$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: VONYB4kK0aukKg52Zt9R5aK8mYdnaHm+pVXuf3NgJOk= Subject key identifier: CC:5D:9A:4B:90:9D:BF:4C:FF:E8:B1:C3:D1:1C:3A:78:88:A7:16:C7 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 5E19CCD126E2584398D64D23202C53A8EE68D1E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 01D0 Signing time: Thu 26 Mar 2026 10:11:53 +0000 Manifest this update: Thu 26 Mar 2026 10:06:53 +0000 Manifest next update: Sun 29 Mar 2026 17:13:53 +0000 Files and hashes: 1: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: 8QP0ny1BafhP87cEV2vXvc0K+sJXt7/6akwyG6gtnuc=) 2: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: pM/OlIKZZMgTcsTnSYvx9/TfYnjFC/P/agesyapeNc8=) 3: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: RJdEk/EfkFE3gxHKaGBMKTJJZhudzX8WtSrG7X046vA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 17:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:19:cc:d1:26:e2:58:43:98:d6:4d:23:20:2c:53:a8:ee:68:d1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Mar 26 10:06:53 2026 GMT Not After : Mar 29 17:13:53 2026 GMT Subject: CN=CC5D9A4B909DBF4CFFE8B1C3D11C3A7888A716C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:47:b4:12:57:77:cf:b6:2e:b5:d9:3e:84:d4: 5e:11:01:6a:bd:b1:95:d1:0d:b7:49:44:a0:6a:e8: 03:52:63:4d:af:7c:90:28:09:9b:a4:e0:0c:3e:54: a0:1a:c9:12:fe:4b:93:fd:ec:bc:15:20:86:4a:c3: 7e:04:ad:39:16:dd:53:26:c9:1f:c0:5b:bf:79:50: 7f:1c:85:81:ed:cd:6e:41:31:c5:32:30:b2:ba:f3: ea:9c:b6:36:c9:e4:cd:48:e5:a8:97:33:55:7b:d2: 81:06:0e:57:c1:6f:84:07:76:ce:e0:cd:36:fb:3e: 87:ae:1a:2a:c5:75:53:c8:63:da:7d:46:8b:65:17: 26:b6:1d:f9:fc:ec:09:c7:a8:71:89:da:29:b7:33: 78:14:68:15:77:fd:01:a7:fb:30:2a:8a:1e:2a:06: cf:27:8b:1b:76:64:72:e2:da:20:53:35:35:34:df: 75:64:0f:0e:07:fc:ba:a6:80:66:53:91:f7:8d:e9: 48:1d:dd:5b:6e:b9:76:cb:f8:53:e8:40:04:d4:e3: fd:5c:63:29:f2:fb:89:8b:69:98:f9:bb:bb:c4:88: 29:6d:ca:e7:a2:0d:79:48:23:89:33:64:01:5a:23: 30:6c:2b:27:73:59:8e:bb:21:34:37:49:51:4e:e1: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5D:9A:4B:90:9D:BF:4C:FF:E8:B1:C3:D1:1C:3A:78:88:A7:16:C7 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d4:ca:ac:c4:8d:0d:a3:a5:5c:c6:9f:af:84:e0:4d:0e:95: 5b:99:8b:e7:68:fe:ca:4e:73:16:ca:97:3f:42:aa:b3:f3:18: 9c:bf:05:c3:93:6a:5e:e2:13:41:a4:9c:90:d1:8e:e0:6f:ea: e4:b2:c1:7b:74:8d:8c:8c:27:52:8a:16:07:2d:ca:21:03:48: 3c:b9:da:d6:e0:71:47:dd:d8:ef:1b:ee:1a:d5:fd:fe:0b:d0: dd:dc:d0:24:36:b6:07:c2:8d:41:69:46:85:88:57:4c:ed:55: 1d:17:b1:3c:29:67:d5:f1:f4:c3:7f:be:7a:cb:97:c3:4d:14: 90:b6:b2:2e:27:c7:39:0f:7e:26:ab:de:5a:09:8e:d0:09:f8: 7d:00:45:6f:79:e7:f3:6f:b7:78:40:5a:ef:c8:d6:de:02:4b: f1:4b:47:7d:23:fc:2a:f7:bc:4e:1c:fb:0d:9f:e5:55:35:eb: ce:c1:33:29:86:7f:bd:8a:53:94:ea:ec:9f:f5:90:f8:eb:94: c9:3b:68:0e:b4:7c:cc:43:1c:7f:35:1c:af:21:6c:42:a8:4b: 14:35:f5:10:fa:02:b8:c1:47:1f:ba:dd:58:a0:5e:bb:ef:2f: 81:37:a2:6e:dd:b3:ba:4e:2d:89:70:13:98:d6:73:e0:b9:a1: c8:19:67:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXhnM0SbiWEOY1k0jICxTqO5o0eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNjAzMjYxMDA2NTNaFw0yNjAzMjkxNzEzNTNaMDMxMTAvBgNV BAMTKENDNUQ5QTRCOTA5REJGNENGRkU4QjFDM0QxMUMzQTc4ODhBNzE2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaR7QSV3fPti612T6E1F4RAWq9 sZXRDbdJRKBq6ANSY02vfJAoCZuk4Aw+VKAayRL+S5P97LwVIIZKw34ErTkW3VMm yR/AW795UH8chYHtzW5BMcUyMLK68+qctjbJ5M1I5aiXM1V70oEGDlfBb4QHds7g zTb7PoeuGirFdVPIY9p9RotlFya2Hfn87AnHqHGJ2im3M3gUaBV3/QGn+zAqih4q Bs8nixt2ZHLi2iBTNTU033VkDw4H/LqmgGZTkfeN6Ugd3VtuuXbL+FPoQATU4/1c Yyny+4mLaZj5u7vEiCltyueiDXlII4kzZAFaIzBsKydzWY67ITQ3SVFO4aJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzF2aS5Cdv0z/6LHD0Rw6eIinFscwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzUyqzEjQ2jpVzGn6+E4E0OlVuZi+do/spO cxbKlz9CqrPzGJy/BcOTal7iE0GknJDRjuBv6uSywXt0jYyMJ1KKFgctyiEDSDy5 2tbgcUfd2O8b7hrV/f4L0N3c0CQ2tgfCjUFpRoWIV0ztVR0XsTwpZ9Xx9MN/vnrL l8NNFJC2si4nxzkPfiar3loJjtAJ+H0ARW955/Nvt3hAWu/I1t4CS/FLR30j/Cr3 vE4c+w2f5VU1687BMymGf72KU5Tq7J/1kPjrlMk7aA60fMxDHH81HK8hbEKoSxQ1 9RD6ArjBRx+63VigXrvvL4E3om7ds7pOLYlwE5jWc+C5ocgZZyA= -----END CERTIFICATE-----Generated at Thu Mar 26 18:45:12 2026 by rpki-client