$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: 2J9dCPGzWDGLdaBgtAXL6Ry2vfHsVgJvB33R7UotAJg= Subject key identifier: 72:38:FA:D3:8A:A9:C4:39:BD:36:30:F5:C4:E8:30:89:72:18:32:74 Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 187DFB907F849EBB349B5D10CA32EEC813E72B07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 0297 Signing time: Wed 25 Mar 2026 02:10:05 +0000 Manifest this update: Wed 25 Mar 2026 02:05:05 +0000 Manifest next update: Sat 28 Mar 2026 03:10:05 +0000 Files and hashes: 1: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: 6/L9OB0QhOR5SC/rJGv7qWwyRwcieoK2AORJh70ewMo=) 2: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: 7VJJrZU5c5FbgSVVA1ebKxftQ6hXEoFRTl7c6i+3ijs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7d:fb:90:7f:84:9e:bb:34:9b:5d:10:ca:32:ee:c8:13:e7:2b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Mar 25 02:05:05 2026 GMT Not After : Mar 28 03:10:05 2026 GMT Subject: CN=7238FAD38AA9C439BD3630F5C4E8308972183274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:60:48:ad:35:c4:8d:96:87:28:40:f2:46:3e: 31:9b:bf:6f:b1:22:ef:69:f2:0e:9d:b9:70:a2:cf: 69:03:1b:0f:7b:a6:2c:b8:a7:59:5a:37:dd:6d:40: cb:17:65:65:26:1a:68:f4:2f:82:61:ce:3f:58:de: 9a:61:75:db:f7:81:3f:74:80:0e:a1:44:f9:89:92: ac:f0:2e:7f:a3:81:90:48:73:ef:a5:ff:62:60:58: eb:63:93:aa:ef:f5:2d:70:35:e2:db:4f:9d:4b:35: 97:f5:8c:8e:54:95:a9:ab:59:b6:48:d5:3f:10:8a: 5a:ee:91:a0:8e:f3:fc:dc:40:a1:22:8b:68:11:4f: 6a:73:72:b9:90:c1:5f:03:c8:b9:23:aa:1d:f0:5e: 3c:f0:9b:df:cc:7f:7d:88:a8:f4:6d:09:55:4b:d8: e6:f7:a8:87:f7:f5:c9:4c:ff:63:99:8d:3b:89:b0: 7c:f0:b1:b5:68:a9:70:9e:46:54:ca:34:1c:fa:cd: 20:ed:71:a7:d4:77:7f:53:41:0d:7e:b9:1c:bf:8b: 11:c7:a2:00:5f:1d:05:4a:c0:9e:8d:c6:79:8c:04: 52:49:26:ea:38:ba:cd:8e:e6:bc:18:b8:0f:98:f2: 03:ca:3d:cc:ac:14:51:dd:ab:1c:d0:f0:a0:3d:ef: 64:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:38:FA:D3:8A:A9:C4:39:BD:36:30:F5:C4:E8:30:89:72:18:32:74 X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ef:ed:5e:91:e0:8d:79:c5:0a:fb:37:a1:a6:59:3c:3c:12: af:98:83:fd:24:9b:cc:e7:b6:97:81:f9:d5:14:c7:59:ac:21: 5b:6f:71:76:80:97:90:2b:9a:f7:ad:80:cc:96:43:b7:c8:3d: b3:67:1b:da:62:57:a2:97:ec:21:bd:00:a9:96:5a:df:69:43: ee:e5:88:92:aa:93:e4:f4:21:3a:25:85:2b:1f:38:63:db:0b: b5:21:fc:4c:77:3c:50:d9:b0:96:31:b0:0d:fc:97:57:fc:1a: ac:56:09:ac:91:84:0a:70:1b:1f:79:99:d0:1c:68:25:38:44: 45:80:47:49:9e:a3:2a:97:e6:0e:4d:a4:e6:45:f6:10:56:ed: 1e:dc:70:22:d4:4e:21:cd:37:ef:07:c8:ba:31:43:30:5a:b8: 73:29:8b:d4:1f:72:bd:b6:51:9c:13:d3:d4:76:05:4f:51:79: b8:05:d1:9c:d2:b6:53:b7:78:4e:27:72:d7:67:79:51:fb:e7: a5:dd:e6:51:45:07:4b:49:e9:bc:90:de:fe:d0:c6:30:17:a0: 79:b8:e8:3e:9a:c7:bb:4e:6f:f5:fd:25:c6:61:df:41:43:db: b1:c3:88:d0:fe:95:2b:55:f0:5e:8e:3d:bb:3a:47:23:12:4c: 0f:59:05:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGH37kH+Enrs0m10QyjLuyBPnKwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNjAzMjUwMjA1MDVaFw0yNjAzMjgwMzEwMDVaMDMxMTAvBgNV BAMTKDcyMzhGQUQzOEFBOUM0MzlCRDM2MzBGNUM0RTgzMDg5NzIxODMyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxYEitNcSNlocoQPJGPjGbv2+x Iu9p8g6duXCiz2kDGw97piy4p1laN91tQMsXZWUmGmj0L4Jhzj9Y3pphddv3gT90 gA6hRPmJkqzwLn+jgZBIc++l/2JgWOtjk6rv9S1wNeLbT51LNZf1jI5UlamrWbZI 1T8QilrukaCO8/zcQKEii2gRT2pzcrmQwV8DyLkjqh3wXjzwm9/Mf32IqPRtCVVL 2Ob3qIf39clM/2OZjTuJsHzwsbVoqXCeRlTKNBz6zSDtcafUd39TQQ1+uRy/ixHH ogBfHQVKwJ6NxnmMBFJJJuo4us2O5rwYuA+Y8gPKPcysFFHdqxzQ8KA972RxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcjj604qpxDm9NjD1xOgwiXIYMnQwHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnv7V6R4I15xQr7N6GmWTw8Eq+Yg/0km8zn tpeB+dUUx1msIVtvcXaAl5ArmvetgMyWQ7fIPbNnG9piV6KX7CG9AKmWWt9pQ+7l iJKqk+T0ITolhSsfOGPbC7Uh/Ex3PFDZsJYxsA38l1f8GqxWCayRhApwGx95mdAc aCU4REWAR0meoyqX5g5NpOZF9hBW7R7ccCLUTiHNN+8HyLoxQzBauHMpi9Qfcr22 UZwT09R2BU9RebgF0ZzStlO3eE4nctdneVH756Xd5lFFB0tJ6byQ3v7QxjAXoHm4 6D6ax7tOb/X9JcZh30FD27HDiND+lStV8F6OPbs6RyMSTA9ZBX0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:55 2026 by rpki-client