$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: KG4rQSYVeiq9Rxv6CD7lPGIChu4EXkGIPpgfzE9CTZM= Subject key identifier: B6:03:C3:0D:B5:92:F4:5D:69:0B:D6:17:1E:99:6D:A6:40:79:16:D0 Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 55BDA2E22FF45BABCCA7C57C5B4145FF7C4486 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: 0136 Signing time: Mon 02 Mar 2026 15:40:48 +0000 Manifest this update: Mon 02 Mar 2026 15:35:48 +0000 Manifest next update: Fri 06 Mar 2026 00:18:48 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: KMNG11Vt4+XT0T/zuOo9qhBYYfpQMVxf8dNVfFyt62Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:bd:a2:e2:2f:f4:5b:ab:cc:a7:c5:7c:5b:41:45:ff:7c:44:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: Mar 2 15:35:48 2026 GMT Not After : Mar 6 00:18:48 2026 GMT Subject: CN=B603C30DB592F45D690BD6171E996DA6407916D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:13:ce:91:d1:3e:6a:6c:42:c7:52:8a:30: 8a:0e:de:0a:56:d1:0b:bf:94:9c:85:7f:28:ef:f5: 27:b7:26:4c:52:aa:1a:ac:fc:1b:48:53:7b:e0:d6: 01:e8:61:9e:dd:7d:1e:b6:87:91:a5:51:37:16:63: 13:11:2d:44:a2:23:1c:21:96:aa:17:f9:3a:9c:84: 0c:7a:d9:fd:04:fd:fb:6a:01:7c:c6:66:d4:1f:bc: 4b:c4:4c:fd:f0:bd:81:06:21:b0:ba:bc:1e:74:66: e5:f7:ef:9e:db:f1:dc:60:42:fb:7a:b6:27:e7:27: 09:33:80:d3:0e:8d:b8:93:3c:8c:f0:9c:ff:36:06: 5b:63:1d:a6:47:7f:89:df:2d:f4:03:8d:04:31:12: 14:4e:8b:fb:0a:0a:3a:30:61:b6:2d:3f:81:30:f4: d3:10:94:8f:12:a6:a0:f1:b9:74:ac:43:dc:4e:0c: a6:d9:aa:c6:af:5f:12:26:95:74:6d:35:dd:23:7b: 5c:9a:3d:30:86:ee:a1:a8:aa:31:88:e1:c1:e4:81: bf:ab:4b:c6:61:87:ad:97:4b:4c:fe:17:f3:bf:d2: 55:60:16:95:07:e3:42:f6:bf:24:a2:c0:ba:5a:88: 38:f2:8a:2e:49:df:34:45:f1:cf:f4:ee:6f:ea:86: a1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:03:C3:0D:B5:92:F4:5D:69:0B:D6:17:1E:99:6D:A6:40:79:16:D0 X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:33:af:4f:5b:99:0d:09:ad:ea:e9:29:fc:b5:1b:86:fb:d4: 1f:4b:af:65:24:69:8d:87:8c:9d:63:db:05:29:ce:44:12:3b: b5:6d:80:47:3d:1b:8d:b1:4d:12:20:5a:cb:30:c0:bf:58:07: c4:27:44:61:e1:29:76:19:f3:71:26:94:22:0d:d3:7e:63:e3: 4c:b4:32:64:da:26:a7:4c:b8:a6:79:21:b7:6d:5d:a3:eb:50: 39:32:9d:e6:c5:af:a4:05:31:cb:d6:03:70:a6:74:e8:4f:74: be:84:56:d3:f6:c5:7f:27:98:71:be:1b:40:1a:1c:1d:82:82: 54:88:2f:3b:8e:b4:13:ce:8a:1c:de:da:d5:48:20:a9:9c:fc: f1:06:4e:3d:5a:90:5e:6d:a4:03:4c:9e:b8:4b:94:83:b3:51: 9a:84:ce:d5:7d:df:a4:9f:10:03:a1:a2:5b:3f:b0:5e:b6:05: c3:40:04:cb:75:3b:6e:ba:ca:0e:76:d1:2b:86:c3:8c:fa:44: 3b:8c:df:0c:ec:ed:fd:5b:29:11:7d:51:1e:f1:a9:4e:a7:40: c4:65:c8:9b:35:36:4e:36:9e:36:f0:72:94:9c:4a:3c:9d:2f: 4b:fd:de:2c:a3:6e:55:97:b9:dc:31:aa:ea:8f:e6:97:df:4c: 27:3b:80:cf -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITVb2i4i/0W6vMp8V8W0FF/3xEhjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhBQTk3Qjk1OTI3MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIw NDQ4N0ZBMB4XDTI2MDMwMjE1MzU0OFoXDTI2MDMwNjAwMTg0OFowMzExMC8GA1UE AxMoQjYwM0MzMERCNTkyRjQ1RDY5MEJENjE3MUU5OTZEQTY0MDc5MTZEMDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALq9E86R0T5qbELHUoowig7eClbR C7+UnIV/KO/1J7cmTFKqGqz8G0hTe+DWAehhnt19HraHkaVRNxZjExEtRKIjHCGW qhf5OpyEDHrZ/QT9+2oBfMZm1B+8S8RM/fC9gQYhsLq8HnRm5ffvntvx3GBC+3q2 J+cnCTOA0w6NuJM8jPCc/zYGW2Mdpkd/id8t9AONBDESFE6L+woKOjBhti0/gTD0 0xCUjxKmoPG5dKxD3E4Mptmqxq9fEiaVdG013SN7XJo9MIbuoaiqMYjhweSBv6tL xmGHrZdLTP4X87/SVWAWlQfjQva/JKLAulqIOPKKLknfNEXxz/Tub+qGoZsCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBS2A8MNtZL0XWkL1hcemW2mQHkW0DAfBgNVHSME GDAWgBSql7lZJxKR++FCSRuBBjrVsESH+jAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Vk ZThjY2I5LTBhNjMtNDlhOS1hYThhLWVkMDE2ZWUzNTFmMC8wL0FBOTdCOTU5Mjcx MjkxRkJFMTQyNDkxQjgxMDYzQUQ1QjA0NDg3RkEuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMS9BQTk3Qjk1OTI3MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4 N0ZBLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9lZGU4Y2NiOS0wYTYzLTQ5YTktYWE4 YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3MTI5MUZCRTE0MjQ5MUI4MTA2M0FE NUIwNDQ4N0ZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAdTOvT1uZDQmt6ukp/LUbhvvUH0uvZSRpjYeM nWPbBSnORBI7tW2ARz0bjbFNEiBayzDAv1gHxCdEYeEpdhnzcSaUIg3TfmPjTLQy ZNomp0y4pnkht21do+tQOTKd5sWvpAUxy9YDcKZ06E90voRW0/bFfyeYcb4bQBoc HYKCVIgvO460E86KHN7a1UggqZz88QZOPVqQXm2kA0yeuEuUg7NRmoTO1X3fpJ8Q A6GiWz+wXrYFw0AEy3U7brrKDnbRK4bDjPpEO4zfDOzt/VspEX1RHvGpTqdAxGXI mzU2TjaeNvBylJxKPJ0vS/3eLKNuVZe53DGq6o/ml99MJzuAzw== -----END CERTIFICATE-----Generated at Mon Mar 2 18:48:55 2026 by rpki-client