$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json) Hash identifier: N4nM2mR9yW6wY1l7m8/Jq4nZlKUP/f/IRo5+dwVkbsI= Subject key identifier: 8E:6E:64:F5:40:4D:11:C8:5E:B0:B8:C8:1C:08:3F:DB:8E:9D:1C:01 Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 766B47B66AA02CFA954E6383EFF91019822942E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft Manifest number: 0307 Signing time: Tue 24 Mar 2026 22:31:50 +0000 Manifest this update: Tue 24 Mar 2026 22:26:50 +0000 Manifest next update: Sat 28 Mar 2026 06:45:50 +0000 Files and hashes: 1: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: onkf6ihxWa+JoLIayOHgjnVBDxnQZxCCCtl/Whh+nYY=) 2: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: vFZDJyrW7Nf7Z4DcMgOnKecQwvqUWGovWuuXKrThLwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6b:47:b6:6a:a0:2c:fa:95:4e:63:83:ef:f9:10:19:82:29:42:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: Mar 24 22:26:50 2026 GMT Not After : Mar 28 06:45:50 2026 GMT Subject: CN=8E6E64F5404D11C85EB0B8C81C083FDB8E9D1C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:18:c6:28:e4:ba:c5:9d:19:ef:c0:4a:37: de:f3:9a:b8:42:af:5d:42:4a:08:49:bf:2a:0f:d3: 6f:e3:71:39:c4:f6:af:fa:f6:3d:ee:a4:2e:64:e8: 8a:2e:2e:4e:05:eb:b9:d6:5a:90:91:d5:a8:65:09: 5e:21:b9:40:d1:8a:33:55:b5:1e:c7:4d:17:5e:08: 5b:5e:73:e5:66:aa:42:1b:5a:13:17:a8:26:ff:ce: ee:d5:df:9e:45:34:44:68:3f:3b:73:1d:b1:80:09: 69:54:ac:7f:9c:40:ea:04:03:1b:9d:d0:07:cb:01: 78:33:99:94:a1:16:a9:4b:94:4a:7b:6f:a2:c7:f5: 5c:b3:4d:98:6c:67:6f:9c:88:f0:61:ca:5a:40:f9: 1b:f5:4c:d4:be:f7:07:07:cc:7c:ae:dc:0c:e0:cd: ef:cf:c0:ca:95:9b:7b:f6:0c:c5:66:ed:0f:5d:25: 69:ef:d1:1b:0e:4f:51:53:6e:76:df:bc:1c:92:ff: 75:47:29:65:2b:e1:64:77:6e:38:61:00:64:e4:01: 35:14:79:92:e9:4c:f4:9f:69:d9:ed:d4:e0:0d:76: 4b:c5:81:e6:df:82:ba:89:65:a5:c8:e5:cf:db:3f: 9c:c8:46:72:37:34:c0:8a:8a:9d:64:b8:cc:c3:bd: a9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6E:64:F5:40:4D:11:C8:5E:B0:B8:C8:1C:08:3F:DB:8E:9D:1C:01 X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:20:c2:a9:0b:b9:7b:df:f6:6e:b7:63:ee:50:f2:6d:e4:79: c4:fa:22:b1:22:6d:bd:3b:56:89:bd:d5:4a:37:cd:c6:30:0d: 69:37:a5:9e:b7:bd:e8:5a:56:23:8a:22:4e:ca:1e:31:2e:df: e7:7c:c5:a6:60:42:97:4a:d0:57:4f:c4:e4:71:84:33:7a:26: bf:71:d8:56:9a:b7:e2:7b:d4:52:0b:91:65:0b:42:83:2f:78: 70:c4:e8:7c:40:ac:e8:2b:63:e1:6c:ea:d4:fa:e7:4f:98:d5: 7c:3a:99:c4:d7:7f:64:f2:cf:ac:ea:0b:2b:90:bb:60:9e:a0: 0b:8b:9a:d3:a4:18:47:67:64:83:7a:dc:15:f9:4b:35:b7:28: 4a:2b:50:f7:86:35:38:f5:66:4b:88:77:11:d4:31:d0:e0:fe: 7c:f0:95:56:30:80:8a:b6:e4:4b:02:1b:49:9e:23:2a:70:20: 03:56:96:f2:90:c6:da:7e:c4:9b:77:64:a9:75:bd:c0:a6:7e: 94:0c:02:78:57:61:3a:96:74:b5:2c:2f:e9:40:cb:c6:8b:d2: 06:c0:fb:00:c0:34:99:6f:b5:55:d6:ad:ba:61:49:f5:91:c5: f1:f4:20:97:c3:da:07:dd:3a:4f:9e:02:1b:3b:49:0a:5a:ca: 73:dd:6c:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdmtHtmqgLPqVTmOD7/kQGYIpQugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yNjAzMjQyMjI2NTBaFw0yNjAzMjgwNjQ1NTBaMDMxMTAvBgNV BAMTKDhFNkU2NEY1NDA0RDExQzg1RUIwQjhDODFDMDgzRkRCOEU5RDFDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVchjGKOS6xZ0Z78BKN97zmrhC r11CSghJvyoP02/jcTnE9q/69j3upC5k6IouLk4F67nWWpCR1ahlCV4huUDRijNV tR7HTRdeCFtec+VmqkIbWhMXqCb/zu7V355FNERoPztzHbGACWlUrH+cQOoEAxud 0AfLAXgzmZShFqlLlEp7b6LH9VyzTZhsZ2+ciPBhylpA+Rv1TNS+9wcHzHyu3Azg ze/PwMqVm3v2DMVm7Q9dJWnv0RsOT1FTbnbfvByS/3VHKWUr4WR3bjhhAGTkATUU eZLpTPSfadnt1OANdkvFgebfgrqJZaXI5c/bP5zIRnI3NMCKip1kuMzDvan1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjm5k9UBNEchesLjIHAg/246dHAEwHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEgwqkLuXvf9m63Y+5Q8m3kecT6IrEibb07 Vom91Uo3zcYwDWk3pZ63vehaViOKIk7KHjEu3+d8xaZgQpdK0FdPxORxhDN6Jr9x 2Faat+J71FILkWULQoMveHDE6HxArOgrY+Fs6tT650+Y1Xw6mcTXf2Tyz6zqCyuQ u2CeoAuLmtOkGEdnZIN63BX5SzW3KEorUPeGNTj1ZkuIdxHUMdDg/nzwlVYwgIq2 5EsCG0meIypwIANWlvKQxtp+xJt3ZKl1vcCmfpQMAnhXYTqWdLUsL+lAy8aL0gbA +wDANJlvtVXWrbphSfWRxfH0IJfD2gfdOk+eAhs7SQpaynPdbMI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:16:05 2026 by rpki-client