$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: jTtFVkZueWIjDt+4qcvFQuZQ23WBCn8EmcozgB92cfM= Subject key identifier: 14:19:FB:AF:1C:7C:2C:DE:C9:26:65:6B:CC:D8:F6:7D:DE:C0:88:1F Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 772A972E93054B3DA9732B3A87FBD6E79B2A3C7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 03D4 Signing time: Mon 02 Mar 2026 05:21:27 +0000 Manifest this update: Mon 02 Mar 2026 05:16:27 +0000 Manifest next update: Thu 05 Mar 2026 16:39:27 +0000 Files and hashes: 1: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: leQIFzfhdF/j+2WARbhidauNfnkPk96M+8kUEVb3ytU=) 2: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: c8ZBxIkYu4lQhPh7KOJpCZXHyG4WojlA9cssQRO5Q3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2a:97:2e:93:05:4b:3d:a9:73:2b:3a:87:fb:d6:e7:9b:2a:3c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: Mar 2 05:16:27 2026 GMT Not After : Mar 5 16:39:27 2026 GMT Subject: CN=1419FBAF1C7C2CDEC926656BCCD8F67DDEC0881F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:57:e0:d6:ff:3a:3c:f2:7f:72:54:be:b7: 58:02:e4:79:92:46:36:99:6f:46:7a:09:c0:c8:e9: 18:a7:81:eb:ca:91:63:2e:f6:2c:b8:9c:0f:42:a2: c0:73:82:26:75:af:b7:87:6e:40:6c:39:10:f5:d8: 99:58:41:fa:fa:32:bf:bf:66:d8:e3:56:39:f1:9e: 41:46:ad:f8:5a:eb:34:64:99:39:ce:7c:50:77:e9: ca:af:28:8c:0c:12:c2:aa:40:1d:8c:09:0f:0f:3a: 87:f5:c1:4d:ae:7d:90:a1:1d:63:dd:7f:3f:cc:99: d1:da:8a:8b:e3:a9:0e:74:87:7b:4a:6c:c3:e3:92: 09:b0:c3:0a:6c:ae:d2:50:8d:88:f4:a0:c1:b2:9c: 35:ed:08:c5:d2:83:62:8e:66:39:c1:f0:79:5b:32: ee:0a:a6:ae:14:9f:e6:b9:ed:d9:3d:05:53:a9:b5: 68:d7:b7:0f:f3:aa:40:e6:0f:47:cc:db:70:a3:53: dc:17:0c:45:7b:89:20:ce:5c:5c:c1:73:9c:fe:ac: 1f:ba:13:77:47:e6:d4:a6:49:08:f1:f6:49:a6:00: b8:08:17:bc:40:33:ef:f5:69:83:1e:90:e8:e7:aa: 6e:cf:65:e3:76:1f:67:c8:9e:b4:8f:eb:1c:60:35: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:19:FB:AF:1C:7C:2C:DE:C9:26:65:6B:CC:D8:F6:7D:DE:C0:88:1F X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c5:01:ca:46:53:91:38:49:4c:d1:26:9d:f0:22:95:6f:e5: c9:6c:09:4d:f6:e9:8a:c1:99:85:a8:b4:a1:bd:b6:84:f4:8c: b8:80:b4:13:6a:12:2a:a2:f9:5e:8a:ef:7f:b9:75:7b:25:96: 30:05:a3:62:f9:67:c6:04:35:5d:e9:77:a2:4f:00:aa:d0:ef: 81:a8:15:7b:be:c0:4e:3c:f5:1b:c1:01:a5:07:38:59:74:f6: 6e:ac:35:1a:19:3c:7c:26:aa:7c:1b:15:40:30:ba:fe:20:1f: 2a:86:39:92:5f:49:16:b1:62:6c:d9:e8:44:fb:df:04:eb:ef: b6:f1:b1:70:98:80:04:89:76:e2:07:d5:db:90:b0:d9:4c:70: 1e:3d:e7:e0:f0:93:ef:da:f7:cf:6e:6f:75:fe:95:8f:4f:ea: c2:1d:f2:91:1f:97:01:d6:62:64:80:0d:1c:be:dd:b7:11:5c: 78:a7:6f:66:40:72:70:00:23:9b:c7:5a:d0:be:01:5c:c9:ee: 67:3f:cb:a8:2a:f2:a1:fb:e7:a8:ec:cf:4b:2e:70:ea:30:1c: 11:78:46:0f:e8:80:3f:0c:8c:a2:ce:61:b7:3b:52:23:d1:b5: 5a:4b:89:9d:b2:1c:80:d7:33:fb:75:d7:f8:5c:d8:07:0c:72: 23:e7:0a:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyqXLpMFSz2pcys6h/vW55sqPHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNjAzMDIwNTE2MjdaFw0yNjAzMDUxNjM5MjdaMDMxMTAvBgNV BAMTKDE0MTlGQkFGMUM3QzJDREVDOTI2NjU2QkNDRDhGNjdEREVDMDg4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4u1fg1v86PPJ/clS+t1gC5HmS RjaZb0Z6CcDI6RingevKkWMu9iy4nA9CosBzgiZ1r7eHbkBsORD12JlYQfr6Mr+/ ZtjjVjnxnkFGrfha6zRkmTnOfFB36cqvKIwMEsKqQB2MCQ8POof1wU2ufZChHWPd fz/MmdHaiovjqQ50h3tKbMPjkgmwwwpsrtJQjYj0oMGynDXtCMXSg2KOZjnB8Hlb Mu4Kpq4Un+a57dk9BVOptWjXtw/zqkDmD0fM23CjU9wXDEV7iSDOXFzBc5z+rB+6 E3dH5tSmSQjx9kmmALgIF7xAM+/1aYMekOjnqm7PZeN2H2fInrSP6xxgNXGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFBn7rxx8LN7JJmVrzNj2fd7AiB8wHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/FAcpGU5E4SUzRJp3wIpVv5clsCU326YrB mYWotKG9toT0jLiAtBNqEiqi+V6K73+5dXslljAFo2L5Z8YENV3pd6JPAKrQ74Go FXu+wE489RvBAaUHOFl09m6sNRoZPHwmqnwbFUAwuv4gHyqGOZJfSRaxYmzZ6ET7 3wTr77bxsXCYgASJduIH1duQsNlMcB495+Dwk+/a989ub3X+lY9P6sId8pEflwHW YmSADRy+3bcRXHinb2ZAcnAAI5vHWtC+AVzJ7mc/y6gq8qH756jsz0sucOowHBF4 Rg/ogD8MjKLOYbc7UiPRtVpLiZ2yHIDXM/t11/hc2AcMciPnCiQ= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:29 2026 by rpki-client