$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft File: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json) Hash identifier: 8CMlGE8RDJ19IbZMd1PpC0HxntLlVYlcETE3Jbt/wco= Subject key identifier: 78:D4:AB:7C:BB:EC:F2:0F:D6:DA:73:78:A4:A6:40:01:34:D2:85:4A Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB Certificate issuer: /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Certificate serial: 686AD8EBF68E53206D4D91DD4C4CAE1A9B3ED37B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft Manifest number: 040B Signing time: Wed 25 Mar 2026 13:21:41 +0000 Manifest this update: Wed 25 Mar 2026 13:16:41 +0000 Manifest next update: Sat 28 Mar 2026 22:57:41 +0000 Files and hashes: 1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: p26ySsHMD4vYJwdLbmMismUw9SiGaVI889zPLtbNsq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6a:d8:eb:f6:8e:53:20:6d:4d:91:dd:4c:4c:ae:1a:9b:3e:d3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Validity Not Before: Mar 25 13:16:41 2026 GMT Not After : Mar 28 22:57:41 2026 GMT Subject: CN=78D4AB7CBBECF20FD6DA7378A4A6400134D2854A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cf:d2:61:c5:85:79:ac:fa:17:16:b2:ec:3c: 48:d1:1e:58:ff:6a:1b:07:3f:11:4c:9d:d5:26:3d: 81:b8:5f:b0:45:a0:fb:13:ac:ff:ce:4a:1a:aa:b5: 1b:e5:4b:81:28:c0:e0:d7:fd:c7:16:91:ad:6d:01: be:19:7c:7f:87:f0:0c:94:fe:e9:22:d0:d5:4d:a6: e3:fe:83:97:d6:8b:51:67:a6:36:51:85:92:c3:cf: 73:0d:81:16:6b:95:87:97:87:27:df:b0:47:6d:08: 75:f4:dd:f7:2e:a7:79:07:37:e1:22:87:22:6a:8b: eb:c4:9d:ed:32:b4:ec:c5:e4:d8:d5:67:7c:fc:80: db:4a:20:71:22:9c:72:68:4c:71:f9:a3:29:77:72: dd:29:e3:ed:f7:87:97:82:ab:d1:61:6c:dd:44:79: 83:e2:f9:63:07:60:a1:27:44:87:22:29:75:f6:31: db:ea:cc:8b:81:88:ee:35:f1:64:12:61:12:31:44: c3:e9:56:47:c2:36:dc:50:b3:60:72:9e:10:39:7f: b3:54:01:2b:ad:36:44:83:92:40:d5:75:a8:d2:3e: b9:7a:ca:78:55:0f:44:10:64:0f:13:85:bc:2f:83: c6:c2:5a:65:a1:f6:4f:b8:60:96:b4:2d:61:20:2f: bd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D4:AB:7C:BB:EC:F2:0F:D6:DA:73:78:A4:A6:40:01:34:D2:85:4A X509v3 Authority Key Identifier: keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:14:a0:81:70:d1:05:53:a8:41:c6:55:0c:ca:6b:b6:85:f3: ce:24:0a:14:25:ec:ea:81:48:5e:39:6c:9d:f7:60:08:f8:fe: a3:06:f0:bf:e3:02:3d:dc:52:6d:69:bc:b1:e1:d5:01:27:2d: 22:71:d0:94:53:ec:d0:1d:42:b0:67:61:63:98:b5:ec:cc:59: 57:b8:6b:b0:ae:dc:ce:05:03:5a:57:a2:e0:c8:78:82:3f:e2: 2c:98:f1:33:33:b1:a6:a9:fd:bb:e5:e5:8f:31:63:09:e4:c0: 7a:b2:42:24:e0:fe:f1:f0:16:59:48:a1:9b:74:fd:18:d6:6b: 30:5c:13:d6:95:34:bb:50:a2:ab:de:5f:7b:c2:d8:34:a7:91: c2:ae:a1:85:67:aa:5b:3e:07:bd:55:4a:84:18:71:78:d5:65: 5e:bf:5a:c4:d7:d2:4b:9c:af:c7:94:b7:59:95:89:1c:9a:16: 5e:d9:71:cb:74:ac:10:bb:7c:6b:c6:31:75:8f:34:17:c5:80: 48:f6:e4:1e:ac:13:96:5f:b1:95:4f:e4:48:3f:42:67:65:92: c2:cc:5d:60:e9:af:cf:19:d4:9f:d3:93:23:7f:a2:47:f0:32: ff:96:1a:6d:db:85:5e:ee:26:5a:10:bc:a7:a3:59:3d:8d:f8: f4:23:84:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaGrY6/aOUyBtTZHdTEyuGps+03swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIx MjQzQkZGQjAeFw0yNjAzMjUxMzE2NDFaFw0yNjAzMjgyMjU3NDFaMDMxMTAvBgNV BAMTKDc4RDRBQjdDQkJFQ0YyMEZENkRBNzM3OEE0QTY0MDAxMzREMjg1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbz9JhxYV5rPoXFrLsPEjRHlj/ ahsHPxFMndUmPYG4X7BFoPsTrP/OShqqtRvlS4EowODX/ccWka1tAb4ZfH+H8AyU /uki0NVNpuP+g5fWi1FnpjZRhZLDz3MNgRZrlYeXhyffsEdtCHX03fcup3kHN+Ei hyJqi+vEne0ytOzF5NjVZ3z8gNtKIHEinHJoTHH5oyl3ct0p4+33h5eCq9FhbN1E eYPi+WMHYKEnRIciKXX2MdvqzIuBiO418WQSYRIxRMPpVkfCNtxQs2BynhA5f7NU ASutNkSDkkDVdajSPrl6ynhVD0QQZA8Thbwvg8bCWmWh9k+4YJa0LWEgL71BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeNSrfLvs8g/W2nN4pKZAATTShUowHwYDVR0j BBgwFoAUr9/V0cSzny+qu6W8FSNMKxJDv/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NGZlMTgxMS1jMDNmLTQ5ZDgtOTIxNy0xM2ZmMjJhMzFlYmUvMC9BRkRGRDVEMUM0 QjM5RjJGQUFCQkE1QkMxNTIzNEMyQjEyNDNCRkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIxMjQz QkZGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTRmZTE4MTEtYzAzZi00OWQ4LTky MTctMTNmZjIyYTMxZWJlLzAvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRD MkIxMjQzQkZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8UoIFw0QVTqEHGVQzKa7aF884kChQl7OqB SF45bJ33YAj4/qMG8L/jAj3cUm1pvLHh1QEnLSJx0JRT7NAdQrBnYWOYtezMWVe4 a7Cu3M4FA1pXouDIeII/4iyY8TMzsaap/bvl5Y8xYwnkwHqyQiTg/vHwFllIoZt0 /RjWazBcE9aVNLtQoqveX3vC2DSnkcKuoYVnqls+B71VSoQYcXjVZV6/WsTX0kuc r8eUt1mViRyaFl7Zcct0rBC7fGvGMXWPNBfFgEj25B6sE5ZfsZVP5Eg/QmdlksLM XWDpr88Z1J/TkyN/okfwMv+WGm3bhV7uJloQvKejWT2N+PQjhOM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:38 2026 by rpki-client