$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: fetHdx/XE5lD0qhKjAsYSu2eEoKec4vQ1KsFvRssQ7k= Subject key identifier: 03:77:B4:47:C4:99:1B:63:39:43:78:D8:AF:44:9E:EE:D6:8B:E4:49 Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 545C9507477BDD2F1CFA0EFC41220B20DAE6709A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: 014A Signing time: Thu 16 Apr 2026 17:40:45 +0000 Manifest this update: Thu 16 Apr 2026 17:35:45 +0000 Manifest next update: Sun 19 Apr 2026 18:00:45 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: 2oKVkMRxTwAtZmFT6RNkQLJ4cbtgRVCGM24C9N0Xhh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:5c:95:07:47:7b:dd:2f:1c:fa:0e:fc:41:22:0b:20:da:e6:70:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: Apr 16 17:35:45 2026 GMT Not After : Apr 19 18:00:45 2026 GMT Subject: CN=0377B447C4991B63394378D8AF449EEED68BE449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:8f:c5:bc:67:b6:f4:ac:b4:e7:61:64:cf: 5a:fd:5c:22:f2:e5:89:69:15:ac:e2:c0:b2:3d:77: a8:83:aa:59:f8:35:8c:9b:9d:54:1b:04:82:60:87: 5d:df:e7:ee:3d:5e:d3:22:53:38:2a:68:44:ae:fe: 2e:82:ac:1d:24:fa:41:55:74:fe:3f:a5:31:39:df: 52:56:4f:9a:1f:7d:8f:d2:13:9d:7a:c5:c3:21:a2: 61:9e:eb:6b:ea:b3:49:eb:43:75:c2:18:f4:10:03: 0c:6b:6d:ff:84:8f:ba:53:65:54:4d:33:50:15:34: a2:1e:d1:b6:04:1d:9c:a7:12:9c:6b:c0:33:47:e7: 8c:a0:44:17:03:51:2f:ee:99:63:57:0c:fe:36:38: f8:d7:25:9e:d8:6c:44:a4:1f:b3:54:e5:d9:11:72: b3:77:48:73:51:28:c2:1d:37:f7:60:c1:6e:da:5e: 17:8d:c4:65:7e:60:78:ed:21:b1:25:f9:58:76:1e: 82:bd:50:10:24:ff:47:0f:0d:62:58:87:07:34:31: ce:c0:3b:28:8e:c5:42:40:57:ea:b8:d8:8b:b5:a1: 2a:83:a4:6b:52:fd:21:01:95:1d:15:cf:9f:65:d9: b8:08:2e:84:ed:01:16:bd:60:0b:fe:f1:36:28:eb: 28:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:77:B4:47:C4:99:1B:63:39:43:78:D8:AF:44:9E:EE:D6:8B:E4:49 X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3a:4d:06:df:4c:87:d0:9d:f8:a7:a8:56:75:da:5c:14:0c: 2d:dd:54:44:18:6c:90:75:b5:d1:90:47:6b:04:53:cc:ec:c8: a6:96:ed:ac:94:d6:d8:2a:f1:1b:f3:6d:5d:f3:fc:5f:bf:e3: 58:b0:8c:40:3e:c3:64:b0:bc:c0:45:0c:70:f6:68:bb:cb:7f: a3:77:bf:ca:4e:42:0b:ae:2e:81:f2:5d:26:44:9e:3d:b7:b0: 65:e6:e2:62:e1:78:05:fe:46:9c:1d:17:01:1c:73:76:ff:a4: 68:42:fb:64:2d:40:d1:0e:f5:e5:99:11:c8:fe:ed:8f:77:43: 53:45:0f:f9:39:8b:32:c0:94:81:47:7e:bd:05:37:cc:e1:3d: cf:9f:b3:b6:1e:33:f2:46:04:d3:68:5f:c4:ff:ea:54:08:0b: 3f:e8:22:3b:bc:76:fb:f0:4c:72:1a:97:fd:91:71:65:26:20: 00:e1:96:7c:a4:53:34:fa:85:1d:3f:70:98:96:5a:7c:b3:55: cb:fe:89:ae:10:3e:83:40:b3:cc:ba:c7:31:d2:66:f4:4a:4c: 5d:2c:a5:84:c8:95:f6:46:3e:12:78:81:ae:e5:67:b0:c3:60: 07:39:90:bd:d6:50:9b:e6:86:32:c7:7d:ad:30:3f:55:e2:bb: 0c:6e:52:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFyVB0d73S8c+g78QSILINrmcJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVC MDQ0ODdGQTAeFw0yNjA0MTYxNzM1NDVaFw0yNjA0MTkxODAwNDVaMDMxMTAvBgNV BAMTKDAzNzdCNDQ3QzQ5OTFCNjMzOTQzNzhEOEFGNDQ5RUVFRDY4QkU0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJ4/FvGe29Ky052Fkz1r9XCLy 5YlpFaziwLI9d6iDqln4NYybnVQbBIJgh13f5+49XtMiUzgqaESu/i6CrB0k+kFV dP4/pTE531JWT5offY/SE516xcMhomGe62vqs0nrQ3XCGPQQAwxrbf+Ej7pTZVRN M1AVNKIe0bYEHZynEpxrwDNH54ygRBcDUS/umWNXDP42OPjXJZ7YbESkH7NU5dkR crN3SHNRKMIdN/dgwW7aXheNxGV+YHjtIbEl+Vh2HoK9UBAk/0cPDWJYhwc0Mc7A OyiOxUJAV+q42Iu1oSqDpGtS/SEBlR0Vz59l2bgILoTtARa9YAv+8TYo6yhVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA3e0R8SZG2M5Q3jYr0Se7taL5EkwHwYDVR0j BBgwFoAUqpe5WScSkfvhQkkbgQY61bBEh/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3 MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4N0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVCMDQ0 ODdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNB RDVCMDQ0ODdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHY6TQbfTIfQnfinqFZ12lwUDC3dVEQYbJB1 tdGQR2sEU8zsyKaW7ayU1tgq8RvzbV3z/F+/41iwjEA+w2SwvMBFDHD2aLvLf6N3 v8pOQguuLoHyXSZEnj23sGXm4mLheAX+RpwdFwEcc3b/pGhC+2QtQNEO9eWZEcj+ 7Y93Q1NFD/k5izLAlIFHfr0FN8zhPc+fs7YeM/JGBNNoX8T/6lQICz/oIju8dvvw THIal/2RcWUmIADhlnykUzT6hR0/cJiWWnyzVcv+ia4QPoNAs8y6xzHSZvRKTF0s pYTIlfZGPhJ4ga7lZ7DDYAc5kL3WUJvmhjLHfa0wP1XiuwxuUrc= -----END CERTIFICATE-----Generated at Fri Apr 17 12:42:38 2026 by rpki-client