$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: OdU/U/4WYLdOk+6JJcC2Z45ARO08OUVYKeBOftlghDs= Subject key identifier: C7:34:83:2A:85:0D:CD:E2:1F:72:E4:96:E7:C9:7F:28:F6:BC:28:DD Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 6D5E841B23C68257F0D9AD2BE6A75DF2E16F6EB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: 01DE Signing time: Sun 01 Mar 2026 02:51:07 +0000 Manifest this update: Sun 01 Mar 2026 02:46:07 +0000 Manifest next update: Wed 04 Mar 2026 11:18:07 +0000 Files and hashes: 1: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: pz05g1oaCZN/fU8DKEWez0N5UgE4isPNDA8VnTlatoU=) 2: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: XpsrFjei0l+09ODvvmQABrLd5RCt8xbB9sqvgbDFDtE=) 3: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: wiYrq6CjqWqPb2SEtdVmOUWu5eaGme6xziKeQlsqJWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5e:84:1b:23:c6:82:57:f0:d9:ad:2b:e6:a7:5d:f2:e1:6f:6e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: Mar 1 02:46:07 2026 GMT Not After : Mar 4 11:18:07 2026 GMT Subject: CN=C734832A850DCDE21F72E496E7C97F28F6BC28DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:19:3c:0a:33:f8:d0:42:0b:68:57:d8:14: 82:c8:0f:0f:aa:73:b8:04:36:f3:92:a0:ec:f6:76: 8e:c3:d8:8d:b4:64:e9:68:37:c0:c9:f2:08:93:d4: 2a:61:b2:c9:0c:76:a6:e4:ed:e6:05:5f:ae:bb:a5: 5b:f7:ff:3b:d2:ed:fb:8f:02:ec:ec:d8:43:76:18: b5:e9:69:65:a8:52:ee:b0:5a:11:44:68:92:c3:f3: 6e:7d:7f:96:57:bd:5e:6b:b1:53:93:41:e8:ab:8a: 79:99:64:23:ce:c0:bd:8a:ff:91:6d:a3:e2:e0:f4: d1:3c:a9:3d:92:c1:97:18:fe:dd:31:ba:33:8c:b1: 9c:ad:32:5d:1c:18:3b:0a:29:3e:6c:74:1a:37:e8: 00:0e:27:eb:7f:9d:b8:37:48:74:15:30:11:c6:4b: 9b:5b:a3:f3:30:5d:61:39:93:53:d3:9f:12:33:a8: 3b:f1:54:ab:ba:f6:fb:2a:f2:b1:73:e8:50:1e:95: 10:8f:5f:8a:eb:c6:d3:57:99:f9:e0:4f:01:07:27: cc:4e:b5:30:08:fc:b7:d8:10:cd:53:10:5c:81:dd: f7:e8:a1:f9:65:6a:21:0e:9d:6f:49:ce:5d:54:35: ba:81:77:4c:87:46:7c:5a:1f:d8:40:f5:eb:9d:60: d6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:34:83:2A:85:0D:CD:E2:1F:72:E4:96:E7:C9:7F:28:F6:BC:28:DD X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:eb:b6:66:f9:91:77:02:7a:69:fd:0b:5b:cc:5d:c6:10:bb: 45:8f:4f:99:0c:a0:36:56:05:08:b2:37:ec:8c:a6:95:f0:36: ce:74:fd:9a:41:1e:4d:65:c5:86:fa:a0:d2:ac:c9:32:9c:23: d6:d1:2e:6d:5b:72:1a:f6:75:b2:27:71:ee:cd:da:5c:2c:14: 8a:b9:35:fb:6a:5a:d5:b4:ef:f4:b9:c6:6e:3b:6e:e6:0b:14: 0b:f1:54:45:fa:41:91:ee:d7:06:1e:53:53:e8:6c:30:ac:37: 63:0f:55:f4:5a:e0:15:f0:0d:f7:4d:e0:42:dd:2c:fe:c6:25: 05:53:cc:6c:30:66:8c:b2:d5:76:94:e7:b7:1b:3b:b9:86:5e: b8:4d:b9:f3:14:83:07:fa:70:e4:33:02:df:c3:ab:58:b6:16: 44:9c:b7:8a:2a:60:d8:29:a3:d9:56:8c:8f:cb:07:17:82:18: 54:5e:34:a5:76:e6:5a:d7:31:df:a4:74:9e:a3:07:37:4f:dd: a3:c6:6e:f0:97:1f:3d:c5:94:61:64:dc:44:b9:03:b7:1d:e3: d6:fc:fd:74:36:82:5a:41:a2:5c:49:3c:5e:0a:e9:95:1f:e2: ea:41:96:64:46:a9:5d:fd:f5:df:70:d9:2e:c1:ca:30:d3:b7: 7c:f3:a7:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbV6EGyPGglfw2a0r5qdd8uFvbrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNjAzMDEwMjQ2MDdaFw0yNjAzMDQxMTE4MDdaMDMxMTAvBgNV BAMTKEM3MzQ4MzJBODUwRENERTIxRjcyRTQ5NkU3Qzk3RjI4RjZCQzI4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwhk8CjP40EILaFfYFILIDw+q c7gENvOSoOz2do7D2I20ZOloN8DJ8giT1CphsskMdqbk7eYFX667pVv3/zvS7fuP Auzs2EN2GLXpaWWoUu6wWhFEaJLD8259f5ZXvV5rsVOTQeirinmZZCPOwL2K/5Ft o+Lg9NE8qT2SwZcY/t0xujOMsZytMl0cGDsKKT5sdBo36AAOJ+t/nbg3SHQVMBHG S5tbo/MwXWE5k1PTnxIzqDvxVKu69vsq8rFz6FAelRCPX4rrxtNXmfngTwEHJ8xO tTAI/LfYEM1TEFyB3ffoofllaiEOnW9Jzl1UNbqBd0yHRnxaH9hA9eudYNZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxzSDKoUNzeIfcuSW58l/KPa8KN0wHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPrtmb5kXcCemn9C1vMXcYQu0WPT5kMoDZW BQiyN+yMppXwNs50/ZpBHk1lxYb6oNKsyTKcI9bRLm1bchr2dbInce7N2lwsFIq5 NftqWtW07/S5xm47buYLFAvxVEX6QZHu1wYeU1PobDCsN2MPVfRa4BXwDfdN4ELd LP7GJQVTzGwwZoyy1XaU57cbO7mGXrhNufMUgwf6cOQzAt/Dq1i2FkSct4oqYNgp o9lWjI/LBxeCGFReNKV25lrXMd+kdJ6jBzdP3aPGbvCXHz3FlGFk3ES5A7cd49b8 /XQ2glpBolxJPF4K6ZUf4upBlmRGqV399d9w2S7ByjDTt3zzp9U= -----END CERTIFICATE-----Generated at Mon Mar 2 02:55:31 2026 by rpki-client