$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: K+5DeAiGMFEeMmAKpSRNqpo8tyWUKErNLGg/E8ydMfE= Subject key identifier: 84:C1:E1:63:3D:DE:91:30:C0:BA:C2:60:28:F5:1C:D4:34:1A:0E:F7 Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 5BAC4FB2A713728BC84DDEB60B11613754F1647E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: FE Signing time: Wed 15 Apr 2026 14:11:41 +0000 Manifest this update: Wed 15 Apr 2026 14:06:41 +0000 Manifest next update: Sat 18 Apr 2026 15:22:41 +0000 Files and hashes: 1: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: /J6E3wCNtVh8+NSf5WHj0V0gHnjm8HP/tiMmHvA8dHw=) 2: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: KBNbxQjOLfhYwGB4Wp4pMpbXxYHR8QezEvyeUuNBjy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ac:4f:b2:a7:13:72:8b:c8:4d:de:b6:0b:11:61:37:54:f1:64:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Apr 15 14:06:41 2026 GMT Not After : Apr 18 15:22:41 2026 GMT Subject: CN=84C1E1633DDE9130C0BAC26028F51CD4341A0EF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:e3:92:79:7d:cd:02:a6:b5:1a:38:a8:08: ef:31:f1:9a:3b:22:08:7b:16:20:67:c3:c2:45:e3: 8e:07:41:4c:5a:e8:ce:6c:d9:19:a4:02:c0:e9:85: c5:1f:91:e2:7c:55:d5:51:68:8f:44:47:5a:89:79: f3:b7:eb:6f:cf:82:24:59:3e:d0:d1:2f:10:ec:d4: 4b:13:39:ab:76:c2:74:35:ac:8c:26:31:6e:88:27: c5:46:10:18:1d:5d:db:0f:16:4a:e1:03:17:ec:46: 71:de:70:79:9a:b9:0d:64:34:70:be:38:c4:6c:88: ea:0c:66:8a:fe:3a:7a:be:0b:1e:bb:88:b4:69:ff: fc:cd:f4:4c:47:bc:cf:1d:9f:75:10:59:f2:00:b4: be:20:38:b7:60:22:28:52:6d:cf:77:c5:80:f8:4a: 35:93:8d:8b:d1:02:16:e9:1b:ba:b8:c1:82:c5:9a: 27:f1:b7:ac:79:fc:67:24:ee:f9:fe:96:5c:a3:ef: 23:db:a3:1f:0d:89:90:8f:93:22:89:21:36:91:18: fd:db:a5:25:13:8a:79:34:c6:69:4d:6a:62:7b:06: 26:6d:30:38:4b:4f:8f:dc:63:7f:34:4c:49:30:e0: 30:f8:9b:1a:70:a1:20:fa:3a:bd:63:e4:3f:f6:5a: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C1:E1:63:3D:DE:91:30:C0:BA:C2:60:28:F5:1C:D4:34:1A:0E:F7 X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6e:70:21:77:01:d6:19:8b:c5:b1:04:b3:32:c6:83:bb:f4: f5:59:96:a6:97:fd:1b:50:f9:8b:47:1a:54:e1:19:5e:b9:bf: 97:dc:b0:c7:96:ca:30:f8:8e:6e:70:dc:d6:83:88:46:bf:15: 4e:b5:2e:65:06:ad:de:3b:9e:98:6b:48:13:36:e5:b1:55:34: ca:54:2a:39:19:12:6e:8f:8b:25:fd:5e:05:13:e1:97:8e:70: 9b:b0:8c:d8:08:ac:6a:e0:a1:c3:77:ab:99:a6:37:1d:82:e3: b0:e2:54:83:6c:48:9c:f8:bf:16:86:79:e2:f4:13:7f:a7:e1: 58:2d:e0:08:b2:c5:25:4c:f4:c0:1c:81:bd:f1:0d:fe:c5:ae: 3b:ad:e3:61:62:4b:25:88:c9:f1:45:d3:dc:50:ef:4e:80:fc: 91:4c:bd:9c:4e:89:9f:b9:0f:c4:97:51:61:14:2b:d3:15:53: f4:3f:78:42:41:0d:b1:9e:92:a9:e3:67:9e:f0:41:fe:ed:d6: 80:75:91:86:43:11:f5:af:7f:43:5c:92:82:20:e4:27:17:5d: 09:b7:ac:d6:41:ae:cc:a1:81:8a:66:43:2b:10:53:ca:4f:bf: a8:dc:8c:89:33:fb:a2:72:1e:69:9d:70:b1:ad:ca:b9:24:6a: fb:b2:56:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW6xPsqcTcovITd62CxFhN1TxZH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNjA0MTUxNDA2NDFaFw0yNjA0MTgxNTIyNDFaMDMxMTAvBgNV BAMTKDg0QzFFMTYzM0RERTkxMzBDMEJBQzI2MDI4RjUxQ0Q0MzQxQTBFRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnOOSeX3NAqa1GjioCO8x8Zo7 Igh7FiBnw8JF444HQUxa6M5s2RmkAsDphcUfkeJ8VdVRaI9ER1qJefO362/PgiRZ PtDRLxDs1EsTOat2wnQ1rIwmMW6IJ8VGEBgdXdsPFkrhAxfsRnHecHmauQ1kNHC+ OMRsiOoMZor+Onq+Cx67iLRp//zN9ExHvM8dn3UQWfIAtL4gOLdgIihSbc93xYD4 SjWTjYvRAhbpG7q4wYLFmifxt6x5/Gck7vn+llyj7yPbox8NiZCPkyKJITaRGP3b pSUTink0xmlNamJ7BiZtMDhLT4/cY380TEkw4DD4mxpwoSD6Or1j5D/2WvtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhMHhYz3ekTDAusJgKPUc1DQaDvcwHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItucCF3AdYZi8WxBLMyxoO79PVZlqaX/RtQ +YtHGlThGV65v5fcsMeWyjD4jm5w3NaDiEa/FU61LmUGrd47nphrSBM25bFVNMpU KjkZEm6PiyX9XgUT4ZeOcJuwjNgIrGrgocN3q5mmNx2C47DiVINsSJz4vxaGeeL0 E3+n4Vgt4AiyxSVM9MAcgb3xDf7Frjut42FiSyWIyfFF09xQ706A/JFMvZxOiZ+5 D8SXUWEUK9MVU/Q/eEJBDbGekqnjZ57wQf7t1oB1kYZDEfWvf0NckoIg5CcXXQm3 rNZBrsyhgYpmQysQU8pPv6jcjIkz+6JyHmmdcLGtyrkkavuyVt0= -----END CERTIFICATE-----Generated at Fri Apr 17 14:25:07 2026 by rpki-client