$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: pBU5XYwx4ub0GR7cp/ALJpTcVkAXsS8losfwlErifdk= Subject key identifier: E3:8A:12:23:9D:19:9B:FE:8A:0D:84:F5:D4:3D:C8:6C:CC:62:04:06 Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 4ED7BD5BB12D8A0C8D43A3F67DE05F6AEFF3A9C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: 0100 Signing time: Sun 19 Apr 2026 17:31:42 +0000 Manifest this update: Sun 19 Apr 2026 17:26:42 +0000 Manifest next update: Thu 23 Apr 2026 02:39:42 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: KBNbxQjOLfhYwGB4Wp4pMpbXxYHR8QezEvyeUuNBjy8=) 2: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: yRZF/k88VnLbH7x7bpsqeq0sFcbofL8z00nFrhTeUF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 02:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d7:bd:5b:b1:2d:8a:0c:8d:43:a3:f6:7d:e0:5f:6a:ef:f3:a9:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Apr 19 17:26:42 2026 GMT Not After : Apr 23 02:39:42 2026 GMT Subject: CN=E38A12239D199BFE8A0D84F5D43DC86CCC620406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2a:7a:5b:57:71:38:c4:c5:9a:6f:8f:eb:64: 59:3d:bc:08:d0:4c:95:9e:4d:d1:0e:d3:fe:5f:e7: 6f:aa:37:e9:22:8a:8e:07:8c:4f:14:72:45:4b:7e: a2:75:44:be:96:24:d1:36:83:aa:79:82:be:ff:75: c1:ef:a5:2a:35:ce:e3:35:13:cc:89:5c:50:29:d7: 16:8b:e1:2a:47:4d:b1:73:5e:84:b3:e1:74:4f:f2: 66:75:81:37:dc:2c:cd:1b:2f:e3:17:53:14:70:d5: 5c:b1:5c:25:ef:07:00:b3:2f:c1:35:1e:89:8d:a7: 43:65:8b:42:a6:2a:2c:be:0f:d9:63:e0:8c:fe:9c: 55:42:73:2a:8a:b4:6b:8f:9f:aa:1a:2b:2e:26:98: d4:8c:50:28:c1:be:10:37:c5:f0:f4:26:10:3d:6d: 09:2f:f6:d2:e8:a9:eb:fb:b8:11:53:bf:c8:25:5a: d2:f0:01:e3:25:f8:e4:0e:86:15:b7:04:dd:69:97: b4:54:ad:0c:7f:79:11:19:24:ea:1c:f1:1e:54:c3: a9:c1:19:0a:4b:15:4d:b4:b8:ad:3e:9e:e9:03:85: a4:56:5e:11:e3:72:f8:16:3e:a0:65:c9:52:a2:8f: 81:73:ef:a4:24:de:3d:ac:91:24:07:6c:17:bc:17: d3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8A:12:23:9D:19:9B:FE:8A:0D:84:F5:D4:3D:C8:6C:CC:62:04:06 X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a7:c6:69:a8:50:79:21:41:d0:a4:f9:02:8c:7d:99:58:4c: 03:fd:d1:25:d9:05:2d:b9:8b:c2:b7:89:7f:d1:59:c2:5a:3a: d9:76:6e:52:b9:00:85:40:ae:43:21:9b:e1:41:b0:a7:fa:a8: 38:fc:11:2b:fd:2f:d1:c7:0b:89:c9:66:66:e4:03:8f:bb:f2: 6e:b0:90:0c:f1:94:51:fa:87:0e:98:17:c5:d3:68:31:6d:11: 08:22:3b:ac:44:71:60:12:16:f4:8a:89:da:07:b3:ce:f0:8a: 69:a3:bd:28:c8:a4:12:f0:34:7b:64:75:96:a8:cf:4f:e2:c2: 00:b5:5b:03:8d:92:92:37:83:f7:69:ac:aa:14:ae:bd:c0:19: 20:c2:2a:3a:cc:fe:9f:59:e7:20:c2:0a:23:1e:c7:c8:81:d7: 83:59:0a:af:ed:6b:46:36:92:41:f6:ab:88:39:60:d0:62:48: a6:08:84:02:73:93:49:5d:bd:f1:3d:b3:97:af:45:9e:4f:73: b9:f2:1b:d0:85:9a:08:88:93:62:73:e2:23:74:7e:b7:53:7e: bb:5f:5a:1e:5c:9e:dc:52:3d:4d:16:b8:b0:eb:9e:98:9f:d2: ca:36:20:a0:74:a1:c5:81:14:e8:ca:8f:11:86:b3:c5:85:0b: 14:56:f7:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTte9W7EtigyNQ6P2feBfau/zqccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNjA0MTkxNzI2NDJaFw0yNjA0MjMwMjM5NDJaMDMxMTAvBgNV BAMTKEUzOEExMjIzOUQxOTlCRkU4QTBEODRGNUQ0M0RDODZDQ0M2MjA0MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4KnpbV3E4xMWab4/rZFk9vAjQ TJWeTdEO0/5f52+qN+kiio4HjE8UckVLfqJ1RL6WJNE2g6p5gr7/dcHvpSo1zuM1 E8yJXFAp1xaL4SpHTbFzXoSz4XRP8mZ1gTfcLM0bL+MXUxRw1VyxXCXvBwCzL8E1 HomNp0Nli0KmKiy+D9lj4Iz+nFVCcyqKtGuPn6oaKy4mmNSMUCjBvhA3xfD0JhA9 bQkv9tLoqev7uBFTv8glWtLwAeMl+OQOhhW3BN1pl7RUrQx/eREZJOoc8R5Uw6nB GQpLFU20uK0+nukDhaRWXhHjcvgWPqBlyVKij4Fz76Qk3j2skSQHbBe8F9MVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU44oSI50Zm/6KDYT11D3IbMxiBAYwHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6nxmmoUHkhQdCk+QKMfZlYTAP90SXZBS25 i8K3iX/RWcJaOtl2blK5AIVArkMhm+FBsKf6qDj8ESv9L9HHC4nJZmbkA4+78m6w kAzxlFH6hw6YF8XTaDFtEQgiO6xEcWASFvSKidoHs87wimmjvSjIpBLwNHtkdZao z0/iwgC1WwONkpI3g/dprKoUrr3AGSDCKjrM/p9Z5yDCCiMex8iB14NZCq/ta0Y2 kkH2q4g5YNBiSKYIhAJzk0ldvfE9s5evRZ5Pc7nyG9CFmgiIk2Jz4iN0frdTfrtf Wh5cntxSPU0WuLDrnpif0so2IKB0ocWBFOjKjxGGs8WFCxRW9/0= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:46 2026 by rpki-client