$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: KgorlDLaZQ0x3Kziqw4/PhSNT/wkfaRnrQGyw/msBno= Subject key identifier: 35:9D:2B:3B:34:3F:E0:1B:0B:FE:20:C0:25:62:E8:03:EE:A7:A9:4A Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 42BA81D05E758CAC75EF148369B9A8B27E8E3AB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: 01F3 Signing time: Fri 17 Apr 2026 18:21:10 +0000 Manifest this update: Fri 17 Apr 2026 18:16:10 +0000 Manifest next update: Tue 21 Apr 2026 02:18:10 +0000 Files and hashes: 1: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: wiYrq6CjqWqPb2SEtdVmOUWu5eaGme6xziKeQlsqJWA=) 2: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: XpsrFjei0l+09ODvvmQABrLd5RCt8xbB9sqvgbDFDtE=) 3: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: UwxMBWyA3l+infqjLzoT5vQqxS+lNItIQ/E/BpqJDbM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ba:81:d0:5e:75:8c:ac:75:ef:14:83:69:b9:a8:b2:7e:8e:3a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: Apr 17 18:16:10 2026 GMT Not After : Apr 21 02:18:10 2026 GMT Subject: CN=359D2B3B343FE01B0BFE20C02562E803EEA7A94A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:30:cf:14:ae:7a:76:a8:2c:1d:21:87:79: d5:9f:34:01:f5:43:af:8e:fd:6f:90:2b:23:79:d6: 18:99:f2:90:aa:f6:f4:a4:a6:d5:16:82:3d:21:79: c5:d9:34:93:3e:2d:e9:7d:70:1f:3b:10:26:58:49: 52:4f:fa:fc:45:fc:8f:54:77:e7:4b:b4:a9:53:e1: 8b:99:d9:e4:7e:d0:81:50:3d:cc:76:6d:ef:13:37: ce:44:92:8f:88:db:0b:d0:2c:e1:e9:6d:e9:c9:de: 09:07:c4:39:91:67:8e:ea:f2:25:22:91:26:2a:2d: 64:63:cd:d0:b4:3b:fb:29:08:1e:97:07:f4:97:e0: c6:02:70:69:4a:44:18:65:a3:63:13:4e:83:d2:b9: 2a:97:1c:43:04:c4:0a:52:dd:99:41:31:c4:75:25: 70:7a:d5:cb:44:f0:40:d2:3c:5c:78:ef:63:87:d2: 4e:2f:c0:30:db:32:fe:e6:fe:1c:2d:9e:08:8c:9b: bc:7e:84:69:66:de:65:02:04:4f:2d:98:8c:da:ea: 44:58:3c:29:9d:14:52:1b:6c:41:c4:9e:55:b7:b7: cc:94:6d:2f:82:b8:0e:6a:7f:26:01:8e:60:2b:b3: 26:72:77:79:be:bb:0b:34:96:a9:dd:2a:d9:31:2b: a5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9D:2B:3B:34:3F:E0:1B:0B:FE:20:C0:25:62:E8:03:EE:A7:A9:4A X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a8:6a:00:10:21:39:ba:c5:29:bc:90:f7:0b:e5:1a:41:f5: bd:0b:8a:42:d4:43:53:a9:20:25:d9:cc:fb:0c:1c:56:d1:f1: e1:41:76:99:67:1c:a6:a8:48:f1:f8:79:87:bb:72:ca:ca:c5: 6c:58:07:ee:78:06:57:03:03:8b:b9:fc:c6:fb:63:7c:93:65: e7:9d:21:ba:f8:b1:3a:c7:cc:8f:e0:8d:21:be:e4:95:fb:61: d9:99:3b:56:45:35:88:5b:10:a4:5b:b7:15:85:e6:33:56:c5: fd:bf:23:74:a3:b7:62:aa:4c:50:f8:8e:bc:c6:48:1e:99:df: 01:32:f0:2d:03:d5:2a:9a:db:37:2d:95:09:74:b1:8e:92:c4: 4a:b6:3c:91:1b:00:91:c2:57:d2:13:30:5e:26:6f:73:24:6a: ea:ee:a0:15:d7:7e:f0:d1:84:87:ae:fe:50:af:7e:59:d9:1d: 85:e9:2f:cc:fe:ad:d6:a5:fa:bf:31:48:38:77:84:bb:39:34: 73:ae:ab:15:5b:b8:f3:16:ad:34:61:5c:42:44:1c:e1:db:3a: a1:b7:ae:a2:bf:dc:4d:6f:b7:1f:9c:5a:5b:b2:37:63:ce:d9: 78:e5:5b:5c:47:d3:c4:7d:19:5f:aa:41:a4:17:b1:d1:dd:d1: 6f:c3:21:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrqB0F51jKx17xSDabmosn6OOrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNjA0MTcxODE2MTBaFw0yNjA0MjEwMjE4MTBaMDMxMTAvBgNV BAMTKDM1OUQyQjNCMzQzRkUwMUIwQkZFMjBDMDI1NjJFODAzRUVBN0E5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJDDPFK56dqgsHSGHedWfNAH1 Q6+O/W+QKyN51hiZ8pCq9vSkptUWgj0hecXZNJM+Lel9cB87ECZYSVJP+vxF/I9U d+dLtKlT4YuZ2eR+0IFQPcx2be8TN85Eko+I2wvQLOHpbenJ3gkHxDmRZ47q8iUi kSYqLWRjzdC0O/spCB6XB/SX4MYCcGlKRBhlo2MTToPSuSqXHEMExApS3ZlBMcR1 JXB61ctE8EDSPFx472OH0k4vwDDbMv7m/hwtngiMm7x+hGlm3mUCBE8tmIza6kRY PCmdFFIbbEHEnlW3t8yUbS+CuA5qfyYBjmArsyZyd3m+uws0lqndKtkxK6XfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNZ0rOzQ/4BsL/iDAJWLoA+6nqUowHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaoagAQITm6xSm8kPcL5RpB9b0LikLUQ1Op ICXZzPsMHFbR8eFBdplnHKaoSPH4eYe7csrKxWxYB+54BlcDA4u5/Mb7Y3yTZeed Ibr4sTrHzI/gjSG+5JX7YdmZO1ZFNYhbEKRbtxWF5jNWxf2/I3Sjt2KqTFD4jrzG SB6Z3wEy8C0D1Sqa2zctlQl0sY6SxEq2PJEbAJHCV9ITMF4mb3MkauruoBXXfvDR hIeu/lCvflnZHYXpL8z+rdal+r8xSDh3hLs5NHOuqxVbuPMWrTRhXEJEHOHbOqG3 rqK/3E1vtx+cWluyN2PO2XjlW1xH08R9GV+qQaQXsdHd0W/DIUQ= -----END CERTIFICATE-----Generated at Fri Apr 17 20:28:39 2026 by rpki-client