$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: 7Ia9rR6HCltHUeAQHRfNC4DvWWIzXxPBbqcf1d1y4HQ= Subject key identifier: 96:44:DC:44:48:C9:70:61:69:37:7E:B8:B8:37:00:3E:F9:5D:CE:6D Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 12CF0AB747438160871A4DD38A2BEAC288E84C78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 02B9 Signing time: Thu 26 Mar 2026 07:21:51 +0000 Manifest this update: Thu 26 Mar 2026 07:16:51 +0000 Manifest next update: Sun 29 Mar 2026 09:42:51 +0000 Files and hashes: 1: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: uonqNXD8Bu0ZyL4+hzyCfm/fx1uXq6ZaorZmA3p2+Vc=) 2: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo=) 3: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: K4U8d+sUzMLgrI4fy436tf9syDLx6SvZlYhSkGTWcb8=) 4: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cf:0a:b7:47:43:81:60:87:1a:4d:d3:8a:2b:ea:c2:88:e8:4c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Mar 26 07:16:51 2026 GMT Not After : Mar 29 09:42:51 2026 GMT Subject: CN=9644DC4448C9706169377EB8B837003EF95DCE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:c6:25:8c:54:1e:fc:d3:20:87:79:7f:c2: 38:86:6e:ff:75:39:a7:96:28:a4:6f:15:b3:3b:42: 75:f3:2e:c9:fa:1b:46:5b:bc:88:02:bb:0a:cc:c6: 8d:78:4c:b2:f2:66:63:fe:cb:9a:1f:25:f8:3c:99: 0b:15:3a:4f:00:33:7e:f9:16:df:39:69:19:0d:2d: 14:c7:24:86:84:09:de:c7:62:72:67:10:53:c2:27: 2e:c4:b6:58:6b:5a:c9:14:bc:02:e9:04:6e:4f:fc: bf:e9:db:18:9f:50:d8:f8:ef:8a:a2:d9:5b:c6:8e: 49:3b:4e:6e:a6:19:3b:11:52:08:9f:d1:68:d8:37: c2:b9:a9:aa:40:a6:a7:b7:ad:94:1c:ec:12:83:98: 13:2e:4f:0c:07:af:29:a4:44:aa:bd:ed:8b:c5:7f: 62:24:ce:52:24:87:f0:be:48:1f:bc:4f:e2:a6:79: 77:80:6f:58:c5:85:a3:d3:5b:66:7a:94:87:70:6b: 15:55:4d:30:70:c2:0e:54:d0:e5:57:42:79:c6:ac: bb:dd:8b:90:f9:b2:d2:3b:f5:d5:9f:f5:7d:26:60: 30:b8:02:13:23:6d:3a:01:f3:f6:1f:ff:c1:e0:6c: be:0e:e7:77:68:f1:d2:44:a0:17:99:38:7a:7a:8e: 32:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:44:DC:44:48:C9:70:61:69:37:7E:B8:B8:37:00:3E:F9:5D:CE:6D X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8f:48:00:16:7e:c7:2e:e8:51:4b:a8:e2:f5:ed:43:e6:fe: 2e:10:1f:b3:8c:64:37:22:45:9e:18:67:3b:ce:16:e1:16:32: 23:3e:9e:86:5d:0c:06:62:38:df:b8:46:37:c5:ee:03:9f:5f: 97:fc:54:8a:87:9d:f9:46:a3:df:ae:a5:95:57:6d:77:fb:9c: 57:f4:6d:f1:05:5a:dc:d3:06:40:73:c6:8f:6e:3d:ac:8f:64: 4a:95:96:ae:16:0a:b6:05:19:95:0a:c1:76:a8:0d:c7:8e:d9: 9c:5a:54:4f:a9:74:12:30:2b:1e:c9:de:63:10:ca:9f:fd:e2: 38:82:c4:10:3a:ad:24:99:e5:55:67:9b:30:ff:5a:b2:2b:c6: 1d:5b:d6:27:09:65:79:a0:54:8e:18:59:6d:46:18:26:c6:7b: b2:83:cd:3d:7d:e8:7f:34:47:54:07:7a:41:aa:8a:9f:63:af: a7:3a:31:96:a9:33:1d:e1:7f:7f:f8:0e:ed:49:60:8c:e5:b3: 0b:49:52:19:86:2a:1a:17:2b:b3:c0:e9:f3:a4:47:dd:61:17: ae:74:79:a9:8d:fa:83:0b:47:94:bb:55:be:9f:ad:48:f8:0b: 77:3a:b6:76:b2:0f:55:2b:2a:31:a6:ae:1b:f1:5f:2e:69:89: a9:74:4f:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEs8Kt0dDgWCHGk3TiivqwojoTHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNjAzMjYwNzE2NTFaFw0yNjAzMjkwOTQyNTFaMDMxMTAvBgNV BAMTKDk2NDREQzQ0NDhDOTcwNjE2OTM3N0VCOEI4MzcwMDNFRjk1RENFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC98YljFQe/NMgh3l/wjiGbv91 OaeWKKRvFbM7QnXzLsn6G0ZbvIgCuwrMxo14TLLyZmP+y5ofJfg8mQsVOk8AM375 Ft85aRkNLRTHJIaECd7HYnJnEFPCJy7EtlhrWskUvALpBG5P/L/p2xifUNj474qi 2VvGjkk7Tm6mGTsRUgif0WjYN8K5qapApqe3rZQc7BKDmBMuTwwHrymkRKq97YvF f2IkzlIkh/C+SB+8T+KmeXeAb1jFhaPTW2Z6lIdwaxVVTTBwwg5U0OVXQnnGrLvd i5D5stI79dWf9X0mYDC4AhMjbToB8/Yf/8HgbL4O53do8dJEoBeZOHp6jjJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlkTcREjJcGFpN364uDcAPvldzm0wHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqPSAAWfscu6FFLqOL17UPm/i4QH7OMZDci RZ4YZzvOFuEWMiM+noZdDAZiON+4RjfF7gOfX5f8VIqHnflGo9+upZVXbXf7nFf0 bfEFWtzTBkBzxo9uPayPZEqVlq4WCrYFGZUKwXaoDceO2ZxaVE+pdBIwKx7J3mMQ yp/94jiCxBA6rSSZ5VVnmzD/WrIrxh1b1icJZXmgVI4YWW1GGCbGe7KDzT196H80 R1QHekGqip9jr6c6MZapMx3hf3/4Du1JYIzlswtJUhmGKhoXK7PA6fOkR91hF650 eamN+oMLR5S7Vb6frUj4C3c6tnayD1UrKjGmrhvxXy5pial0TzM= -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:21 2026 by rpki-client