$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft File: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft (raw, json) Hash identifier: blTuOJnLAwGbdaLfiFnbxl4B0MzVTQz5LVdKRWHxBrc= Subject key identifier: 01:16:B5:4D:F5:9A:59:FD:6A:69:D4:01:78:06:17:7D:51:2A:29:31 Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 3D0A96F57AE7768927CD50689AEE64B774DD000D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft Manifest number: 0228 Signing time: Sun 01 Mar 2026 20:11:54 +0000 Manifest this update: Sun 01 Mar 2026 20:06:54 +0000 Manifest next update: Thu 05 Mar 2026 06:15:54 +0000 Files and hashes: 1: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: 7zBTS0bU7PgzGa8PCcebIzMScdeyLBIAzKr1yoDxbbo=) 2: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: 0GFIWUiUrqRfAE/w3eKveKOv4M+2LjJoosY6Pp8ypUc=) 3: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: aDPjpRT6pfd3T7ltNqLLQRA6RqqiOtEG5C4gW/hEaTI=) 4: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl (hash: qjKi2GPQ34jJeIZJAspqISkhXAJSSL5/PzfUgOMOD8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0a:96:f5:7a:e7:76:89:27:cd:50:68:9a:ee:64:b7:74:dd:00:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Mar 1 20:06:54 2026 GMT Not After : Mar 5 06:15:54 2026 GMT Subject: CN=0116B54DF59A59FD6A69D4017806177D512A2931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:6b:76:6d:ab:3e:be:08:3f:89:90:91:4b: a2:7c:cf:85:34:59:26:9f:46:4e:b2:66:16:40:cb: b3:ad:32:41:63:98:ef:e9:82:a1:0e:b8:70:01:af: 49:8f:5b:38:73:11:08:af:51:5a:75:a4:c6:8b:ce: b0:f6:bd:33:ce:91:a5:48:dc:af:75:88:04:00:ef: 60:cf:db:40:c4:b1:70:bf:c3:7e:8d:19:35:32:16: ff:8f:ad:5d:09:30:9e:59:93:10:12:ce:7f:f8:4a: 2e:30:1b:e5:74:6e:20:10:56:95:d7:24:f7:55:55: cc:df:ff:7d:98:19:9b:6b:5f:59:b5:56:c0:2c:71: 25:c2:15:a5:91:5b:79:7a:97:85:77:38:25:7a:b7: 70:ed:94:c4:16:51:b3:b6:d6:96:29:3e:c2:36:d8: 75:db:3e:d4:ad:aa:19:d2:91:d4:cd:87:cf:46:45: ac:9c:c5:f1:f5:f4:fb:c0:0a:b1:0e:1e:f5:36:2e: be:6e:dd:3d:b6:a3:22:62:a1:56:4a:46:fe:89:82: a9:ef:9c:87:b7:65:12:b5:c1:4a:51:c8:d8:91:31: 66:56:be:ee:d9:22:3d:cb:a0:3f:91:ca:86:52:5c: 07:a7:e7:c7:0b:04:f2:dc:0d:7b:a0:15:e2:1e:78: 7a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:16:B5:4D:F5:9A:59:FD:6A:69:D4:01:78:06:17:7D:51:2A:29:31 X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:25:90:fa:83:4b:f3:c0:e6:23:1d:23:a3:d9:6f:95:4e:a6: 03:92:0a:7a:b8:cd:78:0b:19:dd:ed:5b:fc:1c:3d:a3:e1:af: e6:94:ca:c3:2c:55:40:51:53:55:7a:97:42:4c:1b:bb:b9:ef: a9:50:f2:7c:14:ee:e2:a0:13:87:0d:06:2c:7e:a3:31:b8:82: f1:cf:dc:62:0c:d5:97:94:f9:d7:85:2a:22:48:aa:84:a5:88: dc:ed:55:ff:68:86:f0:0d:32:87:b0:d3:7c:00:4a:97:72:3d: fd:71:12:06:e2:b2:86:b1:33:83:37:13:9e:0a:e1:e2:92:fa: 5c:16:2a:73:b3:9d:ec:aa:20:d2:16:31:d4:81:a8:fc:92:92: d8:6f:50:f8:27:2a:a7:63:ef:dd:46:a1:d1:99:04:44:6f:00: d7:9a:23:02:3c:f5:76:16:f6:41:17:e1:05:50:c8:fe:50:6c: 88:28:8a:1e:7e:c6:48:48:e8:bc:54:93:60:ed:a9:0a:52:7e: 69:f3:ca:5d:e8:d6:b7:7a:7c:84:b6:8f:97:1e:ea:6f:41:00: 56:9b:22:d3:cc:26:3b:9f:2a:94:79:31:66:2c:92:88:c7:a8: c2:86:51:7d:d4:0b:29:9d:ca:33:0b:ab:4c:07:32:51:88:68: 76:e0:fa:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQqW9XrndoknzVBomu5kt3TdAA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNjAzMDEyMDA2NTRaFw0yNjAzMDUwNjE1NTRaMDMxMTAvBgNV BAMTKDAxMTZCNTRERjU5QTU5RkQ2QTY5RDQwMTc4MDYxNzdENTEyQTI5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZ2t2bas+vgg/iZCRS6J8z4U0 WSafRk6yZhZAy7OtMkFjmO/pgqEOuHABr0mPWzhzEQivUVp1pMaLzrD2vTPOkaVI 3K91iAQA72DP20DEsXC/w36NGTUyFv+PrV0JMJ5ZkxASzn/4Si4wG+V0biAQVpXX JPdVVczf/32YGZtrX1m1VsAscSXCFaWRW3l6l4V3OCV6t3DtlMQWUbO21pYpPsI2 2HXbPtStqhnSkdTNh89GRaycxfH19PvACrEOHvU2Lr5u3T22oyJioVZKRv6Jgqnv nIe3ZRK1wUpRyNiRMWZWvu7ZIj3LoD+RyoZSXAen58cLBPLcDXugFeIeeHqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUARa1TfWaWf1qadQBeAYXfVEqKTEwHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5 RjM2QzgwREM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN0lkPqDS/PA5iMdI6PZb5VOpgOSCnq4zXgL Gd3tW/wcPaPhr+aUysMsVUBRU1V6l0JMG7u576lQ8nwU7uKgE4cNBix+ozG4gvHP 3GIM1ZeU+deFKiJIqoSliNztVf9ohvANMoew03wASpdyPf1xEgbisoaxM4M3E54K 4eKS+lwWKnOzneyqINIWMdSBqPySkthvUPgnKqdj791GodGZBERvANeaIwI89XYW 9kEX4QVQyP5QbIgoih5+xkhI6LxUk2DtqQpSfmnzyl3o1rd6fIS2j5ce6m9BAFab ItPMJjufKpR5MWYskojHqMKGUX3UCymdyjMLq0wHMlGIaHbg+vk= -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:13 2026 by rpki-client