$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft File: AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json) Hash identifier: PlKms5oNAiECohNv9M3i8pcDC8cSYAAWJvEDNLaXVn4= Subject key identifier: DF:69:A3:50:D9:6A:89:CE:82:62:2A:3A:AD:E7:B1:32:04:C5:27:73 Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B Certificate issuer: /CN=AA90F6A6378710CD695B4CC742651F235E503C5B Certificate serial: 1A01AD0DDE9BE8656E390DFCF2B710B24B2BD4A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft Manifest number: 017C Signing time: Tue 24 Mar 2026 15:10:51 +0000 Manifest this update: Tue 24 Mar 2026 15:05:51 +0000 Manifest next update: Fri 27 Mar 2026 18:27:51 +0000 Files and hashes: 1: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: 1/7N8RhokB+MNBzgLqyLEi2SjWb7HbJEmjZ2O2z25sw=) 2: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: VFWMiazWmoGEVLtcrf1dTJMRZzx900Rx4cZwTnY4Hao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:01:ad:0d:de:9b:e8:65:6e:39:0d:fc:f2:b7:10:b2:4b:2b:d4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B Validity Not Before: Mar 24 15:05:51 2026 GMT Not After : Mar 27 18:27:51 2026 GMT Subject: CN=DF69A350D96A89CE82622A3AADE7B13204C52773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:9c:f4:cc:c2:8a:a9:e4:99:7b:ae:bd:4e: 90:71:d2:d2:57:c5:97:d5:1c:5a:83:13:26:9c:4d: 91:d9:61:c1:37:97:af:1d:ac:1a:25:71:7f:1b:66: 26:00:0f:66:10:05:ff:c3:3c:47:ef:e0:07:dc:3a: 55:ab:fa:31:0c:cf:9b:ed:06:cc:d6:a5:b6:1b:27: ec:b1:2b:00:73:29:d8:66:37:3e:b9:55:60:ef:7b: e8:da:2c:ad:c1:04:b5:93:da:15:29:0b:51:7e:83: a1:66:f5:9d:76:ef:49:6c:ab:fd:d6:3d:bf:c8:39: 4f:aa:2f:ea:f6:7a:b4:35:06:20:4a:8c:c9:d1:14: 62:64:5d:d7:43:5e:f7:51:93:e2:d7:7c:c0:2f:18: 8d:73:7f:94:8d:46:35:03:3d:e2:04:08:b1:37:d7: ed:78:f3:94:cb:fc:45:9a:62:bc:9f:de:88:89:61: 28:43:12:3b:eb:53:ec:3b:6e:59:34:60:26:ba:42: 6c:6c:de:a9:30:66:88:4a:2b:90:fb:b8:c9:17:40: 38:24:17:ed:29:43:34:af:1c:43:f0:a2:34:e6:1d: 64:3e:15:2b:6c:21:10:50:1b:f7:0f:56:bf:1c:2f: 00:89:58:8f:d1:b9:4e:83:23:12:98:7e:76:c0:37: de:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:69:A3:50:D9:6A:89:CE:82:62:2A:3A:AD:E7:B1:32:04:C5:27:73 X509v3 Authority Key Identifier: keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:41:71:70:24:11:c4:ae:73:86:6c:c3:74:8e:9a:1d:c9:67: c5:86:d1:b0:f8:e1:50:3b:b1:b6:a1:09:ec:18:67:27:1b:c2: 52:32:89:17:eb:14:54:b7:7d:06:79:b5:dd:8b:c0:95:96:2d: e1:73:72:2f:ff:e1:60:21:ab:e7:32:00:ea:dd:70:a4:9e:cc: 47:52:ff:67:c3:04:c3:d2:fb:66:cf:6c:d1:85:21:f3:29:ee: 5c:0f:95:12:8c:c8:89:92:34:4e:42:47:e4:40:38:8a:b7:ea: 24:d5:04:46:af:00:db:a3:84:b6:38:b3:a2:e4:8a:b4:6a:c0: 32:69:9a:85:94:55:f9:f4:55:8e:e3:7e:58:b8:33:f3:71:02: 10:b9:48:9a:1f:2c:ac:14:f1:eb:85:f0:64:de:f4:24:ad:c0: 4e:e7:33:0b:5f:78:96:94:2f:14:7d:26:1f:2f:b9:89:14:5a: 49:ae:d2:fa:05:3f:0b:b3:88:05:fd:b5:31:b9:b7:30:23:46: fe:85:d9:81:c0:6c:0b:78:75:87:64:aa:d1:43:d2:b6:f5:f9: 09:7a:91:ec:fc:87:28:e1:0d:c0:49:6c:7b:8b:44:f8:4f:16: 51:98:59:43:88:39:43:1a:53:b6:e9:f8:aa:5c:fa:eb:24:9d: f6:f1:53:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgGtDd6b6GVuOQ388rcQsksr1KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1 RTUwM0M1QjAeFw0yNjAzMjQxNTA1NTFaFw0yNjAzMjcxODI3NTFaMDMxMTAvBgNV BAMTKERGNjlBMzUwRDk2QTg5Q0U4MjYyMkEzQUFERTdCMTMyMDRDNTI3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+UZz0zMKKqeSZe669TpBx0tJX xZfVHFqDEyacTZHZYcE3l68drBolcX8bZiYAD2YQBf/DPEfv4AfcOlWr+jEMz5vt BszWpbYbJ+yxKwBzKdhmNz65VWDve+jaLK3BBLWT2hUpC1F+g6Fm9Z1270lsq/3W Pb/IOU+qL+r2erQ1BiBKjMnRFGJkXddDXvdRk+LXfMAvGI1zf5SNRjUDPeIECLE3 1+1485TL/EWaYryf3oiJYShDEjvrU+w7blk0YCa6Qmxs3qkwZohKK5D7uMkXQDgk F+0pQzSvHEPwojTmHWQ+FStsIRBQG/cPVr8cLwCJWI/RuU6DIxKYfnbAN97lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU32mjUNlqic6CYio6reexMgTFJ3MwHwYDVR0j BBgwFoAUqpD2pjeHEM1pW0zHQmUfI15QPFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAyYTU4ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC9BQTkwRjZBNjM3 ODcxMENENjk1QjRDQzc0MjY1MUYyMzVFNTAzQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1RTUw M0M1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMmE1OGQtYjk1OC00MjE5LTg2 ZDMtNjFlNDNjZWUzMTlhLzAvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFG MjM1RTUwM0M1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRBcXAkEcSuc4Zsw3SOmh3JZ8WG0bD44VA7 sbahCewYZycbwlIyiRfrFFS3fQZ5td2LwJWWLeFzci//4WAhq+cyAOrdcKSezEdS /2fDBMPS+2bPbNGFIfMp7lwPlRKMyImSNE5CR+RAOIq36iTVBEavANujhLY4s6Lk irRqwDJpmoWUVfn0VY7jfli4M/NxAhC5SJofLKwU8euF8GTe9CStwE7nMwtfeJaU LxR9Jh8vuYkUWkmu0voFPwuziAX9tTG5tzAjRv6F2YHAbAt4dYdkqtFD0rb1+Ql6 kez8hyjhDcBJbHuLRPhPFlGYWUOIOUMaU7bp+Kpc+usknfbxUxQ= -----END CERTIFICATE-----Generated at Thu Mar 26 05:42:15 2026 by rpki-client