$ rpki-client -vvf repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft File: AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft (raw, json) Hash identifier: 5XjkwBmOg+IXq+JhlCuVSp+N5mViQtQLwjW680MIy7Y= Subject key identifier: 82:6C:76:A0:92:D1:AC:B3:32:25:02:A4:FC:27:AF:85:7E:08:BD:F4 Authority key identifier: AE:05:90:FE:03:68:DD:08:1C:C9:37:60:B9:FC:7C:52:44:A6:D1:5F Certificate issuer: /CN=AE0590FE0368DD081CC93760B9FC7C5244A6D15F Certificate serial: 656363DE01A77E8A29AC46C9E81B0518184FCAE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft Manifest number: 04 Signing time: Wed 18 Mar 2026 14:52:25 +0000 Manifest this update: Wed 18 Mar 2026 14:47:25 +0000 Manifest next update: Sat 21 Mar 2026 19:21:25 +0000 Files and hashes: 1: AE0590FE0368DD081CC93760B9FC7C5244A6D15F.crl (hash: mRP4p3u1crFbv6V1LogZkvdn93s/AZWFqez9D0fdrlE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.crl rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 19:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:63:63:de:01:a7:7e:8a:29:ac:46:c9:e8:1b:05:18:18:4f:ca:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE0590FE0368DD081CC93760B9FC7C5244A6D15F Validity Not Before: Mar 18 14:47:25 2026 GMT Not After : Mar 21 19:21:25 2026 GMT Subject: CN=826C76A092D1ACB3322502A4FC27AF857E08BDF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:eb:5a:8b:da:95:e0:cb:a4:16:43:b4:92: ab:5d:b8:34:e2:bb:a5:99:f0:c8:46:09:44:44:8f: 43:75:80:b9:b2:da:3e:14:71:64:22:78:19:47:83: 66:a2:6e:14:d0:71:0d:76:47:53:7f:73:a6:81:41: 32:56:ff:e2:6e:de:ee:6c:92:e7:fb:f6:7d:6e:52: 88:c1:7d:65:37:2f:89:66:e8:95:fe:ae:9f:ea:b9: 05:01:58:f2:27:d7:3e:ef:1a:7f:2e:bb:65:69:14: 3d:a5:ed:21:a5:01:48:44:2e:0b:6a:17:99:3c:3f: 5e:26:11:a9:67:f2:c7:d6:e7:0b:40:a7:27:4b:af: d1:00:59:f9:ac:3d:aa:f3:83:95:b9:c2:e8:6c:4a: bb:ed:01:2c:c6:58:6e:2b:9d:74:f2:c8:39:2a:f5: ec:7c:31:9f:fd:88:c5:f0:27:d6:c3:8c:48:55:70: a2:e6:a8:79:5d:3f:31:25:74:a6:ff:3a:fb:39:6c: 76:7e:48:cd:cc:b1:88:84:9c:a0:2a:43:e9:57:b5: c6:0e:33:0b:60:65:d0:f0:88:8a:53:e1:b6:40:ce: bd:f5:90:7d:ef:68:dc:b5:7f:83:9d:82:d1:de:86: f5:72:d1:3e:f5:8f:60:b2:50:fb:e7:3a:09:36:27: 7a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6C:76:A0:92:D1:AC:B3:32:25:02:A4:FC:27:AF:85:7E:08:BD:F4 X509v3 Authority Key Identifier: keyid:AE:05:90:FE:03:68:DD:08:1C:C9:37:60:B9:FC:7C:52:44:A6:D1:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:dd:bf:00:2d:f9:b5:bb:f4:32:60:41:18:c0:d2:31:5c:61: 84:c9:61:68:69:9b:ba:05:fa:57:0b:cd:c2:dc:be:b2:8a:c6: 7d:af:de:e9:8f:ae:73:83:28:ff:03:df:77:fc:a2:bc:ca:ae: f7:38:93:f4:1c:11:ae:d9:91:c1:91:03:ec:2f:bd:27:c9:e8: 88:db:13:4b:2a:35:ec:69:8b:28:2c:18:66:7c:f6:64:17:48: cc:fd:b5:36:b8:c8:7a:ce:ca:ef:2c:b0:16:02:7c:45:82:e3: 69:13:be:ed:bd:f4:16:01:01:46:f8:26:de:ef:18:d5:fc:dc: de:93:6c:bd:d8:4b:2c:59:dd:da:af:10:c9:71:77:5c:42:ad: 7f:15:8a:be:12:20:3d:ed:d9:9d:c2:e1:da:e8:57:ae:b5:a8: 19:42:b3:16:88:79:38:c4:e5:bd:63:98:76:b7:26:6d:a9:39: 1e:7c:d6:86:f2:d0:69:23:91:bd:52:e0:a3:ac:23:a6:14:6b: eb:a7:54:80:3f:91:55:03:4c:8f:4e:88:33:e7:52:11:09:e3: 59:07:99:5f:06:18:fb:da:c2:0c:ed:26:f9:cf:62:04:30:33: ae:a3:20:84:9c:bc:dc:71:7f:73:82:49:f7:39:00:0c:a4:43: 86:a0:77:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWNj3gGnfooprEbJ6BsFGBhPyuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwNTkwRkUwMzY4REQwODFDQzkzNzYwQjlGQzdDNTI0 NEE2RDE1RjAeFw0yNjAzMTgxNDQ3MjVaFw0yNjAzMjExOTIxMjVaMDMxMTAvBgNV BAMTKDgyNkM3NkEwOTJEMUFDQjMzMjI1MDJBNEZDMjdBRjg1N0UwOEJERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdutai9qV4MukFkO0kqtduDTi u6WZ8MhGCUREj0N1gLmy2j4UcWQieBlHg2aibhTQcQ12R1N/c6aBQTJW/+Ju3u5s kuf79n1uUojBfWU3L4lm6JX+rp/quQUBWPIn1z7vGn8uu2VpFD2l7SGlAUhELgtq F5k8P14mEaln8sfW5wtApydLr9EAWfmsParzg5W5wuhsSrvtASzGWG4rnXTyyDkq 9ex8MZ/9iMXwJ9bDjEhVcKLmqHldPzEldKb/Ovs5bHZ+SM3MsYiEnKAqQ+lXtcYO MwtgZdDwiIpT4bZAzr31kH3vaNy1f4OdgtHehvVy0T71j2CyUPvnOgk2J3qvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgmx2oJLRrLMyJQKk/CevhX4IvfQwHwYDVR0j BBgwFoAUrgWQ/gNo3QgcyTdgufx8UkSm0V8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTM1ODUwZS00YmZhLTQ1MDQtYmJlYy02YzZiMmNjM2JhMjkvMC9BRTA1OTBGRTAz NjhERDA4MUNDOTM3NjBCOUZDN0M1MjQ0QTZEMTVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUwNTkwRkUwMzY4REQwODFDQzkzNzYwQjlGQzdDNTI0NEE2 RDE1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjUzNTg1MGUtNGJmYS00NTA0LWJi ZWMtNmM2YjJjYzNiYTI5LzAvQUUwNTkwRkUwMzY4REQwODFDQzkzNzYwQjlGQzdD NTI0NEE2RDE1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFndvwAt+bW79DJgQRjA0jFcYYTJYWhpm7oF +lcLzcLcvrKKxn2v3umPrnODKP8D33f8orzKrvc4k/QcEa7ZkcGRA+wvvSfJ6Ijb E0sqNexpiygsGGZ89mQXSMz9tTa4yHrOyu8ssBYCfEWC42kTvu299BYBAUb4Jt7v GNX83N6TbL3YSyxZ3dqvEMlxd1xCrX8Vir4SID3t2Z3C4droV661qBlCsxaIeTjE 5b1jmHa3Jm2pOR581oby0Gkjkb1S4KOsI6YUa+unVIA/kVUDTI9OiDPnUhEJ41kH mV8GGPvawgztJvnPYgQwM66jIIScvNxxf3OCSfc5AAykQ4agd3c= -----END CERTIFICATE-----Generated at Thu Mar 19 09:35:57 2026 by rpki-client