$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: cqYBajSjzInYp8z7ZiBKrpv6IEj9XZNmmcJa44k93OA= Subject key identifier: 3C:13:24:A4:FE:2F:7A:68:C6:4A:1E:C1:FB:2E:78:E7:7F:85:40:47 Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 34A0FC68B9994DFF1A708F6840768AD8A96EB8F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 02A2 Signing time: Thu 16 Apr 2026 15:20:43 +0000 Manifest this update: Thu 16 Apr 2026 15:15:43 +0000 Manifest next update: Mon 20 Apr 2026 00:41:43 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: kwrepS04haS/IlvkrQJWP7NRYsJ0sSq/5ouqDdnPvBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a0:fc:68:b9:99:4d:ff:1a:70:8f:68:40:76:8a:d8:a9:6e:b8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Apr 16 15:15:43 2026 GMT Not After : Apr 20 00:41:43 2026 GMT Subject: CN=3C1324A4FE2F7A68C64A1EC1FB2E78E77F854047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a7:81:0c:12:e9:ab:7e:c4:44:78:d4:86:d8: 51:af:2d:51:68:01:29:f8:30:97:4b:43:83:91:18: f0:c9:b3:5e:ce:7c:6e:39:51:3e:62:df:55:2c:90: 0c:fc:6b:d9:f8:e8:20:86:ba:25:57:92:9f:1f:61: 12:b5:04:20:2d:fc:46:57:4d:a7:d5:49:5e:c1:39: f6:b6:06:0b:83:bd:4a:03:09:cd:66:e6:fe:62:80: 97:27:6b:26:f1:b2:f1:22:9b:94:0e:5a:05:bd:17: 5f:d2:51:1d:b3:00:ff:a3:19:07:2c:37:74:82:c6: 67:5d:8e:85:01:f9:c7:47:42:b6:08:a9:b0:ad:75: 97:2d:90:a3:38:6e:25:b2:92:b1:ac:53:b9:48:81: 16:6f:be:24:c1:8d:b6:23:10:64:3d:8a:ac:e5:bd: 8c:71:a7:6a:62:0b:c9:e3:89:ec:35:b7:8f:fc:ee: 80:45:df:c3:b4:4b:2c:dd:43:e0:d9:21:52:77:49: a8:2c:5f:95:a3:f5:c9:2a:51:b7:a4:14:eb:1a:b5: 02:4f:fd:16:d2:1f:dd:e9:f0:58:66:63:0d:16:d1: 51:b4:c7:d6:16:cb:57:8c:82:1a:35:ce:5d:71:f8: 86:2b:34:25:26:d2:ab:36:aa:38:44:04:34:37:d6: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:13:24:A4:FE:2F:7A:68:C6:4A:1E:C1:FB:2E:78:E7:7F:85:40:47 X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6f:54:7e:3e:52:96:ef:e3:47:3e:ec:18:b5:9b:cb:ed:3e: 6a:d2:dc:14:e5:8d:dd:f4:ee:41:8b:72:0b:54:14:b8:34:14: 36:5e:7b:c7:d6:d3:ca:ae:5c:bb:d4:d8:62:87:8e:a0:49:b0: cd:28:51:e9:97:b3:49:f8:f6:b9:8c:05:3e:f9:d2:18:f9:7e: 17:13:e7:b3:88:06:f4:d1:8e:67:a8:87:6b:28:f7:0f:46:44: 39:17:6e:89:5e:19:42:1c:02:a0:12:88:7c:cc:e9:58:a4:74: f9:e3:fa:91:4d:b8:59:4f:55:ba:cf:95:09:18:69:2f:2e:fc: 41:f2:bf:b9:d8:ff:d6:ff:13:ee:a5:28:13:29:99:f2:fb:e5: 8a:a3:94:67:24:5c:16:28:ee:50:6e:f2:91:09:68:59:c2:ae: 3c:c7:96:c9:70:cf:cb:43:e3:36:c7:6c:bc:ec:47:3f:e2:61: 0a:0d:84:17:5c:de:6d:b0:20:ca:84:b1:d2:b9:24:f2:99:29: 71:0e:82:e5:90:83:e3:a1:a0:a9:0e:be:19:a0:c9:24:b5:d4: 9b:d5:4e:4b:05:9f:da:dd:d3:90:2c:6d:74:a8:69:12:c4:92: d1:5a:54:53:30:1a:8e:52:7e:69:a5:33:7c:05:10:bc:f7:8d: 57:bf:8a:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKD8aLmZTf8acI9oQHaK2KluuPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNjA0MTYxNTE1NDNaFw0yNjA0MjAwMDQxNDNaMDMxMTAvBgNV BAMTKDNDMTMyNEE0RkUyRjdBNjhDNjRBMUVDMUZCMkU3OEU3N0Y4NTQwNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVp4EMEumrfsREeNSG2FGvLVFo ASn4MJdLQ4ORGPDJs17OfG45UT5i31UskAz8a9n46CCGuiVXkp8fYRK1BCAt/EZX TafVSV7BOfa2BguDvUoDCc1m5v5igJcnaybxsvEim5QOWgW9F1/SUR2zAP+jGQcs N3SCxmddjoUB+cdHQrYIqbCtdZctkKM4biWykrGsU7lIgRZvviTBjbYjEGQ9iqzl vYxxp2piC8njiew1t4/87oBF38O0SyzdQ+DZIVJ3SagsX5Wj9ckqUbekFOsatQJP /RbSH93p8FhmYw0W0VG0x9YWy1eMgho1zl1x+IYrNCUm0qs2qjhEBDQ31omBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPBMkpP4vemjGSh7B+y5453+FQEcwHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1vVH4+Upbv40c+7Bi1m8vtPmrS3BTljd30 7kGLcgtUFLg0FDZee8fW08quXLvU2GKHjqBJsM0oUemXs0n49rmMBT750hj5fhcT 57OIBvTRjmeoh2so9w9GRDkXboleGUIcAqASiHzM6VikdPnj+pFNuFlPVbrPlQkY aS8u/EHyv7nY/9b/E+6lKBMpmfL75YqjlGckXBYo7lBu8pEJaFnCrjzHlslwz8tD 4zbHbLzsRz/iYQoNhBdc3m2wIMqEsdK5JPKZKXEOguWQg+OhoKkOvhmgySS11JvV TksFn9rd05AsbXSoaRLEktFaVFMwGo5SfmmlM3wFELz3jVe/isc= -----END CERTIFICATE-----Generated at Sat Apr 18 05:01:33 2026 by rpki-client