$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: zFWMYkxcx0YpELi1wq3Lnn80QjJk0ZzeERwYp1JAPL4= Subject key identifier: 1C:B5:FA:10:F9:76:59:B2:3A:95:29:59:A1:D2:77:D7:24:38:E4:09 Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 1AE67E9375ECFF935E28139B7363B68DF56BBC2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: 010F Signing time: Sat 07 Mar 2026 13:11:47 +0000 Manifest this update: Sat 07 Mar 2026 13:06:47 +0000 Manifest next update: Tue 10 Mar 2026 21:43:47 +0000 Files and hashes: 1: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: Nn/TqSBCuY9n618CesjtU/DzQxXmY/JmoWZjOKPQTuE=) 2: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: +gBVwNw7mH+NkrJk5YLfGGsFiQ/hE9AOEiojhde40e4=) 3: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 07AYTQCRXN9L1KmjaIr5Q8Dzp8wOL7x5otWYmSe9QU0=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 0U+NdxzY7vmT7oHxOmUZVL0R1y6tciRJXLTpjbtqaPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e6:7e:93:75:ec:ff:93:5e:28:13:9b:73:63:b6:8d:f5:6b:bc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Mar 7 13:06:47 2026 GMT Not After : Mar 10 21:43:47 2026 GMT Subject: CN=1CB5FA10F97659B23A952959A1D277D72438E409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:cb:ea:21:93:a3:d9:18:7c:3b:06:97:13: 37:5f:71:fb:16:50:1b:ab:d6:c6:93:a0:58:8b:33: c9:06:26:3d:15:20:84:23:33:c9:32:d7:f1:d7:8d: 77:5e:8e:fd:7e:15:71:6f:75:98:6b:03:85:82:56: 57:ad:64:a6:42:4a:d8:d1:6b:8d:68:a3:38:f6:74: 02:47:8a:ca:f5:92:e7:15:2f:54:4d:09:6a:3a:24: de:ea:d9:4c:10:ed:f8:9c:8c:65:22:94:bb:40:ea: 31:01:08:98:fa:e5:4d:aa:ae:ef:11:94:51:3f:69: df:0f:88:86:b6:65:56:1f:ca:1b:40:77:79:d2:dd: 36:8b:60:b2:ab:42:be:e1:bd:03:2b:23:95:24:40: 23:c6:02:c0:1c:5e:b9:e5:80:1f:c3:62:06:75:8c: 00:15:33:b3:29:ca:d4:05:49:07:4f:77:87:e6:b7: fc:a5:c5:7a:c8:02:aa:93:a6:85:a2:2d:2c:ea:4b: d5:a8:fb:7b:80:83:34:6a:4e:25:fc:fb:a0:f7:b2: 7e:2a:3a:a3:e7:b6:73:9b:d9:0a:7e:3b:3f:f2:13: 9c:a7:aa:96:1c:07:2f:de:6c:4f:3b:dc:3b:bb:86: ff:78:70:33:c1:2d:43:a9:dc:c5:13:85:15:8f:cf: b1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B5:FA:10:F9:76:59:B2:3A:95:29:59:A1:D2:77:D7:24:38:E4:09 X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:78:0e:6a:16:76:24:d2:f6:c3:61:e5:d4:5b:b8:b2:0f:b2: 1d:cb:83:5c:80:39:f5:c4:b0:94:26:e3:95:80:20:ff:e5:ad: 4c:f5:ec:2f:93:2b:34:76:42:ae:c6:f0:76:aa:be:2f:ac:01: 58:f6:74:9e:df:62:86:9c:e0:ba:77:44:24:1b:e7:89:4f:14: 09:df:95:2f:ca:90:d6:63:1e:9e:10:b6:35:88:24:df:95:af: 47:58:38:8e:73:0f:2b:f0:cc:3b:20:27:64:4f:7b:39:f4:cb: 93:1b:3a:15:83:f2:0c:15:20:5a:8e:75:6e:7d:dc:18:a7:2a: a9:8b:ef:19:01:75:6c:e0:e7:4f:7f:66:0d:94:b4:4c:5a:19: 0e:9e:14:17:ef:32:47:98:7a:60:79:9b:74:41:5d:96:3a:8b: 36:15:f1:48:d4:af:a1:2d:58:fc:9c:55:a0:4e:e8:20:89:9b: 51:d8:25:37:1d:5f:d2:a0:46:29:8b:31:4c:71:61:eb:e5:ae: f1:df:41:42:54:d6:eb:42:87:c4:c2:b6:1e:d7:5b:a8:09:09: 2a:ba:cb:b3:40:96:e8:ab:66:a6:31:5a:1b:00:ce:28:6a:2e: 80:65:e0:f7:98:b8:a4:08:d0:90:e5:dd:98:cc:72:84:58:17: e1:fb:12:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuZ+k3Xs/5NeKBObc2O2jfVrvCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNjAzMDcxMzA2NDdaFw0yNjAzMTAyMTQzNDdaMDMxMTAvBgNV BAMTKDFDQjVGQTEwRjk3NjU5QjIzQTk1Mjk1OUExRDI3N0Q3MjQzOEU0MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjJMvqIZOj2Rh8OwaXEzdfcfsW UBur1saToFiLM8kGJj0VIIQjM8ky1/HXjXdejv1+FXFvdZhrA4WCVletZKZCStjR a41oozj2dAJHisr1kucVL1RNCWo6JN7q2UwQ7ficjGUilLtA6jEBCJj65U2qru8R lFE/ad8PiIa2ZVYfyhtAd3nS3TaLYLKrQr7hvQMrI5UkQCPGAsAcXrnlgB/DYgZ1 jAAVM7MpytQFSQdPd4fmt/ylxXrIAqqTpoWiLSzqS9Wo+3uAgzRqTiX8+6D3sn4q OqPntnOb2Qp+Oz/yE5ynqpYcBy/ebE873Du7hv94cDPBLUOp3MUThRWPz7GfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHLX6EPl2WbI6lSlZodJ31yQ45AkwHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAl4DmoWdiTS9sNh5dRbuLIPsh3Lg1yAOfXE sJQm45WAIP/lrUz17C+TKzR2Qq7G8Haqvi+sAVj2dJ7fYoac4Lp3RCQb54lPFAnf lS/KkNZjHp4QtjWIJN+Vr0dYOI5zDyvwzDsgJ2RPezn0y5MbOhWD8gwVIFqOdW59 3BinKqmL7xkBdWzg509/Zg2UtExaGQ6eFBfvMkeYemB5m3RBXZY6izYV8UjUr6Et WPycVaBO6CCJm1HYJTcdX9KgRimLMUxxYevlrvHfQUJU1utCh8TCth7XW6gJCSq6 y7NAluirZqYxWhsAzihqLoBl4PeYuKQI0JDl3ZjMcoRYF+H7Es8= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:31 2026 by rpki-client