$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json) Hash identifier: H+zqM+5t0RR28etkQn0u0C0tXXgI5v17JlPRHSZlCPE= Subject key identifier: 9E:0C:54:3C:F0:95:59:0B:89:9E:51:EA:43:80:04:38:7D:89:E5:26 Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 57F01ADBEEF5B0969926D4245A40667EC36596BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft Manifest number: 03D9 Signing time: Tue 24 Mar 2026 04:42:11 +0000 Manifest this update: Tue 24 Mar 2026 04:37:11 +0000 Manifest next update: Fri 27 Mar 2026 09:56:11 +0000 Files and hashes: 1: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: ylXHQm3DiD4h9n4NuN0yUGCouUxigE+BSv0spOzfo/w=) 2: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: Ph+rbD0E1xBFIcBPwpD/r2KRqh4B/JlMQZ1JhXEhP2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f0:1a:db:ee:f5:b0:96:99:26:d4:24:5a:40:66:7e:c3:65:96:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Mar 24 04:37:11 2026 GMT Not After : Mar 27 09:56:11 2026 GMT Subject: CN=9E0C543CF095590B899E51EA438004387D89E526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:eb:de:91:13:ec:df:06:f6:66:96:b3:a9: 2a:c0:f0:d6:71:70:86:46:53:83:a6:9b:78:83:9c: bf:3d:31:f3:02:57:27:4e:50:b2:73:cc:58:b6:bc: 6b:a9:9e:2c:2c:ce:ee:bd:20:db:79:f4:6a:a5:6c: 45:ef:cd:d6:f0:83:bc:0c:29:25:26:68:8f:98:d9: 05:aa:97:b0:68:cc:73:9d:bb:38:1a:8a:c0:b8:82: 25:7d:79:8a:71:53:ea:df:75:af:03:d0:39:40:59: 5c:02:49:72:20:a9:dd:84:69:0a:fc:57:6e:1f:89: 3e:57:35:e3:61:0f:73:86:67:91:9c:af:78:73:16: af:49:3c:1d:8a:b5:f7:d4:dc:64:e4:43:db:9b:b6: ba:df:9c:81:2b:09:b6:86:bb:f6:ca:b2:04:ad:28: f9:b5:ac:b1:9c:97:80:b5:b1:95:c3:38:68:a4:bc: 92:b1:d5:52:1d:1d:aa:86:f9:6f:50:17:92:64:5b: 98:d2:b4:2b:62:ff:ce:d9:f6:1f:7a:d7:3c:40:f5: f6:5e:7a:22:5e:bb:3c:ab:02:78:42:1c:d9:28:4d: 72:60:d1:b5:b7:b9:bc:54:ac:54:0c:8f:5a:da:c4: 1e:2a:5d:cb:d4:40:cc:2a:90:13:f0:f9:a3:3c:5b: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0C:54:3C:F0:95:59:0B:89:9E:51:EA:43:80:04:38:7D:89:E5:26 X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:09:b5:3c:eb:28:8d:b6:7f:a4:d1:73:e9:78:e7:6b:48:6f: 33:7b:4f:d6:11:f4:84:d1:3a:82:03:17:21:d8:93:bf:46:02: 17:d1:54:84:c5:76:eb:4f:d2:f0:e9:f1:b2:49:71:ee:6c:35: 92:fb:00:44:34:64:7f:49:46:9f:b9:b9:ab:b5:ec:6f:8d:3d: 1d:11:a0:0f:32:43:74:ca:ef:27:a1:3a:f1:1b:70:3c:d9:65: 2c:9c:65:95:a4:f5:15:c6:91:51:e9:54:2f:60:f0:06:02:29: de:da:35:ad:a6:c8:5b:03:2b:c8:0b:62:cc:a2:12:94:be:13: 79:21:a2:d6:fe:7f:5e:61:13:21:71:a1:16:23:33:0b:b7:aa: f0:a1:cd:75:a1:77:6f:3c:87:ff:16:26:f0:99:38:41:6d:a2: d9:90:6f:82:ca:df:ee:07:15:11:17:c2:5f:02:83:57:4c:21: 79:62:a0:2f:88:d3:17:4c:f6:8a:35:b5:40:57:a7:0f:9c:42: c0:a6:db:66:f1:31:60:bb:d9:b5:fb:34:2f:f6:1d:1f:ba:90: cf:9c:2c:a5:7d:bf:d1:cb:cc:5c:23:cc:85:72:92:92:1f:a8: c9:bc:83:f9:c6:21:2a:fa:a2:a4:67:55:b6:3f:29:33:3d:af: e8:ae:89:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/Aa2+71sJaZJtQkWkBmfsNllrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yNjAzMjQwNDM3MTFaFw0yNjAzMjcwOTU2MTFaMDMxMTAvBgNV BAMTKDlFMEM1NDNDRjA5NTU5MEI4OTlFNTFFQTQzODAwNDM4N0Q4OUU1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5evekRPs3wb2ZpazqSrA8NZx cIZGU4Omm3iDnL89MfMCVydOULJzzFi2vGupniwszu69INt59GqlbEXvzdbwg7wM KSUmaI+Y2QWql7BozHOduzgaisC4giV9eYpxU+rfda8D0DlAWVwCSXIgqd2EaQr8 V24fiT5XNeNhD3OGZ5Gcr3hzFq9JPB2KtffU3GTkQ9ubtrrfnIErCbaGu/bKsgSt KPm1rLGcl4C1sZXDOGikvJKx1VIdHaqG+W9QF5JkW5jStCti/87Z9h961zxA9fZe eiJeuzyrAnhCHNkoTXJg0bW3ubxUrFQMj1raxB4qXcvUQMwqkBPw+aM8W00xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUngxUPPCVWQuJnlHqQ4AEOH2J5SYwHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAz MTBGMTAwQ0UzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoJtTzrKI22f6TRc+l452tIbzN7T9YR9ITR OoIDFyHYk79GAhfRVITFdutP0vDp8bJJce5sNZL7AEQ0ZH9JRp+5uau17G+NPR0R oA8yQ3TK7yehOvEbcDzZZSycZZWk9RXGkVHpVC9g8AYCKd7aNa2myFsDK8gLYsyi EpS+E3khotb+f15hEyFxoRYjMwu3qvChzXWhd288h/8WJvCZOEFtotmQb4LK3+4H FREXwl8Cg1dMIXlioC+I0xdM9oo1tUBXpw+cQsCm22bxMWC72bX7NC/2HR+6kM+c LKV9v9HLzFwjzIVykpIfqMm8g/nGISr6oqRnVbY/KTM9r+iuifc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:59 2026 by rpki-client