$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: 9B2ad+QzA+d+KL57fA7KqyAUclEq/gAx92oRMz7QJgc= Subject key identifier: 72:EB:F5:EB:9E:B7:BE:CF:7A:1D:63:EB:95:37:2C:5C:DD:F9:81:F6 Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 27265C941FF0CB2F2FDF62ADC56805227846047A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: 0121 Signing time: Fri 17 Apr 2026 04:21:51 +0000 Manifest this update: Fri 17 Apr 2026 04:16:51 +0000 Manifest next update: Mon 20 Apr 2026 12:51:51 +0000 Files and hashes: 1: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 07AYTQCRXN9L1KmjaIr5Q8Dzp8wOL7x5otWYmSe9QU0=) 2: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: +gBVwNw7mH+NkrJk5YLfGGsFiQ/hE9AOEiojhde40e4=) 3: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: DuCW2UpTWvoAqhUS5qpLFg8ciqRV2Rd/Xr7km/VYXPw=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 0U+NdxzY7vmT7oHxOmUZVL0R1y6tciRJXLTpjbtqaPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:26:5c:94:1f:f0:cb:2f:2f:df:62:ad:c5:68:05:22:78:46:04:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Apr 17 04:16:51 2026 GMT Not After : Apr 20 12:51:51 2026 GMT Subject: CN=72EBF5EB9EB7BECF7A1D63EB95372C5CDDF981F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:dc:62:e2:35:05:d1:10:9a:6d:17:1e:b6: 8e:41:5b:26:6d:3c:d2:66:a1:6f:c7:5f:8c:8a:0c: d7:b6:10:a7:ff:89:3a:d8:0d:73:84:4b:e5:33:d3: 7b:47:05:25:94:13:de:7d:5a:ec:c7:d7:87:ee:9b: 28:e3:58:65:45:ae:ea:3b:eb:6e:4f:dd:09:a3:ba: 4d:e7:e3:5b:fe:0c:1e:46:ad:10:06:fb:64:e9:55: 52:4d:13:31:63:24:60:18:4d:fb:fb:5b:e4:fa:c2: e8:44:70:23:4a:67:87:9f:34:34:34:ef:96:48:ec: 6f:f6:81:2a:52:94:3d:b4:19:98:18:00:50:b0:72: 8d:28:28:4f:b1:77:ec:2b:1c:02:39:cc:83:b2:7f: 81:24:57:6b:62:c7:cf:d6:29:b4:b1:f7:bf:81:35: 82:5b:66:dd:7e:ae:76:90:e0:f9:36:80:17:3b:c3: fb:51:99:6d:24:2c:f6:b5:71:e5:da:40:d4:ca:69: 39:b4:30:bb:b7:32:5a:74:3f:3c:82:50:23:5a:a8: ca:55:4c:35:56:75:03:94:be:39:19:33:90:3a:43: 69:1f:4e:6e:5c:73:4b:50:03:28:52:a2:ef:b1:2e: fd:ba:a6:25:3a:35:b8:11:20:32:e7:96:83:8b:85: e4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EB:F5:EB:9E:B7:BE:CF:7A:1D:63:EB:95:37:2C:5C:DD:F9:81:F6 X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f0:7c:49:9f:b0:5a:6e:0f:01:07:74:9e:11:67:88:8f:b6: 4b:7d:89:12:40:f6:f0:15:a4:d5:2d:6b:03:da:5b:ae:47:8e: 52:ed:34:6d:d5:ac:f5:a7:e5:5c:2e:43:f9:65:29:cd:82:76: 02:25:94:ed:83:e0:9e:25:1f:98:79:a6:7e:f3:1d:f0:00:a3: be:8f:3f:df:63:21:76:7d:15:a3:9d:79:80:1e:09:e2:cc:2a: d9:3c:62:8e:e7:91:cb:91:aa:22:a0:3e:99:b6:af:33:ac:f2: 12:8d:dd:bb:11:be:11:70:a4:5e:6e:82:eb:b0:69:4a:ac:a5: 87:b3:a7:51:23:35:4f:ae:83:f8:44:55:61:93:ea:bc:bd:fe: 8a:29:ce:0e:e5:9b:34:71:c4:a6:7a:87:a8:36:37:ab:c4:09: ab:09:cb:da:01:e7:23:57:5b:9a:04:4c:53:39:50:6e:40:d4: 82:c5:a1:ef:e3:e8:0a:d1:18:e8:56:9f:26:03:e9:f6:93:a1: 5c:d7:6c:a6:75:09:67:ea:9d:a1:9c:d1:d0:36:8c:f4:34:dd: b4:87:3d:b7:34:2a:a3:41:c5:02:0d:3c:f9:ce:0c:62:7c:26: a2:21:f1:68:a9:a7:c0:29:a2:9c:34:38:bb:c9:e1:87:a8:1a: 5c:71:88:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJyZclB/wyy8v32KtxWgFInhGBHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNjA0MTcwNDE2NTFaFw0yNjA0MjAxMjUxNTFaMDMxMTAvBgNV BAMTKDcyRUJGNUVCOUVCN0JFQ0Y3QTFENjNFQjk1MzcyQzVDRERGOTgxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6G9xi4jUF0RCabRceto5BWyZt PNJmoW/HX4yKDNe2EKf/iTrYDXOES+Uz03tHBSWUE959WuzH14fumyjjWGVFruo7 625P3Qmjuk3n41v+DB5GrRAG+2TpVVJNEzFjJGAYTfv7W+T6wuhEcCNKZ4efNDQ0 75ZI7G/2gSpSlD20GZgYAFCwco0oKE+xd+wrHAI5zIOyf4EkV2tix8/WKbSx97+B NYJbZt1+rnaQ4Pk2gBc7w/tRmW0kLPa1ceXaQNTKaTm0MLu3Mlp0PzyCUCNaqMpV TDVWdQOUvjkZM5A6Q2kfTm5cc0tQAyhSou+xLv26piU6NbgRIDLnloOLheTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcuv16563vs96HWPrlTcsXN35gfYwHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjwfEmfsFpuDwEHdJ4RZ4iPtkt9iRJA9vAV pNUtawPaW65HjlLtNG3VrPWn5VwuQ/llKc2CdgIllO2D4J4lH5h5pn7zHfAAo76P P99jIXZ9FaOdeYAeCeLMKtk8Yo7nkcuRqiKgPpm2rzOs8hKN3bsRvhFwpF5uguuw aUqspYezp1EjNU+ug/hEVWGT6ry9/oopzg7lmzRxxKZ6h6g2N6vECasJy9oB5yNX W5oETFM5UG5A1ILFoe/j6ArRGOhWnyYD6faToVzXbKZ1CWfqnaGc0dA2jPQ03bSH Pbc0KqNBxQINPPnODGJ8JqIh8Wipp8Apopw0OLvJ4YeoGlxxiLY= -----END CERTIFICATE-----Generated at Fri Apr 17 15:23:12 2026 by rpki-client