$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: cgWfzcdF5tS1YUsXvlHrwtbsg5dGrJKWRffG5TpBT7w= Subject key identifier: DD:3F:F8:A4:22:03:92:24:73:3F:D0:E6:A9:BF:48:1E:B1:C9:88:F9 Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 1AC3D4DB9BD1191F950447C885FD60CF61084DF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 028D Signing time: Sat 28 Feb 2026 15:10:42 +0000 Manifest this update: Sat 28 Feb 2026 15:05:42 +0000 Manifest next update: Tue 03 Mar 2026 22:03:42 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: PoBQGTTVdZ+IhPBL33AKWC0XZzBoeNL3SR/edTekpAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c3:d4:db:9b:d1:19:1f:95:04:47:c8:85:fd:60:cf:61:08:4d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Feb 28 15:05:42 2026 GMT Not After : Mar 3 22:03:42 2026 GMT Subject: CN=DD3FF8A422039224733FD0E6A9BF481EB1C988F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:26:4d:d8:d4:45:da:14:7c:6c:b8:c0:a1:bb: 4f:de:c2:67:ce:b0:50:2b:28:04:d3:92:2c:db:f2: 05:2e:09:78:c5:86:35:c2:84:62:d9:c2:2b:47:0a: 68:93:0c:9f:60:5d:b7:5e:d0:65:a2:d6:ef:ea:25: 6d:ea:74:76:a9:ed:e2:bd:3d:80:4e:14:b6:0f:ea: 88:45:7f:1a:fc:3f:67:f9:9e:7c:fa:41:05:3b:e5: 77:29:6e:04:22:51:e5:b0:a5:45:10:ce:9e:d7:89: d0:d8:54:15:cc:8a:78:c1:79:c4:11:fb:db:d6:3d: f1:32:a6:e7:2c:20:a5:0e:27:a1:48:83:ce:86:36: 98:99:5f:c5:aa:6a:ee:e8:82:31:a2:39:88:06:61: 3b:d2:3e:e5:b4:58:31:b6:aa:d3:3d:42:b4:29:dc: 99:a2:a1:e0:75:62:0b:4a:0b:47:9e:b5:2d:7b:8e: a4:73:94:ae:c2:6b:4c:01:f9:37:79:02:e3:b8:e4: c5:a5:bf:8f:73:51:25:1f:af:19:f8:78:6c:c5:94: ee:56:35:7f:f6:82:cb:5b:a2:08:69:d3:55:b0:39: d8:21:5f:59:45:dd:80:6c:a2:e3:91:b0:08:f6:61: 73:47:1d:9a:2a:ac:c1:e7:39:f8:29:53:99:80:4c: 0e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3F:F8:A4:22:03:92:24:73:3F:D0:E6:A9:BF:48:1E:B1:C9:88:F9 X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b5:22:d1:bc:00:3e:67:ac:75:42:17:22:83:15:ef:aa:90: 77:41:c8:94:bb:05:32:3a:2b:0b:e1:18:1d:c8:04:7c:e6:74: 63:4e:ae:9c:cc:59:21:eb:be:db:a0:93:3e:c9:43:76:9d:cf: 5e:31:77:5b:a0:ef:46:fc:b7:81:fc:f9:9e:42:e4:3c:f5:17: 3c:67:fa:93:66:23:8c:7d:4d:43:25:bf:91:2d:9e:54:66:bd: c1:08:90:8c:52:e6:41:88:8d:c1:e7:f7:a7:4a:12:1f:a4:70: bf:19:08:a2:f7:68:71:f6:4e:ef:b6:6b:19:0f:c0:8d:88:a6: 92:02:02:67:d3:68:c1:f9:60:1f:ca:2b:b1:7c:96:1e:35:cd: fe:1c:46:93:b9:f5:04:f6:16:92:91:a0:42:a7:b1:0b:e1:92: d9:c6:3b:88:07:ac:43:f2:7d:a9:f7:ad:8e:37:31:db:39:6c: 34:63:a1:fc:81:04:53:4b:f4:1d:be:64:49:5d:af:b3:08:aa: 60:d4:3b:c7:32:cf:91:49:8c:5d:b1:60:c5:54:0d:a3:02:8e: dd:f4:04:ff:01:f3:99:2e:54:2d:2c:cc:e5:a6:e8:89:1e:fa: 8c:e0:6b:1a:2a:cb:cc:4f:1d:30:84:87:8f:0a:36:5b:4d:5c: c1:1f:d6:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsPU25vRGR+VBEfIhf1gz2EITfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNjAyMjgxNTA1NDJaFw0yNjAzMDMyMjAzNDJaMDMxMTAvBgNV BAMTKEREM0ZGOEE0MjIwMzkyMjQ3MzNGRDBFNkE5QkY0ODFFQjFDOTg4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiJk3Y1EXaFHxsuMChu0/ewmfO sFArKATTkizb8gUuCXjFhjXChGLZwitHCmiTDJ9gXbde0GWi1u/qJW3qdHap7eK9 PYBOFLYP6ohFfxr8P2f5nnz6QQU75XcpbgQiUeWwpUUQzp7XidDYVBXMinjBecQR +9vWPfEypucsIKUOJ6FIg86GNpiZX8Wqau7ogjGiOYgGYTvSPuW0WDG2qtM9QrQp 3JmioeB1YgtKC0eetS17jqRzlK7Ca0wB+Td5AuO45MWlv49zUSUfrxn4eGzFlO5W NX/2gstboghp01WwOdghX1lF3YBsouORsAj2YXNHHZoqrMHnOfgpU5mATA79AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3T/4pCIDkiRzP9Dmqb9IHrHJiPkwHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA61ItG8AD5nrHVCFyKDFe+qkHdByJS7BTI6 KwvhGB3IBHzmdGNOrpzMWSHrvtugkz7JQ3adz14xd1ug70b8t4H8+Z5C5Dz1Fzxn +pNmI4x9TUMlv5EtnlRmvcEIkIxS5kGIjcHn96dKEh+kcL8ZCKL3aHH2Tu+2axkP wI2IppICAmfTaMH5YB/KK7F8lh41zf4cRpO59QT2FpKRoEKnsQvhktnGO4gHrEPy fan3rY43Mds5bDRjofyBBFNL9B2+ZEldr7MIqmDUO8cyz5FJjF2xYMVUDaMCjt30 BP8B85kuVC0szOWm6Ike+ozgaxoqy8xPHTCEh48KNltNXMEf1r8= -----END CERTIFICATE-----Generated at Mon Mar 2 23:41:25 2026 by rpki-client