$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: IbeXNX19xyCrsufjla+8sWpom+es3AnE1SXIHnHlwo0= Subject key identifier: CF:BA:B6:6F:75:FF:CE:21:80:0B:89:D6:55:83:10:96:9F:BD:EB:31 Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 7E8C91F11A85EA756A81FA3540E5E4FB20E9F851 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 0295 Signing time: Thu 16 Apr 2026 05:22:10 +0000 Manifest this update: Thu 16 Apr 2026 05:17:10 +0000 Manifest next update: Sun 19 Apr 2026 15:16:10 +0000 Files and hashes: 1: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) 2: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: /5Ic7ijcH7yEmI7Sk0qiiaPiGiq5wyYTvThHjX9Q194=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8c:91:f1:1a:85:ea:75:6a:81:fa:35:40:e5:e4:fb:20:e9:f8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Apr 16 05:17:10 2026 GMT Not After : Apr 19 15:16:10 2026 GMT Subject: CN=CFBAB66F75FFCE21800B89D6558310969FBDEB31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:80:86:a7:f0:88:a8:4f:a9:3a:8a:00:ec: 52:59:47:9d:d5:05:51:4a:c6:33:7b:d7:dc:25:a5: b7:6b:7a:d8:ff:ca:a0:3f:ba:17:84:b2:fd:84:70: 28:df:02:d3:a3:0c:c6:17:49:db:66:0c:24:1b:1f: a2:24:b4:4b:83:ff:74:8c:de:bb:08:c3:66:f9:da: bc:93:3a:45:8a:a0:e5:e2:45:16:c6:f0:5f:e1:2c: 7a:75:dc:fd:f3:12:64:1a:f9:1d:41:15:d7:e4:ef: b2:66:cb:4c:78:7c:a0:74:49:43:24:62:85:d4:83: a8:06:15:4f:83:ae:08:1b:cf:31:42:06:71:f0:03: 50:41:b3:52:39:a7:01:91:e3:ef:b2:fc:f3:7f:8f: b3:7b:55:8c:19:3f:ef:08:b8:3f:a0:43:a9:9d:67: 13:56:ce:a8:95:e6:7f:0f:57:c1:03:95:06:fd:2a: fe:e5:38:34:91:75:ab:dd:ab:31:8f:cc:7a:36:ba: c3:6a:d5:f0:ea:12:5a:83:ff:dd:86:99:0e:da:3f: a9:b4:ad:51:e8:be:0f:bb:37:e0:26:00:76:31:17: da:4a:e2:58:7e:42:41:cb:91:59:4f:9e:dc:6b:5e: ed:46:b0:63:77:ab:f1:91:18:fc:3c:05:5c:22:5f: 54:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BA:B6:6F:75:FF:CE:21:80:0B:89:D6:55:83:10:96:9F:BD:EB:31 X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:57:3a:f3:2b:cf:d1:bc:77:87:a5:54:8a:10:c9:09:7a:94: 4c:03:a3:60:62:32:c6:46:e2:f9:c5:44:55:cf:36:8b:fc:f5: 57:fa:14:bd:4d:6b:0b:d5:ca:72:70:89:0b:9b:81:1e:10:cb: 60:62:54:6e:4e:ee:c1:3c:06:1b:0b:68:42:0b:84:72:93:08: 21:04:86:d0:e6:12:41:22:40:f8:3a:b3:26:d9:ee:0e:ba:ea: 03:61:2f:8d:d7:28:7a:b2:9c:59:81:86:ff:63:52:5c:60:e0: b0:63:fa:01:9d:e6:d7:65:22:1b:c2:5a:a8:38:b1:bc:92:fb: dc:84:d0:7a:90:6e:f9:b0:11:24:c8:6d:45:85:88:46:8d:2a: 49:90:83:35:c0:78:26:51:09:22:a8:5c:89:9b:d6:38:75:75: fc:ac:ce:73:4a:2a:1b:76:7e:8e:2a:ab:af:e6:e8:a9:ca:8e: 8e:a3:d6:ab:4e:b7:a3:ef:04:b2:48:fe:d8:dd:27:1d:47:a1: 51:aa:74:3b:d5:80:4d:fa:cb:c2:40:52:25:2a:e6:59:6d:7d: 95:52:61:f1:f1:43:78:27:c5:60:25:81:dd:e1:9c:2e:27:c8: 52:b6:3b:62:b2:42:36:7d:99:b1:1e:af:30:ef:ac:35:2d:df: 60:72:fb:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoyR8RqF6nVqgfo1QOXk+yDp+FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNjA0MTYwNTE3MTBaFw0yNjA0MTkxNTE2MTBaMDMxMTAvBgNV BAMTKENGQkFCNjZGNzVGRkNFMjE4MDBCODlENjU1ODMxMDk2OUZCREVCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxoCGp/CIqE+pOooA7FJZR53V BVFKxjN719wlpbdretj/yqA/uheEsv2EcCjfAtOjDMYXSdtmDCQbH6IktEuD/3SM 3rsIw2b52ryTOkWKoOXiRRbG8F/hLHp13P3zEmQa+R1BFdfk77Jmy0x4fKB0SUMk YoXUg6gGFU+DrggbzzFCBnHwA1BBs1I5pwGR4++y/PN/j7N7VYwZP+8IuD+gQ6md ZxNWzqiV5n8PV8EDlQb9Kv7lODSRdavdqzGPzHo2usNq1fDqElqD/92GmQ7aP6m0 rVHovg+7N+AmAHYxF9pK4lh+QkHLkVlPntxrXu1GsGN3q/GRGPw8BVwiX1QLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz7q2b3X/ziGAC4nWVYMQlp+96zEwHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChXOvMrz9G8d4elVIoQyQl6lEwDo2BiMsZG 4vnFRFXPNov89Vf6FL1NawvVynJwiQubgR4Qy2BiVG5O7sE8BhsLaEILhHKTCCEE htDmEkEiQPg6sybZ7g666gNhL43XKHqynFmBhv9jUlxg4LBj+gGd5tdlIhvCWqg4 sbyS+9yE0HqQbvmwESTIbUWFiEaNKkmQgzXAeCZRCSKoXImb1jh1dfysznNKKht2 fo4qq6/m6KnKjo6j1qtOt6PvBLJI/tjdJx1HoVGqdDvVgE36y8JAUiUq5lltfZVS YfHxQ3gnxWAlgd3hnC4nyFK2O2KyQjZ9mbEerzDvrDUt32By+9A= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:15 2026 by rpki-client