g9kxsBnIwHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOAiGqnZipw8FMCLTCSuTQrTzSwYB/OjtbOl W/gHHaTLqjPYo3XUz2DZjZchuHPppZ0F/pVZVPN0wGvqNiPseQz65KWqc/AQz+6X 4qcHO9YsAyt3Ip7+OKZuwMSGgWzjACxq9V7DJwC6T6YWMr+tPslS+beAE2SykZrv zP515WxEC13rFsQy3wCAfmYjiQqPotf6XbBiUzJtonlUz2/f6nZqajIPAEPyFxuH 0ZMeZ3x06Ls5tfO/O4aI+g9APts8tgM3U6z6byXAxlDkY1p5OSd/8TWYiKUOigEK lL4vr8uVpGG6/2rui9h9IuH/+eM6psAxFBo3krEb3gCwoCWH8rM= -----END CERTIFICATE-----Generated at Wed Apr 22 10:00:27 2026 by rpki-client