$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: s/HMIRR4NC+mNQc4Y0oCxm7bngyzDm4fv6df6Es8b5s= Subject key identifier: 22:89:7F:0E:2E:EB:26:7F:63:65:98:EC:F9:BE:55:F2:30:BA:6C:7F Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 5F37E595B1693D59C71C8692BF53F931F509D27A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 0298 Signing time: Tue 21 Apr 2026 05:02:08 +0000 Manifest this update: Tue 21 Apr 2026 04:57:08 +0000 Manifest next update: Fri 24 Apr 2026 14:14:08 +0000 Files and hashes: 1: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: waJ7Yu63xRoY9A89FJsdpRPCyGEr6vKvLA1M7+3Q2jg=) 2: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: wNt5EmwEHPSeM9ZQJlpwZ6C3F/rEzP41P0Gzhcjqzwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:37:e5:95:b1:69:3d:59:c7:1c:86:92:bf:53:f9:31:f5:09:d2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Apr 21 04:57:08 2026 GMT Not After : Apr 24 14:14:08 2026 GMT Subject: CN=22897F0E2EEB267F636598ECF9BE55F230BA6C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:25:3c:72:4c:a8:aa:75:94:95:e5:56:0d: 79:bd:f2:95:f5:e6:b0:1f:8a:5c:f0:e8:c6:17:64: 7d:f0:02:16:1b:58:dc:5a:45:3a:f6:25:f8:16:71: 10:25:b3:a3:3d:ab:84:00:b3:21:93:28:24:5c:2f: d4:3c:e3:eb:71:be:aa:c3:0a:86:ed:25:01:c3:6d: d6:62:4a:fd:dc:61:b7:bd:87:28:46:3b:2d:eb:c9: 0d:ff:32:88:02:87:36:ab:51:5c:c9:a2:d2:d8:c9: 47:6e:77:9f:f9:51:b3:e6:0d:34:b4:f1:9b:10:7c: 52:00:87:9b:dd:e1:39:25:f9:aa:5a:81:c8:57:d8: 65:6f:0e:51:4d:77:3e:f1:f6:4e:70:0c:c8:7f:73: b9:cd:31:13:53:4d:da:a0:66:a0:d0:68:33:6a:9d: d2:f7:2b:7c:d9:4c:6b:d3:8d:bc:a8:da:72:04:84: ea:66:1d:e1:bc:49:5f:a4:4d:9c:9a:6f:76:f2:cc: b2:30:8a:cd:c8:28:24:9e:b5:4b:4d:3e:23:c2:68: a3:1e:f7:83:cf:ac:0c:f0:9c:a0:4d:4f:ce:f3:54: 85:b8:05:7a:ac:4f:3d:40:69:f3:3f:e9:d3:86:c1: eb:b4:e0:a7:46:55:6e:59:c0:ff:57:c1:92:73:af: 3a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:89:7F:0E:2E:EB:26:7F:63:65:98:EC:F9:BE:55:F2:30:BA:6C:7F X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:5a:8c:f6:bb:b2:29:e3:c9:91:92:e4:86:cd:2b:62:2f:65: 6c:cf:81:6b:ae:28:c2:4c:08:79:f6:f6:d2:a6:a5:c4:89:0a: dd:60:5c:7f:50:47:bc:d5:8d:01:65:82:52:ab:8e:16:79:7a: d8:05:75:7b:31:81:ec:6b:5a:fd:b0:a7:93:de:ef:21:a8:82: 3d:c3:c7:df:56:99:f8:6e:54:66:ea:64:7e:66:bb:82:32:dc: ce:1a:c1:4f:c9:78:08:f7:3a:79:59:c8:31:e5:8a:e3:d0:9a: bc:ff:cd:12:90:5e:2b:09:1a:7f:03:33:b7:3e:af:d6:bd:eb: 0a:12:3a:53:eb:b6:43:15:28:72:dd:41:0c:be:39:e3:2f:4d: 0e:35:61:7b:6f:06:d4:04:14:a9:7e:42:b7:a3:f4:3a:96:0e: 6c:40:92:9d:b6:12:81:21:52:07:62:05:9f:0a:20:2e:8d:bb: f8:fa:9c:39:62:ed:a2:bc:68:4b:75:7f:cd:ef:3d:78:79:8c: ad:ef:78:d5:34:44:d2:bd:cb:92:8e:bd:8d:0e:3c:0c:ab:f7: 72:7c:51:f4:e9:53:13:af:49:86:e8:24:c8:fb:e8:60:e2:0f: b3:9c:24:95:88:41:a0:98:4e:53:3a:a2:b7:40:4b:f6:0f:5d: 85:39:6c:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzfllbFpPVnHHIaSv1P5MfUJ0nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNjA0MjEwNDU3MDhaFw0yNjA0MjQxNDE0MDhaMDMxMTAvBgNV BAMTKDIyODk3RjBFMkVFQjI2N0Y2MzY1OThFQ0Y5QkU1NUYyMzBCQTZDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxCU8ckyoqnWUleVWDXm98pX1 5rAfilzw6MYXZH3wAhYbWNxaRTr2JfgWcRAls6M9q4QAsyGTKCRcL9Q84+txvqrD CobtJQHDbdZiSv3cYbe9hyhGOy3ryQ3/MogChzarUVzJotLYyUdud5/5UbPmDTS0 8ZsQfFIAh5vd4Tkl+apagchX2GVvDlFNdz7x9k5wDMh/c7nNMRNTTdqgZqDQaDNq ndL3K3zZTGvTjbyo2nIEhOpmHeG8SV+kTZyab3byzLIwis3IKCSetUtNPiPCaKMe 94PPrAzwnKBNT87zVIW4BXqsTz1AafM/6dOGweu04KdGVW5ZwP9XwZJzrzqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIol/Di7rJn9jZZjs+b5V8jC6bH8wHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNajPa7sinjyZGS5IbNK2IvZWzPgWuuKMJM CHn29tKmpcSJCt1gXH9QR7zVjQFlglKrjhZ5etgFdXsxgexrWv2wp5Pe7yGogj3D x99WmfhuVGbqZH5mu4Iy3M4awU/JeAj3OnlZyDHliuPQmrz/zRKQXisJGn8DM7c+ r9a96woSOlPrtkMVKHLdQQy+OeMvTQ41YXtvBtQEFKl+Qrej9DqWDmxAkp22EoEh UgdiBZ8KIC6Nu/j6nDli7aK8aEt1f83vPXh5jK3veNU0RNK9y5KOvY0OPAyr93J8 UfTpUxOvSYboJMj76GDiD7OcJJWIQaCYTlM6ordAS/YPXYU5bDQ= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:34 2026 by rpki-client