$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: HFyRN7lA5v476C+hG503TBP9/CXCaAsg99o4YD7UkDg= Subject key identifier: 2D:D0:40:91:49:77:E5:74:65:DA:B8:76:1C:27:53:35:C3:A8:29:BB Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 563C908D372202781AD511975348BF9829DECA33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 022A Signing time: Sun 01 Mar 2026 15:10:41 +0000 Manifest this update: Sun 01 Mar 2026 15:05:41 +0000 Manifest next update: Wed 04 Mar 2026 19:08:41 +0000 Files and hashes: 1: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: oXfyTp2dg+aoKkVY0IxbqiBbBHgRJXn9n0N60TtJR2U=) 2: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: zbn7bS7zn2tJjes0380O9wZ4ybsEKzCS4tMfNtC1rmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3c:90:8d:37:22:02:78:1a:d5:11:97:53:48:bf:98:29:de:ca:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Mar 1 15:05:41 2026 GMT Not After : Mar 4 19:08:41 2026 GMT Subject: CN=2DD040914977E57465DAB8761C275335C3A829BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f1:34:64:51:a2:e6:ca:2b:cb:ec:55:e3:51: 45:f8:78:65:0e:54:fb:c0:1a:6d:4b:19:f6:18:30: 23:74:4e:34:f3:01:8b:f6:0f:ce:11:8a:6b:3f:08: 34:da:d0:2e:ac:60:22:d7:48:d4:5d:ce:7d:bf:bd: 07:72:99:11:15:93:3f:dc:40:b8:d7:08:5c:94:88: 20:c9:83:09:65:1c:fd:a1:11:f5:16:b2:89:0a:d3: 2d:df:9a:44:f0:c5:78:bf:ce:eb:b2:b4:3a:11:07: 2d:09:9c:9e:73:07:f6:d3:11:da:b0:fd:db:9e:cb: ab:f6:50:be:7c:7d:8d:02:fb:93:b5:71:81:64:67: bc:fe:86:3e:57:5e:f6:b9:8f:fb:33:20:cd:90:90: a4:ac:e1:e8:37:f1:38:6e:07:66:3d:4d:dd:57:9f: b4:7a:5b:4d:52:35:fb:45:05:58:31:d6:46:ad:7b: c8:eb:c8:08:6c:c3:50:72:27:a2:8e:d7:1e:75:ac: 03:fd:f7:72:6c:58:ab:42:c4:d7:c9:3e:41:af:fb: 84:4a:5e:ae:73:82:79:79:b9:15:e9:97:3d:bc:dd: 29:43:c7:bc:b6:ee:ab:ac:fe:00:34:6e:aa:c5:22: b2:28:be:83:29:f1:96:b1:73:10:33:b3:1b:29:06: 06:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D0:40:91:49:77:E5:74:65:DA:B8:76:1C:27:53:35:C3:A8:29:BB X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e1:ff:15:67:45:8b:de:b5:f7:60:ff:5f:cc:f9:a8:e0:45: a4:c2:7e:a5:02:fd:16:6a:64:d3:e1:35:8f:0a:48:6b:3d:92: 8c:b4:23:a1:73:06:ea:e6:27:db:58:34:1a:fa:37:2f:84:8f: ab:cb:b7:0a:23:ff:18:55:76:07:a5:7d:6f:dc:93:6a:a6:78: 57:5a:20:0b:cb:d9:9e:5e:20:61:39:8d:21:26:08:09:12:e9: 45:6e:63:e7:8a:e5:36:8e:74:12:1e:fe:e8:a4:f0:a7:b9:de: bf:c3:89:60:9d:33:34:79:5b:98:1f:bd:e3:ae:4f:0c:a6:30: 9d:ca:61:7b:54:1b:db:e7:10:be:e3:93:60:74:b3:e6:83:92: 8c:26:99:0e:f0:8f:c6:ac:5f:4f:9a:dc:60:75:ac:d4:80:aa: bb:31:b1:a0:39:d9:ca:98:98:72:1f:ab:fb:6a:14:2a:f1:a5: 3b:de:31:68:f5:a1:4c:62:45:d3:1a:ed:1c:45:8c:33:00:2d: cc:6f:2f:18:b5:8c:43:5a:27:ce:82:e0:f4:7d:38:4c:67:80: 6d:42:86:37:01:47:7e:11:94:7a:8e:2a:19:6e:33:1f:3f:10: fe:4c:7d:8f:5a:5c:11:e4:b1:52:26:46:76:a4:a2:75:91:53: 73:b8:6d:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjyQjTciAnga1RGXU0i/mCneyjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNjAzMDExNTA1NDFaFw0yNjAzMDQxOTA4NDFaMDMxMTAvBgNV BAMTKDJERDA0MDkxNDk3N0U1NzQ2NURBQjg3NjFDMjc1MzM1QzNBODI5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl8TRkUaLmyivL7FXjUUX4eGUO VPvAGm1LGfYYMCN0TjTzAYv2D84Rims/CDTa0C6sYCLXSNRdzn2/vQdymREVkz/c QLjXCFyUiCDJgwllHP2hEfUWsokK0y3fmkTwxXi/zuuytDoRBy0JnJ5zB/bTEdqw /duey6v2UL58fY0C+5O1cYFkZ7z+hj5XXva5j/szIM2QkKSs4eg38ThuB2Y9Td1X n7R6W01SNftFBVgx1kate8jryAhsw1ByJ6KO1x51rAP993JsWKtCxNfJPkGv+4RK Xq5zgnl5uRXplz283SlDx7y27qus/gA0bqrFIrIovoMp8ZaxcxAzsxspBgZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULdBAkUl35XRl2rh2HCdTNcOoKbswHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3h/xVnRYvetfdg/1/M+ajgRaTCfqUC/RZq ZNPhNY8KSGs9koy0I6FzBurmJ9tYNBr6Ny+Ej6vLtwoj/xhVdgelfW/ck2qmeFda IAvL2Z5eIGE5jSEmCAkS6UVuY+eK5TaOdBIe/uik8Ke53r/DiWCdMzR5W5gfveOu TwymMJ3KYXtUG9vnEL7jk2B0s+aDkowmmQ7wj8asX0+a3GB1rNSAqrsxsaA52cqY mHIfq/tqFCrxpTveMWj1oUxiRdMa7RxFjDMALcxvLxi1jENaJ86C4PR9OExngG1C hjcBR34RlHqOKhluMx8/EP5MfY9aXBHksVImRnakonWRU3O4bZU= -----END CERTIFICATE-----Generated at Tue Mar 3 06:12:04 2026 by rpki-client