$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: NnmqgOw1nfrvqT2H2PmcN7/cT6KJ6lakZuwFZ+kLQIc= Subject key identifier: 62:31:7E:C4:2F:9F:60:9B:B4:A4:C8:26:80:CD:FD:36:28:31:B8:B2 Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 0DF97D3F9CD98A01DB1F7AEA1BE035BE1AB3844E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 0235 Signing time: Thu 26 Mar 2026 06:10:43 +0000 Manifest this update: Thu 26 Mar 2026 06:05:43 +0000 Manifest next update: Sun 29 Mar 2026 09:40:43 +0000 Files and hashes: 1: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: zbn7bS7zn2tJjes0380O9wZ4ybsEKzCS4tMfNtC1rmk=) 2: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: oWS2vPAW4iTrFxwrfej+z546MShwoVUF8HbkLqR3dNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f9:7d:3f:9c:d9:8a:01:db:1f:7a:ea:1b:e0:35:be:1a:b3:84:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Mar 26 06:05:43 2026 GMT Not After : Mar 29 09:40:43 2026 GMT Subject: CN=62317EC42F9F609BB4A4C82680CDFD362831B8B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:4b:ea:6b:c8:7f:06:59:57:43:b9:7c:3c:4e: 50:0f:3b:a9:2c:90:0e:87:ad:d1:c5:c9:46:cb:10: 0f:14:69:8d:9b:8e:8f:3c:b7:e8:23:c0:e4:7d:d5: 6d:7f:0c:f3:b4:c2:76:fb:24:52:2b:1d:7b:2a:d6: 93:ee:f4:5b:a1:9d:80:07:db:78:d3:6a:8e:50:5e: 66:b3:bd:25:0f:3e:6a:2c:92:4a:c9:e9:82:d2:f2: f0:fe:2a:33:96:4c:90:d3:e4:10:81:f9:e3:97:ca: 0b:86:54:bf:b4:c9:57:8b:d0:85:69:ab:77:33:cf: da:35:67:48:21:d6:93:f0:43:46:ea:6a:fb:c0:a4: 4d:6d:4e:c5:bd:3e:b7:2e:cd:90:25:80:db:15:33: 5c:85:08:d2:c5:6a:84:9d:c6:9c:2b:dd:8d:31:16: 07:0c:ec:cd:01:e5:bf:d9:2b:b5:cd:ba:a4:09:54: 78:b9:98:70:c8:4b:4f:0a:05:16:d5:97:a1:e5:f1: 52:2c:74:a1:25:ca:3f:9d:49:99:df:a9:ae:c8:a3: ae:a3:12:f7:6d:3b:a3:b0:33:7b:e3:53:5e:ab:47: e3:50:82:33:6d:6f:d9:c8:17:56:05:a5:34:f5:1c: b3:e1:e9:d9:c6:65:75:d6:bd:44:94:24:83:31:28: a4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:31:7E:C4:2F:9F:60:9B:B4:A4:C8:26:80:CD:FD:36:28:31:B8:B2 X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:47:37:be:2f:3f:49:63:4d:2a:ee:05:2f:a9:0f:02:4d:0b: d0:ce:92:ac:dd:35:ba:e5:56:50:0b:80:6e:3f:45:51:af:5d: f4:ec:9e:15:4a:e1:e5:db:33:38:55:4e:4c:a5:8e:a3:e8:99: 03:46:5a:d1:6a:58:48:9b:d2:69:dd:10:70:5a:5c:58:e9:19: 0e:60:98:c3:d1:77:21:34:f4:8f:31:56:2a:50:b5:12:eb:08: 66:45:0f:9c:00:45:2b:62:02:7a:23:a3:95:fe:f7:5a:cf:14: 88:14:a2:82:01:b9:25:ed:b0:6f:80:75:5f:31:a2:2c:82:7a: db:f1:f3:08:82:06:ca:61:f9:15:f3:16:76:c6:7c:e9:9c:08: 7a:e3:4b:34:d8:db:72:ac:44:53:3d:85:52:30:dc:d9:bf:a7: f5:bc:e4:2b:7d:6c:48:c9:31:a7:88:dc:4d:5f:f7:69:3d:6a: 4d:38:a2:b8:bb:91:4b:52:59:d6:bf:f3:33:e6:ae:11:80:cb: d1:81:28:00:a7:ec:a7:2b:3f:e8:83:b6:e4:e8:37:21:e9:64: a9:bd:43:d2:b7:27:4e:23:c7:19:8f:18:f9:a7:36:e5:3f:1c: 39:69:41:f1:b9:99:b4:81:33:1d:4b:6f:1f:29:85:63:ad:42: 75:0a:53:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfl9P5zZigHbH3rqG+A1vhqzhE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNjAzMjYwNjA1NDNaFw0yNjAzMjkwOTQwNDNaMDMxMTAvBgNV BAMTKDYyMzE3RUM0MkY5RjYwOUJCNEE0QzgyNjgwQ0RGRDM2MjgzMUI4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6S+pryH8GWVdDuXw8TlAPO6ks kA6HrdHFyUbLEA8UaY2bjo88t+gjwOR91W1/DPO0wnb7JFIrHXsq1pPu9FuhnYAH 23jTao5QXmazvSUPPmoskkrJ6YLS8vD+KjOWTJDT5BCB+eOXyguGVL+0yVeL0IVp q3czz9o1Z0gh1pPwQ0bqavvApE1tTsW9PrcuzZAlgNsVM1yFCNLFaoSdxpwr3Y0x FgcM7M0B5b/ZK7XNuqQJVHi5mHDIS08KBRbVl6Hl8VIsdKElyj+dSZnfqa7Io66j EvdtO6OwM3vjU16rR+NQgjNtb9nIF1YFpTT1HLPh6dnGZXXWvUSUJIMxKKRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYjF+xC+fYJu0pMgmgM39NigxuLIwHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtHN74vP0ljTSruBS+pDwJNC9DOkqzdNbrl VlALgG4/RVGvXfTsnhVK4eXbMzhVTkyljqPomQNGWtFqWEib0mndEHBaXFjpGQ5g mMPRdyE09I8xVipQtRLrCGZFD5wARStiAnojo5X+91rPFIgUooIBuSXtsG+AdV8x oiyCetvx8wiCBsph+RXzFnbGfOmcCHrjSzTY23KsRFM9hVIw3Nm/p/W85Ct9bEjJ MaeI3E1f92k9ak04ori7kUtSWda/8zPmrhGAy9GBKACn7KcrP+iDtuToNyHpZKm9 Q9K3J04jxxmPGPmnNuU/HDlpQfG5mbSBMx1Lbx8phWOtQnUKU48= -----END CERTIFICATE-----Generated at Thu Mar 26 21:41:28 2026 by rpki-client