$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft File: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft (raw, json) Hash identifier: IJqMNdIeb1ZzE+vrbsaPS7V2Tdd2Q82WEBhNyDmnQts= Subject key identifier: A4:4D:55:18:01:0F:DC:5F:0D:DC:36:43:9E:B1:1E:43:EF:68:DE:15 Authority key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Certificate issuer: /CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Certificate serial: 333405D2FA68B393E337FE5495E63E832CCA5CE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft Manifest number: 0345 Signing time: Sat 28 Feb 2026 22:41:58 +0000 Manifest this update: Sat 28 Feb 2026 22:36:58 +0000 Manifest next update: Tue 03 Mar 2026 23:45:58 +0000 Files and hashes: 1: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: jtOEt7E3nAQ6Fw9cITIUUkvRpfUDsJxH4CxbFv1xpGk=) 2: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl (hash: mU5/KhfrC5TLJVkLCrGyXylADBLMg26wb43As99ytU4=) 3: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: U53MbJZVdHMZelcGWK9+w7EaXlcDpDpc+jeZ3MbM1Kw=) 4: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: gOoZfgSIZIk3IBqctpdE6ERoqLaD97A4ApFjnTt/tAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:34:05:d2:fa:68:b3:93:e3:37:fe:54:95:e6:3e:83:2c:ca:5c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Validity Not Before: Feb 28 22:36:58 2026 GMT Not After : Mar 3 23:45:58 2026 GMT Subject: CN=A44D5518010FDC5F0DDC36439EB11E43EF68DE15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:d6:3d:39:59:9f:f2:37:ca:f5:5a:05:95: 79:d5:c3:93:be:27:4d:e8:92:2f:80:09:be:37:9d: 9b:93:43:1f:c9:42:82:09:60:56:c0:eb:be:61:d7: 9d:4e:ff:78:7e:4c:9f:a6:4c:59:9b:41:2b:ff:33: 36:8d:e8:5c:79:15:77:b6:b0:56:0a:a0:31:e3:e8: 4e:b3:73:a5:a4:79:fa:31:cc:c6:02:06:94:83:49: 9b:5b:e9:7c:08:51:0d:24:0e:55:c1:08:16:de:31: 57:d3:5a:68:be:fa:fc:40:b8:53:80:83:e7:4a:39: c3:11:ce:3a:21:f4:70:c0:ef:ca:58:43:0c:a8:d7: e5:d8:fa:10:64:32:ee:e2:a1:17:8d:00:ac:c5:ee: c5:63:59:e3:64:e5:c3:d1:68:dd:9e:63:b1:46:b8: 55:2b:5d:f2:e2:d7:c0:a6:3d:06:12:0c:a9:d5:3f: b3:af:95:e6:a3:b2:04:bd:68:d9:f8:6b:b3:fa:8a: 2b:6b:45:62:77:bc:d9:1e:79:05:75:ba:71:24:3d: 22:d2:fd:cd:59:fe:e2:5a:3f:dc:56:d3:59:6c:d9: 24:51:4e:62:99:08:7d:83:03:37:5c:8a:64:4c:a7: 73:8b:2e:44:2d:dd:6f:41:70:d3:b0:d0:57:23:98: df:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4D:55:18:01:0F:DC:5F:0D:DC:36:43:9E:B1:1E:43:EF:68:DE:15 X509v3 Authority Key Identifier: keyid:AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:36:c7:b1:28:42:52:22:1f:3a:86:42:ca:f1:58:04:5d:be: 82:e8:d8:a1:f4:71:26:e3:5b:f8:b6:e3:42:99:0c:07:bd:0a: a0:69:01:55:83:f6:bf:c4:62:9d:c3:8c:8a:1a:72:19:8e:72: f3:6e:b6:ca:c4:b4:d9:ea:99:1b:48:8a:30:95:6b:96:3e:d4: 2f:31:18:37:f7:f3:75:69:cc:14:07:7f:d2:49:8f:a8:a7:cf: f0:a9:86:05:6b:2c:7e:03:22:e1:39:c7:15:48:55:ef:7a:06: d8:5c:10:94:5e:e2:95:3e:12:d0:ff:fe:9e:4c:99:49:36:f0: 59:ff:0a:19:dc:15:03:16:c6:8f:c3:e8:6e:2c:e4:5f:70:bd: ca:df:8d:c3:ca:c9:4c:40:46:51:2e:56:ef:16:b5:90:4b:39: 89:05:88:ff:59:a8:0f:fc:b3:85:c3:3f:1a:5f:22:37:5f:2c: ba:54:43:e8:4b:02:f9:23:1a:43:29:c9:87:0e:5d:54:98:18: 68:40:f6:67:e8:dd:a9:81:5d:ca:b8:4d:fe:90:62:0d:0f:4b: 60:d7:12:9e:b6:23:ba:69:f6:28:db:38:27:f7:23:f9:59:e2: ab:b6:8d:db:43:9b:8c:99:c6:a7:09:dd:54:da:af:66:c7:7d: dc:10:a6:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzQF0vpos5PjN/5UleY+gyzKXOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5 MjMxMDUwNDAeFw0yNjAyMjgyMjM2NThaFw0yNjAzMDMyMzQ1NThaMDMxMTAvBgNV BAMTKEE0NEQ1NTE4MDEwRkRDNUYwRERDMzY0MzlFQjExRTQzRUY2OERFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxp9Y9OVmf8jfK9VoFlXnVw5O+ J03oki+ACb43nZuTQx/JQoIJYFbA675h151O/3h+TJ+mTFmbQSv/MzaN6Fx5FXe2 sFYKoDHj6E6zc6WkefoxzMYCBpSDSZtb6XwIUQ0kDlXBCBbeMVfTWmi++vxAuFOA g+dKOcMRzjoh9HDA78pYQwyo1+XY+hBkMu7ioReNAKzF7sVjWeNk5cPRaN2eY7FG uFUrXfLi18CmPQYSDKnVP7OvleajsgS9aNn4a7P6iitrRWJ3vNkeeQV1unEkPSLS /c1Z/uJaP9xW01ls2SRRTmKZCH2DAzdcimRMp3OLLkQt3W9BcNOw0FcjmN9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpE1VGAEP3F8N3DZDnrEeQ+9o3hUwHwYDVR0j BBgwFoAUrrMv+gAHwKBn+4zp3XfP75IxBQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMC9BRUIzMkZGQTAw MDdDMEEwNjdGQjhDRTlERDc3Q0ZFRjkyMzEwNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5MjMx MDUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk ZDQtMjYzNDcyN2E5ZWQ0LzAvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NG RUY5MjMxMDUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABo2x7EoQlIiHzqGQsrxWARdvoLo2KH0cSbj W/i240KZDAe9CqBpAVWD9r/EYp3DjIoachmOcvNutsrEtNnqmRtIijCVa5Y+1C8x GDf383VpzBQHf9JJj6inz/CphgVrLH4DIuE5xxVIVe96BthcEJRe4pU+EtD//p5M mUk28Fn/ChncFQMWxo/D6G4s5F9wvcrfjcPKyUxARlEuVu8WtZBLOYkFiP9ZqA/8 s4XDPxpfIjdfLLpUQ+hLAvkjGkMpyYcOXVSYGGhA9mfo3amBXcq4Tf6QYg0PS2DX Ep62I7pp9ijbOCf3I/lZ4qu2jdtDm4yZxqcJ3VTar2bHfdwQpqo= -----END CERTIFICATE-----Generated at Mon Mar 2 03:12:06 2026 by rpki-client