$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft File: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json) Hash identifier: kctg79+zRzTmJHMBZdbFI7ryAc+a+fyjlTfmUzDR3k0= Subject key identifier: 7A:68:75:2D:53:A8:CD:D9:75:10:9C:CA:CE:53:BA:A8:04:38:21:AE Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Certificate serial: 0DDE4BA2ECACA1D6F12E9A0DBCCA203E796ABDBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft Manifest number: 0573 Signing time: Fri 20 Mar 2026 16:31:53 +0000 Manifest this update: Fri 20 Mar 2026 16:26:53 +0000 Manifest next update: Tue 24 Mar 2026 04:21:53 +0000 Files and hashes: 1: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=) 2: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=) 3: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=) 4: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw=) 5: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=) 6: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=) 7: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: Iku7tb8SAQIhEvwkUVsI01KnPzpIZ553w7v11/ErUtM=) 8: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=) 9: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=) 10: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=) 11: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=) 12: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=) 13: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=) 14: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=) 15: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=) 16: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: iFCEFM2akurTNdjVw4cCdZCfLd/goaXftidrSq0mpS8=) 17: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=) 18: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=) 19: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 04:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:de:4b:a2:ec:ac:a1:d6:f1:2e:9a:0d:bc:ca:20:3e:79:6a:bd:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Validity Not Before: Mar 20 16:26:53 2026 GMT Not After : Mar 24 04:21:53 2026 GMT Subject: CN=7A68752D53A8CDD975109CCACE53BAA8043821AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:31:c0:88:e8:05:2a:87:b7:bf:e1:9f:33:ed: 57:e5:41:37:38:f0:ed:2f:d4:8e:6b:bc:bc:da:1a: 03:d6:0c:f1:1b:93:4b:9f:89:2b:bd:b2:99:16:38: f8:61:96:3e:21:e1:79:28:8a:e2:42:6d:1c:e6:1b: 43:82:cf:b0:47:25:58:8c:7b:19:08:fa:e2:9b:d4: a5:f6:97:78:26:df:5f:f7:7c:43:76:08:f8:0d:91: 7a:58:27:f9:33:c3:f9:2a:8a:6c:45:59:68:96:d1: 07:a3:71:0c:42:d3:b7:f2:ec:af:4c:73:64:30:95: 52:6c:dd:d0:5c:a1:d0:a5:78:f5:c8:d7:b6:0b:86: fe:ef:64:08:c4:16:11:d3:a0:c6:10:03:c2:4a:6f: 55:e4:a5:de:ea:ac:8b:d3:b0:16:64:45:d1:99:f2: 05:65:52:2a:f1:99:7c:5b:2f:bf:3b:59:62:a9:77: d9:ce:c5:76:64:58:dd:c6:09:44:12:52:cb:21:97: 25:38:42:9c:e7:cf:f8:e5:64:e4:31:01:bd:50:16: b6:a1:56:44:80:c2:90:7b:13:b2:4e:47:9a:25:ca: 76:84:22:b6:04:6e:75:60:ef:f2:df:ab:47:8b:9c: e8:1a:88:b0:5b:d7:8e:20:26:04:95:3c:18:43:bd: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:68:75:2D:53:A8:CD:D9:75:10:9C:CA:CE:53:BA:A8:04:38:21:AE X509v3 Authority Key Identifier: keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:02:f7:6a:d0:56:77:10:4f:5e:51:64:30:a3:96:92:85:aa: 50:f0:4f:19:a3:6c:a3:f3:22:66:78:7f:c5:47:3f:56:7f:ca: 8f:97:13:42:75:8e:af:14:ff:6e:6a:aa:5a:01:e8:7f:3e:7e: 75:98:c2:28:d9:61:38:9f:7a:4d:d7:0d:3f:bf:0f:70:30:21: 52:68:f9:39:90:d9:6e:38:7a:00:29:06:25:34:d6:4e:f9:2e: 5a:31:28:75:08:21:b1:2c:c3:ee:e5:ee:fb:5d:14:9b:46:54: 6b:32:c2:b0:2f:03:97:25:24:32:f1:af:c4:4a:79:19:14:0c: ae:9e:6a:a0:d5:1e:69:eb:bb:fc:c2:2f:15:3a:5c:ae:f4:47: fb:4b:e3:ae:6c:a9:d8:57:62:ab:a0:f0:00:dd:00:71:e7:4c: 8e:0f:ce:11:b6:c5:d6:20:2a:3b:80:ac:98:8c:f8:d6:c4:d7: 6e:5b:d1:40:88:1c:c9:37:86:19:8d:f0:7c:2e:93:dd:86:69: ef:90:03:ff:cf:91:4f:aa:a7:84:3a:78:b6:83:6b:64:42:61: 33:fd:65:26:62:b1:82:f6:1f:f7:b7:43:f5:37:22:d3:fc:3e: 31:b6:69:60:6f:85:79:42:1f:8c:92:c6:90:fc:82:0b:6a:06: 14:9c:44:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDd5LouysodbxLpoNvMogPnlqvb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD QUI5NjEwRjAeFw0yNjAzMjAxNjI2NTNaFw0yNjAzMjQwNDIxNTNaMDMxMTAvBgNV BAMTKDdBNjg3NTJENTNBOENERDk3NTEwOUNDQUNFNTNCQUE4MDQzODIxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1McCI6AUqh7e/4Z8z7VflQTc4 8O0v1I5rvLzaGgPWDPEbk0ufiSu9spkWOPhhlj4h4XkoiuJCbRzmG0OCz7BHJViM exkI+uKb1KX2l3gm31/3fEN2CPgNkXpYJ/kzw/kqimxFWWiW0QejcQxC07fy7K9M c2QwlVJs3dBcodClePXI17YLhv7vZAjEFhHToMYQA8JKb1Xkpd7qrIvTsBZkRdGZ 8gVlUirxmXxbL787WWKpd9nOxXZkWN3GCUQSUsshlyU4Qpznz/jlZOQxAb1QFrah VkSAwpB7E7JOR5olynaEIrYEbnVg7/Lfq0eLnOgaiLBb144gJgSVPBhDva3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUemh1LVOozdl1EJzKzlO6qAQ4Ia4wHwYDVR0j BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5 NjEwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj MzEtOWMzNmNmOTRmM2ZiLzAvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZG QzJDQUI5NjEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEC92rQVncQT15RZDCjlpKFqlDwTxmjbKPz ImZ4f8VHP1Z/yo+XE0J1jq8U/25qqloB6H8+fnWYwijZYTifek3XDT+/D3AwIVJo +TmQ2W44egApBiU01k75LloxKHUIIbEsw+7l7vtdFJtGVGsywrAvA5clJDLxr8RK eRkUDK6eaqDVHmnru/zCLxU6XK70R/tL465sqdhXYqug8ADdAHHnTI4PzhG2xdYg KjuArJiM+NbE125b0UCIHMk3hhmN8Hwuk92Gae+QA//PkU+qp4Q6eLaDa2RCYTP9 ZSZisYL2H/e3Q/U3ItP8PjG2aWBvhXlCH4ySxpD8ggtqBhScRLg= -----END CERTIFICATE-----Generated at Sat Mar 21 23:08:41 2026 by rpki-client