$ rpki-client -vvf repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft File: AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft (raw, json) Hash identifier: jeDbS7H8FotrvZT+isU8G7hOjLPMJ+ROQJUbRcPYpMM= Subject key identifier: DC:7E:BF:6E:A8:1C:32:26:6B:51:D0:6F:DA:60:00:64:3A:A6:F4:81 Authority key identifier: AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 Certificate issuer: /CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Certificate serial: 342C9B9AC0F09C71E7157961654AABF0B6F17164 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft Manifest number: 020C Signing time: Wed 15 Apr 2026 06:21:22 +0000 Manifest this update: Wed 15 Apr 2026 06:16:22 +0000 Manifest next update: Sat 18 Apr 2026 16:53:22 +0000 Files and hashes: 1: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: x8NZlNlUyvGMlN8hhsJWtoHxl7LoXb2c6+KaZM2DY1Y=) 2: AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl (hash: Pqp7CDOPcyLHm+Ouh7m4bLASfcHSrBP3K641jKrYcqM=) 3: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: 1u3Z1lk6zXunvZlCpm0Bd5q9QPJyu+B5fC/Cft7A8RQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2c:9b:9a:c0:f0:9c:71:e7:15:79:61:65:4a:ab:f0:b6:f1:71:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Validity Not Before: Apr 15 06:16:22 2026 GMT Not After : Apr 18 16:53:22 2026 GMT Subject: CN=DC7EBF6EA81C32266B51D06FDA6000643AA6F481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:ac:96:1a:ac:52:65:45:5c:4c:6c:8f:db: a9:e9:41:be:aa:46:e0:14:57:8f:ba:19:52:03:a1: ae:eb:f3:03:ef:36:58:bf:20:56:ac:dd:5a:25:0b: 41:fb:67:31:aa:52:14:85:ba:d4:59:de:30:dc:c3: d4:92:4f:38:58:35:be:9c:6b:f9:32:b0:ea:35:ef: 3d:8b:b6:28:11:8e:45:56:c0:5b:e1:47:3b:45:7b: b5:f8:6e:49:d2:80:47:f0:c7:84:3c:cd:4e:c0:f1: ef:7f:84:8f:e5:76:34:a7:7d:7b:72:7d:a3:89:af: e0:a2:8e:4c:60:24:7e:3e:8d:3b:31:63:39:01:d6: 80:c1:b3:0a:96:e2:23:66:83:0c:43:54:c3:8e:78: b6:b4:9a:58:7c:91:46:2b:eb:6e:f7:b7:cd:00:2b: 98:43:ba:a0:60:e5:39:ab:51:5b:93:e1:36:4b:c9: b4:57:57:1f:d2:76:7c:0b:90:5e:70:9c:c0:ff:08: f3:f5:e3:9e:4f:34:1f:58:58:4f:ad:5f:bf:1a:4d: 71:43:d1:b9:3c:85:43:0f:a6:d5:bd:73:71:b0:44: 7d:08:9b:9e:a3:55:f7:25:4b:c8:fd:1b:ef:28:79: a6:7d:30:56:40:26:99:d3:e0:ac:e7:30:1f:b8:76: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7E:BF:6E:A8:1C:32:26:6B:51:D0:6F:DA:60:00:64:3A:A6:F4:81 X509v3 Authority Key Identifier: keyid:AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:e3:73:88:b0:3d:48:92:ea:ce:be:79:a4:9e:c2:1b:dd:9f: ce:4f:00:4a:f5:d3:2a:36:15:5c:61:13:04:1d:2e:7b:83:8f: e1:55:8b:6f:bb:97:9d:e7:11:17:08:74:91:6d:bb:e6:d2:eb: 90:dd:ed:c8:54:9b:73:33:a1:30:72:95:60:31:88:41:11:41: d1:17:0f:01:f3:58:fe:fb:c8:fc:c8:65:fa:50:e7:ff:06:9a: 54:a3:26:09:52:a2:51:42:80:95:fa:f5:6c:f3:77:85:75:22: f2:96:0d:dd:a7:51:ef:d8:ff:75:e5:ae:2d:4a:22:f5:6c:04: 21:46:ab:46:79:3e:bf:29:65:95:67:e0:19:5c:e7:6e:84:d2: c9:ef:fe:25:2b:49:f1:24:7a:7a:1f:58:75:06:6d:8c:ed:18: f4:d2:5d:37:87:78:57:32:c8:50:09:4b:22:bc:45:1d:6c:98: 6b:f3:f7:c7:c4:e2:6a:5c:a9:d6:5c:b4:b9:58:7e:f6:f9:cc: 8f:b2:76:42:dd:a9:3b:8c:52:50:3f:f0:1d:ec:f6:49:0d:90: e1:e0:53:8c:8c:03:da:a0:06:7e:03:c7:35:58:4a:84:3b:cb: db:2c:6a:2d:47:13:44:27:4e:59:46:e8:32:06:b0:f8:c4:bb: ff:93:1e:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNCybmsDwnHHnFXlhZUqr8LbxcWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2 OUZGNUUyMDAeFw0yNjA0MTUwNjE2MjJaFw0yNjA0MTgxNjUzMjJaMDMxMTAvBgNV BAMTKERDN0VCRjZFQTgxQzMyMjY2QjUxRDA2RkRBNjAwMDY0M0FBNkY0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/I6yWGqxSZUVcTGyP26npQb6q RuAUV4+6GVIDoa7r8wPvNli/IFas3VolC0H7ZzGqUhSFutRZ3jDcw9SSTzhYNb6c a/kysOo17z2LtigRjkVWwFvhRztFe7X4bknSgEfwx4Q8zU7A8e9/hI/ldjSnfXty faOJr+CijkxgJH4+jTsxYzkB1oDBswqW4iNmgwxDVMOOeLa0mlh8kUYr6273t80A K5hDuqBg5TmrUVuT4TZLybRXVx/SdnwLkF5wnMD/CPP1455PNB9YWE+tX78aTXFD 0bk8hUMPptW9c3GwRH0Im56jVfclS8j9G+8oeaZ9MFZAJpnT4KznMB+4dvPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3H6/bqgcMiZrUdBv2mAAZDqm9IEwHwYDVR0j BBgwFoAUrnthqcFnk3hMwlzsApVRbGn/XiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTg5NWNlYi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC9BRTdCNjFBOUMx Njc5Mzc4NENDMjVDRUMwMjk1NTE2QzY5RkY1RTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2OUZG NUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUx NkM2OUZGNUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMvjc4iwPUiS6s6+eaSewhvdn85PAEr10yo2 FVxhEwQdLnuDj+FVi2+7l53nERcIdJFtu+bS65Dd7chUm3MzoTBylWAxiEERQdEX DwHzWP77yPzIZfpQ5/8GmlSjJglSolFCgJX69Wzzd4V1IvKWDd2nUe/Y/3Xlri1K IvVsBCFGq0Z5Pr8pZZVn4Blc526E0snv/iUrSfEkenofWHUGbYztGPTSXTeHeFcy yFAJSyK8RR1smGvz98fE4mpcqdZctLlYfvb5zI+ydkLdqTuMUlA/8B3s9kkNkOHg U4yMA9qgBn4DxzVYSoQ7y9ssai1HE0QnTllG6DIGsPjEu/+THhY= -----END CERTIFICATE-----Generated at Fri Apr 17 17:17:08 2026 by rpki-client