$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: +Qm6j4jjlHi9fiO9PQHKFK8Fdtb5w9p4apydkeD4olE= Subject key identifier: CC:C6:80:55:11:92:C5:C2:15:2B:4F:67:5F:5B:C6:5A:91:F9:4A:35 Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 68548458CAA762DF5CFAE804224010FDD1E2C376 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: F5 Signing time: Thu 26 Mar 2026 06:21:42 +0000 Manifest this update: Thu 26 Mar 2026 06:16:42 +0000 Manifest next update: Sun 29 Mar 2026 15:26:42 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: KBNbxQjOLfhYwGB4Wp4pMpbXxYHR8QezEvyeUuNBjy8=) 2: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: NQ2wJvy3jwS5qomPV+1BgoOBirtRTH4BaLpiGFYwwHU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:54:84:58:ca:a7:62:df:5c:fa:e8:04:22:40:10:fd:d1:e2:c3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Mar 26 06:16:42 2026 GMT Not After : Mar 29 15:26:42 2026 GMT Subject: CN=CCC680551192C5C2152B4F675F5BC65A91F94A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:42:16:b0:e4:e8:a3:5c:f0:94:16:5e:fd: e0:36:7f:37:df:29:9b:39:62:79:3c:2f:cc:34:d0: 7c:ee:c5:95:9f:6e:76:c7:46:c7:f9:fa:6c:d5:ec: ad:58:d5:24:4d:38:66:30:38:de:12:42:54:46:bf: 95:69:0c:7e:b0:41:80:8a:13:7a:fa:23:25:cc:cc: 35:0a:8d:67:f6:8a:0a:ef:da:29:e9:9f:57:fe:3f: 91:fd:61:99:27:e3:4f:58:7c:38:38:2a:3f:12:a0: 59:2c:0d:b0:3c:dc:90:35:27:9f:29:89:e3:fe:e6: cd:5c:fc:a5:1d:be:2f:99:31:2c:c7:36:76:ef:34: d6:68:7f:6c:55:b2:89:5c:89:b2:d7:ab:01:51:f1: 32:56:e7:26:c8:2f:3b:c1:f9:97:17:c9:4e:49:0d: 0d:3f:f1:29:b9:40:dd:61:8c:b0:48:88:99:e7:58: 01:73:65:82:da:f7:e4:3d:af:f5:55:ea:bd:92:58: c1:4c:41:cd:ff:cb:21:c7:39:42:be:cd:be:88:d6: 8a:53:55:25:05:7e:72:a2:63:16:7b:ea:ea:23:e5: 08:96:d2:fe:f9:f3:8c:f1:9c:c3:f5:39:b7:8f:52: 47:b0:6a:20:31:98:eb:57:20:22:c2:ff:5d:40:2e: a9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C6:80:55:11:92:C5:C2:15:2B:4F:67:5F:5B:C6:5A:91:F9:4A:35 X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:86:79:80:bd:67:33:f9:cb:7a:92:a0:bf:14:71:82:f1:44: 79:9c:dd:ed:34:6a:01:28:50:7a:4a:ee:e0:57:e1:09:aa:76: ea:2f:99:92:52:29:9b:fa:5d:33:b3:ba:eb:83:f4:2d:bc:7d: 90:af:89:a1:fb:5a:5d:92:ea:3d:58:c4:ac:02:43:0e:25:bc: 4f:5d:e2:3c:11:ff:b6:28:c2:9b:66:e0:f7:7f:bb:88:29:98: 09:08:b4:ca:52:09:ee:76:f8:31:ef:2c:61:7c:11:78:65:6b: c0:37:3e:a0:7d:22:11:e3:c4:9b:97:22:f6:46:42:a2:90:e9: d8:74:25:b3:2e:51:e3:33:9b:13:90:36:84:46:20:d3:91:60: 15:ed:a5:1d:4a:ad:d0:28:3e:a5:2c:f6:72:f5:0e:a8:77:be: 3c:42:51:8a:e6:46:e7:b8:86:94:42:d1:da:13:3e:1b:61:7f: b0:51:0b:a2:78:7a:4e:43:06:30:b5:ce:c7:8f:5c:31:66:6e: 2a:e7:cf:cd:d7:4b:18:2c:af:e8:1e:25:e7:e8:6b:ca:53:73: 3d:f3:c1:6e:ce:95:59:ed:7b:8b:91:67:13:f3:51:79:d1:5b: e6:d7:96:31:98:96:53:5f:7e:fa:52:ff:b6:69:6e:8b:99:47: 86:83:a2:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFSEWMqnYt9c+ugEIkAQ/dHiw3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNjAzMjYwNjE2NDJaFw0yNjAzMjkxNTI2NDJaMDMxMTAvBgNV BAMTKENDQzY4MDU1MTE5MkM1QzIxNTJCNEY2NzVGNUJDNjVBOTFGOTRBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERUIWsOToo1zwlBZe/eA2fzff KZs5Ynk8L8w00HzuxZWfbnbHRsf5+mzV7K1Y1SRNOGYwON4SQlRGv5VpDH6wQYCK E3r6IyXMzDUKjWf2igrv2inpn1f+P5H9YZkn409YfDg4Kj8SoFksDbA83JA1J58p ieP+5s1c/KUdvi+ZMSzHNnbvNNZof2xVsolcibLXqwFR8TJW5ybILzvB+ZcXyU5J DQ0/8Sm5QN1hjLBIiJnnWAFzZYLa9+Q9r/VV6r2SWMFMQc3/yyHHOUK+zb6I1opT VSUFfnKiYxZ76uoj5QiW0v7584zxnMP1ObePUkewaiAxmOtXICLC/11ALqnlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzMaAVRGSxcIVK09nX1vGWpH5SjUwHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSGeYC9ZzP5y3qSoL8UcYLxRHmc3e00agEo UHpK7uBX4QmqduovmZJSKZv6XTOzuuuD9C28fZCviaH7Wl2S6j1YxKwCQw4lvE9d 4jwR/7Yowptm4Pd/u4gpmAkItMpSCe52+DHvLGF8EXhla8A3PqB9IhHjxJuXIvZG QqKQ6dh0JbMuUeMzmxOQNoRGINORYBXtpR1KrdAoPqUs9nL1Dqh3vjxCUYrmRue4 hpRC0doTPhthf7BRC6J4ek5DBjC1zsePXDFmbirnz83XSxgsr+geJefoa8pTcz3z wW7OlVnte4uRZxPzUXnRW+bXljGYllNffvpS/7ZpbouZR4aDomo= -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:10 2026 by rpki-client