$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: XVgNtaAD+67dWUp2DN92Kyr6y7LXt+ZpQltXj98Wang= Subject key identifier: C5:7A:89:F1:0C:6D:2E:D0:0D:C2:2A:BF:76:16:B5:59:A7:84:EC:51 Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 08925CE29B6DEF89B40987861582FC50F14A6373 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: 0138 Signing time: Sat 07 Mar 2026 06:00:44 +0000 Manifest this update: Sat 07 Mar 2026 05:55:44 +0000 Manifest next update: Tue 10 Mar 2026 15:23:44 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: gJ7oOuDK+j8kRLKJPZzbgnTe3y7LdV0KuJF0hLgSRQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:92:5c:e2:9b:6d:ef:89:b4:09:87:86:15:82:fc:50:f1:4a:63:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: Mar 7 05:55:44 2026 GMT Not After : Mar 10 15:23:44 2026 GMT Subject: CN=C57A89F10C6D2ED00DC22ABF7616B559A784EC51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e4:42:dc:48:bb:6b:43:30:6d:99:58:3f:26: 32:16:47:65:96:bf:ca:19:cf:9e:e3:c3:53:d5:97: 1c:23:13:f6:23:f5:e9:62:df:ab:db:82:aa:a2:f6: dd:38:3a:2a:39:2a:95:09:3f:31:57:81:df:a5:62: b2:48:b3:b9:2c:13:4c:90:ff:cd:cf:6d:b7:48:c8: f7:3d:75:d3:72:8f:45:8f:b9:6b:de:d8:0a:50:45: ee:fd:82:07:32:b7:99:9f:db:f7:1e:a4:63:6c:2a: 9d:be:24:70:1b:b7:69:bb:15:b4:84:0f:cc:71:d9: a3:ae:75:eb:34:a6:5d:9f:c0:a1:30:25:75:e7:b4: 54:11:90:63:fc:02:63:99:3c:d5:53:79:e1:55:aa: 70:2d:36:57:d3:b3:42:81:24:c4:6d:80:d0:3a:5c: 1c:40:e5:e2:a9:e1:c7:d5:e1:8c:de:68:66:7c:eb: be:04:bf:97:11:52:2d:58:74:77:6d:fe:67:20:5c: 39:eb:5a:b2:45:23:41:0b:90:c7:33:13:1b:f9:7c: f4:b5:dd:de:fd:34:ae:fa:15:f7:83:2d:94:bc:db: 84:0f:5b:fa:80:14:05:98:6a:8d:59:35:cd:3f:2b: 42:2e:83:b2:06:ad:d6:29:c3:f0:a3:7f:c5:17:fa: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7A:89:F1:0C:6D:2E:D0:0D:C2:2A:BF:76:16:B5:59:A7:84:EC:51 X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2a:d8:ea:34:3b:db:8c:3c:2a:18:75:be:61:9f:86:1c:11: 21:2e:7c:fb:6a:80:56:4d:d0:9e:75:61:92:91:ea:17:23:bb: f8:6f:c8:80:bc:80:78:62:01:e5:64:99:de:7c:e4:3d:e5:a3: 82:99:48:d0:2f:cc:a8:03:6a:69:96:7c:7e:d1:73:7b:86:1f: 5c:77:06:4a:9c:58:b7:f9:4a:ff:9f:c5:e4:3c:38:e5:c0:39: 14:dc:46:30:c1:f3:99:b2:5e:25:fa:6a:44:83:10:ea:69:9a: b2:36:72:cf:e6:f8:06:ed:c7:4a:d1:be:62:0f:8d:05:52:2d: a3:25:96:ad:da:53:1d:9c:5e:83:fe:94:65:4b:8a:c9:e5:e2: 2a:fd:49:2a:59:0a:46:39:5b:ef:db:8d:31:80:27:2f:9b:f7: db:7d:11:3e:e9:e8:b3:e2:80:d4:70:91:a1:10:c8:9e:cc:71: 63:09:65:f8:71:18:bb:66:99:19:8f:c6:44:e6:44:0a:b1:c1: 38:57:d3:fb:37:0c:de:67:d0:b0:28:82:7a:5e:64:95:50:18: d8:64:ba:5d:82:5a:ce:ec:96:63:55:97:37:8d:28:46:fe:46: 27:a6:87:61:75:bd:55:ad:b3:ab:ad:e3:51:e0:3a:16:a4:1a: f8:3e:99:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJJc4ptt74m0CYeGFYL8UPFKY3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVC MDQ0ODdGQTAeFw0yNjAzMDcwNTU1NDRaFw0yNjAzMTAxNTIzNDRaMDMxMTAvBgNV BAMTKEM1N0E4OUYxMEM2RDJFRDAwREMyMkFCRjc2MTZCNTU5QTc4NEVDNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ5ELcSLtrQzBtmVg/JjIWR2WW v8oZz57jw1PVlxwjE/Yj9eli36vbgqqi9t04Oio5KpUJPzFXgd+lYrJIs7ksE0yQ /83PbbdIyPc9ddNyj0WPuWve2ApQRe79ggcyt5mf2/cepGNsKp2+JHAbt2m7FbSE D8xx2aOudes0pl2fwKEwJXXntFQRkGP8AmOZPNVTeeFVqnAtNlfTs0KBJMRtgNA6 XBxA5eKp4cfV4YzeaGZ8674Ev5cRUi1YdHdt/mcgXDnrWrJFI0ELkMczExv5fPS1 3d79NK76FfeDLZS824QPW/qAFAWYao1ZNc0/K0Iug7IGrdYpw/Cjf8UX+m91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxXqJ8QxtLtANwiq/dha1WaeE7FEwHwYDVR0j BBgwFoAUqpe5WScSkfvhQkkbgQY61bBEh/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3 MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4N0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVCMDQ0 ODdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNB RDVCMDQ0ODdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIq2Oo0O9uMPCoYdb5hn4YcESEufPtqgFZN 0J51YZKR6hcju/hvyIC8gHhiAeVkmd585D3lo4KZSNAvzKgDammWfH7Rc3uGH1x3 BkqcWLf5Sv+fxeQ8OOXAORTcRjDB85myXiX6akSDEOppmrI2cs/m+Abtx0rRvmIP jQVSLaMllq3aUx2cXoP+lGVLisnl4ir9SSpZCkY5W+/bjTGAJy+b99t9ET7p6LPi gNRwkaEQyJ7McWMJZfhxGLtmmRmPxkTmRAqxwThX0/s3DN5n0LAognpeZJVQGNhk ul2CWs7slmNVlzeNKEb+Riemh2F1vVWts6ut41HgOhakGvg+mR8= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:35 2026 by rpki-client