$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: E29hRnM1QKXAH4jV1bEcCX6ByPTd4p+LJRSkq+fl5ZA= Subject key identifier: 2B:18:7B:98:B9:0F:B1:7E:8A:76:79:19:DB:EF:C0:D2:65:6D:50:42 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 27E0337F2FF8BCA986818EA0883C87EBD9D4BC42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 01DA Signing time: Sat 18 Apr 2026 17:11:52 +0000 Manifest this update: Sat 18 Apr 2026 17:06:52 +0000 Manifest next update: Tue 21 Apr 2026 23:51:52 +0000 Files and hashes: 1: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: WtxajiaOA8ojXHtF2uQIBDb7iJ7LK/qoTqle+xvvrQg=) 2: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: RJdEk/EfkFE3gxHKaGBMKTJJZhudzX8WtSrG7X046vA=) 3: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: 8QP0ny1BafhP87cEV2vXvc0K+sJXt7/6akwyG6gtnuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 23:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e0:33:7f:2f:f8:bc:a9:86:81:8e:a0:88:3c:87:eb:d9:d4:bc:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Apr 18 17:06:52 2026 GMT Not After : Apr 21 23:51:52 2026 GMT Subject: CN=2B187B98B90FB17E8A767919DBEFC0D2656D5042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0e:e3:70:0d:f7:e9:62:bc:b8:3c:56:73:d9: 8d:3c:6b:34:77:48:a8:1a:be:29:d9:c8:0d:c4:82: 8c:ee:6e:d3:c0:33:5b:84:e8:f4:6f:25:4a:a2:83: 2b:f3:51:bb:3a:c1:fe:49:cf:53:33:72:0f:d4:6a: a8:9e:79:7f:21:cf:f0:57:9a:94:1e:af:53:3c:3a: a4:77:c5:8c:46:4b:9e:de:e0:d0:f2:ee:0b:b8:17: 7a:b6:17:4d:6e:2a:d8:df:57:30:8d:99:e7:c5:97: 85:9e:30:b3:f4:7b:4f:6d:c9:73:dd:0b:0c:39:94: 85:e3:df:4b:df:31:2c:bc:95:37:41:cb:a7:39:ec: 0c:13:48:10:d7:95:61:e6:79:47:44:11:e4:47:a6: 65:d5:8d:df:3f:08:20:c9:5f:74:5e:70:fb:32:fc: ce:da:82:54:be:af:77:d7:83:44:8d:23:97:ee:3c: 2b:18:db:1c:02:f5:11:cf:ea:c1:28:77:63:4b:5a: af:8c:1c:4f:e2:cd:7f:ca:52:9c:e4:8a:31:57:74: 92:1e:35:c7:18:45:35:f7:d3:fa:58:95:f0:61:e5: 2f:b6:c4:e7:0f:de:c8:fb:44:0f:d2:ac:49:19:b2: 76:2c:9a:8e:fb:c1:db:85:21:70:fa:48:f6:62:f9: 16:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:18:7B:98:B9:0F:B1:7E:8A:76:79:19:DB:EF:C0:D2:65:6D:50:42 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bf:f6:ea:64:58:85:8e:42:1a:72:be:25:03:c4:20:72:b8: ca:db:17:ab:ca:94:ff:55:84:fb:c4:91:3c:18:15:08:12:99: cc:e1:38:d3:a2:7c:07:dc:4f:d4:d4:20:7f:64:ee:e9:2c:ae: cc:23:ba:c2:c4:cc:2d:bd:53:c2:06:40:8a:79:b8:6a:64:a2: e9:3c:0b:8d:bb:c8:2e:d8:07:f9:9a:d7:a8:a9:b9:cb:46:f8: 0c:b6:89:7f:38:75:4b:24:7f:95:ce:97:28:e2:26:e7:bd:cd: c2:7d:2f:9e:83:96:07:b9:65:cb:b9:93:cd:b5:7d:27:16:5e: 23:7b:06:51:f9:2e:1d:38:36:a7:a2:7a:76:10:4f:05:16:48: d9:f1:f2:8d:46:64:17:d2:27:4b:d6:da:05:57:3c:21:24:b2: ba:f1:f7:f3:ea:48:a5:66:d6:46:ca:a3:0b:65:18:67:c7:ca: 0e:81:0c:4e:88:4c:53:12:d2:3f:0f:2e:65:be:4d:38:36:93: f2:85:5e:9d:15:f3:74:ff:7e:2f:5b:0b:f7:05:f7:7e:59:58: 17:1a:95:60:6a:fd:2b:41:71:0c:d5:91:34:c2:ba:98:c2:69: 97:51:bc:d4:01:13:0a:72:cf:ae:86:76:2e:74:5b:2d:77:63: b8:99:d9:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+Azfy/4vKmGgY6giDyH69nUvEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNjA0MTgxNzA2NTJaFw0yNjA0MjEyMzUxNTJaMDMxMTAvBgNV BAMTKDJCMTg3Qjk4QjkwRkIxN0U4QTc2NzkxOURCRUZDMEQyNjU2RDUwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVDuNwDffpYry4PFZz2Y08azR3 SKgavinZyA3EgozubtPAM1uE6PRvJUqigyvzUbs6wf5Jz1Mzcg/UaqieeX8hz/BX mpQer1M8OqR3xYxGS57e4NDy7gu4F3q2F01uKtjfVzCNmefFl4WeMLP0e09tyXPd Cww5lIXj30vfMSy8lTdBy6c57AwTSBDXlWHmeUdEEeRHpmXVjd8/CCDJX3RecPsy /M7aglS+r3fXg0SNI5fuPCsY2xwC9RHP6sEod2NLWq+MHE/izX/KUpzkijFXdJIe NccYRTX30/pYlfBh5S+2xOcP3sj7RA/SrEkZsnYsmo77wduFIXD6SPZi+RaNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKxh7mLkPsX6KdnkZ2+/A0mVtUEIwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2/9upkWIWOQhpyviUDxCByuMrbF6vKlP9V hPvEkTwYFQgSmczhONOifAfcT9TUIH9k7uksrswjusLEzC29U8IGQIp5uGpkouk8 C427yC7YB/ma16ipuctG+Ay2iX84dUskf5XOlyjiJue9zcJ9L56Dlge5Zcu5k821 fScWXiN7BlH5Lh04NqeienYQTwUWSNnx8o1GZBfSJ0vW2gVXPCEksrrx9/PqSKVm 1kbKowtlGGfHyg6BDE6ITFMS0j8PLmW+TTg2k/KFXp0V83T/fi9bC/cF935ZWBca lWBq/StBcQzVkTTCupjCaZdRvNQBEwpyz66Gdi50Wy13Y7iZ2eA= -----END CERTIFICATE-----Generated at Mon Apr 20 23:33:16 2026 by rpki-client