$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: Q/BU3OOXn6wuerCzlaOSFnOH5F3UQpIbxdAQWrROo+0= Subject key identifier: E6:01:F4:91:0C:F4:4D:6D:67:38:99:2B:3A:FC:FA:5D:75:FD:42:C4 Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 79EF43277E3421F8847877176CD59D3118354A11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 0205 Signing time: Tue 24 Mar 2026 23:00:02 +0000 Manifest this update: Tue 24 Mar 2026 22:55:02 +0000 Manifest next update: Sat 28 Mar 2026 08:16:02 +0000 Files and hashes: 1: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: RnKgDW9wdrC56sDhfWMDinF+rBG/5N7j8kbqHRnbaj8=) 2: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: OKp1S63E5ip1d6qJaAGSQIsiJniGyWePnT7i1PjeQp8=) 3: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: GPnT4OvDeWk1bAtYzHobscFEm6YNT5Lhx62DmcP7fds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ef:43:27:7e:34:21:f8:84:78:77:17:6c:d5:9d:31:18:35:4a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Mar 24 22:55:02 2026 GMT Not After : Mar 28 08:16:02 2026 GMT Subject: CN=E601F4910CF44D6D6738992B3AFCFA5D75FD42C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:22:07:3c:b7:03:7c:3e:31:d7:d5:96:e3: bd:60:21:24:4b:42:df:39:19:fa:0e:64:97:38:01: b6:d0:41:cc:7e:f4:c9:fa:7b:a9:34:c8:dd:1c:96: d3:17:1d:4a:86:95:0b:16:12:57:7e:99:7c:ef:60: b3:fe:56:fd:87:5f:8b:fd:91:97:e1:bc:8b:0a:2e: c3:39:b6:b0:fc:34:46:8e:24:4e:db:d0:0d:a8:0a: be:94:22:03:80:43:2e:13:ba:31:2a:c0:a6:60:8e: 84:06:82:fb:11:87:7b:3f:59:25:d2:71:63:67:ee: 9e:ce:08:ef:20:f9:07:4d:ba:6b:94:a5:97:90:1d: f4:fe:ca:6e:dc:5f:f4:35:6a:a4:ed:12:68:22:98: 86:e0:9f:b3:bb:54:cf:fb:e2:2f:a7:a8:3f:1d:35: d2:9a:be:92:8a:09:27:79:f3:b1:18:71:0a:34:ae: d8:4a:16:5a:de:7a:19:df:f1:20:75:59:95:a0:7d: c5:7c:71:de:1c:a0:97:10:c7:7b:43:42:d1:ba:38: 34:d9:01:90:93:97:42:4e:4b:81:08:d2:15:1c:22: cd:10:5a:47:e4:9d:80:5b:ea:87:77:12:45:15:40: b7:95:9b:16:3f:1c:e5:02:f4:a3:9b:3c:d2:6b:e9: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:01:F4:91:0C:F4:4D:6D:67:38:99:2B:3A:FC:FA:5D:75:FD:42:C4 X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:dc:00:97:34:66:d2:a6:61:5e:ac:ab:88:a4:41:25:3a:e1: 5f:65:c0:dc:fc:0a:39:1a:61:06:8b:e8:d0:75:1c:60:ac:13: 90:7c:c8:23:64:1c:5f:b9:38:6b:c2:82:af:5b:54:ff:db:c3: 20:3b:7f:34:73:1c:f8:b9:db:70:7b:69:9f:60:0d:11:6d:67: c4:d5:01:72:61:27:c8:2f:cf:9e:25:7c:c1:b0:41:a7:f5:bf: ee:b9:4b:b0:f2:d8:fa:be:a5:8d:bf:38:91:bb:9e:dc:ad:54: a7:12:92:35:68:7b:b1:13:f1:b7:2d:22:a3:62:44:72:3a:2a: 18:b7:2c:ff:2e:e1:45:36:18:ff:2e:1c:3a:46:e6:31:0e:5d: 45:9b:1f:37:5a:42:66:ba:a0:80:a5:b9:04:29:c4:0b:70:d2: 5f:63:69:92:53:bc:07:ef:27:74:6c:11:61:d8:8a:bb:d8:37: 9f:04:f0:43:6b:ca:ee:99:84:41:43:d5:ff:b8:a5:75:2e:ce: ef:6d:b6:99:6a:24:56:25:59:00:e0:73:b1:8c:9e:ef:bd:54: f8:92:d6:b6:68:5e:c5:85:b1:41:9b:77:da:68:51:1b:4e:91: 1e:03:b0:c0:9f:12:2d:7e:07:2e:dd:27:3e:3b:92:d0:c8:9c: 08:38:82:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUee9DJ340IfiEeHcXbNWdMRg1ShEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNjAzMjQyMjU1MDJaFw0yNjAzMjgwODE2MDJaMDMxMTAvBgNV BAMTKEU2MDFGNDkxMENGNDRENkQ2NzM4OTkyQjNBRkNGQTVENzVGRDQyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVWiIHPLcDfD4x19WW471gISRL Qt85GfoOZJc4AbbQQcx+9Mn6e6k0yN0cltMXHUqGlQsWEld+mXzvYLP+Vv2HX4v9 kZfhvIsKLsM5trD8NEaOJE7b0A2oCr6UIgOAQy4TujEqwKZgjoQGgvsRh3s/WSXS cWNn7p7OCO8g+QdNumuUpZeQHfT+ym7cX/Q1aqTtEmgimIbgn7O7VM/74i+nqD8d NdKavpKKCSd587EYcQo0rthKFlreehnf8SB1WZWgfcV8cd4coJcQx3tDQtG6ODTZ AZCTl0JOS4EI0hUcIs0QWkfknYBb6od3EkUVQLeVmxY/HOUC9KObPNJr6R71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5gH0kQz0TW1nOJkrOvz6XXX9QsQwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHcAJc0ZtKmYV6sq4ikQSU64V9lwNz8Cjka YQaL6NB1HGCsE5B8yCNkHF+5OGvCgq9bVP/bwyA7fzRzHPi523B7aZ9gDRFtZ8TV AXJhJ8gvz54lfMGwQaf1v+65S7Dy2Pq+pY2/OJG7ntytVKcSkjVoe7ET8bctIqNi RHI6Khi3LP8u4UU2GP8uHDpG5jEOXUWbHzdaQma6oICluQQpxAtw0l9jaZJTvAfv J3RsEWHYirvYN58E8ENryu6ZhEFD1f+4pXUuzu9ttplqJFYlWQDgc7GMnu+9VPiS 1rZoXsWFsUGbd9poURtOkR4DsMCfEi1+By7dJz47ktDInAg4gtI= -----END CERTIFICATE-----Generated at Thu Mar 26 22:32:20 2026 by rpki-client