$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: aaQYyOrSXI+VGrLY1on/p+4tOWuzQlaH50ier8YBNo4= Subject key identifier: D7:81:28:89:1B:85:A7:01:D5:30:34:68:28:D2:56:66:E1:88:41:E4 Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 373B0BB861729ADE7D81410C91E2605C9F0F64E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: EC Signing time: Thu 05 Mar 2026 23:01:43 +0000 Manifest this update: Thu 05 Mar 2026 22:56:43 +0000 Manifest next update: Mon 09 Mar 2026 08:15:43 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: KBNbxQjOLfhYwGB4Wp4pMpbXxYHR8QezEvyeUuNBjy8=) 2: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: me6DHmmWjwBb/i+7R2MQSo4dnn6pmLzW6P4qIs8DVB4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3b:0b:b8:61:72:9a:de:7d:81:41:0c:91:e2:60:5c:9f:0f:64:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Mar 5 22:56:43 2026 GMT Not After : Mar 9 08:15:43 2026 GMT Subject: CN=D78128891B85A701D530346828D25666E18841E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:3f:be:b1:42:89:fb:46:cd:25:24:99:36: 07:c7:d8:a0:05:9e:68:88:ab:d1:06:d0:33:bc:fb: 3a:fa:55:7c:dd:3d:a6:82:95:f3:7d:45:01:7c:fa: 91:5c:e7:fc:d3:6a:f6:2e:8c:92:6c:84:99:31:01: d2:ab:b9:78:bd:4a:60:e3:bf:27:f8:14:d0:b4:66: 67:d9:8f:21:eb:be:51:f1:92:0b:f5:f3:db:b8:8d: 47:b7:00:24:08:cf:cc:5f:11:fd:d6:ff:ca:8a:39: a2:58:b6:67:ef:07:f4:53:fa:04:9e:c5:58:c9:0a: 34:9d:3f:eb:58:50:5b:69:85:a8:2f:73:c4:dd:b1: 69:9b:15:05:d2:9b:3b:8f:ac:9f:67:ea:11:c3:bc: 13:3f:bd:3b:9e:77:24:d4:64:f5:8a:69:af:5f:59: 1e:5e:66:5d:d8:18:d5:8d:9a:76:e2:24:47:aa:3a: 9b:c2:86:20:22:c7:eb:5f:7d:f8:68:0c:02:e1:a6: 75:de:7e:ec:e3:93:36:f3:51:f4:a9:89:f6:8a:7f: 70:89:c0:ce:84:0e:25:34:44:b3:86:07:cd:aa:ad: 9d:07:3b:0d:68:e9:e7:02:a0:c4:90:30:54:19:ce: 9e:c3:76:bd:2d:42:67:f8:fe:ee:0d:44:dd:a4:81: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:81:28:89:1B:85:A7:01:D5:30:34:68:28:D2:56:66:E1:88:41:E4 X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0e:e6:cd:82:b5:44:a4:d7:98:d5:d5:af:1d:46:1c:af:cd: 80:aa:45:a6:80:7f:06:1c:10:d0:6e:f1:ab:33:c7:35:69:35: 06:68:26:6a:ac:b7:e0:8f:e4:40:45:d0:2e:99:73:cf:99:7a: a1:b4:9f:c4:01:86:0b:35:15:7f:42:c8:96:f8:f4:32:7f:25: 8d:89:0b:9e:ec:c5:9f:dd:69:78:62:e7:45:93:75:fe:a2:f0: 9a:e8:34:56:3f:f9:79:8c:c4:a3:11:54:ac:d0:dd:dc:42:31: 8e:f8:e5:2c:10:92:ac:62:8b:1d:1a:0b:49:01:b0:99:c7:d3: a5:58:b6:fc:55:ba:31:84:c5:80:56:79:46:fe:ae:0a:3b:f7: 0f:63:fd:44:28:dc:4a:4e:62:ad:c8:84:2c:39:03:46:5a:ca: a3:25:51:de:a5:41:1a:b6:0d:70:ab:09:50:12:3f:5e:bf:0d: 71:6e:8f:64:0b:ae:d1:b3:26:1a:07:18:04:1d:d4:f3:6e:7e: da:af:f0:8e:df:61:43:bc:bc:f1:e1:11:b8:51:14:76:41:ee: ca:98:70:e1:bf:ef:87:3a:66:18:31:c2:63:36:39:b4:a2:b2: fc:bd:38:c4:89:39:30:21:c3:71:d1:69:c9:b3:a7:5e:6a:b8: 54:96:4f:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNzsLuGFymt59gUEMkeJgXJ8PZOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNjAzMDUyMjU2NDNaFw0yNjAzMDkwODE1NDNaMDMxMTAvBgNV BAMTKEQ3ODEyODg5MUI4NUE3MDFENTMwMzQ2ODI4RDI1NjY2RTE4ODQxRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zj++sUKJ+0bNJSSZNgfH2KAF nmiIq9EG0DO8+zr6VXzdPaaClfN9RQF8+pFc5/zTavYujJJshJkxAdKruXi9SmDj vyf4FNC0ZmfZjyHrvlHxkgv189u4jUe3ACQIz8xfEf3W/8qKOaJYtmfvB/RT+gSe xVjJCjSdP+tYUFtphagvc8TdsWmbFQXSmzuPrJ9n6hHDvBM/vTuedyTUZPWKaa9f WR5eZl3YGNWNmnbiJEeqOpvChiAix+tfffhoDALhpnXefuzjkzbzUfSpifaKf3CJ wM6EDiU0RLOGB82qrZ0HOw1o6ecCoMSQMFQZzp7Ddr0tQmf4/u4NRN2kgY3bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU14EoiRuFpwHVMDRoKNJWZuGIQeQwHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4O5s2CtUSk15jV1a8dRhyvzYCqRaaAfwYc ENBu8aszxzVpNQZoJmqst+CP5EBF0C6Zc8+ZeqG0n8QBhgs1FX9CyJb49DJ/JY2J C57sxZ/daXhi50WTdf6i8JroNFY/+XmMxKMRVKzQ3dxCMY745SwQkqxiix0aC0kB sJnH06VYtvxVujGExYBWeUb+rgo79w9j/UQo3EpOYq3IhCw5A0ZayqMlUd6lQRq2 DXCrCVASP16/DXFuj2QLrtGzJhoHGAQd1PNuftqv8I7fYUO8vPHhEbhRFHZB7sqY cOG/74c6ZhgxwmM2ObSisvy9OMSJOTAhw3HRacmzp15quFSWT5k= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:04 2026 by rpki-client