$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft File: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft (raw, json) Hash identifier: I4AfROb7tqMes4adZ8KKEZyv3nd3bDRYz7uKGnawTZo= Subject key identifier: D5:B2:FA:48:87:6F:EC:FA:20:84:87:CC:A6:B7:DF:BD:81:B4:D9:53 Authority key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Certificate issuer: /CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Certificate serial: 091F8298820D6024F957E673209B858DED8BB82A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft Manifest number: 035B Signing time: Fri 17 Apr 2026 17:02:03 +0000 Manifest this update: Fri 17 Apr 2026 16:57:03 +0000 Manifest next update: Tue 21 Apr 2026 00:34:03 +0000 Files and hashes: 1: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: gOoZfgSIZIk3IBqctpdE6ERoqLaD97A4ApFjnTt/tAE=) 2: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl (hash: YZRhTjrRXuyYefZzYINm6/vQhK5z1+YQ17U3fvtH1jo=) 3: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: U53MbJZVdHMZelcGWK9+w7EaXlcDpDpc+jeZ3MbM1Kw=) 4: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: jtOEt7E3nAQ6Fw9cITIUUkvRpfUDsJxH4CxbFv1xpGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1f:82:98:82:0d:60:24:f9:57:e6:73:20:9b:85:8d:ed:8b:b8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Validity Not Before: Apr 17 16:57:03 2026 GMT Not After : Apr 21 00:34:03 2026 GMT Subject: CN=D5B2FA48876FECFA208487CCA6B7DFBD81B4D953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:36:01:d0:74:68:76:66:da:ce:80:fa:d2: 71:cc:a0:92:00:ae:7b:e2:4e:7f:9e:c1:9a:8c:d4: 59:82:e8:d5:56:68:bc:18:0c:16:70:5d:73:30:e0: 62:5a:72:91:e6:ee:88:b0:80:d9:2e:3d:3d:2c:85: 18:8b:0e:54:94:7b:f8:07:29:0d:65:24:e6:35:fa: 33:bb:4b:62:a7:fe:f5:7a:5b:d2:f5:37:d5:b4:37: bd:cc:b2:05:6c:6a:f3:ca:4e:94:22:27:0c:3f:7b: f0:77:e1:0c:6d:ce:7b:42:15:92:4a:12:18:1c:48: 3e:81:ae:39:4c:54:35:33:0a:b0:be:86:47:8b:e0: d3:70:1f:12:c9:5c:41:f2:a6:3b:a7:d0:4f:42:d5: 1b:cc:ea:94:8f:62:65:18:51:22:9c:4b:6a:ee:14: 87:7f:fe:23:34:16:0e:7d:0a:8b:bc:d5:9c:17:74: c1:12:9d:0b:13:f1:58:65:9d:76:93:4e:b0:bc:34: c6:88:dc:47:14:b1:16:f7:03:dd:65:d1:f9:bd:13: 4a:5a:91:dc:ce:c8:44:8d:72:73:47:d4:35:a3:f6: 6c:6a:24:85:84:50:8f:b7:fc:d5:e3:4b:83:70:48: e1:a1:0b:0d:58:04:f6:8b:6d:76:5d:4f:c9:7b:bf: 06:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B2:FA:48:87:6F:EC:FA:20:84:87:CC:A6:B7:DF:BD:81:B4:D9:53 X509v3 Authority Key Identifier: keyid:AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:5c:80:ba:3d:e5:e1:92:4d:c9:b6:48:f0:8c:dc:e7:9e:4b: 28:d1:1a:8b:96:fe:4b:08:0b:19:17:c4:06:37:1b:33:4b:56: 92:40:9b:b6:91:e0:9c:3e:f5:aa:04:96:e0:1d:4a:81:89:0e: 1a:66:76:c6:72:22:01:e5:4d:9d:cd:99:a3:f2:0c:18:c2:22: ea:d7:07:6a:7f:25:ea:3f:e7:0d:8e:96:26:a2:c5:d9:0c:23: f4:56:71:8c:ed:2c:29:6e:33:c5:74:cb:9a:b1:0c:d1:0c:ae: 95:27:fe:fd:5a:30:ba:f9:11:c1:95:09:47:89:d7:d0:55:3d: bb:77:18:01:52:9b:bf:11:d5:45:e8:3e:06:3f:19:93:11:72: 38:9c:18:9b:c5:e5:b6:28:52:5b:74:33:2e:f4:08:6d:1e:36: 42:d1:55:55:7a:8a:ff:91:07:be:f9:19:a9:50:e7:9e:3f:ca: ae:ad:6a:e6:65:30:ab:ae:32:27:96:e7:84:4d:27:01:6e:de: 97:4b:89:45:e7:fc:bf:1c:62:30:ee:30:45:06:3c:23:87:a3: f9:b1:54:fa:6c:2c:80:9b:d9:7a:79:8a:89:c9:7e:dc:f9:e9: e9:57:9b:69:f9:98:20:c5:9f:76:85:4e:36:dc:a7:90:0b:f6: d8:5c:82:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCR+CmIINYCT5V+ZzIJuFje2LuCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5 MjMxMDUwNDAeFw0yNjA0MTcxNjU3MDNaFw0yNjA0MjEwMDM0MDNaMDMxMTAvBgNV BAMTKEQ1QjJGQTQ4ODc2RkVDRkEyMDg0ODdDQ0E2QjdERkJEODFCNEQ5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2jYB0HRodmbazoD60nHMoJIA rnviTn+ewZqM1FmC6NVWaLwYDBZwXXMw4GJacpHm7oiwgNkuPT0shRiLDlSUe/gH KQ1lJOY1+jO7S2Kn/vV6W9L1N9W0N73MsgVsavPKTpQiJww/e/B34QxtzntCFZJK EhgcSD6BrjlMVDUzCrC+hkeL4NNwHxLJXEHypjun0E9C1RvM6pSPYmUYUSKcS2ru FId//iM0Fg59Cou81ZwXdMESnQsT8VhlnXaTTrC8NMaI3EcUsRb3A91l0fm9E0pa kdzOyESNcnNH1DWj9mxqJIWEUI+3/NXjS4NwSOGhCw1YBPaLbXZdT8l7vwZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1bL6SIdv7PoghIfMprffvYG02VMwHwYDVR0j BBgwFoAUrrMv+gAHwKBn+4zp3XfP75IxBQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMC9BRUIzMkZGQTAw MDdDMEEwNjdGQjhDRTlERDc3Q0ZFRjkyMzEwNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5MjMx MDUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk ZDQtMjYzNDcyN2E5ZWQ0LzAvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NG RUY5MjMxMDUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNcgLo95eGSTcm2SPCM3OeeSyjRGouW/ksI CxkXxAY3GzNLVpJAm7aR4Jw+9aoEluAdSoGJDhpmdsZyIgHlTZ3NmaPyDBjCIurX B2p/Jeo/5w2OliaixdkMI/RWcYztLCluM8V0y5qxDNEMrpUn/v1aMLr5EcGVCUeJ 19BVPbt3GAFSm78R1UXoPgY/GZMRcjicGJvF5bYoUlt0My70CG0eNkLRVVV6iv+R B775GalQ554/yq6tauZlMKuuMieW54RNJwFu3pdLiUXn/L8cYjDuMEUGPCOHo/mx VPpsLICb2Xp5ionJftz56elXm2n5mCDFn3aFTjbcp5AL9thcgiw= -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:45 2026 by rpki-client