$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: Y+cDf6aZTUKj8dHb/n84PZDPNGQ4ktZiMGcYZrBBMhw= Subject key identifier: E6:94:7B:11:ED:84:CC:22:FA:4B:64:40:CF:9B:62:90:4C:23:6F:0C Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 32A4195C45B025EB7478AF3891559876C6E8966E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 024D Signing time: Thu 16 Apr 2026 07:32:37 +0000 Manifest this update: Thu 16 Apr 2026 07:27:37 +0000 Manifest next update: Sun 19 Apr 2026 12:54:37 +0000 Files and hashes: 1: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=) 2: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=) 3: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: 0Hx7QMJ1IPT/g0OP4aaUIYOOY7jQSOgKwZ/VqQBbks8=) 4: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a4:19:5c:45:b0:25:eb:74:78:af:38:91:55:98:76:c6:e8:96:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Apr 16 07:27:37 2026 GMT Not After : Apr 19 12:54:37 2026 GMT Subject: CN=E6947B11ED84CC22FA4B6440CF9B62904C236F0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8d:3d:69:8b:87:1d:4f:d8:45:5e:4f:35:e3: 0b:12:62:16:d9:6e:ab:3f:cc:f4:5a:a9:1f:e4:5b: 1e:4a:a7:60:3c:a5:92:6b:50:23:a8:6a:89:8e:33: ca:cb:93:32:07:a9:e8:95:90:85:b1:c1:50:95:df: 93:9b:a9:ee:ec:b0:2b:ac:52:90:37:69:64:b1:f0: f0:11:01:5e:0f:f1:8d:9e:1a:f1:87:81:40:1c:6c: 6f:3b:90:b8:99:b1:0c:74:49:4e:dc:04:6c:5f:d9: 8a:4a:a0:fa:b0:23:f7:8c:27:1e:1e:50:15:6e:a7: f4:ad:30:ab:fc:27:dc:63:71:cc:18:80:f7:44:95: b5:39:fd:62:5f:3d:74:61:78:a8:ca:e6:17:95:42: 72:b2:bb:84:cf:0d:83:12:4d:67:55:1b:43:bc:1e: 00:b9:10:01:9f:f0:60:c7:1e:20:62:cf:79:34:93: 74:1a:43:39:1a:c0:b8:aa:5c:d1:1c:0a:88:9f:8a: 85:49:fc:63:94:a1:2f:cb:2f:b2:33:42:62:0f:27: 87:e9:23:55:1a:05:e4:0f:8f:79:f1:2f:91:4f:d0: 50:9b:48:be:09:29:d4:61:a7:e2:d5:35:32:94:61: 97:78:c4:67:0e:b2:c8:59:a3:87:72:24:78:3a:ff: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:94:7B:11:ED:84:CC:22:FA:4B:64:40:CF:9B:62:90:4C:23:6F:0C X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:76:af:84:c0:c2:9d:47:20:c9:d9:58:e0:43:2e:d6:0a:fa: 4f:80:39:e7:cc:8c:90:5b:63:e5:60:52:64:15:1e:e6:d9:37: 0b:54:e1:04:4f:21:0d:66:51:d7:5b:54:b2:ea:c7:24:b3:43: a0:97:d3:fe:29:ee:f9:b1:63:8f:2c:0b:67:0b:01:b1:b5:c6: f1:ac:ab:8e:1b:b0:49:2f:5a:e8:45:9d:8d:5c:9d:52:c2:50: 8c:ca:b3:52:31:30:92:8f:88:db:2a:ea:3a:1f:ff:06:9a:62: 58:eb:5d:3d:72:c5:7d:c9:fd:0a:84:e0:f3:fc:77:c2:12:79: 85:b9:ed:bc:1d:a8:bc:16:15:97:d3:93:26:06:14:15:07:2c: 2c:2e:b5:7b:c2:ee:3f:80:de:02:35:a6:15:f5:8a:2d:fe:b2: d7:90:88:5a:7d:0c:ac:d1:c1:7b:70:0c:57:5f:eb:ef:43:7f: 61:f0:90:83:29:6b:43:57:b6:ee:2c:d3:6f:eb:f9:06:d9:e2: 0b:0d:4e:8c:a3:36:40:f3:bd:bf:90:bc:07:58:04:0a:dd:00: 79:d2:fe:36:b6:f2:cc:08:1a:b5:13:16:8f:00:78:82:65:d1: c6:55:fe:a8:7a:4b:18:85:c3:e0:c4:6c:7d:40:a2:5f:83:50: 40:63:57:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMqQZXEWwJet0eK84kVWYdsbolm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNjA0MTYwNzI3MzdaFw0yNjA0MTkxMjU0MzdaMDMxMTAvBgNV BAMTKEU2OTQ3QjExRUQ4NENDMjJGQTRCNjQ0MENGOUI2MjkwNEMyMzZGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfjT1pi4cdT9hFXk814wsSYhbZ bqs/zPRaqR/kWx5Kp2A8pZJrUCOoaomOM8rLkzIHqeiVkIWxwVCV35Obqe7ssCus UpA3aWSx8PARAV4P8Y2eGvGHgUAcbG87kLiZsQx0SU7cBGxf2YpKoPqwI/eMJx4e UBVup/StMKv8J9xjccwYgPdElbU5/WJfPXRheKjK5heVQnKyu4TPDYMSTWdVG0O8 HgC5EAGf8GDHHiBiz3k0k3QaQzkawLiqXNEcCoifioVJ/GOUoS/LL7IzQmIPJ4fp I1UaBeQPj3nxL5FP0FCbSL4JKdRhp+LVNTKUYZd4xGcOsshZo4dyJHg6/xWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5pR7Ee2EzCL6S2RAz5tikEwjbwwwHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF12r4TAwp1HIMnZWOBDLtYK+k+AOefMjJBb Y+VgUmQVHubZNwtU4QRPIQ1mUddbVLLqxySzQ6CX0/4p7vmxY48sC2cLAbG1xvGs q44bsEkvWuhFnY1cnVLCUIzKs1IxMJKPiNsq6jof/waaYljrXT1yxX3J/QqE4PP8 d8ISeYW57bwdqLwWFZfTkyYGFBUHLCwutXvC7j+A3gI1phX1ii3+steQiFp9DKzR wXtwDFdf6+9Df2HwkIMpa0NXtu4s02/r+QbZ4gsNToyjNkDzvb+QvAdYBArdAHnS /ja28swIGrUTFo8AeIJl0cZV/qh6SxiFw+DEbH1Aol+DUEBjV9k= -----END CERTIFICATE-----Generated at Fri Apr 17 20:12:26 2026 by rpki-client