$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: 4pX0Mz6mvAiSJy51KmuHs1qKGC/zmRbETbN5jpn3auI= Subject key identifier: 85:ED:40:66:F3:EB:4D:47:BD:E5:C7:DD:80:04:85:14:74:A7:EB:88 Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 44C3E015E3EBCB0DF0C24CABBAC7D2F2B58F1AEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 03DD Signing time: Mon 23 Mar 2026 06:01:28 +0000 Manifest this update: Mon 23 Mar 2026 05:56:28 +0000 Manifest next update: Thu 26 Mar 2026 17:31:28 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: c8ZBxIkYu4lQhPh7KOJpCZXHyG4WojlA9cssQRO5Q3k=) 2: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: uCU1E4AremdMhQao/TtJxCPp2oDOCkz+hS+UyqB3H30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 09:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c3:e0:15:e3:eb:cb:0d:f0:c2:4c:ab:ba:c7:d2:f2:b5:8f:1a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: Mar 23 05:56:28 2026 GMT Not After : Mar 26 17:31:28 2026 GMT Subject: CN=85ED4066F3EB4D47BDE5C7DD8004851474A7EB88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:46:43:d5:76:ce:34:b5:d2:b8:dc:5d:5b:05: e4:ec:5f:bd:48:c7:8a:c4:d5:d2:7a:8a:58:8e:dd: cf:48:22:1e:d2:f2:da:ca:2a:38:62:95:fa:5c:04: bf:c1:77:d9:56:10:9e:ca:f3:8d:de:71:6a:6b:ee: 6f:74:7a:b3:f5:b0:19:70:df:68:8c:8d:23:85:71: e9:6a:dd:12:8f:60:8a:d8:d1:b2:77:39:03:59:dd: 20:bf:ef:cf:83:c0:74:9a:f8:8b:6a:f1:09:39:cd: df:cb:23:b8:e9:cd:9d:84:8a:45:c0:5e:44:f7:ef: 8c:ed:b4:71:1e:6c:cf:6a:15:34:ba:8e:4d:65:d3: ea:6e:35:6f:0a:35:ab:85:41:0d:8f:44:ec:26:7e: 00:89:5f:59:e7:be:7d:ca:2b:fc:12:55:42:cf:8b: 18:ed:42:5d:63:b2:34:38:88:d4:9e:3a:59:2d:d7: df:6a:19:47:ca:75:94:d4:80:16:2a:47:46:be:14: fa:9c:7d:3b:6a:17:7d:c6:d4:f0:10:3c:a4:ef:85: 85:ab:e4:38:ca:3e:c1:0a:a4:52:f6:bb:9e:f3:bf: 06:ac:c1:9e:67:b3:e5:32:6f:fd:25:58:89:19:25: b7:37:9b:db:35:51:f3:d6:7c:3a:d6:c7:67:48:0c: ba:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:ED:40:66:F3:EB:4D:47:BD:E5:C7:DD:80:04:85:14:74:A7:EB:88 X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6e:23:51:c6:6f:56:90:c3:b3:e9:d6:31:35:58:6b:c4:1b: 5e:cc:80:38:ee:89:f1:86:a2:f9:e6:4a:40:0b:fc:e9:93:1e: 61:86:9e:87:21:e9:c9:53:b8:0e:b9:0e:23:7b:b7:1d:74:06: 26:ec:52:f9:eb:44:ee:6f:32:fa:4d:65:a7:d3:79:06:7d:8e: 51:8e:2f:0f:97:6f:f0:23:ac:4e:af:a1:38:c7:7e:d2:6e:86: 5f:de:a4:18:92:5a:c6:40:fa:e2:a8:de:0c:7b:36:21:14:82: c3:ca:d7:9f:0b:aa:c0:e3:06:36:d1:a8:ae:13:d2:ca:d4:15: e2:59:76:f4:df:55:ef:dd:4a:04:93:58:57:82:2c:89:c1:a5: 2d:2e:bb:73:38:3a:28:7e:4e:c7:c8:b9:49:34:11:9e:6f:9c: 73:45:9a:63:15:38:37:9f:37:f2:44:b4:ac:ba:b4:95:c8:d8: 30:2e:9a:ae:93:ca:29:ff:de:a8:8e:eb:62:6b:c8:42:29:b6: 0e:03:37:6e:d8:93:88:97:12:42:34:c3:13:53:d6:73:24:1f: ab:48:9e:b5:04:41:89:9b:c2:8c:1f:f7:1d:09:fc:e5:73:f6: d5:72:86:b2:4e:77:d3:26:de:e4:c2:a9:3e:9f:38:e8:8c:f0: fc:7a:8c:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURMPgFePryw3wwkyrusfS8rWPGuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNjAzMjMwNTU2MjhaFw0yNjAzMjYxNzMxMjhaMDMxMTAvBgNV BAMTKDg1RUQ0MDY2RjNFQjRENDdCREU1QzdERDgwMDQ4NTE0NzRBN0VCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnRkPVds40tdK43F1bBeTsX71I x4rE1dJ6iliO3c9IIh7S8trKKjhilfpcBL/Bd9lWEJ7K843ecWpr7m90erP1sBlw 32iMjSOFcelq3RKPYIrY0bJ3OQNZ3SC/78+DwHSa+Itq8Qk5zd/LI7jpzZ2EikXA XkT374zttHEebM9qFTS6jk1l0+puNW8KNauFQQ2PROwmfgCJX1nnvn3KK/wSVULP ixjtQl1jsjQ4iNSeOlkt199qGUfKdZTUgBYqR0a+FPqcfTtqF33G1PAQPKTvhYWr 5DjKPsEKpFL2u57zvwaswZ5ns+Uyb/0lWIkZJbc3m9s1UfPWfDrWx2dIDLrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhe1AZvPrTUe95cfdgASFFHSn64gwHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtuI1HGb1aQw7Pp1jE1WGvEG17MgDjuifGG ovnmSkAL/OmTHmGGnoch6clTuA65DiN7tx10BibsUvnrRO5vMvpNZafTeQZ9jlGO Lw+Xb/AjrE6voTjHftJuhl/epBiSWsZA+uKo3gx7NiEUgsPK158LqsDjBjbRqK4T 0srUFeJZdvTfVe/dSgSTWFeCLInBpS0uu3M4Oih+TsfIuUk0EZ5vnHNFmmMVODef N/JEtKy6tJXI2DAumq6Tyin/3qiO62JryEIptg4DN27Yk4iXEkI0wxNT1nMkH6tI nrUEQYmbwowf9x0J/OVz9tVyhrJOd9Mm3uTCqT6fOOiM8Px6jO0= -----END CERTIFICATE-----Generated at Tue Mar 24 01:55:17 2026 by rpki-client