$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: CG64WGNZYcsw5Y9bvu/LvglKmEvdKJCSGpkNnqhDLMM= Subject key identifier: 9F:9E:46:5A:1A:1F:35:B4:49:3A:9F:DE:25:41:E7:8C:24:B5:C1:23 Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 6B3394CB99B320C09EEED9E0ADB3EF2A435C30E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 020F Signing time: Thu 16 Apr 2026 10:50:02 +0000 Manifest this update: Thu 16 Apr 2026 10:45:02 +0000 Manifest next update: Sun 19 Apr 2026 19:11:02 +0000 Files and hashes: 1: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: aPGZ2NI1qXHOCB80vKYvqVMCka1X8FMG6Umi8p0zTk0=) 2: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: GPnT4OvDeWk1bAtYzHobscFEm6YNT5Lhx62DmcP7fds=) 3: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: RnKgDW9wdrC56sDhfWMDinF+rBG/5N7j8kbqHRnbaj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:33:94:cb:99:b3:20:c0:9e:ee:d9:e0:ad:b3:ef:2a:43:5c:30:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Apr 16 10:45:02 2026 GMT Not After : Apr 19 19:11:02 2026 GMT Subject: CN=9F9E465A1A1F35B4493A9FDE2541E78C24B5C123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4c:b7:a1:c2:5e:5a:14:f7:c8:2c:8b:4b:ca: 6e:37:34:59:61:63:6a:94:7a:d2:9a:9e:8c:ac:06: 75:92:94:b0:8e:68:9b:05:33:d3:fd:b2:25:d8:c0: 79:ac:12:3b:e3:59:6f:d0:69:44:4a:2b:d7:8e:83: 9c:4d:9a:01:30:e7:52:61:c9:c4:2c:93:a5:e4:09: a1:77:0f:0b:3c:2a:b4:c9:71:eb:24:5b:f8:fb:7f: 8b:bf:8e:ec:21:0c:53:ee:30:f9:fd:65:77:10:19: 09:59:30:31:ee:f4:56:30:85:59:d8:6c:57:2f:4f: cd:af:27:ee:dc:80:c6:e1:49:f3:87:00:59:5f:9e: 6a:ee:86:8c:bc:92:dc:bd:bf:6b:4b:14:b4:1c:2a: 3e:42:2a:9d:e5:f2:75:12:58:e9:a9:72:b7:e7:90: 6e:dc:2a:f2:9d:09:1f:b2:30:69:d2:cd:e9:fd:d1: ce:63:8d:cb:da:43:f1:a0:f9:6d:38:32:20:35:ab: a0:73:ea:5a:c4:e1:88:a2:11:e9:e6:45:16:a4:1c: 50:d2:1b:5d:01:e8:27:91:ca:0c:3e:8a:28:7f:f7: 25:45:1a:c6:a5:19:a4:5e:bb:f1:cd:3b:49:ee:68: 68:a0:68:00:1d:f5:e3:6c:58:b1:1a:0f:e5:42:63: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9E:46:5A:1A:1F:35:B4:49:3A:9F:DE:25:41:E7:8C:24:B5:C1:23 X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f6:5a:8b:5a:db:47:2a:03:70:66:75:66:44:19:65:cf:1e: c9:bb:f3:ab:dc:c0:fb:be:87:8e:9e:44:3a:9d:0b:9d:a9:07: b6:98:e8:79:1b:cf:9e:81:8f:68:cb:d6:a2:b7:8f:fa:87:dd: f8:37:77:40:50:77:c4:0f:bf:24:6c:3b:5b:45:87:af:0f:ca: f9:c0:81:8f:81:f7:74:dc:cf:52:80:79:7e:ff:72:fb:03:c3: 74:ae:47:07:1e:f9:f8:ac:91:64:d6:3d:5e:8c:0b:85:40:1d: 26:4e:ff:fb:ea:5d:12:2b:ee:ab:81:67:84:4b:78:f4:92:51: 09:56:bf:53:08:10:11:6f:b6:a4:ba:83:4a:10:3c:a0:44:07: 50:43:5b:ce:93:96:9d:1d:8d:2b:8c:39:36:cb:75:3f:6a:26: d3:2b:ac:e9:d7:0c:2a:57:be:0f:1b:02:0c:88:69:46:f9:e2: 08:b3:d6:ff:9a:3f:82:a5:4f:58:e9:0f:a9:37:fd:ed:2c:59: 4c:7c:ad:4b:27:a3:76:4d:c7:55:10:42:46:c1:9e:3f:d7:49: d8:d3:27:e1:c7:c5:df:1b:04:54:ac:e4:bf:bd:10:d2:fc:83: 77:13:0f:36:cd:7a:bf:18:7e:6e:61:3d:1b:66:45:95:90:ab: 2f:8b:27:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUazOUy5mzIMCe7tngrbPvKkNcMOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNjA0MTYxMDQ1MDJaFw0yNjA0MTkxOTExMDJaMDMxMTAvBgNV BAMTKDlGOUU0NjVBMUExRjM1QjQ0OTNBOUZERTI1NDFFNzhDMjRCNUMxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2TLehwl5aFPfILItLym43NFlh Y2qUetKanoysBnWSlLCOaJsFM9P9siXYwHmsEjvjWW/QaURKK9eOg5xNmgEw51Jh ycQsk6XkCaF3Dws8KrTJceskW/j7f4u/juwhDFPuMPn9ZXcQGQlZMDHu9FYwhVnY bFcvT82vJ+7cgMbhSfOHAFlfnmruhoy8kty9v2tLFLQcKj5CKp3l8nUSWOmpcrfn kG7cKvKdCR+yMGnSzen90c5jjcvaQ/Gg+W04MiA1q6Bz6lrE4YiiEenmRRakHFDS G10B6CeRygw+iih/9yVFGsalGaReu/HNO0nuaGigaAAd9eNsWLEaD+VCY7TRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn55GWhofNbRJOp/eJUHnjCS1wSMwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAb2Wota20cqA3BmdWZEGWXPHsm786vcwPu+ h46eRDqdC52pB7aY6Hkbz56Bj2jL1qK3j/qH3fg3d0BQd8QPvyRsO1tFh68PyvnA gY+B93Tcz1KAeX7/cvsDw3SuRwce+fiskWTWPV6MC4VAHSZO//vqXRIr7quBZ4RL ePSSUQlWv1MIEBFvtqS6g0oQPKBEB1BDW86Tlp0djSuMOTbLdT9qJtMrrOnXDCpX vg8bAgyIaUb54giz1v+aP4KlT1jpD6k3/e0sWUx8rUsno3ZNx1UQQkbBnj/XSdjT J+HHxd8bBFSs5L+9ENL8g3cTDzbNer8Yfm5hPRtmRZWQqy+LJ9k= -----END CERTIFICATE-----Generated at Fri Apr 17 18:31:16 2026 by rpki-client