$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: jtDssS4OvthgJhddNQyiDNfNsmLw9l5dwlZebQCc//U= Subject key identifier: 68:F2:F1:77:A4:F6:33:E1:EC:C0:BA:33:A1:E2:39:A8:A9:F7:DE:2E Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 54D3763F6CF414E895E5BFDF5E1AB827A5B8340C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: 019E Signing time: Thu 16 Apr 2026 14:41:57 +0000 Manifest this update: Thu 16 Apr 2026 14:36:57 +0000 Manifest next update: Mon 20 Apr 2026 00:04:57 +0000 Files and hashes: 1: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: zVkKXHp1IUSWn6/DI0KODZ2Sd/LhWyDMOtuowY983gU=) 2: 3130332e33382e3131302e302f32342d3234203d3e20313531353639.roa (hash: J0htEBbJtg13KY4rKcx5Rasf7tnVHbIZzu6sYSNQaxY=) 3: 3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa (hash: dbxrQTgZv3GXn+UMmlKIl7zz9zo4NUqYuZDIWrYrKEU=) 4: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: QRuUii3tU8jr5yKWZdd8xnc6Dl6abj7PNFQeQEHLCyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d3:76:3f:6c:f4:14:e8:95:e5:bf:df:5e:1a:b8:27:a5:b8:34:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Apr 16 14:36:57 2026 GMT Not After : Apr 20 00:04:57 2026 GMT Subject: CN=68F2F177A4F633E1ECC0BA33A1E239A8A9F7DE2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b8:55:a3:1c:30:9a:8d:e8:c4:7a:42:a2:ae: 39:75:d0:22:8d:a3:a2:f1:da:88:e3:92:f3:dd:cc: 46:ed:7f:bb:e2:40:45:2b:55:1c:a0:5c:51:fa:5e: e8:84:1a:b2:d5:23:1e:19:c9:87:3c:89:0a:89:e5: d0:55:d6:d6:3f:df:73:90:89:e4:82:38:c6:85:67: 6d:ef:82:19:e6:82:87:4f:33:80:ee:da:1c:84:93: 8b:7f:a4:94:a3:f1:e4:7e:fb:da:a1:d9:d4:00:fb: 46:96:3e:8d:a8:24:d1:02:8a:51:96:84:07:d8:29: 9b:fd:4f:7a:d3:0d:5d:61:7d:4a:27:2c:30:48:2b: e4:2f:e5:60:d3:fc:d3:cb:1e:0b:ad:a1:4d:82:69: ef:d6:02:a8:fc:74:da:d4:a7:f9:05:76:5e:a7:d6: 8e:2e:9f:60:68:0e:3a:21:d5:1b:4f:a8:80:b6:3a: 81:9f:0f:9a:9f:c6:d4:7a:8d:9f:c8:8a:35:67:2e: 06:13:82:42:99:c4:45:f1:43:97:8a:31:58:89:3f: 9e:05:96:6b:7d:f6:06:25:00:3f:b1:36:09:a3:6b: aa:3d:4d:f1:1a:f5:9f:55:f3:2a:71:78:d2:d5:82: 93:6d:8e:6a:fa:23:a6:e0:9f:f0:e6:ab:e9:a8:58: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F2:F1:77:A4:F6:33:E1:EC:C0:BA:33:A1:E2:39:A8:A9:F7:DE:2E X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a1:81:4c:f2:8c:b6:de:9f:0a:3b:2a:fb:50:66:3c:b3:f4: 3e:7c:f0:92:4f:b6:67:71:68:24:68:99:d8:b3:9f:39:77:20: 2d:39:cc:a0:fc:67:ae:ff:40:00:bd:15:e3:2d:b7:5c:dd:d8: ea:f2:75:a8:c3:07:da:d5:e6:c1:e8:f7:8c:87:29:7e:1d:4b: 8d:21:12:a9:bb:df:01:04:18:10:7c:f2:a2:45:0e:29:c0:ef: 73:1a:21:6b:f3:48:55:bb:22:3f:76:5d:0b:9d:d3:1c:66:d4: 28:bc:46:d9:33:cc:29:37:08:fa:67:95:2e:8a:ac:38:77:df: b8:5a:2a:a4:af:39:c1:42:8a:0f:24:c5:c7:68:17:79:c8:b0: cb:fd:bc:9a:bd:c7:a9:88:ce:58:8b:6b:1e:a5:8c:06:ca:33: 36:38:d4:3d:e3:99:3e:0d:11:fa:e7:0c:4f:2c:34:6a:31:59: e2:7a:4b:a7:29:cb:7a:a6:86:5f:10:d4:8d:34:ae:71:da:62: 78:2c:cb:be:8a:55:d3:8f:a7:2e:d0:88:7a:7e:da:97:5e:6a: 8a:bb:9c:42:58:bf:4f:11:1d:45:81:58:ec:be:b4:39:61:97: 00:36:cf:04:35:c8:92:97:02:da:32:31:58:68:e6:67:51:44: dd:9f:9d:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNN2P2z0FOiV5b/fXhq4J6W4NAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNjA0MTYxNDM2NTdaFw0yNjA0MjAwMDA0NTdaMDMxMTAvBgNV BAMTKDY4RjJGMTc3QTRGNjMzRTFFQ0MwQkEzM0ExRTIzOUE4QTlGN0RFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUuFWjHDCajejEekKirjl10CKN o6Lx2ojjkvPdzEbtf7viQEUrVRygXFH6XuiEGrLVIx4ZyYc8iQqJ5dBV1tY/33OQ ieSCOMaFZ23vghnmgodPM4Du2hyEk4t/pJSj8eR++9qh2dQA+0aWPo2oJNECilGW hAfYKZv9T3rTDV1hfUonLDBIK+Qv5WDT/NPLHgutoU2Cae/WAqj8dNrUp/kFdl6n 1o4un2BoDjoh1RtPqIC2OoGfD5qfxtR6jZ/IijVnLgYTgkKZxEXxQ5eKMViJP54F lmt99gYlAD+xNgmja6o9TfEa9Z9V8ypxeNLVgpNtjmr6I6bgn/Dmq+moWLRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaPLxd6T2M+HswLozoeI5qKn33i4wHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+hgUzyjLbenwo7KvtQZjyz9D588JJPtmdx aCRomdiznzl3IC05zKD8Z67/QAC9FeMtt1zd2OrydajDB9rV5sHo94yHKX4dS40h Eqm73wEEGBB88qJFDinA73MaIWvzSFW7Ij92XQud0xxm1Ci8RtkzzCk3CPpnlS6K rDh337haKqSvOcFCig8kxcdoF3nIsMv9vJq9x6mIzliLax6ljAbKMzY41D3jmT4N EfrnDE8sNGoxWeJ6S6cpy3qmhl8Q1I00rnHaYngsy76KVdOPpy7QiHp+2pdeaoq7 nEJYv08RHUWBWOy+tDlhlwA2zwQ1yJKXAtoyMVho5mdRRN2fnVw= -----END CERTIFICATE-----Generated at Fri Apr 17 13:20:45 2026 by rpki-client