$ rpki-client -vvf repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft File: AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft (raw, json) Hash identifier: umCl0xNe5ipR8usKesZAStPo1031jSv56UToOKniJXw= Subject key identifier: 21:4D:06:65:AC:C4:CE:23:6C:EF:AF:76:A0:4C:94:0A:1A:51:02:80 Authority key identifier: AE:77:0A:20:B8:9B:0B:5C:49:43:10:A5:DC:21:DE:5E:E2:41:7C:DC Certificate issuer: /CN=AE770A20B89B0B5C494310A5DC21DE5EE2417CDC Certificate serial: 2D0C7A6DD682B3F08A9AED5E82E50A95E75C1574 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 05:01:46 +0000 Manifest this update: Mon 02 Mar 2026 04:56:46 +0000 Manifest next update: Thu 05 Mar 2026 12:19:46 +0000 Files and hashes: 1: AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl (hash: HqQ1SswqMEWm5St9nw2oucShEdWxn2HmS5nV6TRyyr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0c:7a:6d:d6:82:b3:f0:8a:9a:ed:5e:82:e5:0a:95:e7:5c:15:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE770A20B89B0B5C494310A5DC21DE5EE2417CDC Validity Not Before: Mar 2 04:56:46 2026 GMT Not After : Mar 5 12:19:46 2026 GMT Subject: CN=214D0665ACC4CE236CEFAF76A04C940A1A510280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:9f:72:5d:d8:88:e1:af:01:41:62:4d:20: 1e:ae:9a:35:35:a7:02:6b:da:7f:b4:d1:65:5c:e7: b5:f0:fb:f4:eb:36:68:55:42:48:60:8b:a3:f8:cd: 7f:ab:69:75:d6:83:72:e8:c2:81:a1:38:36:47:f2: 41:53:0f:c4:e5:ba:a7:35:02:4c:33:f8:9e:49:63: b0:be:3a:9b:df:9a:6f:2e:e5:b9:f9:5e:ce:b7:ac: 08:01:ff:7f:e0:8f:76:39:b6:0a:71:1a:d1:b3:eb: 1d:f4:42:d3:82:a5:1c:c4:b8:40:fa:87:a0:c7:ae: c0:ee:d7:ea:d2:90:72:31:9a:20:21:22:30:7b:24: e2:18:f2:a3:71:57:28:eb:a2:3c:f4:b4:6c:87:ee: f2:0d:cf:dc:5b:65:2e:a4:de:98:36:63:58:9a:ac: 61:c0:af:9e:57:ed:a9:00:6a:a4:02:08:5e:09:4b: b1:53:09:d5:8f:c3:37:85:b1:90:1b:e7:4d:fa:b4: 70:0b:b6:26:78:f0:97:30:20:57:e8:b9:1f:37:3e: 9f:12:21:28:ea:91:b3:78:62:7f:4b:14:3e:96:9c: df:ab:e3:10:c2:20:cc:1c:45:5f:9a:fa:21:0c:fb: 43:3b:06:74:76:a3:9e:11:57:af:43:a4:c0:3b:36: 09:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4D:06:65:AC:C4:CE:23:6C:EF:AF:76:A0:4C:94:0A:1A:51:02:80 X509v3 Authority Key Identifier: keyid:AE:77:0A:20:B8:9B:0B:5C:49:43:10:A5:DC:21:DE:5E:E2:41:7C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a2:8f:90:6b:70:1f:f4:1a:8b:25:64:ab:6b:81:d4:4a:8b: d3:04:0a:24:dd:b8:6a:57:14:53:15:97:1a:0a:ba:df:e0:ec: 5f:47:a8:32:b8:24:a4:a9:c5:89:79:23:d6:f9:45:35:be:c3: 7c:05:a9:13:71:ea:9e:52:fa:b1:d2:ab:1c:60:5a:08:33:55: 71:ff:03:4d:51:e4:c7:cf:35:a6:74:e7:b7:e6:72:59:df:6f: ea:7f:b5:5f:97:9e:b6:72:53:80:bb:3e:d0:fc:02:25:0c:14: 04:5d:2f:6d:b7:dc:94:50:37:e6:4a:39:e8:c5:81:01:b1:36: c7:c8:79:8f:07:36:63:71:42:45:69:e9:3a:32:4c:c8:09:0b: 84:70:b0:52:00:43:3b:42:fd:06:47:e9:5a:33:95:48:4e:0d: 49:f8:3e:34:31:16:cf:a1:a2:f8:7f:5e:09:77:05:e7:d8:a7: dd:f7:9f:82:0d:33:34:ad:cb:cc:90:7c:30:43:75:45:1a:08: aa:7f:ce:47:ee:5d:62:2b:b6:4d:46:e0:40:b4:59:3c:70:bc: 89:a0:d1:76:6d:16:52:6b:fb:7e:de:ac:54:ec:71:3c:cb:f5: e8:bc:52:4b:65:62:b8:f3:4d:18:f4:48:b9:ed:78:f3:17:ef: d8:ee:86:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQx6bdaCs/CKmu1eguUKledcFXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURFNUVF MjQxN0NEQzAeFw0yNjAzMDIwNDU2NDZaFw0yNjAzMDUxMjE5NDZaMDMxMTAvBgNV BAMTKDIxNEQwNjY1QUNDNENFMjM2Q0VGQUY3NkEwNEM5NDBBMUE1MTAyODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrJ9yXdiI4a8BQWJNIB6umjU1 pwJr2n+00WVc57Xw+/TrNmhVQkhgi6P4zX+raXXWg3LowoGhODZH8kFTD8Tluqc1 Akwz+J5JY7C+Opvfmm8u5bn5Xs63rAgB/3/gj3Y5tgpxGtGz6x30QtOCpRzEuED6 h6DHrsDu1+rSkHIxmiAhIjB7JOIY8qNxVyjrojz0tGyH7vINz9xbZS6k3pg2Y1ia rGHAr55X7akAaqQCCF4JS7FTCdWPwzeFsZAb5036tHALtiZ48JcwIFfouR83Pp8S ISjqkbN4Yn9LFD6WnN+r4xDCIMwcRV+a+iEM+0M7BnR2o54RV69DpMA7NgltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIU0GZazEziNs7692oEyUChpRAoAwHwYDVR0j BBgwFoAUrncKILibC1xJQxCl3CHeXuJBfNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzgzNzYyZS0yYjI2LTQzNzQtYWU2NC0wYjZmMDU1MjIxMWUvMC9BRTc3MEEyMEI4 OUIwQjVDNDk0MzEwQTVEQzIxREU1RUUyNDE3Q0RDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURFNUVFMjQx N0NEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjc4Mzc2MmUtMmIyNi00Mzc0LWFl NjQtMGI2ZjA1NTIyMTFlLzAvQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURF NUVFMjQxN0NEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGij5BrcB/0GoslZKtrgdRKi9MECiTduGpX FFMVlxoKut/g7F9HqDK4JKSpxYl5I9b5RTW+w3wFqRNx6p5S+rHSqxxgWggzVXH/ A01R5MfPNaZ057fmclnfb+p/tV+XnrZyU4C7PtD8AiUMFARdL2233JRQN+ZKOejF gQGxNsfIeY8HNmNxQkVp6ToyTMgJC4RwsFIAQztC/QZH6VozlUhODUn4PjQxFs+h ovh/Xgl3BefYp933n4INMzSty8yQfDBDdUUaCKp/zkfuXWIrtk1G4EC0WTxwvImg 0XZtFlJr+37erFTscTzL9ei8UktlYrjzTRj0SLntePMX79juhhE= -----END CERTIFICATE-----Generated at Mon Mar 2 14:43:40 2026 by rpki-client