$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: LRGchwpUXcGqXYslk6E1EWqiGKLYEiCNzTP4/3B4Uy4= Subject key identifier: EE:BF:72:D8:AE:CD:97:F3:1E:06:CA:E5:94:E8:E6:E1:2B:46:C9:C8 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 0F4C09E2642434CC9D42574DBB7A01F0A628AC0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 01C4 Signing time: Fri 27 Feb 2026 10:02:37 +0000 Manifest this update: Fri 27 Feb 2026 09:57:37 +0000 Manifest next update: Mon 02 Mar 2026 21:28:37 +0000 Files and hashes: 1: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: ts54SoDuy2ApDbq7x/Ly2mB9aQmUupkUKCOhVbjLMw4=) 2: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: RJdEk/EfkFE3gxHKaGBMKTJJZhudzX8WtSrG7X046vA=) 3: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: 8QP0ny1BafhP87cEV2vXvc0K+sJXt7/6akwyG6gtnuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 21:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4c:09:e2:64:24:34:cc:9d:42:57:4d:bb:7a:01:f0:a6:28:ac:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Feb 27 09:57:37 2026 GMT Not After : Mar 2 21:28:37 2026 GMT Subject: CN=EEBF72D8AECD97F31E06CAE594E8E6E12B46C9C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:37:87:b4:ed:b8:c7:89:45:9b:3b:56:68: c6:d3:99:70:32:b9:bc:96:38:43:06:aa:06:29:2f: 37:98:03:95:be:37:69:67:16:84:bb:58:bd:ad:fb: cf:6d:f4:f2:35:e1:53:f8:b9:94:25:ef:07:ad:6d: 57:4e:54:c7:8c:b8:78:1a:c1:60:54:a4:88:2e:f2: de:f5:bc:e8:d0:70:1e:52:8d:9d:e5:96:6f:8c:6e: 5a:2a:1d:4f:35:b3:60:a7:1a:f6:dd:05:fa:15:7a: 44:c9:78:45:8b:c5:19:6a:fc:96:69:22:a0:a0:57: 0f:16:4e:11:eb:d4:6f:08:8f:58:f5:f5:30:88:6e: 0c:60:72:5d:e7:98:93:7c:d5:fe:4a:f6:cc:19:73: f5:26:a8:fb:f9:59:2c:a7:21:f3:3e:a5:f9:30:c0: 34:ae:23:b9:12:77:fd:dc:05:d6:ed:2d:42:6f:82: 97:e9:bf:5d:71:2c:c7:4b:32:22:85:17:a1:ff:2b: 30:2e:a3:67:94:b5:7e:07:14:6e:ee:bf:59:f9:7a: 9f:e9:b6:64:fa:2b:37:fb:76:c7:51:d7:25:c8:c9: c1:f3:6f:b6:10:2a:5c:bf:be:5b:96:cd:b1:dc:04: 9c:ef:19:8b:28:bc:de:da:27:1b:5b:ed:6a:96:69: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BF:72:D8:AE:CD:97:F3:1E:06:CA:E5:94:E8:E6:E1:2B:46:C9:C8 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:96:34:5b:2d:92:c7:35:c3:79:10:8d:d1:c5:f0:8a:78:aa: 1e:be:41:f2:3b:e2:df:84:2a:86:d5:06:13:00:c4:6b:fe:a2: d3:7e:d3:69:d7:bf:6b:a6:d2:ba:38:c0:f1:0f:a0:de:15:8e: 6e:8b:c3:1d:b1:59:5e:e9:8c:12:6c:a4:70:e3:17:61:0d:8e: c7:60:db:32:fe:4e:76:4c:9e:9f:c4:e0:fa:22:50:d9:2c:cc: ea:c9:52:ed:4b:ab:2e:24:46:59:22:25:a9:11:bb:1c:d5:44: 40:6d:50:0f:54:4d:cd:71:07:d5:3e:eb:d7:3f:9f:e8:1b:cb: ba:be:03:b3:2a:b4:62:ca:b1:93:cf:32:5c:85:4f:2e:23:ef: ee:cc:86:a5:3c:a3:6c:09:24:b9:ff:18:f4:68:1b:4f:40:d2: 79:c6:aa:9a:d0:a6:45:51:d0:64:7c:34:3b:3f:64:c4:bf:5b: d0:5f:7c:65:6f:7b:9c:94:1b:a8:55:20:f5:07:da:3b:8f:8b: ee:a8:a1:f2:20:64:2c:ee:0f:54:c2:7b:5b:d0:27:81:ed:b2: ac:c4:70:5d:34:16:89:e4:3e:23:50:86:58:0c:6a:e8:d3:59: b7:6c:10:bb:ec:e1:c1:f8:9f:56:88:e6:a0:54:d4:69:f2:a3: 35:4a:e6:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0wJ4mQkNMydQldNu3oB8KYorA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNjAyMjcwOTU3MzdaFw0yNjAzMDIyMTI4MzdaMDMxMTAvBgNV BAMTKEVFQkY3MkQ4QUVDRDk3RjMxRTA2Q0FFNTk0RThFNkUxMkI0NkM5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZTeHtO24x4lFmztWaMbTmXAy ubyWOEMGqgYpLzeYA5W+N2lnFoS7WL2t+89t9PI14VP4uZQl7wetbVdOVMeMuHga wWBUpIgu8t71vOjQcB5SjZ3llm+MbloqHU81s2CnGvbdBfoVekTJeEWLxRlq/JZp IqCgVw8WThHr1G8Ij1j19TCIbgxgcl3nmJN81f5K9swZc/UmqPv5WSynIfM+pfkw wDSuI7kSd/3cBdbtLUJvgpfpv11xLMdLMiKFF6H/KzAuo2eUtX4HFG7uv1n5ep/p tmT6Kzf7dsdR1yXIycHzb7YQKly/vluWzbHcBJzvGYsovN7aJxtb7WqWaQ+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7r9y2K7Nl/MeBsrllOjm4StGycgwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWWNFstksc1w3kQjdHF8Ip4qh6+QfI74t+E KobVBhMAxGv+otN+02nXv2um0ro4wPEPoN4Vjm6Lwx2xWV7pjBJspHDjF2ENjsdg 2zL+TnZMnp/E4PoiUNkszOrJUu1Lqy4kRlkiJakRuxzVREBtUA9UTc1xB9U+69c/ n+gby7q+A7MqtGLKsZPPMlyFTy4j7+7MhqU8o2wJJLn/GPRoG09A0nnGqprQpkVR 0GR8NDs/ZMS/W9BffGVve5yUG6hVIPUH2juPi+6oofIgZCzuD1TCe1vQJ4HtsqzE cF00FonkPiNQhlgMaujTWbdsELvs4cH4n1aI5qBU1GnyozVK5r8= -----END CERTIFICATE-----Generated at Sun Mar 1 23:55:46 2026 by rpki-client