$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: IO0mPemITl9ejRFwEj1mZRuFY8b1+ertfEOVoiLWQjU= Subject key identifier: 3D:24:1C:5E:D4:C5:14:9E:58:20:0F:4C:9C:DB:83:16:56:67:2B:F2 Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 35047343434433076F8CF3F852A4169507139DC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 02E0 Signing time: Thu 26 Mar 2026 05:02:24 +0000 Manifest this update: Thu 26 Mar 2026 04:57:24 +0000 Manifest next update: Sun 29 Mar 2026 11:45:24 +0000 Files and hashes: 1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: ZUhqRkopz2aAEIpLVfRWO4+f532BAakRUcbL26qkTI0=) 2: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: a0g4Es9CLHBM7zhZi7vtnU/1Gc+mi/t7p4ryYfrKkhs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:04:73:43:43:44:33:07:6f:8c:f3:f8:52:a4:16:95:07:13:9d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Mar 26 04:57:24 2026 GMT Not After : Mar 29 11:45:24 2026 GMT Subject: CN=3D241C5ED4C5149E58200F4C9CDB831656672BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:38:ab:81:14:1a:a2:17:5d:57:bb:be:6f:7e: de:12:66:81:5d:6b:43:4c:22:4b:d4:38:da:b8:f7: 7c:51:3f:a0:a1:b6:79:60:32:f0:df:35:58:60:84: d8:dd:46:fd:2a:0f:88:ab:08:63:a7:85:f7:8b:ae: 3b:23:1e:d3:8d:93:fd:c1:88:00:19:ab:a9:11:b0: 9e:ff:c9:5b:94:10:7b:9e:50:9c:05:6d:11:0e:36: 4d:19:76:e6:90:a2:32:2f:02:24:9a:dd:f7:ba:ec: 46:d2:c7:b6:0a:4c:91:98:04:59:98:a3:fc:4f:15: d8:79:b4:81:bb:d2:de:f2:3c:99:fb:8b:5c:ad:f1: 29:ac:6d:56:a3:60:8c:c6:01:63:18:28:cb:c5:a8: bd:db:6a:40:86:a3:b4:85:4b:d2:bf:6e:ab:67:52: 00:f4:5c:48:49:86:90:e4:cb:51:91:57:c0:58:9d: be:42:21:1f:29:04:7d:ef:c2:8b:4e:f2:7e:c8:b2: e9:98:da:8d:0f:85:45:83:7d:7e:fc:10:f0:d1:af: b8:d1:39:f8:3e:5b:d0:0b:f9:82:8f:80:f5:02:95: 5e:49:63:99:6c:20:61:cf:6c:0e:4d:4c:f4:8b:be: 89:24:06:26:c7:44:94:70:1d:09:62:8a:ff:a4:43: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:24:1C:5E:D4:C5:14:9E:58:20:0F:4C:9C:DB:83:16:56:67:2B:F2 X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0f:d3:de:10:f2:9e:f2:7d:58:be:b5:be:47:77:f5:90:5a: bb:dd:86:54:55:ad:0b:95:19:fc:8a:4e:c1:d6:60:dd:1f:ed: 82:5c:da:42:bc:24:44:d2:03:6b:30:5b:28:9b:a0:5c:3a:2b: 92:fb:b9:7c:12:e0:e5:11:e2:93:4d:b9:27:25:eb:f7:cb:70: a9:97:5f:73:57:ad:a6:b2:de:1f:2f:1c:7f:f2:7e:27:96:08: 77:b1:9f:a5:6a:e5:13:bb:ba:92:bb:f5:e6:ef:54:b2:8a:7c: 01:72:cc:7d:1b:c5:73:c8:33:7e:6c:b4:19:b4:3b:26:22:aa: 06:cd:86:5f:bc:5d:53:ad:bc:52:1c:b4:69:cf:a4:11:55:0d: 05:6c:ef:35:7e:68:29:06:95:c9:37:2d:c8:7a:94:c9:cc:3c: 6d:a0:ca:0e:12:68:a6:cb:42:1c:e0:9a:39:67:88:fc:37:ea: fd:d0:de:6d:60:0a:93:b5:09:41:18:a3:99:86:9b:ab:ed:a6: e3:54:ae:a8:ed:fe:f5:a3:4e:8d:36:f2:6f:59:0a:e4:c4:ad: 73:7d:df:07:4e:07:71:be:4e:43:ed:25:ef:95:9d:76:06:29: 95:51:13:eb:8a:17:b4:d9:70:35:60:44:d1:c0:7a:3e:e4:63: e2:2c:59:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQRzQ0NEMwdvjPP4UqQWlQcTnccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNjAzMjYwNDU3MjRaFw0yNjAzMjkxMTQ1MjRaMDMxMTAvBgNV BAMTKDNEMjQxQzVFRDRDNTE0OUU1ODIwMEY0QzlDREI4MzE2NTY2NzJCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWOKuBFBqiF11Xu75vft4SZoFd a0NMIkvUONq493xRP6ChtnlgMvDfNVhghNjdRv0qD4irCGOnhfeLrjsjHtONk/3B iAAZq6kRsJ7/yVuUEHueUJwFbREONk0ZduaQojIvAiSa3fe67EbSx7YKTJGYBFmY o/xPFdh5tIG70t7yPJn7i1yt8SmsbVajYIzGAWMYKMvFqL3bakCGo7SFS9K/bqtn UgD0XEhJhpDky1GRV8BYnb5CIR8pBH3vwotO8n7IsumY2o0PhUWDfX78EPDRr7jR Ofg+W9AL+YKPgPUClV5JY5lsIGHPbA5NTPSLvokkBibHRJRwHQliiv+kQ1ALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPSQcXtTFFJ5YIA9MnNuDFlZnK/IwHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAP094Q8p7yfVi+tb5Hd/WQWrvdhlRVrQuV GfyKTsHWYN0f7YJc2kK8JETSA2swWyiboFw6K5L7uXwS4OUR4pNNuScl6/fLcKmX X3NXraay3h8vHH/yfieWCHexn6Vq5RO7upK79ebvVLKKfAFyzH0bxXPIM35stBm0 OyYiqgbNhl+8XVOtvFIctGnPpBFVDQVs7zV+aCkGlck3Lch6lMnMPG2gyg4SaKbL QhzgmjlniPw36v3Q3m1gCpO1CUEYo5mGm6vtpuNUrqjt/vWjTo028m9ZCuTErXN9 3wdOB3G+TkPtJe+VnXYGKZVRE+uKF7TZcDVgRNHAej7kY+IsWQE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:51:09 2026 by rpki-client