$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft File: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft (raw, json) Hash identifier: ROYCmobpdKl/OdI67otsjC4A6MH3DpCvUUtS+VAu9M4= Subject key identifier: A1:03:AC:6D:C6:09:9C:34:16:AD:E2:41:73:FF:F4:F7:F1:DC:F1:BA Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 0B1F0019D75CC8C064DA6180704F5EB6FEA66F12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft Manifest number: 023C Signing time: Thu 16 Apr 2026 02:31:54 +0000 Manifest this update: Thu 16 Apr 2026 02:26:54 +0000 Manifest next update: Sun 19 Apr 2026 03:00:54 +0000 Files and hashes: 1: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl (hash: ctHKB1P6OAxtxBcQKbuje48u8YsWl6sIIDqL8N+XoEk=) 2: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: aDPjpRT6pfd3T7ltNqLLQRA6RqqiOtEG5C4gW/hEaTI=) 3: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: 0GFIWUiUrqRfAE/w3eKveKOv4M+2LjJoosY6Pp8ypUc=) 4: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: 7zBTS0bU7PgzGa8PCcebIzMScdeyLBIAzKr1yoDxbbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1f:00:19:d7:5c:c8:c0:64:da:61:80:70:4f:5e:b6:fe:a6:6f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Apr 16 02:26:54 2026 GMT Not After : Apr 19 03:00:54 2026 GMT Subject: CN=A103AC6DC6099C3416ADE24173FFF4F7F1DCF1BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:3f:f8:4b:ae:21:0d:0a:c1:6e:90:be:c3: 1a:d0:80:d0:a2:4a:8c:1e:bc:ba:cd:e3:5f:82:fd: 99:82:df:23:9a:ba:77:b8:5b:03:be:c5:a7:a4:be: bd:f1:3a:29:f2:5b:d1:e0:40:cd:c7:fd:75:95:cd: 34:ee:6a:91:4d:f1:c3:79:dc:7d:00:ed:68:4a:82: 41:68:ed:ac:79:66:56:10:8a:46:45:58:e3:75:33: e2:8d:a8:92:0f:de:24:44:ce:45:53:d4:8d:34:e9: 98:8a:e2:9e:08:cb:14:e0:88:26:0c:f0:0b:06:ee: bc:8e:dd:b7:38:c0:8d:6d:cf:0a:7e:5f:fa:d6:58: 3e:de:07:66:96:4e:db:93:7c:e6:20:b4:bf:b1:8e: 7a:9e:70:8c:31:c6:46:a7:eb:c0:ab:f9:3c:24:d5: 61:ea:17:42:a9:72:2e:35:6b:bd:0d:e9:57:c6:d8: 30:32:2e:c0:46:9d:1d:cc:a3:42:15:70:f0:99:35: c3:c7:7e:d1:6e:00:c0:13:25:95:c1:11:1b:fc:fe: 4b:ef:0a:af:0d:0b:a7:45:d9:4d:4b:49:f4:65:e3: 5e:eb:3b:ff:ee:30:97:c3:3f:3e:06:f9:9e:e5:5c: 3d:9c:fd:89:3a:32:eb:5d:be:db:a0:a8:f2:34:2c: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:03:AC:6D:C6:09:9C:34:16:AD:E2:41:73:FF:F4:F7:F1:DC:F1:BA X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f7:7e:4d:4a:01:dd:ee:40:85:bf:81:80:33:3c:54:49:65: 6c:91:14:78:67:d8:5d:ed:5e:fa:52:d1:91:27:dd:45:c6:a9: a4:6f:df:0b:b4:9e:ae:15:aa:b6:e6:d4:ba:81:ab:a2:d2:43: da:1f:ba:45:98:d0:d6:e6:38:fe:c6:d0:17:35:90:44:10:8f: b5:f6:92:84:9d:0e:b0:25:64:1a:4a:59:f0:a9:60:4f:0f:df: cf:a6:a1:42:70:95:b0:e3:c3:bb:ca:af:04:6c:77:c9:63:01: 2d:2c:07:59:69:1d:86:0c:58:8a:ad:64:fc:78:b6:78:d0:4a: a3:04:3a:81:d7:3b:eb:43:a8:99:87:9f:a0:06:bb:0e:de:30: 96:eb:9d:26:04:bc:c6:8a:c8:7b:b7:5d:75:61:03:69:f0:f7: d7:f1:97:0e:46:fd:9a:80:89:d7:3c:e0:06:ad:bc:4f:c4:6e: 46:92:bd:26:51:0f:e3:e9:a4:31:34:a3:f2:35:af:c3:e0:a9: 78:d4:da:c2:e0:0d:5f:6b:6b:8c:6f:a3:6e:94:0e:55:2f:af: 4f:b1:ff:cf:80:fc:0f:ec:4e:77:72:3c:24:4a:9f:da:eb:c5: f2:87:8c:ba:2e:46:a0:e3:e6:06:e2:ec:e5:e3:3b:49:2a:87: cf:1c:94:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCx8AGddcyMBk2mGAcE9etv6mbxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNjA0MTYwMjI2NTRaFw0yNjA0MTkwMzAwNTRaMDMxMTAvBgNV BAMTKEExMDNBQzZEQzYwOTlDMzQxNkFERTI0MTczRkZGNEY3RjFEQ0YxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8j/4S64hDQrBbpC+wxrQgNCi SowevLrN41+C/ZmC3yOaune4WwO+xaekvr3xOinyW9HgQM3H/XWVzTTuapFN8cN5 3H0A7WhKgkFo7ax5ZlYQikZFWON1M+KNqJIP3iREzkVT1I006ZiK4p4IyxTgiCYM 8AsG7ryO3bc4wI1tzwp+X/rWWD7eB2aWTtuTfOYgtL+xjnqecIwxxkan68Cr+Twk 1WHqF0Kpci41a70N6VfG2DAyLsBGnR3Mo0IVcPCZNcPHftFuAMATJZXBERv8/kvv Cq8NC6dF2U1LSfRl417rO//uMJfDPz4G+Z7lXD2c/Yk6MutdvtugqPI0LKu7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoQOsbcYJnDQWreJBc//09/Hc8bowHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5 RjM2QzgwREM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI73fk1KAd3uQIW/gYAzPFRJZWyRFHhn2F3t XvpS0ZEn3UXGqaRv3wu0nq4Vqrbm1LqBq6LSQ9ofukWY0NbmOP7G0Bc1kEQQj7X2 koSdDrAlZBpKWfCpYE8P38+moUJwlbDjw7vKrwRsd8ljAS0sB1lpHYYMWIqtZPx4 tnjQSqMEOoHXO+tDqJmHn6AGuw7eMJbrnSYEvMaKyHu3XXVhA2nw99fxlw5G/ZqA idc84AatvE/EbkaSvSZRD+PppDE0o/I1r8PgqXjU2sLgDV9ra4xvo26UDlUvr0+x /8+A/A/sTndyPCRKn9rrxfKHjLouRqDj5gbi7OXjO0kqh88clA0= -----END CERTIFICATE-----Generated at Sat Apr 18 00:02:52 2026 by rpki-client