$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: ghNuN0M68isN0pNxvGSZsGOWrCPKhCQY1Xkb7fcZ4kk= Subject key identifier: 14:E4:F9:8D:AC:54:91:AB:FE:C9:B5:60:9E:54:33:C1:A4:95:D0:78 Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 5E32FCE519DC9D44F67AB279BA969735A5739FAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 0298 Signing time: Tue 24 Mar 2026 23:50:43 +0000 Manifest this update: Tue 24 Mar 2026 23:45:43 +0000 Manifest next update: Fri 27 Mar 2026 23:58:43 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: gNXTnbwoVxSU4nXxBkfMO08N9J5MzZOP9DOmVtRioKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:32:fc:e5:19:dc:9d:44:f6:7a:b2:79:ba:96:97:35:a5:73:9f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Mar 24 23:45:43 2026 GMT Not After : Mar 27 23:58:43 2026 GMT Subject: CN=14E4F98DAC5491ABFEC9B5609E5433C1A495D078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:cf:b5:3f:16:1e:a7:22:ab:16:b3:94:9f: c5:14:5e:62:e1:d1:f1:ab:7c:bd:d6:b2:00:e3:bb: a5:85:40:39:fd:1e:f2:13:e0:d9:5a:8c:27:2b:cc: dc:f7:2c:90:09:fd:84:54:a1:c8:87:94:3f:58:33: e2:ca:81:47:b9:88:76:00:2f:63:3c:df:be:ce:33: 36:3f:c7:2a:f1:06:5d:5c:d2:f8:5f:d8:c8:a5:9a: 5e:7d:3a:47:98:f0:1b:77:a5:d7:05:2e:dc:43:1a: d1:b4:2d:51:c8:21:a7:e2:b6:06:f5:32:9e:c8:ce: f5:ba:6b:c4:39:b2:f2:8a:94:e2:22:d7:82:f6:81: c5:b5:d9:04:8b:67:77:7f:5e:71:6f:1f:f5:0c:e0: 1a:3e:6a:9c:b4:fc:ef:79:c1:ed:3b:65:aa:06:65: 69:ff:ab:12:ad:42:ff:e5:0c:60:79:d6:2c:f1:e9: 57:a3:21:f7:db:62:1d:25:58:93:f0:70:d0:6c:c6: de:60:66:85:b8:35:2a:96:8c:8a:25:46:a8:13:8e: 42:d3:2d:05:50:39:8a:c4:c8:1f:c4:b3:e3:2a:62: 31:06:76:3b:98:cd:28:1b:df:bc:14:8c:8a:2d:8c: 3a:ef:f6:2b:fb:d9:e3:9f:5f:11:c1:1a:b8:c0:76: 3b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E4:F9:8D:AC:54:91:AB:FE:C9:B5:60:9E:54:33:C1:A4:95:D0:78 X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:04:23:25:99:f5:63:71:f7:44:be:3d:22:04:5e:bb:0b:7b: 33:43:f7:16:36:1e:ed:5b:f8:96:fb:3e:03:a7:df:1d:a7:81: c1:4f:87:47:3d:60:7d:e8:5d:92:e9:28:d7:0b:94:4f:99:8b: 6f:58:aa:52:45:87:53:11:88:57:64:25:26:7a:ae:af:7d:f3: dd:ac:a6:03:7e:c8:a1:9e:9d:f7:ce:84:2d:2f:0e:60:15:b8: c2:ba:32:a3:f9:68:2a:87:72:bd:69:e3:fe:64:52:54:3c:12: f4:47:fb:24:68:30:f4:e5:71:89:cd:97:37:ec:fb:26:37:39: bf:23:96:28:04:ee:a2:ea:00:32:78:37:41:7c:d2:8e:fc:f9: c5:3c:8a:a5:f6:8f:01:5f:3b:5b:6b:0c:85:1b:d6:a2:81:6d: b7:37:49:e5:72:17:8f:2e:b2:a6:44:bd:bf:6b:80:7a:7f:da: 87:f5:4a:aa:e0:4f:f8:0a:ce:1c:c0:61:35:d3:d8:7f:83:6e: c2:11:20:2f:ad:4d:95:84:fa:e2:79:88:c8:52:88:bd:20:f4: fb:68:6a:d4:8e:92:61:70:49:4d:02:9d:9f:5f:8f:30:99:17: ee:e3:02:fb:be:fa:58:59:34:37:e1:bd:c2:e1:57:e9:3f:9b: 56:53:31:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjL85RncnUT2erJ5upaXNaVzn64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNjAzMjQyMzQ1NDNaFw0yNjAzMjcyMzU4NDNaMDMxMTAvBgNV BAMTKDE0RTRGOThEQUM1NDkxQUJGRUM5QjU2MDlFNTQzM0MxQTQ5NUQwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqs+1PxYepyKrFrOUn8UUXmLh 0fGrfL3WsgDju6WFQDn9HvIT4NlajCcrzNz3LJAJ/YRUociHlD9YM+LKgUe5iHYA L2M8377OMzY/xyrxBl1c0vhf2Milml59OkeY8Bt3pdcFLtxDGtG0LVHIIafitgb1 Mp7IzvW6a8Q5svKKlOIi14L2gcW12QSLZ3d/XnFvH/UM4Bo+apy0/O95we07ZaoG ZWn/qxKtQv/lDGB51izx6VejIffbYh0lWJPwcNBsxt5gZoW4NSqWjIolRqgTjkLT LQVQOYrEyB/Es+MqYjEGdjuYzSgb37wUjIotjDrv9iv72eOfXxHBGrjAdjsvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFOT5jaxUkav+ybVgnlQzwaSV0HgwHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4EIyWZ9WNx90S+PSIEXrsLezND9xY2Hu1b +Jb7PgOn3x2ngcFPh0c9YH3oXZLpKNcLlE+Zi29YqlJFh1MRiFdkJSZ6rq99892s pgN+yKGenffOhC0vDmAVuMK6MqP5aCqHcr1p4/5kUlQ8EvRH+yRoMPTlcYnNlzfs +yY3Ob8jligE7qLqADJ4N0F80o78+cU8iqX2jwFfO1trDIUb1qKBbbc3SeVyF48u sqZEvb9rgHp/2of1SqrgT/gKzhzAYTXT2H+DbsIRIC+tTZWE+uJ5iMhSiL0g9Pto atSOkmFwSU0CnZ9fjzCZF+7jAvu++lhZNDfhvcLhV+k/m1ZTMdE= -----END CERTIFICATE-----Generated at Thu Mar 26 20:43:43 2026 by rpki-client