$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: HwdR8xRJYwi5m0RB5d1aM7Nu+vKvXf2t8Dj+ZLLvGQ4= Subject key identifier: 8E:44:E5:E8:D3:28:88:6E:DE:58:8C:F1:7D:D7:AC:34:D5:68:29:16 Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 5843A336E4E5582D66791E92299DB540B91D3900 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: 0146 Signing time: Wed 25 Mar 2026 21:31:37 +0000 Manifest this update: Wed 25 Mar 2026 21:26:37 +0000 Manifest next update: Sat 28 Mar 2026 21:54:37 +0000 Files and hashes: 1: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: dGM26YsCUkcN5Fsfe/AUwEARtorKT2AmJyz/iX05TjE=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: 4ND3+gZBeIoT6g+JB8RrxRMPJN0D54r28ZhCohuiwZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:43:a3:36:e4:e5:58:2d:66:79:1e:92:29:9d:b5:40:b9:1d:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Mar 25 21:26:37 2026 GMT Not After : Mar 28 21:54:37 2026 GMT Subject: CN=8E44E5E8D328886EDE588CF17DD7AC34D5682916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:b2:fd:a1:61:af:35:b8:88:97:c1:24:ec: 2f:47:86:d8:0d:82:d9:d9:b6:1f:bd:94:bf:ab:9d: 97:a5:9c:0f:3b:2e:48:96:3d:68:53:ab:81:bb:65: 42:32:0a:16:d3:3c:66:a1:09:1c:3a:ed:75:21:ab: 78:0c:cc:71:c0:36:36:8e:49:e4:4c:f4:6c:73:ce: 22:4f:69:3a:0c:cc:fd:44:4b:d1:b5:e5:52:d2:14: 29:bc:a0:0b:38:cf:fa:1f:ea:d7:6b:99:d6:57:a3: 43:86:9d:1e:24:f6:70:80:47:6f:21:44:a7:12:84: b0:2e:6e:00:7c:73:3b:25:16:fc:59:6c:7a:d3:bf: 6b:05:65:3c:8a:e1:d2:a2:2e:7e:fc:67:95:15:f5: ca:93:bf:22:1b:21:2d:9f:f7:f7:bb:04:e2:e6:44: 63:49:69:83:d9:2f:59:8a:af:96:cd:ad:d7:7e:00: 22:94:4c:73:13:58:40:01:97:cb:f0:19:1d:31:c2: 40:47:f0:c3:85:2c:81:13:ec:1b:13:b4:61:9e:fe: ba:80:a1:24:f8:a1:b5:c9:92:c5:6a:ac:65:1b:83: 98:73:ec:4a:0d:3a:c0:d8:f4:49:29:4a:4a:93:24: 1a:12:d7:98:0c:69:1e:d3:5f:b4:0e:67:b3:47:7d: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:44:E5:E8:D3:28:88:6E:DE:58:8C:F1:7D:D7:AC:34:D5:68:29:16 X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:72:33:41:64:bb:39:bc:e2:d0:a4:b2:43:8a:8e:5c:f5:c8: 33:c0:dc:7c:81:33:79:fb:61:8c:50:48:82:a4:b1:86:9d:c9: 45:1d:e9:08:e3:ae:37:85:36:68:03:a8:37:9f:78:5f:23:82: d0:06:ce:f7:f0:54:d6:b1:87:23:36:61:ce:ba:6d:81:95:2c: 69:3c:d2:cd:99:64:bf:6f:00:14:15:0a:6f:68:9f:ae:1a:b9: c1:ab:b8:2c:fd:25:bc:ea:d7:ba:88:70:ea:31:fd:3c:de:45: 1b:11:b5:2d:e5:1c:9b:da:0d:43:11:21:b5:43:05:ea:1c:06: a3:1a:9a:f6:88:d5:68:25:61:1c:10:94:a0:84:c2:89:a7:95: 34:ef:97:6a:94:ca:a4:f7:78:1a:30:73:45:39:c3:22:c5:49: 03:dd:e9:76:d8:78:d0:bd:1e:48:f5:3e:88:59:41:99:f7:cc: cf:af:e0:2e:60:42:d0:6c:8e:f0:8d:c0:02:71:cc:3e:1c:cc: ab:ae:09:3b:1b:3a:97:9e:b9:b6:55:e7:8b:57:c3:36:d6:c8: 05:86:55:43:a2:fd:76:71:56:f8:e3:a7:d0:98:fd:0e:ed:fd: b2:df:ab:46:05:e4:7e:c1:88:d2:1d:36:e3:ee:7d:3d:b6:01: 8d:f2:3b:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEOjNuTlWC1meR6SKZ21QLkdOQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNjAzMjUyMTI2MzdaFw0yNjAzMjgyMTU0MzdaMDMxMTAvBgNV BAMTKDhFNDRFNUU4RDMyODg4NkVERTU4OENGMTdERDdBQzM0RDU2ODI5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+irL9oWGvNbiIl8Ek7C9HhtgN gtnZth+9lL+rnZelnA87LkiWPWhTq4G7ZUIyChbTPGahCRw67XUhq3gMzHHANjaO SeRM9GxzziJPaToMzP1ES9G15VLSFCm8oAs4z/of6tdrmdZXo0OGnR4k9nCAR28h RKcShLAubgB8czslFvxZbHrTv2sFZTyK4dKiLn78Z5UV9cqTvyIbIS2f9/e7BOLm RGNJaYPZL1mKr5bNrdd+ACKUTHMTWEABl8vwGR0xwkBH8MOFLIET7BsTtGGe/rqA oST4obXJksVqrGUbg5hz7EoNOsDY9EkpSkqTJBoS15gMaR7TX7QOZ7NHfT+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjkTl6NMoiG7eWIzxfdesNNVoKRYwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1yM0Fkuzm84tCkskOKjlz1yDPA3HyBM3n7 YYxQSIKksYadyUUd6QjjrjeFNmgDqDefeF8jgtAGzvfwVNaxhyM2Yc66bYGVLGk8 0s2ZZL9vABQVCm9on64aucGruCz9Jbzq17qIcOox/TzeRRsRtS3lHJvaDUMRIbVD BeocBqMamvaI1WglYRwQlKCEwomnlTTvl2qUyqT3eBowc0U5wyLFSQPd6XbYeNC9 Hkj1PohZQZn3zM+v4C5gQtBsjvCNwAJxzD4czKuuCTsbOpeeubZV54tXwzbWyAWG VUOi/XZxVvjjp9CY/Q7t/bLfq0YF5H7BiNIdNuPufT22AY3yO28= -----END CERTIFICATE-----Generated at Thu Mar 26 22:30:53 2026 by rpki-client