$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json) Hash identifier: 3P5AHfZmQtEZbMDZRtPKs+OTzS7IDbKiQxIrG/oxvhA= Subject key identifier: D9:8A:3B:8A:06:3D:9E:0E:27:B1:CA:FF:8F:8A:E2:7C:89:D1:E7:5B Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 5978F75AC37B98CE50B84EDA0582A6229DB99B4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft Manifest number: 03CF Signing time: Mon 02 Mar 2026 08:02:09 +0000 Manifest this update: Mon 02 Mar 2026 07:57:09 +0000 Manifest next update: Thu 05 Mar 2026 11:18:09 +0000 Files and hashes: 1: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: QSkDnk1Lx4EfFKODMvC7NFYVx5MQTkGjUdf/Bhgjgls=) 2: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: ylXHQm3DiD4h9n4NuN0yUGCouUxigE+BSv0spOzfo/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:78:f7:5a:c3:7b:98:ce:50:b8:4e:da:05:82:a6:22:9d:b9:9b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Mar 2 07:57:09 2026 GMT Not After : Mar 5 11:18:09 2026 GMT Subject: CN=D98A3B8A063D9E0E27B1CAFF8F8AE27C89D1E75B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:c2:05:05:87:c6:1d:e0:d8:22:31:0c:56: 8c:77:e7:e7:f5:e9:aa:db:f6:94:d9:c6:86:a1:67: 56:28:58:6d:a7:a0:88:7a:cd:6d:d7:97:0b:5b:f2: 3e:83:f4:75:e4:22:85:de:c6:02:d8:0c:a5:88:58: 8b:3c:5b:9b:54:ca:de:ab:f0:f3:64:3a:3a:15:fe: 00:48:57:4f:8c:66:a7:62:15:6f:9c:6e:36:70:b1: 9b:6d:7b:85:1e:1c:67:75:95:24:6a:a9:4e:e5:f7: 9f:f7:5c:59:5c:f8:75:90:d7:d9:99:3b:75:e1:70: da:a6:ae:9d:aa:2e:52:60:d1:d3:ab:1f:17:07:aa: 2a:34:6c:45:88:64:ca:e0:07:be:73:4a:a4:db:2a: d9:e9:78:33:cd:9e:c6:7a:08:08:3b:5e:29:6e:8c: 88:ed:a7:a6:5c:5f:19:79:4f:89:d9:ad:bb:b6:fa: 79:cb:42:f5:a5:22:81:80:8a:5d:0c:19:cb:c0:60: c3:5d:d6:08:f5:ea:f8:0c:8f:c8:ee:69:55:8a:ce: b6:de:48:b0:ae:6c:d3:bf:8f:0a:39:99:63:b9:56: 0f:6a:e8:84:ea:31:bf:39:6d:a2:72:3c:32:40:45: db:e3:a6:5d:6e:7e:d0:17:29:a7:0c:de:3e:17:df: 6f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8A:3B:8A:06:3D:9E:0E:27:B1:CA:FF:8F:8A:E2:7C:89:D1:E7:5B X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:1b:78:ae:2b:e6:31:91:7a:d8:0a:a9:b1:a3:be:79:44:1a: ee:ae:29:69:0b:cb:b9:34:89:6e:ba:e0:92:12:1a:32:19:f7: a1:ae:49:17:f1:31:0e:54:3c:8c:f0:f3:0f:97:19:be:e5:5e: 84:ae:1a:7b:4f:65:a2:1d:7e:88:a5:65:ef:c1:fb:2f:2d:67: 6d:8a:40:ce:cd:1c:dc:f9:1e:bb:d0:68:27:4b:54:b7:d3:5b: 8b:b5:af:94:0e:b6:0f:e0:74:0f:eb:83:b0:35:f5:b1:1f:fe: 81:e3:6f:1f:0f:fa:21:eb:c8:a5:3b:46:0c:d1:52:2f:81:58: 10:f6:1e:a5:49:aa:b0:ed:04:4b:c3:bb:27:d2:07:6e:f2:56: 71:84:2b:19:c2:98:32:67:6f:09:e6:91:4e:ed:72:fb:25:04: e5:c6:25:21:c7:f4:c2:f1:cd:af:45:12:7a:db:6d:97:21:f2: d6:40:04:7d:48:91:d6:67:f1:58:9a:7f:ce:bd:4c:19:62:d4: ae:a3:7e:b7:ed:62:a0:5c:2b:94:d1:3c:6c:44:31:7b:dd:4b: a8:ed:60:5e:2d:87:ea:d1:61:14:e8:67:32:07:6f:5c:73:e1: a5:a4:43:3b:73:da:9f:88:5a:ad:7f:ba:62:5b:89:95:a5:93: 12:8c:c0:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXj3WsN7mM5QuE7aBYKmIp25m0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yNjAzMDIwNzU3MDlaFw0yNjAzMDUxMTE4MDlaMDMxMTAvBgNV BAMTKEQ5OEEzQjhBMDYzRDlFMEUyN0IxQ0FGRjhGOEFFMjdDODlEMUU3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YsIFBYfGHeDYIjEMVox35+f1 6arb9pTZxoahZ1YoWG2noIh6zW3Xlwtb8j6D9HXkIoXexgLYDKWIWIs8W5tUyt6r 8PNkOjoV/gBIV0+MZqdiFW+cbjZwsZtte4UeHGd1lSRqqU7l95/3XFlc+HWQ19mZ O3XhcNqmrp2qLlJg0dOrHxcHqio0bEWIZMrgB75zSqTbKtnpeDPNnsZ6CAg7Xilu jIjtp6ZcXxl5T4nZrbu2+nnLQvWlIoGAil0MGcvAYMNd1gj16vgMj8juaVWKzrbe SLCubNO/jwo5mWO5Vg9q6ITqMb85baJyPDJARdvjpl1uftAXKacM3j4X328lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Yo7igY9ng4nscr/j4rifInR51swHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAz MTBGMTAwQ0UzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgbeK4r5jGRetgKqbGjvnlEGu6uKWkLy7k0 iW664JISGjIZ96GuSRfxMQ5UPIzw8w+XGb7lXoSuGntPZaIdfoilZe/B+y8tZ22K QM7NHNz5HrvQaCdLVLfTW4u1r5QOtg/gdA/rg7A19bEf/oHjbx8P+iHryKU7RgzR Ui+BWBD2HqVJqrDtBEvDuyfSB27yVnGEKxnCmDJnbwnmkU7tcvslBOXGJSHH9MLx za9FEnrbbZch8tZABH1IkdZn8Viaf869TBli1K6jfrftYqBcK5TRPGxEMXvdS6jt YF4th+rRYRToZzIHb1xz4aWkQztz2p+IWq1/umJbiZWlkxKMwOc= -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:54 2026 by rpki-client