$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: sYplWHNlbsnFvbpo08NW9EWLzyNNSnVeNPPuJ9ZSd5U= Subject key identifier: 87:3B:F2:72:5C:60:A5:6B:48:5D:C6:83:91:C4:83:17:CE:7C:9C:B0 Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 42E540B855E051AA25D3A1603C0111822FB094BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: EA Signing time: Sun 01 Mar 2026 12:21:43 +0000 Manifest this update: Sun 01 Mar 2026 12:16:43 +0000 Manifest next update: Wed 04 Mar 2026 19:47:43 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: KBNbxQjOLfhYwGB4Wp4pMpbXxYHR8QezEvyeUuNBjy8=) 2: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: 4wEwRXUsOfDN/8kCQdb02Ck8KvJj13tZw5HVK0U+ccQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e5:40:b8:55:e0:51:aa:25:d3:a1:60:3c:01:11:82:2f:b0:94:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Mar 1 12:16:43 2026 GMT Not After : Mar 4 19:47:43 2026 GMT Subject: CN=873BF2725C60A56B485DC68391C48317CE7C9CB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:8b:38:eb:5f:00:28:e0:04:d5:ea:55:20: 93:f8:b6:28:63:e3:85:7b:fc:e7:d8:3b:35:cf:7b: 26:52:34:96:b7:cd:e6:9e:a3:cd:89:be:64:ee:cb: 08:ba:6f:e1:1e:52:c9:50:ca:64:0f:ab:b5:3d:9e: cc:ac:e8:70:6f:47:be:0d:d4:83:17:64:78:b8:43: 86:a4:bf:90:11:be:5b:d4:c8:a8:2f:61:14:45:2e: 49:35:b2:16:e4:40:d7:c2:f1:e9:38:82:fd:b9:e2: a5:71:bb:77:0f:65:fd:eb:9e:96:17:97:6d:f0:19: 38:1f:eb:12:0b:72:e9:6a:12:5c:9e:d1:37:63:14: 9a:27:f7:89:b4:7e:0f:bb:ff:55:fc:1b:d6:60:d1: 8d:c7:2b:fd:4b:5f:dc:4f:79:9b:c5:40:36:fa:51: 1e:ac:65:4d:9c:62:d1:b2:b6:0e:10:c9:54:16:8d: 80:d6:e4:ca:48:25:b9:94:62:f3:a9:f9:f7:66:ae: 8c:00:a5:4e:24:98:5a:9d:49:de:6f:30:ac:18:b2: ca:47:e6:81:5f:d3:05:98:f3:1f:ec:91:39:78:d2: 08:fd:30:80:ac:3f:0f:a7:22:3b:00:7f:db:d9:14: 98:77:c4:c5:ae:95:dc:a4:03:d3:22:71:0a:60:26: 73:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3B:F2:72:5C:60:A5:6B:48:5D:C6:83:91:C4:83:17:CE:7C:9C:B0 X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5b:dc:5e:bc:ec:09:fd:e0:d7:03:71:d1:03:08:9d:d1:3f: 6d:12:61:c1:12:9b:57:d2:48:97:02:2b:a9:14:3d:d7:b6:43: 4f:b6:ba:f8:51:23:5f:fb:a2:07:ca:c7:6d:8c:4a:e7:93:a1: 43:74:0c:4f:3c:58:fe:29:6d:b2:5b:01:83:7e:4c:20:39:19: 71:e0:00:0f:1d:dd:b3:8a:4d:8b:fc:ce:e2:75:11:7f:11:a2: fa:cc:fb:3c:25:c1:7f:c0:5b:34:43:84:fb:52:2a:80:b9:75: 6e:5d:8b:11:7b:01:20:7e:1a:9e:88:e4:27:08:34:08:0c:e6: 4b:0a:01:39:c6:5d:e4:09:b7:25:da:46:88:db:ee:16:85:36: 2c:38:82:20:a1:05:57:21:41:16:19:38:64:38:be:4e:8b:e3: fb:c9:44:e4:d4:4f:0f:6d:bd:92:92:3e:c0:94:b8:c5:d7:90: 07:b5:60:a1:de:85:b9:97:86:d6:4e:f3:a3:68:26:7f:3a:3d: c8:56:7a:3d:74:cb:a1:ea:37:50:32:75:84:fd:83:61:2a:26: f2:d5:81:07:17:f9:dd:bb:40:19:aa:fb:82:58:0a:7d:77:c4: 17:04:cc:99:d7:d2:26:94:5c:dc:e8:58:ae:f2:4c:64:d8:05: 4f:ff:62:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuVAuFXgUaol06FgPAERgi+wlL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNjAzMDExMjE2NDNaFw0yNjAzMDQxOTQ3NDNaMDMxMTAvBgNV BAMTKDg3M0JGMjcyNUM2MEE1NkI0ODVEQzY4MzkxQzQ4MzE3Q0U3QzlDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMt4s4618AKOAE1epVIJP4tihj 44V7/OfYOzXPeyZSNJa3zeaeo82JvmTuywi6b+EeUslQymQPq7U9nsys6HBvR74N 1IMXZHi4Q4akv5ARvlvUyKgvYRRFLkk1shbkQNfC8ek4gv254qVxu3cPZf3rnpYX l23wGTgf6xILculqElye0TdjFJon94m0fg+7/1X8G9Zg0Y3HK/1LX9xPeZvFQDb6 UR6sZU2cYtGytg4QyVQWjYDW5MpIJbmUYvOp+fdmrowApU4kmFqdSd5vMKwYsspH 5oFf0wWY8x/skTl40gj9MICsPw+nIjsAf9vZFJh3xMWuldykA9MicQpgJnOJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhzvyclxgpWtIXcaDkcSDF858nLAwHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhb3F687An94NcDcdEDCJ3RP20SYcESm1fS SJcCK6kUPde2Q0+2uvhRI1/7ogfKx22MSueToUN0DE88WP4pbbJbAYN+TCA5GXHg AA8d3bOKTYv8zuJ1EX8RovrM+zwlwX/AWzRDhPtSKoC5dW5dixF7ASB+Gp6I5CcI NAgM5ksKATnGXeQJtyXaRojb7haFNiw4giChBVchQRYZOGQ4vk6L4/vJROTUTw9t vZKSPsCUuMXXkAe1YKHehbmXhtZO86NoJn86PchWej10y6HqN1AydYT9g2EqJvLV gQcX+d27QBmq+4JYCn13xBcEzJnX0iaUXNzoWK7yTGTYBU//YiY= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:08 2026 by rpki-client