$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft File: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft (raw, json) Hash identifier: jycm3F/RSfqvCGSpyHYL4RCjP6Y+GIyCm2BU253Zb94= Subject key identifier: 6B:EA:B3:0B:8F:16:12:05:01:85:1F:9A:DC:17:BF:41:4E:59:AE:22 Authority key identifier: 2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 Certificate issuer: /CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Certificate serial: 19B1EDEB1EAAEF94D1946F37C19550D7085B1535 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft Manifest number: 01DE Signing time: Sat 07 Mar 2026 19:00:47 +0000 Manifest this update: Sat 07 Mar 2026 18:55:47 +0000 Manifest next update: Tue 10 Mar 2026 21:40:47 +0000 Files and hashes: 1: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl (hash: k/32JMKx7lKJzmwMYOVAd9sGdNqxHoUWR1sbHttHXv4=) 2: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: Er3SZg2wUj/P2Phj94Rs/pKQreK157hBoR/0FApk3DI=) 3: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: NgiCiwYgDeYQaPatps9fGhPQzocYHvig3vWSvQTITq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b1:ed:eb:1e:aa:ef:94:d1:94:6f:37:c1:95:50:d7:08:5b:15:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Validity Not Before: Mar 7 18:55:47 2026 GMT Not After : Mar 10 21:40:47 2026 GMT Subject: CN=6BEAB30B8F16120501851F9ADC17BF414E59AE22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:0f:46:2b:3e:b1:4b:d4:0b:69:62:f4:4e: f2:9a:0e:56:28:0a:14:8a:87:ac:97:1c:52:7b:b1: bc:67:57:21:0c:34:70:94:68:1b:0d:4e:84:f3:20: 1d:92:5a:d0:9a:5f:b2:26:9d:bf:c8:f0:98:39:a4: e9:82:b6:d9:83:d8:60:19:e2:5b:d5:aa:e4:93:4c: d3:32:34:cd:fb:dc:e3:7c:1e:bf:01:a6:a3:53:cb: 96:44:7d:ee:32:44:00:5c:b3:44:16:10:15:40:32: 4e:77:6c:c4:fc:ed:d1:ad:e6:a4:85:0d:ff:20:d9: 23:a2:dc:cb:0d:09:61:99:dc:77:31:99:9a:91:0c: c5:3b:0b:7e:5c:fb:11:e1:6f:36:4d:ac:a8:51:84: 42:9e:3d:ba:aa:43:0c:f9:df:37:11:b6:69:34:48: df:c0:cb:59:28:90:a1:96:2b:7b:51:49:90:06:db: 09:03:4b:9a:a9:21:8b:88:b3:28:7e:54:bb:c5:f8: de:47:1e:62:07:d2:73:2b:94:97:8c:07:e8:31:a8: f0:ac:f8:b2:9e:65:ed:04:d1:ed:0c:e4:3f:87:16: 02:d2:da:74:52:b8:77:33:9b:73:7d:58:f4:66:de: a0:13:d8:67:b1:bf:09:1a:77:6b:73:16:f9:7f:cc: 3e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EA:B3:0B:8F:16:12:05:01:85:1F:9A:DC:17:BF:41:4E:59:AE:22 X509v3 Authority Key Identifier: keyid:2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:20:2f:fc:1d:20:f3:01:60:da:db:ac:65:f1:85:dc:af:4f: 31:6d:4e:64:43:c5:2d:9d:e7:4c:d8:7a:b0:45:c4:23:98:49: aa:90:08:29:d2:d5:99:ec:3c:bb:1d:bf:45:a1:06:44:06:3a: 8a:d0:28:a4:29:e3:27:36:35:dc:de:4a:04:02:2d:db:5e:75: 4e:25:e4:9a:96:42:5d:4c:b0:86:b2:94:7f:af:7c:22:9a:95: 91:33:e2:db:2f:3b:09:25:4b:a3:f8:d0:55:14:f3:e8:b0:1f: 8c:99:1c:83:be:b2:89:e0:a7:bf:fd:52:06:d2:e2:77:ba:bb: a9:d3:9a:d0:5d:24:bd:a9:d4:d7:26:a6:fc:f7:57:ad:de:6a: 09:7b:75:f9:ff:9d:ad:64:02:f4:b6:51:1c:f6:60:3c:96:a9: e9:a3:94:a5:1d:59:2a:0e:0c:cf:37:5e:0a:a1:31:97:ba:a7: 46:c1:58:01:e1:cb:32:e2:e6:33:f9:e8:19:33:7d:23:72:a7: 1c:5d:e3:8e:6b:3a:6d:df:9c:cc:e6:07:3b:d4:b2:d5:32:b2: 5c:74:c7:35:2f:b8:6b:97:d1:73:c7:c9:a6:b8:ed:e8:04:33: da:84:44:a7:57:9e:32:b2:44:b8:c1:07:99:fa:9f:49:b7:02: 6a:a9:8e:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbHt6x6q75TRlG83wZVQ1whbFTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2Nzcz RjNFNkYxNjAeFw0yNjAzMDcxODU1NDdaFw0yNjAzMTAyMTQwNDdaMDMxMTAvBgNV BAMTKDZCRUFCMzBCOEYxNjEyMDUwMTg1MUY5QURDMTdCRjQxNEU1OUFFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9kA9GKz6xS9QLaWL0TvKaDlYo ChSKh6yXHFJ7sbxnVyEMNHCUaBsNToTzIB2SWtCaX7Imnb/I8Jg5pOmCttmD2GAZ 4lvVquSTTNMyNM373ON8Hr8BpqNTy5ZEfe4yRABcs0QWEBVAMk53bMT87dGt5qSF Df8g2SOi3MsNCWGZ3HcxmZqRDMU7C35c+xHhbzZNrKhRhEKePbqqQwz53zcRtmk0 SN/Ay1kokKGWK3tRSZAG2wkDS5qpIYuIsyh+VLvF+N5HHmIH0nMrlJeMB+gxqPCs +LKeZe0E0e0M5D+HFgLS2nRSuHczm3N9WPRm3qAT2Gexvwkad2tzFvl/zD6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa+qzC48WEgUBhR+a3Be/QU5ZriIwHwYDVR0j BBgwFoAUKq+oFBTtyxAyI18iQP4Gdz8+bxYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWI4ZTYwZi1mOTkzLTQ1MzQtOWRhMC1mMjg1YTg2MDNmNjkvMC8yQUFGQTgxNDE0 RURDQjEwMzIyMzVGMjI0MEZFMDY3NzNGM0U2RjE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2NzczRjNF NkYxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2 NzczRjNFNkYxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkgL/wdIPMBYNrbrGXxhdyvTzFtTmRDxS2d 50zYerBFxCOYSaqQCCnS1ZnsPLsdv0WhBkQGOorQKKQp4yc2NdzeSgQCLdtedU4l 5JqWQl1MsIaylH+vfCKalZEz4tsvOwklS6P40FUU8+iwH4yZHIO+songp7/9UgbS 4ne6u6nTmtBdJL2p1Ncmpvz3V63eagl7dfn/na1kAvS2URz2YDyWqemjlKUdWSoO DM83XgqhMZe6p0bBWAHhyzLi5jP56BkzfSNypxxd445rOm3fnMzmBzvUstUyslx0 xzUvuGuX0XPHyaa47egEM9qERKdXnjKyRLjBB5n6n0m3Amqpjqg= -----END CERTIFICATE-----Generated at Sat Mar 7 21:19:45 2026 by rpki-client