$ rpki-client -vvf repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft File: AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft (raw, json) Hash identifier: lWnO+eu2Nv6HVCJlvDrdv49ZmzrtFE9In79mKcPG2do= Subject key identifier: 1C:13:D1:9A:AA:84:95:6A:53:4D:BD:2E:6F:F1:C8:C8:96:26:BB:F2 Authority key identifier: AE:05:90:FE:03:68:DD:08:1C:C9:37:60:B9:FC:7C:52:44:A6:D1:5F Certificate issuer: /CN=AE0590FE0368DD081CC93760B9FC7C5244A6D15F Certificate serial: 239FDB76BEB49FB3787CF839A642750243F403AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft Manifest number: 07 Signing time: Wed 25 Mar 2026 10:04:45 +0000 Manifest this update: Wed 25 Mar 2026 09:59:45 +0000 Manifest next update: Sat 28 Mar 2026 20:40:45 +0000 Files and hashes: 1: AE0590FE0368DD081CC93760B9FC7C5244A6D15F.crl (hash: SzVcpeAr6ovrtYJ7NePF8NEuRzYetJNYt+4/BNyPqDI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.crl rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9f:db:76:be:b4:9f:b3:78:7c:f8:39:a6:42:75:02:43:f4:03:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE0590FE0368DD081CC93760B9FC7C5244A6D15F Validity Not Before: Mar 25 09:59:45 2026 GMT Not After : Mar 28 20:40:45 2026 GMT Subject: CN=1C13D19AAA84956A534DBD2E6FF1C8C89626BBF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:ac:86:dd:c8:43:ee:93:e6:44:9c:8e:62: 83:a8:fb:dd:e2:3e:5f:a9:f9:f4:9d:92:c3:ce:a3: ca:ef:cd:e9:d5:6a:9d:75:34:fb:4d:1e:4b:8e:fb: 68:48:c4:4a:66:14:03:60:62:0d:97:c6:df:20:6b: 17:49:70:5b:40:21:94:9d:bf:63:22:49:60:f3:ce: fd:67:d7:c5:ee:58:78:6a:cb:cb:47:1b:97:17:2c: 1c:3e:b7:6d:21:d2:22:0f:12:d2:0c:0d:87:6c:2d: db:f3:ab:c5:2c:48:b9:cb:bd:28:6f:b2:46:d3:11: d3:bd:19:6d:73:39:84:af:ec:f6:48:44:5d:c3:90: 2f:9c:07:45:44:c8:9e:91:78:48:13:41:68:fd:23: 8b:c2:65:94:fd:37:1f:35:0a:db:b6:14:a4:f4:31: 5d:19:e5:58:18:83:0c:9e:c0:d9:0b:00:32:ab:7a: 09:d6:3c:8a:20:f9:31:7e:dd:c2:b0:2e:76:72:99: fa:a0:a9:9a:86:79:e2:20:62:ac:8d:21:6b:56:59: 19:dd:24:96:97:d9:49:f1:9c:db:ed:16:3d:20:92: 2a:ae:45:69:80:50:83:f8:15:5b:63:eb:e4:fa:6c: f7:07:18:5a:c6:70:64:18:bc:1b:f7:d4:19:bc:84: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:13:D1:9A:AA:84:95:6A:53:4D:BD:2E:6F:F1:C8:C8:96:26:BB:F2 X509v3 Authority Key Identifier: keyid:AE:05:90:FE:03:68:DD:08:1C:C9:37:60:B9:FC:7C:52:44:A6:D1:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:98:9f:cb:34:cd:b1:f5:f3:25:78:f3:0f:af:2d:8a:c2:e2: ed:d5:3e:a5:31:05:ed:b6:ae:f2:30:7d:c0:92:fa:83:70:2c: cd:13:83:40:d6:1b:33:e6:45:e3:68:6b:48:4c:db:f5:d8:bd: e7:ac:0d:a8:08:3a:36:05:c4:db:4e:a8:77:f4:b2:c6:35:aa: 83:1e:b7:23:71:16:06:14:a3:5f:3e:02:86:e8:d0:14:cf:ab: d9:76:46:39:10:a0:a7:2d:4a:5b:f2:c9:eb:ec:dc:43:7e:4b: d4:d3:0d:8b:49:20:18:c8:09:3c:61:64:33:b8:69:a1:20:a0: a9:f7:97:69:49:23:82:89:ee:9e:91:84:e9:8e:f4:c1:dd:7f: f9:58:8b:56:c4:4b:cf:39:55:1c:20:bb:10:a5:10:59:87:31: c4:04:a4:42:d2:e4:12:d2:f2:95:7b:ba:81:9a:fc:ac:9f:0a: 97:47:ab:d1:12:26:45:4d:07:2e:c4:5e:a8:ec:81:67:54:ca: 3d:2d:bd:89:6c:65:28:ab:3e:27:6e:a3:0b:43:e5:9c:63:d0: 29:2f:5f:8c:0b:f5:6d:03:a6:e5:f3:91:1d:24:4b:9c:19:93: c9:80:eb:4b:f0:fe:3c:79:2f:9c:98:a7:e7:5a:96:a4:ef:c8: 24:b5:d3:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5/bdr60n7N4fPg5pkJ1AkP0A6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwNTkwRkUwMzY4REQwODFDQzkzNzYwQjlGQzdDNTI0 NEE2RDE1RjAeFw0yNjAzMjUwOTU5NDVaFw0yNjAzMjgyMDQwNDVaMDMxMTAvBgNV BAMTKDFDMTNEMTlBQUE4NDk1NkE1MzREQkQyRTZGRjFDOEM4OTYyNkJCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQSayG3chD7pPmRJyOYoOo+93i Pl+p+fSdksPOo8rvzenVap11NPtNHkuO+2hIxEpmFANgYg2Xxt8gaxdJcFtAIZSd v2MiSWDzzv1n18XuWHhqy8tHG5cXLBw+t20h0iIPEtIMDYdsLdvzq8UsSLnLvShv skbTEdO9GW1zOYSv7PZIRF3DkC+cB0VEyJ6ReEgTQWj9I4vCZZT9Nx81Ctu2FKT0 MV0Z5VgYgwyewNkLADKregnWPIog+TF+3cKwLnZymfqgqZqGeeIgYqyNIWtWWRnd JJaX2UnxnNvtFj0gkiquRWmAUIP4FVtj6+T6bPcHGFrGcGQYvBv31Bm8hElVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHBPRmqqElWpTTb0ub/HIyJYmu/IwHwYDVR0j BBgwFoAUrgWQ/gNo3QgcyTdgufx8UkSm0V8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTM1ODUwZS00YmZhLTQ1MDQtYmJlYy02YzZiMmNjM2JhMjkvMC9BRTA1OTBGRTAz NjhERDA4MUNDOTM3NjBCOUZDN0M1MjQ0QTZEMTVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUwNTkwRkUwMzY4REQwODFDQzkzNzYwQjlGQzdDNTI0NEE2 RDE1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjUzNTg1MGUtNGJmYS00NTA0LWJi ZWMtNmM2YjJjYzNiYTI5LzAvQUUwNTkwRkUwMzY4REQwODFDQzkzNzYwQjlGQzdD NTI0NEE2RDE1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOYn8s0zbH18yV48w+vLYrC4u3VPqUxBe22 rvIwfcCS+oNwLM0Tg0DWGzPmReNoa0hM2/XYveesDagIOjYFxNtOqHf0ssY1qoMe tyNxFgYUo18+Aobo0BTPq9l2RjkQoKctSlvyyevs3EN+S9TTDYtJIBjICTxhZDO4 aaEgoKn3l2lJI4KJ7p6RhOmO9MHdf/lYi1bES885VRwguxClEFmHMcQEpELS5BLS 8pV7uoGa/KyfCpdHq9ESJkVNBy7EXqjsgWdUyj0tvYlsZSirPiduowtD5Zxj0Ckv X4wL9W0DpuXzkR0kS5wZk8mA60vw/jx5L5yYp+dalqTvyCS10x0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:13:44 2026 by rpki-client