$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: v1MDRAhgelj4+EUoiO5iKt/G0lrGfPfavr9rI/CqS/I= Subject key identifier: A3:52:91:35:C1:F7:45:C7:E0:E3:FC:AD:96:94:EB:11:74:6F:1F:B9 Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 312B794BACDA5009EFB9106E33837C3F660DF439 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 01FA Signing time: Sat 28 Feb 2026 16:40:02 +0000 Manifest this update: Sat 28 Feb 2026 16:35:02 +0000 Manifest next update: Tue 03 Mar 2026 17:59:02 +0000 Files and hashes: 1: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: q9CGWqVBm049/gjNfzW6oYmdsjYx2HZwoCpPLZ8PaK0=) 2: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: RnKgDW9wdrC56sDhfWMDinF+rBG/5N7j8kbqHRnbaj8=) 3: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: GPnT4OvDeWk1bAtYzHobscFEm6YNT5Lhx62DmcP7fds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2b:79:4b:ac:da:50:09:ef:b9:10:6e:33:83:7c:3f:66:0d:f4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Feb 28 16:35:02 2026 GMT Not After : Mar 3 17:59:02 2026 GMT Subject: CN=A3529135C1F745C7E0E3FCAD9694EB11746F1FB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:da:1d:b4:5a:7f:47:30:f1:a9:39:df:23:4b: 97:e6:c8:98:bd:67:26:8d:d6:94:3e:a0:ee:a7:6f: 05:be:43:b1:70:9d:a0:0e:0c:0b:7f:be:a8:cb:36: 6f:b8:34:94:e3:8c:71:ca:43:b5:8f:ee:99:c9:7d: ea:eb:b1:8f:97:01:f2:b0:9f:d3:1e:6e:14:ff:89: 3a:f0:9d:54:67:cc:62:4c:e6:26:50:30:8c:58:1f: 3a:4a:2e:99:a1:25:71:2c:4a:55:0b:42:9e:16:9c: ec:0e:2d:79:f0:01:74:6c:12:c3:31:b2:2d:6a:67: 54:de:04:93:ef:a9:cd:79:2e:7f:c0:f8:f8:06:58: 9e:82:af:e0:d5:74:4a:13:73:8c:e4:a4:62:fd:64: 2e:72:fd:53:76:5a:64:a4:47:ef:0e:d2:00:61:bd: 50:0d:b2:51:3d:bf:07:86:e2:4a:45:49:f9:bc:66: 79:52:e4:58:b2:c4:df:f0:a7:d5:6c:3b:ef:23:cd: ad:ae:51:f8:29:8b:f7:76:a5:46:b1:90:f6:f5:0c: cf:05:32:7e:55:a6:fb:17:b0:e0:74:53:64:32:33: cd:03:04:8c:3f:9e:6e:de:60:f2:9c:5f:34:7d:9b: ae:bb:3e:00:ff:c4:20:8e:51:2c:1a:48:7b:71:b5: a1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:52:91:35:C1:F7:45:C7:E0:E3:FC:AD:96:94:EB:11:74:6F:1F:B9 X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9b:de:ed:6e:c8:a7:4d:f4:1c:da:02:c6:a9:c7:5e:54:e7: ef:75:33:47:e1:a0:3d:10:6e:59:a9:94:4a:cc:b1:68:ac:a4: f1:80:02:76:a0:c4:87:57:ae:d0:18:48:08:30:c8:a5:3c:6d: 35:f3:24:b7:6b:f3:c6:6b:33:43:74:de:56:94:74:a4:30:b5: 26:06:fe:7e:b3:b1:e4:29:a1:df:4b:71:6a:d2:93:9a:33:e9: 04:74:1c:14:91:cc:35:ec:b4:50:b4:8f:5b:c6:46:f5:86:3a: fe:ff:2e:89:60:28:a5:25:9b:38:d0:44:5a:a8:af:b3:7c:f3: 62:99:13:66:74:e3:5f:7c:0b:47:b1:26:f6:0e:19:27:dc:76: 02:dc:50:38:aa:e7:79:e2:87:a2:43:ce:ec:02:ce:82:d5:1f: 8c:ee:f4:04:fa:9e:59:0d:0b:19:f5:75:9e:5d:d0:66:ca:eb: 66:bb:91:36:0a:d7:2d:8d:ff:b6:68:16:cf:64:b1:5d:a9:6e: 4f:47:5d:ab:0e:7a:8e:b1:ba:36:6e:bf:92:be:48:36:27:a7: eb:03:74:8d:d3:65:d2:2d:b4:91:e9:8e:da:4d:79:c4:bd:9a: 2a:e8:7a:a3:d0:66:a4:5b:1b:21:71:c3:c6:d2:d6:0d:4c:2b: 5b:f7:00:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSt5S6zaUAnvuRBuM4N8P2YN9DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNjAyMjgxNjM1MDJaFw0yNjAzMDMxNzU5MDJaMDMxMTAvBgNV BAMTKEEzNTI5MTM1QzFGNzQ1QzdFMEUzRkNBRDk2OTRFQjExNzQ2RjFGQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22h20Wn9HMPGpOd8jS5fmyJi9 ZyaN1pQ+oO6nbwW+Q7FwnaAODAt/vqjLNm+4NJTjjHHKQ7WP7pnJferrsY+XAfKw n9MebhT/iTrwnVRnzGJM5iZQMIxYHzpKLpmhJXEsSlULQp4WnOwOLXnwAXRsEsMx si1qZ1TeBJPvqc15Ln/A+PgGWJ6Cr+DVdEoTc4zkpGL9ZC5y/VN2WmSkR+8O0gBh vVANslE9vweG4kpFSfm8ZnlS5FiyxN/wp9VsO+8jza2uUfgpi/d2pUaxkPb1DM8F Mn5VpvsXsOB0U2QyM80DBIw/nm7eYPKcXzR9m667PgD/xCCOUSwaSHtxtaFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo1KRNcH3Rcfg4/ytlpTrEXRvH7kwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFib3u1uyKdN9BzaAsapx15U5+91M0fhoD0Q blmplErMsWispPGAAnagxIdXrtAYSAgwyKU8bTXzJLdr88ZrM0N03laUdKQwtSYG /n6zseQpod9LcWrSk5oz6QR0HBSRzDXstFC0j1vGRvWGOv7/LolgKKUlmzjQRFqo r7N882KZE2Z04198C0exJvYOGSfcdgLcUDiq53nih6JDzuwCzoLVH4zu9AT6nlkN Cxn1dZ5d0GbK62a7kTYK1y2N/7ZoFs9ksV2pbk9HXasOeo6xujZuv5K+SDYnp+sD dI3TZdIttJHpjtpNecS9miroeqPQZqRbGyFxw8bS1g1MK1v3ALo= -----END CERTIFICATE-----Generated at Mon Mar 2 18:28:43 2026 by rpki-client