$ rpki-client -vvf repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft File: AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft (raw, json) Hash identifier: iwa4WwjSnt6EBzyvuksnh6W9Ibu79+lek5/31SXLzjo= Subject key identifier: FD:E5:95:ED:2D:A4:04:7C:84:DD:BA:9B:70:FC:9C:25:17:34:E9:B5 Authority key identifier: AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 Certificate issuer: /CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Certificate serial: 02DFDCCAD62BE986B10ECFBCA9B1BD6605639699 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft Manifest number: 01F8 Signing time: Mon 02 Mar 2026 10:01:21 +0000 Manifest this update: Mon 02 Mar 2026 09:56:21 +0000 Manifest next update: Thu 05 Mar 2026 16:37:21 +0000 Files and hashes: 1: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: 1u3Z1lk6zXunvZlCpm0Bd5q9QPJyu+B5fC/Cft7A8RQ=) 2: AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl (hash: ipgbSaEamBcgcWYedlR9LHotRB8bCeo/cESRof+08zo=) 3: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: x8NZlNlUyvGMlN8hhsJWtoHxl7LoXb2c6+KaZM2DY1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:df:dc:ca:d6:2b:e9:86:b1:0e:cf:bc:a9:b1:bd:66:05:63:96:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Validity Not Before: Mar 2 09:56:21 2026 GMT Not After : Mar 5 16:37:21 2026 GMT Subject: CN=FDE595ED2DA4047C84DDBA9B70FC9C251734E9B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ef:47:2f:51:10:8a:f5:14:ed:78:d7:d1:b1: b6:06:1a:31:f9:43:01:87:a9:50:0a:d5:d3:3d:d7: 9e:a1:d7:b1:d7:b0:a6:3c:45:37:7d:09:9e:31:eb: dd:39:e1:d8:9a:ae:27:5d:d1:09:99:e5:b3:10:04: ca:db:b3:a7:5a:ea:f0:bd:ec:15:a1:bb:d9:92:d6: 55:e5:b9:a4:ab:d4:b3:6d:7d:56:70:44:e2:89:38: fb:89:d3:64:cf:5e:6d:b7:04:a8:17:61:89:35:61: 21:a4:5d:c3:a1:17:fa:77:5d:59:98:f9:cd:d4:3b: 76:6e:59:02:47:8c:20:0b:7a:e8:dc:23:05:e9:96: 2d:d8:23:be:b7:91:b1:db:49:8e:b2:e3:6e:97:d0: 67:44:cb:2b:a7:f1:83:3b:c2:1e:ea:f2:7f:89:6e: 7e:e7:00:90:79:ff:e4:d1:3f:8e:2e:93:ed:0b:04: b9:3a:24:fe:6d:b2:b0:6d:e5:80:46:53:a7:2f:ab: 38:ff:bd:c6:ae:d6:72:b4:62:3e:e0:0e:21:d4:f3: 02:cd:76:79:55:82:f2:62:7f:c5:be:81:2b:88:65: 7f:9e:13:59:7f:b9:5a:86:23:48:25:e3:5c:bb:6a: cc:f8:15:27:12:5b:3a:05:94:00:0b:78:11:31:50: 45:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E5:95:ED:2D:A4:04:7C:84:DD:BA:9B:70:FC:9C:25:17:34:E9:B5 X509v3 Authority Key Identifier: keyid:AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:84:f4:e6:2a:b2:32:88:d4:c6:fa:81:5a:0a:ff:7f:76:e4: 9f:5a:04:03:4d:15:e2:6a:e2:67:2c:44:46:c1:ea:18:14:44: 0a:aa:c4:a9:58:ec:3e:26:29:bb:82:3c:ca:8c:c3:04:b9:4c: 15:03:e8:e3:98:6e:c2:e8:b5:22:ee:c7:f6:35:21:0f:c9:3d: 06:1b:86:77:9c:f2:9b:4a:98:cb:53:fe:5c:e2:c2:84:99:a9: 1d:ca:bc:69:25:bb:21:bf:b0:7e:74:b4:77:f4:e5:19:6b:1f: 54:eb:ee:97:35:2b:c9:21:f6:f1:e3:c3:59:2b:0a:56:e1:da: dd:b5:b5:18:e5:47:f3:57:aa:30:e1:15:bd:a6:e2:c5:ac:58: fa:51:e5:6d:26:b1:fb:2a:9f:6f:40:ef:88:95:5e:dd:80:b3: 28:d4:b4:3e:dc:b9:f8:a7:cb:3a:09:ac:76:51:e1:5d:04:b8: 99:8d:d1:a2:88:02:47:c1:f2:a4:ca:77:a5:27:ee:ce:60:f2: 1a:26:db:ca:28:e6:ae:9a:2a:af:6a:7d:d4:37:0a:22:5f:24: 1f:01:9b:3d:bd:1e:ce:3c:64:eb:d0:aa:7d:ad:08:7a:80:7b: 05:5d:c5:04:66:91:32:ff:5a:a9:07:b4:5f:2a:48:47:c8:5e: 24:11:e9:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAt/cytYr6YaxDs+8qbG9ZgVjlpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2 OUZGNUUyMDAeFw0yNjAzMDIwOTU2MjFaFw0yNjAzMDUxNjM3MjFaMDMxMTAvBgNV BAMTKEZERTU5NUVEMkRBNDA0N0M4NEREQkE5QjcwRkM5QzI1MTczNEU5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv70cvURCK9RTteNfRsbYGGjH5 QwGHqVAK1dM9156h17HXsKY8RTd9CZ4x69054diaridd0QmZ5bMQBMrbs6da6vC9 7BWhu9mS1lXluaSr1LNtfVZwROKJOPuJ02TPXm23BKgXYYk1YSGkXcOhF/p3XVmY +c3UO3ZuWQJHjCALeujcIwXpli3YI763kbHbSY6y426X0GdEyyun8YM7wh7q8n+J bn7nAJB5/+TRP44uk+0LBLk6JP5tsrBt5YBGU6cvqzj/vcau1nK0Yj7gDiHU8wLN dnlVgvJif8W+gSuIZX+eE1l/uVqGI0gl41y7asz4FScSWzoFlAALeBExUEUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/eWV7S2kBHyE3bqbcPycJRc06bUwHwYDVR0j BBgwFoAUrnthqcFnk3hMwlzsApVRbGn/XiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTg5NWNlYi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC9BRTdCNjFBOUMx Njc5Mzc4NENDMjVDRUMwMjk1NTE2QzY5RkY1RTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2OUZG NUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUx NkM2OUZGNUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyE9OYqsjKI1Mb6gVoK/3925J9aBANNFeJq 4mcsREbB6hgURAqqxKlY7D4mKbuCPMqMwwS5TBUD6OOYbsLotSLux/Y1IQ/JPQYb hnec8ptKmMtT/lziwoSZqR3KvGkluyG/sH50tHf05RlrH1Tr7pc1K8kh9vHjw1kr Clbh2t21tRjlR/NXqjDhFb2m4sWsWPpR5W0msfsqn29A74iVXt2AsyjUtD7cufin yzoJrHZR4V0EuJmN0aKIAkfB8qTKd6Un7s5g8hom28oo5q6aKq9qfdQ3CiJfJB8B mz29Hs48ZOvQqn2tCHqAewVdxQRmkTL/WqkHtF8qSEfIXiQR6SU= -----END CERTIFICATE-----Generated at Mon Mar 2 14:07:29 2026 by rpki-client