$ rpki-client -vvf repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft File: AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft (raw, json) Hash identifier: 8IqMMuBHogMbGuiNxDfmk1wIc5xQLHfHpYdsRMsEAwk= Subject key identifier: E6:9F:2F:15:B4:C8:1D:89:AD:AF:C6:8D:72:C1:4F:5D:4C:14:14:91 Authority key identifier: AE:05:90:FE:03:68:DD:08:1C:C9:37:60:B9:FC:7C:52:44:A6:D1:5F Certificate issuer: /CN=AE0590FE0368DD081CC93760B9FC7C5244A6D15F Certificate serial: 2023CDAFD38C6E72B6BE707D60444C587FBE7500 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft Manifest number: 11 Signing time: Fri 17 Apr 2026 07:42:21 +0000 Manifest this update: Fri 17 Apr 2026 07:37:21 +0000 Manifest next update: Mon 20 Apr 2026 15:16:21 +0000 Files and hashes: 1: AE0590FE0368DD081CC93760B9FC7C5244A6D15F.crl (hash: eSMyxXOlbRlfsGJ+63E8yx5QkxyOiABKmE10gEMErLE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.crl rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:23:cd:af:d3:8c:6e:72:b6:be:70:7d:60:44:4c:58:7f:be:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE0590FE0368DD081CC93760B9FC7C5244A6D15F Validity Not Before: Apr 17 07:37:21 2026 GMT Not After : Apr 20 15:16:21 2026 GMT Subject: CN=E69F2F15B4C81D89ADAFC68D72C14F5D4C141491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8d:d8:54:59:87:a1:34:16:f8:37:b3:2b:f6: f9:a0:32:fe:cc:61:8c:84:99:78:b5:a0:e9:39:22: d5:33:b6:1a:92:d5:31:b8:1a:5c:25:a2:66:8a:1f: bf:c8:dc:51:33:eb:d3:d4:ff:40:50:89:b4:52:39: 98:b9:a9:61:e0:e3:06:77:fe:3d:7a:38:37:20:e2: fb:7e:24:53:b7:44:de:11:4e:4a:06:ec:7d:bb:54: 63:9c:c7:df:50:8d:e7:48:98:c2:a7:b2:ea:dd:bb: b1:c4:29:0e:43:77:c6:8c:5f:d1:bc:af:7b:f8:6e: 30:d0:5d:e7:5f:a7:5a:68:52:db:45:e1:e4:3a:01: f9:4e:bd:a2:20:27:cd:ba:7c:09:e3:8b:27:41:df: 71:c8:1e:21:87:fd:8c:30:48:3a:5e:4f:da:10:c2: a5:75:19:00:87:db:1b:1c:b8:93:10:c3:e0:be:3e: e4:4f:62:09:13:d0:96:dc:50:0b:b8:13:d0:36:02: 60:35:34:6b:c2:8b:8f:49:2e:17:91:a6:26:fb:fc: d8:b8:e1:bd:2e:84:a1:33:0b:b5:78:a1:53:eb:99: 87:04:bd:a1:0f:3c:41:54:f5:3d:4f:b3:1a:d2:00: 88:88:aa:86:49:b3:ac:3e:c3:b8:7e:56:ce:c2:c8: cb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9F:2F:15:B4:C8:1D:89:AD:AF:C6:8D:72:C1:4F:5D:4C:14:14:91 X509v3 Authority Key Identifier: keyid:AE:05:90:FE:03:68:DD:08:1C:C9:37:60:B9:FC:7C:52:44:A6:D1:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:69:f0:3e:ee:95:76:26:ce:30:f2:70:c0:84:5f:47:a0:5b: 97:63:af:f3:ba:c8:73:3f:ea:55:89:74:14:0c:77:7d:41:c0: a3:2c:3f:9a:22:73:49:49:fe:f8:da:d1:7c:02:46:5f:e2:c7: e6:cf:13:22:b9:89:e6:e4:f5:80:41:56:61:6a:4f:b5:ce:86: e0:28:8f:e3:19:cb:3e:c8:65:af:31:66:79:70:98:d9:da:4d: e0:e5:8d:0a:9e:af:c6:f6:77:4f:f5:83:8c:d9:aa:05:83:24: 38:de:20:d7:72:4e:b1:33:b2:3b:30:7b:a4:12:60:09:a5:51: f1:34:82:12:a6:86:10:ff:ed:64:f9:b4:cd:0f:e4:c4:46:b8: b5:bb:cd:73:e6:cc:8b:ba:4c:02:97:84:60:f6:5d:34:b5:40: bf:7d:09:cb:ee:66:49:62:30:18:1b:a7:ad:28:5a:57:53:2f: 2f:9a:07:5c:12:26:c9:ab:5a:a0:d8:72:21:9b:ae:db:aa:36: 07:92:5c:2c:d0:cb:1b:9c:31:2c:55:f5:e5:7b:b5:5d:70:c0: 1e:20:d4:9d:17:35:21:a9:1c:18:45:14:f3:a1:ef:ee:9d:e0: dc:95:6b:2c:a9:23:91:49:10:ac:9a:63:c0:24:d5:62:31:e9: 0d:b6:11:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICPNr9OMbnK2vnB9YERMWH++dQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwNTkwRkUwMzY4REQwODFDQzkzNzYwQjlGQzdDNTI0 NEE2RDE1RjAeFw0yNjA0MTcwNzM3MjFaFw0yNjA0MjAxNTE2MjFaMDMxMTAvBgNV BAMTKEU2OUYyRjE1QjRDODFEODlBREFGQzY4RDcyQzE0RjVENEMxNDE0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejdhUWYehNBb4N7Mr9vmgMv7M YYyEmXi1oOk5ItUzthqS1TG4GlwlomaKH7/I3FEz69PU/0BQibRSOZi5qWHg4wZ3 /j16ODcg4vt+JFO3RN4RTkoG7H27VGOcx99QjedImMKnsurdu7HEKQ5Dd8aMX9G8 r3v4bjDQXedfp1poUttF4eQ6AflOvaIgJ826fAnjiydB33HIHiGH/YwwSDpeT9oQ wqV1GQCH2xscuJMQw+C+PuRPYgkT0JbcUAu4E9A2AmA1NGvCi49JLheRpib7/Ni4 4b0uhKEzC7V4oVPrmYcEvaEPPEFU9T1PsxrSAIiIqoZJs6w+w7h+Vs7CyMtTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5p8vFbTIHYmtr8aNcsFPXUwUFJEwHwYDVR0j BBgwFoAUrgWQ/gNo3QgcyTdgufx8UkSm0V8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTM1ODUwZS00YmZhLTQ1MDQtYmJlYy02YzZiMmNjM2JhMjkvMC9BRTA1OTBGRTAz NjhERDA4MUNDOTM3NjBCOUZDN0M1MjQ0QTZEMTVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUwNTkwRkUwMzY4REQwODFDQzkzNzYwQjlGQzdDNTI0NEE2 RDE1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjUzNTg1MGUtNGJmYS00NTA0LWJi ZWMtNmM2YjJjYzNiYTI5LzAvQUUwNTkwRkUwMzY4REQwODFDQzkzNzYwQjlGQzdD NTI0NEE2RDE1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANpp8D7ulXYmzjDycMCEX0egW5djr/O6yHM/ 6lWJdBQMd31BwKMsP5oic0lJ/vja0XwCRl/ix+bPEyK5iebk9YBBVmFqT7XOhuAo j+MZyz7IZa8xZnlwmNnaTeDljQqer8b2d0/1g4zZqgWDJDjeINdyTrEzsjswe6QS YAmlUfE0ghKmhhD/7WT5tM0P5MRGuLW7zXPmzIu6TAKXhGD2XTS1QL99CcvuZkli MBgbp60oWldTLy+aB1wSJsmrWqDYciGbrtuqNgeSXCzQyxucMSxV9eV7tV1wwB4g 1J0XNSGpHBhFFPOh7+6d4NyVayypI5FJEKyaY8Ak1WIx6Q22EVo= -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:55 2026 by rpki-client