$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: 6IkTEKwNeYJFq6+dSsSwnAVE7f65plDGkbNhApE1KNY= Subject key identifier: AD:DA:9E:4D:44:EC:F3:87:61:63:66:F6:47:6D:E8:A7:AC:39:99:29 Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 50E9A8CB227919653C75F4A94036CC55E69B89B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: 014C Signing time: Mon 20 Apr 2026 18:30:45 +0000 Manifest this update: Mon 20 Apr 2026 18:25:45 +0000 Manifest next update: Fri 24 Apr 2026 02:07:45 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: KSBgNpXmPTvQOPXZ0qlfipxqMnfev01WLXwchdQNZAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e9:a8:cb:22:79:19:65:3c:75:f4:a9:40:36:cc:55:e6:9b:89:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: Apr 20 18:25:45 2026 GMT Not After : Apr 24 02:07:45 2026 GMT Subject: CN=ADDA9E4D44ECF387616366F6476DE8A7AC399929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:d3:15:f1:b0:e1:1b:f8:e8:e5:5b:35:d5: 76:14:4a:4c:93:22:86:3b:57:41:26:03:dd:68:25: 40:f4:78:4c:b4:a0:d6:4b:00:3b:44:7b:e4:eb:03: 36:4c:32:9a:ad:08:89:7c:eb:3d:80:0a:73:4b:4f: b0:2e:1e:67:f4:c4:32:31:9e:fc:23:42:a0:cf:d8: c5:0a:d6:5b:20:ff:47:f5:3b:6e:03:0c:c6:25:2b: 74:7b:4a:5a:97:cd:37:42:83:00:8e:57:84:f7:be: 21:00:bd:16:60:5b:3d:b7:2a:95:72:83:64:d2:c0: 04:f0:b1:ef:c0:c8:1c:ee:19:b1:c7:d2:b5:45:9b: 4d:da:71:fa:89:43:9c:46:3d:a3:57:12:5d:00:b6: 96:95:e7:ff:98:e9:25:1b:52:04:c2:6d:bb:06:2a: 37:8d:37:c2:c2:1c:3b:d2:82:b0:b2:9b:00:9c:89: fd:78:f5:30:46:a5:c7:06:13:a5:e3:75:39:1c:da: 0b:c3:06:bd:96:af:15:83:15:79:35:2f:27:78:00: 47:f6:32:cd:d7:e5:fd:e9:d7:f2:2a:c0:02:93:87: b2:db:5c:a2:7b:21:96:1f:a1:ed:4e:8d:1f:88:eb: 60:76:45:8a:9e:66:2e:e1:fb:84:5a:12:a1:2d:0c: c8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DA:9E:4D:44:EC:F3:87:61:63:66:F6:47:6D:E8:A7:AC:39:99:29 X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1d:42:7f:14:aa:62:ac:89:1f:8a:c9:ff:91:64:e1:9c:fb: 4a:c5:d8:23:4d:92:49:d8:44:82:06:ba:59:7e:ad:98:00:17: 7c:2a:3d:75:34:1a:e6:61:0e:0a:46:a8:0e:ae:3a:c0:33:e4: f6:6c:06:c1:9a:de:87:ad:97:61:df:56:fc:d2:60:a8:0d:af: 62:d1:26:2b:e5:97:ab:73:2a:2d:95:0d:8c:c8:95:cd:6d:b1: 56:e4:e3:62:fa:a3:77:e8:b9:5e:af:13:fa:d3:e5:c3:fc:46: bd:7c:38:dc:f4:8d:ab:dc:83:32:3e:61:ad:39:c1:a6:3c:b5: f4:30:21:47:3e:d0:57:23:77:f8:fa:c6:a1:03:0e:24:4f:b4: 98:af:6e:22:6e:ac:cc:92:8b:e1:7e:2a:ea:2c:fa:bc:2c:54: 54:27:55:76:49:47:b9:75:1e:a9:8c:1a:49:66:a9:71:71:a7: bb:27:10:76:b5:8c:c7:24:24:5c:35:7e:2d:d9:b6:70:56:60: 63:cd:aa:6c:f0:8f:8f:e2:b7:bd:52:cc:7c:93:1d:ae:2b:3b: 6e:ef:6a:7d:26:21:72:b0:df:50:d1:e9:30:66:c6:73:64:a0: 5e:99:53:22:99:b0:f5:d6:71:5e:e8:94:57:67:e9:fa:44:2b: 0d:27:84:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUOmoyyJ5GWU8dfSpQDbMVeabibUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVC MDQ0ODdGQTAeFw0yNjA0MjAxODI1NDVaFw0yNjA0MjQwMjA3NDVaMDMxMTAvBgNV BAMTKEFEREE5RTRENDRFQ0YzODc2MTYzNjZGNjQ3NkRFOEE3QUMzOTk5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4NMV8bDhG/jo5Vs11XYUSkyT IoY7V0EmA91oJUD0eEy0oNZLADtEe+TrAzZMMpqtCIl86z2ACnNLT7AuHmf0xDIx nvwjQqDP2MUK1lsg/0f1O24DDMYlK3R7SlqXzTdCgwCOV4T3viEAvRZgWz23KpVy g2TSwATwse/AyBzuGbHH0rVFm03acfqJQ5xGPaNXEl0AtpaV5/+Y6SUbUgTCbbsG KjeNN8LCHDvSgrCymwCcif149TBGpccGE6XjdTkc2gvDBr2WrxWDFXk1Lyd4AEf2 Ms3X5f3p1/IqwAKTh7LbXKJ7IZYfoe1OjR+I62B2RYqeZi7h+4RaEqEtDMjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrdqeTUTs84dhY2b2R23op6w5mSkwHwYDVR0j BBgwFoAUqpe5WScSkfvhQkkbgQY61bBEh/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3 MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4N0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVCMDQ0 ODdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNB RDVCMDQ0ODdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4dQn8UqmKsiR+Kyf+RZOGc+0rF2CNNkknY RIIGull+rZgAF3wqPXU0GuZhDgpGqA6uOsAz5PZsBsGa3oetl2HfVvzSYKgNr2LR Jivll6tzKi2VDYzIlc1tsVbk42L6o3fouV6vE/rT5cP8Rr18ONz0javcgzI+Ya05 waY8tfQwIUc+0Fcjd/j6xqEDDiRPtJivbiJurMySi+F+Kuos+rwsVFQnVXZJR7l1 HqmMGklmqXFxp7snEHa1jMckJFw1fi3ZtnBWYGPNqmzwj4/it71SzHyTHa4rO27v an0mIXKw31DR6TBmxnNkoF6ZUyKZsPXWcV7olFdn6fpEKw0nhIk= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:21 2026 by rpki-client