$ rpki-client -vvf repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft File: AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft (raw, json) Hash identifier: HPdAyeHWG8VvOE3I43MR4kMhkucvzzhw3qxF+R4GUW4= Subject key identifier: 5E:92:15:E1:85:D4:2A:1E:54:06:C8:81:28:22:48:E3:04:F7:96:24 Authority key identifier: AE:77:0A:20:B8:9B:0B:5C:49:43:10:A5:DC:21:DE:5E:E2:41:7C:DC Certificate issuer: /CN=AE770A20B89B0B5C494310A5DC21DE5EE2417CDC Certificate serial: 765074842FFDBEAAE6F0BE7F8A6A141A504641A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft Manifest number: 42 Signing time: Tue 24 Mar 2026 20:31:50 +0000 Manifest this update: Tue 24 Mar 2026 20:26:50 +0000 Manifest next update: Sat 28 Mar 2026 04:32:50 +0000 Files and hashes: 1: AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl (hash: +pPJGYoGLbW4Gt9Kt1pdyuAJLqsJYV9TCxKuiu8L2bk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:50:74:84:2f:fd:be:aa:e6:f0:be:7f:8a:6a:14:1a:50:46:41:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE770A20B89B0B5C494310A5DC21DE5EE2417CDC Validity Not Before: Mar 24 20:26:50 2026 GMT Not After : Mar 28 04:32:50 2026 GMT Subject: CN=5E9215E185D42A1E5406C881282248E304F79624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:52:61:c8:91:f9:f7:b9:70:c9:16:7f:a0: 51:68:9c:79:6e:97:82:12:d6:14:92:90:0b:ec:2f: a1:92:17:71:75:3d:ea:56:df:28:6b:2a:1c:ea:c8: 07:d5:97:39:65:61:46:ce:47:9f:ef:84:e5:dc:f3: cd:e0:67:d0:60:7b:54:99:b7:ea:ed:0a:5f:58:56: fc:56:bb:58:55:b7:88:b0:d1:20:f0:3c:6a:a2:c0: 1a:ff:8f:26:ff:59:23:18:40:35:58:9a:fe:71:ab: b3:7f:76:36:6f:f7:b7:b3:a2:61:79:5d:45:2a:b1: c9:51:5c:d4:a5:2b:99:e0:71:9b:ac:e0:37:5a:02: 43:e3:f8:c6:83:62:d4:5c:72:6b:c1:2b:c8:67:61: 9b:fd:ad:39:70:be:35:2d:70:b2:37:27:b8:f5:f0: 05:49:ba:e2:82:b5:e1:9e:a3:aa:62:35:ee:a5:96: 72:c0:a9:13:d2:20:f1:28:8d:cb:d0:f8:c3:1a:db: 2d:89:de:41:ec:2c:47:dc:61:dd:1f:eb:e7:74:08: 09:6e:8f:fc:6f:59:5d:52:49:87:90:1d:c7:0d:7c: 25:df:2a:bc:d2:b9:00:71:07:03:35:44:72:0f:f0: 31:12:df:0c:7a:1d:73:b4:fb:b5:af:7e:b4:63:e7: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:92:15:E1:85:D4:2A:1E:54:06:C8:81:28:22:48:E3:04:F7:96:24 X509v3 Authority Key Identifier: keyid:AE:77:0A:20:B8:9B:0B:5C:49:43:10:A5:DC:21:DE:5E:E2:41:7C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c8:24:bb:af:40:9f:1b:7b:91:4c:e4:fd:aa:b0:0a:59:ba: 9f:9d:c8:0f:84:2f:53:bb:4f:fc:2b:d0:c9:a6:4a:18:4c:88: 58:de:02:ce:f2:5c:b5:f6:28:77:88:a8:ef:f8:4b:ad:0c:e3: 9a:b4:bd:45:7e:e1:ee:63:87:71:bb:75:3e:52:1f:18:01:1a: 03:27:ad:74:21:95:07:b9:f1:9d:9e:b4:c3:fc:2f:3b:d3:0a: f4:7f:44:1b:77:4c:6d:07:26:d1:60:5a:77:79:69:6b:b3:57: 25:45:aa:13:a6:86:0d:b6:91:19:84:a9:e8:6d:7b:13:bd:87: f8:06:19:90:22:e4:b7:bd:2b:ce:06:12:93:44:7b:39:aa:06: 11:28:f1:d7:68:43:bd:72:df:81:81:8b:dc:94:57:aa:61:53: 28:f0:b9:7b:ab:1a:70:5c:d4:cf:8c:7a:e3:05:47:46:40:4b: 62:6a:bb:19:f3:96:29:6a:b8:83:20:fd:31:0b:8e:04:78:1e: f0:0f:01:0c:b8:c6:a3:b4:45:5d:d1:8f:e4:42:96:3d:aa:37: 2f:8a:cc:67:ca:f0:a9:e9:b3:7d:29:91:d0:30:e2:16:29:d3: a7:bd:40:8c:9c:95:39:d8:4e:d8:48:7a:4f:96:54:cc:eb:df: b5:87:56:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlB0hC/9vqrm8L5/imoUGlBGQaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURFNUVF MjQxN0NEQzAeFw0yNjAzMjQyMDI2NTBaFw0yNjAzMjgwNDMyNTBaMDMxMTAvBgNV BAMTKDVFOTIxNUUxODVENDJBMUU1NDA2Qzg4MTI4MjI0OEUzMDRGNzk2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XVJhyJH597lwyRZ/oFFonHlu l4IS1hSSkAvsL6GSF3F1PepW3yhrKhzqyAfVlzllYUbOR5/vhOXc883gZ9Bge1SZ t+rtCl9YVvxWu1hVt4iw0SDwPGqiwBr/jyb/WSMYQDVYmv5xq7N/djZv97ezomF5 XUUqsclRXNSlK5ngcZus4DdaAkPj+MaDYtRccmvBK8hnYZv9rTlwvjUtcLI3J7j1 8AVJuuKCteGeo6piNe6llnLAqRPSIPEojcvQ+MMa2y2J3kHsLEfcYd0f6+d0CAlu j/xvWV1SSYeQHccNfCXfKrzSuQBxBwM1RHIP8DES3wx6HXO0+7WvfrRj51grAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXpIV4YXUKh5UBsiBKCJI4wT3liQwHwYDVR0j BBgwFoAUrncKILibC1xJQxCl3CHeXuJBfNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzgzNzYyZS0yYjI2LTQzNzQtYWU2NC0wYjZmMDU1MjIxMWUvMC9BRTc3MEEyMEI4 OUIwQjVDNDk0MzEwQTVEQzIxREU1RUUyNDE3Q0RDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURFNUVFMjQx N0NEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjc4Mzc2MmUtMmIyNi00Mzc0LWFl NjQtMGI2ZjA1NTIyMTFlLzAvQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURF NUVFMjQxN0NEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArIJLuvQJ8be5FM5P2qsApZup+dyA+EL1O7 T/wr0MmmShhMiFjeAs7yXLX2KHeIqO/4S60M45q0vUV+4e5jh3G7dT5SHxgBGgMn rXQhlQe58Z2etMP8LzvTCvR/RBt3TG0HJtFgWnd5aWuzVyVFqhOmhg22kRmEqeht exO9h/gGGZAi5Le9K84GEpNEezmqBhEo8ddoQ71y34GBi9yUV6phUyjwuXurGnBc 1M+MeuMFR0ZAS2JquxnzlilquIMg/TELjgR4HvAPAQy4xqO0RV3Rj+RClj2qNy+K zGfK8Knps30pkdAw4hYp06e9QIyclTnYTthIek+WVMzr37WHVok= -----END CERTIFICATE-----Generated at Thu Mar 26 22:34:38 2026 by rpki-client