$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: 5mjEs3bXkGnU3nVe418awtZcSWD/wwfD8dNpYbLYyM0= Subject key identifier: A7:3A:FE:43:00:DC:D2:1A:79:E6:73:DC:DA:63:66:C5:CE:82:FD:91 Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 04ADBAC287E03869DBA9DEEC97A2A2F0C7872882 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: 0123 Signing time: Tue 21 Apr 2026 15:11:49 +0000 Manifest this update: Tue 21 Apr 2026 15:06:49 +0000 Manifest next update: Fri 24 Apr 2026 18:19:49 +0000 Files and hashes: 1: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 0U+NdxzY7vmT7oHxOmUZVL0R1y6tciRJXLTpjbtqaPI=) 2: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: 81dURM9EPf6mcu1H00Jq/5FmyugvFEGdTNwMAVUSL+0=) 3: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: +gBVwNw7mH+NkrJk5YLfGGsFiQ/hE9AOEiojhde40e4=) 4: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 07AYTQCRXN9L1KmjaIr5Q8Dzp8wOL7x5otWYmSe9QU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ad:ba:c2:87:e0:38:69:db:a9:de:ec:97:a2:a2:f0:c7:87:28:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Apr 21 15:06:49 2026 GMT Not After : Apr 24 18:19:49 2026 GMT Subject: CN=A73AFE4300DCD21A79E673DCDA6366C5CE82FD91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:62:60:af:0e:31:47:b7:a0:3f:35:5d:6b: 7d:96:ca:48:a9:c0:97:22:84:1e:58:7a:df:f3:10: ac:19:4d:c0:a6:e3:aa:b1:31:24:2a:c8:c8:52:8e: 6e:18:89:28:90:b1:6b:7e:76:a2:5b:7e:1b:9a:8a: 4e:2d:37:bc:b1:f8:46:78:7b:7d:39:bd:8b:30:4d: 3c:e1:f6:fb:32:09:30:67:ca:3e:14:72:2d:ae:a9: 38:9e:2a:43:40:a6:c9:40:86:d5:1c:00:54:0d:e6: dd:16:ed:7a:0b:ba:60:22:ed:85:e4:09:d4:1a:b3: 30:32:0e:f7:65:18:41:65:dc:8e:a9:00:f9:3c:ec: 8a:24:67:32:ce:6b:ed:5e:22:ec:6c:73:57:18:14: d3:b7:c7:17:33:85:23:a7:00:1d:9d:81:80:9e:63: 62:a3:b1:00:dc:8e:e4:31:36:28:0b:f8:92:e4:40: 54:a6:08:4e:0c:8f:83:59:dc:8b:25:22:75:6d:34: 4d:22:80:91:d1:26:2b:ba:a5:d2:31:fe:13:8c:26: d9:31:48:57:ba:2f:aa:ef:d4:a9:01:9c:fb:f9:b2: ba:c6:46:7a:91:e4:25:d8:86:35:df:56:39:e5:78: 23:78:64:ef:af:ff:35:43:9b:9a:1e:14:31:63:82: 68:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3A:FE:43:00:DC:D2:1A:79:E6:73:DC:DA:63:66:C5:CE:82:FD:91 X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:59:fa:1d:cd:da:f5:59:b3:c7:83:22:da:8e:2b:0d:65:5f: cd:8b:4a:a7:77:ee:37:06:a2:9a:3e:aa:09:1d:49:38:f4:29: 0d:23:e9:e2:95:a9:20:25:fc:c4:b9:cb:8e:29:c8:ee:fd:79: 19:93:d5:9c:f1:85:f2:3e:ae:ed:04:78:3b:c2:01:de:d6:e3: 58:33:53:dc:51:7d:bd:b2:4b:13:89:7f:72:41:76:24:c3:6d: 8f:48:cc:30:5b:81:a7:87:1a:04:d9:55:40:1a:7a:f4:bd:b2: 10:ae:14:1f:85:3a:12:da:58:e8:08:4c:05:4b:bd:29:51:7e: c8:77:a1:61:b5:7a:29:14:53:e3:85:4a:8c:32:29:ca:ef:e1: 8e:b6:fc:c9:f8:d6:fa:17:af:99:e4:a4:00:78:e3:b6:e3:fd: 98:ce:0a:87:5b:0f:c8:cf:15:de:b8:8e:b5:a4:d5:47:c0:e3: b0:c5:b2:bb:51:91:49:be:a3:4e:4d:50:68:a8:0f:54:3a:97: de:01:87:8e:66:e3:a1:b0:c7:95:94:5e:41:0f:da:8f:38:8b: 5f:06:84:09:58:db:82:ec:55:85:df:83:96:9e:b6:85:13:47: 9e:16:d5:c4:f7:e3:91:9f:6d:28:b9:08:89:74:18:8f:21:b0: 8d:84:7d:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBK26wofgOGnbqd7sl6Ki8MeHKIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNjA0MjExNTA2NDlaFw0yNjA0MjQxODE5NDlaMDMxMTAvBgNV BAMTKEE3M0FGRTQzMDBEQ0QyMUE3OUU2NzNEQ0RBNjM2NkM1Q0U4MkZEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaGJgrw4xR7egPzVda32Wykip wJcihB5Yet/zEKwZTcCm46qxMSQqyMhSjm4YiSiQsWt+dqJbfhuaik4tN7yx+EZ4 e305vYswTTzh9vsyCTBnyj4Uci2uqTieKkNApslAhtUcAFQN5t0W7XoLumAi7YXk CdQaszAyDvdlGEFl3I6pAPk87IokZzLOa+1eIuxsc1cYFNO3xxczhSOnAB2dgYCe Y2KjsQDcjuQxNigL+JLkQFSmCE4Mj4NZ3IslInVtNE0igJHRJiu6pdIx/hOMJtkx SFe6L6rv1KkBnPv5srrGRnqR5CXYhjXfVjnleCN4ZO+v/zVDm5oeFDFjgmgPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpzr+QwDc0hp55nPc2mNmxc6C/ZEwHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNZ+h3N2vVZs8eDItqOKw1lX82LSqd37jcG opo+qgkdSTj0KQ0j6eKVqSAl/MS5y44pyO79eRmT1ZzxhfI+ru0EeDvCAd7W41gz U9xRfb2ySxOJf3JBdiTDbY9IzDBbgaeHGgTZVUAaevS9shCuFB+FOhLaWOgITAVL vSlRfsh3oWG1eikUU+OFSowyKcrv4Y62/Mn41voXr5nkpAB447bj/ZjOCodbD8jP Fd64jrWk1UfA47DFsrtRkUm+o05NUGioD1Q6l94Bh45m46Gwx5WUXkEP2o84i18G hAlY24LsVYXfg5aetoUTR54W1cT345GfbSi5CIl0GI8hsI2EfVI= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:55 2026 by rpki-client