$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: xYghO97+sCpqalQM4zBCIG++FK37yELlgmlTlMiAPzw= Subject key identifier: CB:8F:B4:61:BF:70:09:90:1D:13:56:20:4D:3D:C6:34:B8:06:2B:BF Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 5F90952482F0A0D61EF451B0428D431DA05DB600 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 0500 Signing time: Thu 16 Apr 2026 23:21:56 +0000 Manifest this update: Thu 16 Apr 2026 23:16:56 +0000 Manifest next update: Mon 20 Apr 2026 09:15:56 +0000 Files and hashes: 1: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: qoyoavNL/JOi1LYoSFHjhyNf9z6NgzA/nBvWRHF6S2E=) 2: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: L/oaDs9pEKj6iBvLwrU05wZAuGGAsyb/Z+4/d76DsQ0=) 3: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 7kcdJn0kEx4MlESTLNrz7h+lfGYcQSPT5Qkc5rykWNw=) 4: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: /afnBbe9lqmeZWTu4VD92m9xOkkp/GMDn8V+1M5ITYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:90:95:24:82:f0:a0:d6:1e:f4:51:b0:42:8d:43:1d:a0:5d:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Apr 16 23:16:56 2026 GMT Not After : Apr 20 09:15:56 2026 GMT Subject: CN=CB8FB461BF7009901D1356204D3DC634B8062BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:84:ab:80:87:71:68:8d:58:73:04:a1:79: 21:4d:55:a2:1e:d4:c0:38:3f:30:69:44:fd:9a:34: 72:70:3a:88:cb:23:ae:cf:0f:e9:f6:30:2e:c7:28: 6d:dd:44:b6:c0:0a:93:b3:2a:86:26:93:c5:27:a5: 30:dc:7c:f8:eb:b3:60:12:a2:b4:9b:04:00:78:68: 7f:3d:6a:93:0a:d7:cc:3d:d4:dd:72:39:97:1b:2b: 75:24:09:52:42:11:5c:4a:57:4c:09:8c:bf:6f:89: 6d:2d:e7:8d:92:c2:35:e6:55:87:5f:8d:f0:b7:46: 59:d4:79:cc:13:33:e7:ce:65:c1:48:4c:c6:4e:13: 15:d0:00:51:8d:34:db:58:b9:4b:47:76:a1:12:c5: 02:6e:54:d8:d9:a5:a0:ec:b3:72:e6:30:32:d8:df: e8:9a:9a:37:a9:16:2b:f3:ee:8c:c4:e4:7b:6b:0c: 19:5c:19:48:f4:62:b3:e0:84:05:34:c1:ff:3c:72: f8:0f:f9:d1:fd:20:d8:fb:1f:59:94:c0:b6:66:c6: fa:3e:85:60:4b:b5:12:05:88:60:74:59:61:38:40: d8:18:39:17:43:02:e2:09:ec:d6:c8:d5:73:ce:9f: ca:ab:31:cc:a9:8c:6c:7e:3b:00:b4:8e:0c:79:09: 2c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8F:B4:61:BF:70:09:90:1D:13:56:20:4D:3D:C6:34:B8:06:2B:BF X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:29:17:e6:0a:a6:48:19:0b:f6:5f:8e:2a:de:84:31:3d:74: 32:1c:b5:1e:3d:03:93:b1:e6:b3:46:56:a8:72:5c:f8:80:e2: 7f:26:8b:12:7d:38:58:31:9d:03:a7:7d:db:44:e2:b6:33:74: 3e:a2:bc:80:f2:8c:c1:20:80:4f:41:0b:c7:69:4f:e5:bd:89: af:37:53:fd:b3:f0:a0:19:f9:8c:37:65:05:26:5b:61:5f:92: 30:fd:da:01:3c:51:98:e8:33:bf:14:64:a1:80:e2:60:81:1f: d3:48:3f:8a:68:43:c9:f2:33:7e:5a:39:dc:f5:0d:e2:28:32: 51:9b:32:d0:55:dc:cb:22:bc:46:a6:9f:cf:6a:0e:ba:24:d0: 73:9b:98:7a:bb:71:0d:db:c7:66:f9:bf:e7:49:ce:1d:82:75: fb:fc:df:eb:f3:89:df:57:bc:45:bb:4c:74:a7:6b:fe:09:45: c2:c0:af:a7:1e:42:d8:8c:db:50:42:64:d3:1e:19:a8:da:b9: 1f:29:75:9d:d3:85:ba:ec:ba:72:35:c7:bb:93:dc:fe:91:a8: 5e:4e:68:4a:0b:22:a8:8a:f7:e0:af:95:29:47:fd:6e:2d:60: b1:8a:50:9f:fd:87:cd:30:e4:f8:4f:a0:cf:5c:58:de:a0:ac: 89:4e:05:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5CVJILwoNYe9FGwQo1DHaBdtgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNjA0MTYyMzE2NTZaFw0yNjA0MjAwOTE1NTZaMDMxMTAvBgNV BAMTKENCOEZCNDYxQkY3MDA5OTAxRDEzNTYyMDREM0RDNjM0QjgwNjJCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFoSrgIdxaI1YcwSheSFNVaIe 1MA4PzBpRP2aNHJwOojLI67PD+n2MC7HKG3dRLbACpOzKoYmk8UnpTDcfPjrs2AS orSbBAB4aH89apMK18w91N1yOZcbK3UkCVJCEVxKV0wJjL9viW0t542SwjXmVYdf jfC3RlnUecwTM+fOZcFITMZOExXQAFGNNNtYuUtHdqESxQJuVNjZpaDss3LmMDLY 3+iamjepFivz7ozE5HtrDBlcGUj0YrPghAU0wf88cvgP+dH9INj7H1mUwLZmxvo+ hWBLtRIFiGB0WWE4QNgYORdDAuIJ7NbI1XPOn8qrMcypjGx+OwC0jgx5CSzjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy4+0Yb9wCZAdE1YgTT3GNLgGK78wHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUpF+YKpkgZC/ZfjirehDE9dDIctR49A5Ox 5rNGVqhyXPiA4n8mixJ9OFgxnQOnfdtE4rYzdD6ivIDyjMEggE9BC8dpT+W9ia83 U/2z8KAZ+Yw3ZQUmW2FfkjD92gE8UZjoM78UZKGA4mCBH9NIP4poQ8nyM35aOdz1 DeIoMlGbMtBV3MsivEamn89qDrok0HObmHq7cQ3bx2b5v+dJzh2Cdfv83+vzid9X vEW7THSna/4JRcLAr6ceQtiM21BCZNMeGajauR8pdZ3ThbrsunI1x7uT3P6RqF5O aEoLIqiK9+CvlSlH/W4tYLGKUJ/9h80w5PhPoM9cWN6grIlOBZY= -----END CERTIFICATE-----Generated at Fri Apr 17 13:54:21 2026 by rpki-client