$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: 36WGc15fBRe9l93g0gA+mLx8nHykHhnn1QdoVhYVKUo= Subject key identifier: B3:B8:28:DD:7F:3D:58:E8:8F:69:36:73:57:FF:72:65:15:0C:E8:38 Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 48B8556FE2DF94F952712C43351E2B89C57BEEAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 028C Signing time: Sat 28 Feb 2026 12:00:05 +0000 Manifest this update: Sat 28 Feb 2026 11:55:05 +0000 Manifest next update: Tue 03 Mar 2026 12:15:05 +0000 Files and hashes: 1: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: BwSxbL94YX4LIiXvM+qxUu3MC8n8X5enerxUg1AwS9k=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: 6/L9OB0QhOR5SC/rJGv7qWwyRwcieoK2AORJh70ewMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b8:55:6f:e2:df:94:f9:52:71:2c:43:35:1e:2b:89:c5:7b:ee:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Feb 28 11:55:05 2026 GMT Not After : Mar 3 12:15:05 2026 GMT Subject: CN=B3B828DD7F3D58E88F69367357FF7265150CE838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:d8:7a:08:c2:7f:08:7e:22:9a:92:c5:2d: 57:fb:98:db:1e:49:3f:3a:0d:48:52:00:28:e4:47: 20:f0:4e:ad:b3:7e:de:1b:17:05:6d:3c:fd:25:e4: 86:b0:99:8f:70:b7:fa:d0:aa:1a:22:3e:ba:da:aa: c5:c1:ad:d8:6c:fd:16:76:bb:19:00:4b:8c:b0:48: b3:3d:b4:17:0c:a8:14:eb:04:67:7f:23:e7:da:86: 00:a6:21:82:22:da:85:90:5d:fb:9e:17:c4:91:b2: 8a:1a:a6:61:9c:c3:3c:51:46:e4:bf:59:31:12:31: 57:7e:76:9a:18:75:e8:c7:65:55:7f:f4:5d:70:90: ff:04:92:be:9c:a5:16:95:3f:cd:27:a9:f9:fa:db: 20:a1:be:dc:06:af:67:32:2a:2c:60:84:cf:34:24: 37:73:fb:22:95:f7:aa:e6:68:84:7c:42:8a:12:ea: 10:bc:1e:f9:19:d3:3a:f6:61:da:2d:20:9d:3c:32: bd:a5:6b:84:69:c9:17:f0:5b:2a:34:64:4e:f6:4c: 26:a7:b4:8a:f0:a2:e4:e3:e5:84:dd:b8:c3:e2:5b: 25:32:98:db:6e:a8:5f:74:30:be:59:8f:f2:c6:77: ec:c9:49:80:04:b5:7e:71:6c:e5:94:3a:e9:34:b2: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B8:28:DD:7F:3D:58:E8:8F:69:36:73:57:FF:72:65:15:0C:E8:38 X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:df:6c:07:49:45:0b:f5:5e:66:2f:a2:02:5c:45:58:2f:41: 21:3b:56:75:25:48:f5:94:b0:5e:5f:36:44:7f:90:86:d6:97: 8f:71:d5:8c:b8:15:00:e7:3c:ca:90:b8:a3:e3:ca:38:9e:bf: af:f8:7d:00:8b:5a:6d:3b:25:cf:30:26:52:8d:7b:96:7e:49: 77:d7:be:17:9c:e6:2a:49:6f:b9:b7:ed:70:e4:06:73:1a:2a: 7d:3d:5f:40:ea:53:0e:67:87:eb:ea:b4:57:9d:98:c3:d2:b2: 3e:96:03:d4:98:5d:e0:cb:76:2d:f8:44:9a:d3:91:a3:0c:67: 50:fb:8a:e9:1d:0e:3e:ef:3e:38:de:47:a3:03:5c:fe:6a:b4: da:b8:0d:2e:f9:8d:63:ad:ef:20:ec:a8:a4:9f:ce:bd:eb:14: 13:5e:37:c5:22:14:40:2f:2e:cd:99:70:a1:5b:58:17:bd:2c: 5b:ca:6c:87:cd:46:e6:ea:20:7c:06:c1:78:71:93:f8:61:32: a2:a1:83:4f:7f:c8:7b:ca:ee:45:17:f8:c2:10:0f:82:ad:5d: 9a:71:34:3e:c5:b8:e3:70:3e:69:27:a1:35:f1:48:9f:bf:83: 90:05:5b:10:3d:4b:ab:f3:11:ac:36:0e:22:ce:d3:17:78:9d: 0c:1f:68:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLhVb+LflPlScSxDNR4ricV77q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNjAyMjgxMTU1MDVaFw0yNjAzMDMxMjE1MDVaMDMxMTAvBgNV BAMTKEIzQjgyOEREN0YzRDU4RTg4RjY5MzY3MzU3RkY3MjY1MTUwQ0U4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9th6CMJ/CH4impLFLVf7mNse ST86DUhSACjkRyDwTq2zft4bFwVtPP0l5IawmY9wt/rQqhoiPrraqsXBrdhs/RZ2 uxkAS4ywSLM9tBcMqBTrBGd/I+fahgCmIYIi2oWQXfueF8SRsooapmGcwzxRRuS/ WTESMVd+dpoYdejHZVV/9F1wkP8Ekr6cpRaVP80nqfn62yChvtwGr2cyKixghM80 JDdz+yKV96rmaIR8QooS6hC8HvkZ0zr2YdotIJ08Mr2la4RpyRfwWyo0ZE72TCan tIrwouTj5YTduMPiWyUymNtuqF90ML5Zj/LGd+zJSYAEtX5xbOWUOuk0sm4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs7go3X89WOiPaTZzV/9yZRUM6DgwHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/fbAdJRQv1XmYvogJcRVgvQSE7VnUlSPWU sF5fNkR/kIbWl49x1Yy4FQDnPMqQuKPjyjiev6/4fQCLWm07Jc8wJlKNe5Z+SXfX vhec5ipJb7m37XDkBnMaKn09X0DqUw5nh+vqtFedmMPSsj6WA9SYXeDLdi34RJrT kaMMZ1D7iukdDj7vPjjeR6MDXP5qtNq4DS75jWOt7yDsqKSfzr3rFBNeN8UiFEAv Ls2ZcKFbWBe9LFvKbIfNRubqIHwGwXhxk/hhMqKhg09/yHvK7kUX+MIQD4KtXZpx ND7FuONwPmknoTXxSJ+/g5AFWxA9S6vzEaw2DiLO0xd4nQwfaIk= -----END CERTIFICATE-----Generated at Mon Mar 2 06:19:40 2026 by rpki-client