$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: axEzJSTb9v4d5PBOdNwFAlURALEilcRKdC2BeHIPHx4= Subject key identifier: A0:54:9A:BC:A5:1D:CD:FC:89:9E:AC:06:A1:C5:D7:76:30:67:9E:21 Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 3D9AFEB00BC7D424A4F3D60663ED3AE8E4AD9726 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: 01E9 Signing time: Thu 26 Mar 2026 06:31:06 +0000 Manifest this update: Thu 26 Mar 2026 06:26:06 +0000 Manifest next update: Sun 29 Mar 2026 13:56:06 +0000 Files and hashes: 1: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: XpsrFjei0l+09ODvvmQABrLd5RCt8xbB9sqvgbDFDtE=) 2: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: xYRXZE2+p4kI0K7W3QsWcBU9L4JVr4Dbl3oxRGNeLr0=) 3: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: wiYrq6CjqWqPb2SEtdVmOUWu5eaGme6xziKeQlsqJWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9a:fe:b0:0b:c7:d4:24:a4:f3:d6:06:63:ed:3a:e8:e4:ad:97:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: Mar 26 06:26:06 2026 GMT Not After : Mar 29 13:56:06 2026 GMT Subject: CN=A0549ABCA51DCDFC899EAC06A1C5D77630679E21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:fc:30:a5:5d:de:cb:b0:59:3e:3f:61:8d: 00:b7:53:e4:f3:06:88:93:bd:5f:d8:67:f4:37:cd: 93:46:32:63:cf:00:8b:c3:39:24:4c:14:5f:2e:33: 19:2f:02:4c:f7:8f:3b:a9:06:94:67:7c:e3:f1:7c: e1:58:4a:ad:26:a8:56:ca:ea:54:a3:f1:9f:36:8a: 1c:ce:1a:26:09:35:39:11:64:05:58:39:80:13:3e: f9:b4:64:c1:dc:d1:cf:dd:b0:20:af:eb:97:43:24: 29:34:9e:d1:59:f9:8d:11:7a:11:a1:36:82:60:c8: 68:c1:dc:5c:89:4a:ba:03:f3:a7:10:97:47:2f:16: 0e:d4:75:ea:95:24:92:c7:73:5e:1a:93:ec:92:72: c0:e1:75:46:de:b5:7b:7e:35:dd:b9:16:5a:b9:d0: 5c:42:4e:89:02:29:78:46:38:43:74:f0:f3:f4:b3: c1:32:95:92:fa:f6:b4:ba:ee:1e:15:9a:6d:3a:e2: 13:fd:32:f6:87:da:75:d5:9f:f6:c2:09:c3:67:61: ff:cc:c7:db:c7:7c:d2:4c:1d:da:68:59:79:af:73: 4e:47:69:7e:2f:0a:14:52:53:b4:30:f9:67:75:f0: 84:13:65:63:f7:13:dd:22:d7:7d:a1:b7:d2:b5:81: a7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:54:9A:BC:A5:1D:CD:FC:89:9E:AC:06:A1:C5:D7:76:30:67:9E:21 X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0d:ff:8c:85:f4:98:e6:66:83:60:51:69:47:b5:1b:bd:cb: 5c:ae:07:e1:c0:a9:71:40:c3:15:95:37:1c:0c:26:83:ca:1a: 26:db:8b:79:8e:d6:a6:57:9f:80:5f:19:ef:3a:2d:a4:c2:46: fa:11:3c:a4:ea:0f:98:a2:ac:19:c9:7d:ae:2e:bc:7a:35:b6: 1a:9c:e4:19:32:1a:9f:1f:07:67:9d:02:a5:69:fd:fd:89:af: 12:47:1e:90:82:82:cb:91:14:9f:f9:30:6f:7f:a5:58:d9:c3: 0d:ee:ec:ce:61:24:41:a3:e8:f3:bf:dc:0e:0e:c3:39:6e:59: 56:ce:a6:b7:2d:c6:cb:86:50:fa:f1:6a:94:05:e6:da:f7:63: a2:75:00:e3:02:14:97:e9:73:f8:b9:f8:05:00:86:e9:b4:db: 2d:bd:5c:24:2f:28:48:7f:fd:da:6f:c0:c1:e2:8d:47:2e:cb: ef:f8:63:b4:f5:98:bd:c9:96:72:a7:3e:55:71:fa:4c:cd:67: 1a:bb:45:ac:f9:be:52:9e:5e:a6:54:fd:3f:6d:8e:43:70:f1: f4:7b:a8:3a:43:a0:af:4b:be:f3:7b:cb:41:3a:50:bf:09:3f: 4c:a3:30:b5:fd:68:6d:45:b8:23:f5:7d:37:d1:b2:be:65:cb: ff:f3:aa:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZr+sAvH1CSk89YGY+066OStlyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNjAzMjYwNjI2MDZaFw0yNjAzMjkxMzU2MDZaMDMxMTAvBgNV BAMTKEEwNTQ5QUJDQTUxRENERkM4OTlFQUMwNkExQzVENzc2MzA2NzlFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWvwwpV3ey7BZPj9hjQC3U+Tz BoiTvV/YZ/Q3zZNGMmPPAIvDOSRMFF8uMxkvAkz3jzupBpRnfOPxfOFYSq0mqFbK 6lSj8Z82ihzOGiYJNTkRZAVYOYATPvm0ZMHc0c/dsCCv65dDJCk0ntFZ+Y0RehGh NoJgyGjB3FyJSroD86cQl0cvFg7UdeqVJJLHc14ak+yScsDhdUbetXt+Nd25Flq5 0FxCTokCKXhGOEN08PP0s8EylZL69rS67h4Vmm064hP9MvaH2nXVn/bCCcNnYf/M x9vHfNJMHdpoWXmvc05HaX4vChRSU7Qw+Wd18IQTZWP3E90i132ht9K1gacHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoFSavKUdzfyJnqwGocXXdjBnniEwHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkN/4yF9JjmZoNgUWlHtRu9y1yuB+HAqXFA wxWVNxwMJoPKGibbi3mO1qZXn4BfGe86LaTCRvoRPKTqD5iirBnJfa4uvHo1thqc 5BkyGp8fB2edAqVp/f2JrxJHHpCCgsuRFJ/5MG9/pVjZww3u7M5hJEGj6PO/3A4O wzluWVbOprctxsuGUPrxapQF5tr3Y6J1AOMCFJfpc/i5+AUAhum02y29XCQvKEh/ /dpvwMHijUcuy+/4Y7T1mL3JlnKnPlVx+kzNZxq7Raz5vlKeXqZU/T9tjkNw8fR7 qDpDoK9LvvN7y0E6UL8JP0yjMLX9aG1FuCP1fTfRsr5ly//zqjw= -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:19 2026 by rpki-client