$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: Qc8e9JmQy83sUqMZBncasEAl0nALYEfGqMF5mOx6RQg= Subject key identifier: 11:92:BD:62:D4:60:DA:43:5A:09:66:94:A9:81:DE:77:4F:86:0D:21 Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: E8A1A840648859A6CFDB5B3CF9FA834CE76B5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 023F Signing time: Fri 17 Apr 2026 19:30:42 +0000 Manifest this update: Fri 17 Apr 2026 19:25:42 +0000 Manifest next update: Mon 20 Apr 2026 22:31:42 +0000 Files and hashes: 1: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: zbn7bS7zn2tJjes0380O9wZ4ybsEKzCS4tMfNtC1rmk=) 2: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: zhZZGWV5aaXdJ8sZ1m8+YbhS7EpaXp1TVFnddGyrzWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 22:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e8:a1:a8:40:64:88:59:a6:cf:db:5b:3c:f9:fa:83:4c:e7:6b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Apr 17 19:25:42 2026 GMT Not After : Apr 20 22:31:42 2026 GMT Subject: CN=1192BD62D460DA435A096694A981DE774F860D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:2e:49:1c:78:e0:03:66:a4:a8:48:9a:ea: 93:bc:38:1b:1e:e8:05:4f:aa:7f:b0:58:23:45:eb: c6:d4:0b:be:3d:ee:ae:3f:8c:52:77:ce:72:1f:31: 11:18:c5:b4:3e:bd:72:68:da:74:41:31:66:4b:0f: ae:58:05:69:63:d6:a3:81:43:63:00:b1:34:40:bc: 11:e4:72:bd:44:4a:e2:17:13:ff:f2:f8:3f:50:b8: cc:75:84:ea:2e:cf:16:a4:39:22:36:fb:03:bd:66: e9:ce:34:a7:00:c2:eb:79:58:fa:00:bc:9d:10:db: fd:97:bf:f5:ba:de:34:a8:ae:5e:d1:71:ab:17:36: 93:1e:67:9c:ab:6d:c2:3d:b4:a4:f2:dd:03:d0:7a: 8b:58:04:64:45:31:66:05:a0:e8:51:af:c8:59:c7: 46:51:53:f7:58:ef:b2:41:1a:f2:d2:8b:2d:6e:9c: d1:d6:53:2a:8a:ce:9f:f6:a4:13:c6:9e:34:20:01: 1c:6a:c6:f0:57:c4:17:18:d7:15:ae:39:f2:61:6b: de:9f:7b:7d:21:c2:a2:c1:2f:74:a7:bd:f6:1b:06: 00:19:2a:aa:bc:d8:4d:76:6b:fa:cf:e4:e0:06:d0: 69:ae:6f:4c:18:e7:07:26:37:7d:5f:27:f7:63:20: b2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:92:BD:62:D4:60:DA:43:5A:09:66:94:A9:81:DE:77:4F:86:0D:21 X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:6a:91:d9:48:73:56:7f:6b:ed:74:ca:73:88:f4:72:5e:dc: 99:0c:7c:4c:fd:d4:23:42:ce:40:e8:55:a0:b9:66:42:30:75: c7:3a:67:cf:15:ba:25:1a:37:1c:b9:1b:93:1e:c1:da:aa:a6: 69:74:60:da:f5:e1:91:36:f8:45:e5:45:42:cf:2e:5c:09:cb: 26:63:d1:9e:74:63:86:01:eb:7a:cf:9a:02:28:e6:cd:50:ef: ff:c4:93:c3:37:5e:93:94:3e:96:3b:b4:13:6f:95:f7:26:bf: 22:d1:00:3f:0c:80:dc:3e:d6:e1:6e:77:15:ae:4a:f0:37:58: 45:0d:7a:8a:41:e1:fc:37:84:1f:07:bd:9d:20:d5:7d:a1:94: cd:55:f5:2d:7e:02:16:0d:49:d7:01:9a:48:42:f8:d1:0c:83: 06:01:64:4b:0a:8e:9e:4f:38:e6:fb:0c:d4:f1:aa:1d:54:19: 23:db:47:1b:d9:4e:d1:38:8a:f7:44:cf:91:cf:85:43:98:1a: 8e:7d:ba:b6:ab:cb:67:52:8c:0e:9a:24:c5:ee:38:cb:67:68: 63:36:1e:1c:09:c0:4f:ad:ae:cc:22:96:98:ab:3e:d6:ed:66: e0:db:1f:25:d4:dd:28:1c:f9:4f:08:aa:be:30:a6:ef:86:ce: ef:c7:9b:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOihqEBkiFmmz9tbPPn6g0zna14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNjA0MTcxOTI1NDJaFw0yNjA0MjAyMjMxNDJaMDMxMTAvBgNV BAMTKDExOTJCRDYyRDQ2MERBNDM1QTA5NjY5NEE5ODFERTc3NEY4NjBEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vi5JHHjgA2akqEia6pO8OBse 6AVPqn+wWCNF68bUC7497q4/jFJ3znIfMREYxbQ+vXJo2nRBMWZLD65YBWlj1qOB Q2MAsTRAvBHkcr1ESuIXE//y+D9QuMx1hOouzxakOSI2+wO9ZunONKcAwut5WPoA vJ0Q2/2Xv/W63jSorl7RcasXNpMeZ5yrbcI9tKTy3QPQeotYBGRFMWYFoOhRr8hZ x0ZRU/dY77JBGvLSiy1unNHWUyqKzp/2pBPGnjQgARxqxvBXxBcY1xWuOfJha96f e30hwqLBL3SnvfYbBgAZKqq82E12a/rP5OAG0Gmub0wY5wcmN31fJ/djILIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEZK9YtRg2kNaCWaUqYHed0+GDSEwHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJqkdlIc1Z/a+10ynOI9HJe3JkMfEz91CNC zkDoVaC5ZkIwdcc6Z88VuiUaNxy5G5Mewdqqpml0YNr14ZE2+EXlRULPLlwJyyZj 0Z50Y4YB63rPmgIo5s1Q7//Ek8M3XpOUPpY7tBNvlfcmvyLRAD8MgNw+1uFudxWu SvA3WEUNeopB4fw3hB8HvZ0g1X2hlM1V9S1+AhYNSdcBmkhC+NEMgwYBZEsKjp5P OOb7DNTxqh1UGSPbRxvZTtE4ivdEz5HPhUOYGo59urary2dSjA6aJMXuOMtnaGM2 HhwJwE+trswilpirPtbtZuDbHyXU3Sgc+U8Iqr4wpu+Gzu/Hm+E= -----END CERTIFICATE-----Generated at Sat Apr 18 00:43:47 2026 by rpki-client