$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: o9o2SIx+C+65G4x5iMBOj7D5RjbiYtvVsrIkMxVTEXE= Subject key identifier: 9D:AA:CA:96:33:FB:58:2B:4C:ED:80:AA:EA:F9:97:97:3A:25:0C:30 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 3C001A524626FBF1A37CB953C76EA3EBCA79307A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 0503 Signing time: Thu 23 Apr 2026 14:21:56 +0000 Manifest this update: Thu 23 Apr 2026 14:16:56 +0000 Manifest next update: Sun 26 Apr 2026 20:32:56 +0000 Files and hashes: 1: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: /7g/RNtKRg5XMNGZb35kEIHxIHrZD4h+x2WVJY/kqUg=) 2: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: /afnBbe9lqmeZWTu4VD92m9xOkkp/GMDn8V+1M5ITYk=) 3: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 7kcdJn0kEx4MlESTLNrz7h+lfGYcQSPT5Qkc5rykWNw=) 4: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: L/oaDs9pEKj6iBvLwrU05wZAuGGAsyb/Z+4/d76DsQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 20:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:00:1a:52:46:26:fb:f1:a3:7c:b9:53:c7:6e:a3:eb:ca:79:30:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Apr 23 14:16:56 2026 GMT Not After : Apr 26 20:32:56 2026 GMT Subject: CN=9DAACA9633FB582B4CED80AAEAF997973A250C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:3c:86:34:82:d6:e4:24:a2:46:39:5d:d3: d2:c9:53:68:1f:f0:01:d0:f8:50:a0:38:d7:49:f9: 6d:51:18:c6:01:42:ef:60:d5:61:70:8f:ef:c7:d7: ce:c2:e8:6a:dd:45:03:46:50:d7:cc:4b:ee:23:29: a4:41:34:d2:cf:0d:fe:ef:d9:bb:f7:7c:31:33:dc: 0b:c2:79:2d:11:39:33:ef:dd:de:33:e1:a6:1c:83: ed:dd:08:5a:fe:f5:95:fb:77:75:74:66:6f:a2:45: 88:c0:25:e5:82:1b:c4:22:60:ac:89:44:6d:e3:62: f9:ca:40:a7:e9:f5:17:21:81:66:02:4d:f5:d4:cb: d2:21:6c:08:27:d4:3e:17:39:59:78:f0:22:18:5a: 69:4d:a5:b8:c0:ff:31:02:06:d7:6c:0e:22:c8:79: b1:be:39:f6:b0:9d:0b:27:8e:61:30:3d:cf:d8:f0: 60:fd:90:3f:f6:81:c5:36:22:ea:92:2c:28:14:5b: 99:db:ac:c9:73:7a:a4:d0:4f:b6:a5:a2:48:78:d5: e6:60:f2:fb:91:bf:0f:72:4b:4a:f7:8d:9d:e4:d7: f5:9f:26:63:ca:f6:94:cd:e3:b6:54:f1:83:75:96: af:12:aa:77:d6:ee:41:2d:8b:54:3b:2d:8f:25:f0: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AA:CA:96:33:FB:58:2B:4C:ED:80:AA:EA:F9:97:97:3A:25:0C:30 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:23:36:b1:6c:07:0b:d1:05:4e:7b:26:23:3c:d0:a8:80:74: 77:97:f1:4e:9c:f0:9b:29:fd:3f:63:e2:28:7a:d4:2e:57:4f: 3d:78:08:3a:e1:51:77:15:28:59:b3:6d:63:e1:e4:fc:77:9a: 7b:2e:db:b1:2f:75:b8:81:33:f0:c1:07:6d:74:79:d7:9c:fe: 32:56:9e:4b:31:16:f2:d1:58:7c:a3:97:33:62:30:38:90:e2: 2d:01:1c:8d:5d:42:5a:4d:0f:c5:c9:00:b5:54:3a:4a:18:43: fe:84:fb:b9:ad:0e:3b:e8:8c:df:f1:44:75:f1:9b:db:db:04: 74:2f:f4:3b:f9:aa:74:dc:a7:28:d7:a9:bd:97:df:93:ec:dd: 25:54:1a:55:8b:f4:21:6f:bb:43:56:5c:61:64:40:c3:5a:54: 51:34:6b:bc:05:7a:66:3b:fe:80:72:56:1d:e4:e0:31:53:bc: 5f:c7:bb:88:00:db:1d:43:36:f7:48:e4:b7:18:dd:27:66:00: b7:ae:60:1a:c0:49:27:17:a8:f4:eb:da:c9:3f:1f:d9:dc:7a: 35:64:9f:f0:28:20:ad:79:d5:08:8e:42:b3:bf:7b:af:46:17: cf:0f:ab:f2:ae:db:a2:50:51:59:8e:5b:9d:f6:ec:38:c0:4d: 0f:ce:e6:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAAaUkYm+/GjfLlTx26j68p5MHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNjA0MjMxNDE2NTZaFw0yNjA0MjYyMDMyNTZaMDMxMTAvBgNV BAMTKDlEQUFDQTk2MzNGQjU4MkI0Q0VEODBBQUVBRjk5Nzk3M0EyNTBDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tzyGNILW5CSiRjld09LJU2gf 8AHQ+FCgONdJ+W1RGMYBQu9g1WFwj+/H187C6GrdRQNGUNfMS+4jKaRBNNLPDf7v 2bv3fDEz3AvCeS0ROTPv3d4z4aYcg+3dCFr+9ZX7d3V0Zm+iRYjAJeWCG8QiYKyJ RG3jYvnKQKfp9RchgWYCTfXUy9IhbAgn1D4XOVl48CIYWmlNpbjA/zECBtdsDiLI ebG+OfawnQsnjmEwPc/Y8GD9kD/2gcU2IuqSLCgUW5nbrMlzeqTQT7alokh41eZg 8vuRvw9yS0r3jZ3k1/WfJmPK9pTN47ZU8YN1lq8SqnfW7kEti1Q7LY8l8LPZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnarKljP7WCtM7YCq6vmXlzolDDAwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsjNrFsBwvRBU57JiM80KiAdHeX8U6c8Jsp /T9j4ih61C5XTz14CDrhUXcVKFmzbWPh5Px3mnsu27EvdbiBM/DBB210edec/jJW nksxFvLRWHyjlzNiMDiQ4i0BHI1dQlpND8XJALVUOkoYQ/6E+7mtDjvojN/xRHXx m9vbBHQv9Dv5qnTcpyjXqb2X35Ps3SVUGlWL9CFvu0NWXGFkQMNaVFE0a7wFemY7 /oByVh3k4DFTvF/Hu4gA2x1DNvdI5LcY3SdmALeuYBrASScXqPTr2sk/H9ncejVk n/AoIK151QiOQrO/e69GF88Pq/Ku26JQUVmOW5327DjATQ/O5gM= -----END CERTIFICATE-----Generated at Fri Apr 24 06:17:46 2026 by rpki-client