$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: 9xapg8s0EtX+bk6Mh+uTYzxsPXJNu8q2gIkp7qGaiTc= Subject key identifier: 5C:48:FC:2C:8C:3B:DB:98:66:15:54:D4:6D:31:34:D2:F7:27:2F:96 Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 66DCA758AD5D10E94BD7C845784F1D4F6A534405 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 02AE Signing time: Mon 02 Mar 2026 07:51:49 +0000 Manifest this update: Mon 02 Mar 2026 07:46:49 +0000 Manifest next update: Thu 05 Mar 2026 08:13:49 +0000 Files and hashes: 1: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: K4U8d+sUzMLgrI4fy436tf9syDLx6SvZlYhSkGTWcb8=) 2: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo=) 3: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=) 4: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: iAv287sfoQbbiOUJ4BjLxsoOvlff5OSvKHgBL/RPeqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:dc:a7:58:ad:5d:10:e9:4b:d7:c8:45:78:4f:1d:4f:6a:53:44:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Mar 2 07:46:49 2026 GMT Not After : Mar 5 08:13:49 2026 GMT Subject: CN=5C48FC2C8C3BDB98661554D46D3134D2F7272F96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9b:98:2b:32:7e:27:0e:05:5f:1b:d4:19:7f: 7e:76:87:bd:b4:92:fd:d0:6e:48:4e:e8:ec:f0:cb: 9a:26:b9:d1:28:74:0f:b6:2a:a0:13:5a:c8:99:8c: be:ac:c1:3c:24:52:93:15:d2:75:df:75:f2:d3:d0: 19:fc:e5:ae:99:68:ec:c7:9c:6b:8d:f7:4b:55:81: ec:97:16:b9:c2:4f:4f:7a:74:b2:eb:4f:db:2f:8e: e0:38:11:c3:90:36:52:80:d5:c9:a1:c8:49:9f:a7: 32:94:eb:6f:4d:c9:18:27:14:74:e7:6d:8f:80:3d: ec:32:4a:06:be:fc:28:46:3b:26:2b:ea:0c:0b:ad: db:bb:04:0e:07:43:c0:34:81:02:5b:a0:fc:3b:bd: 96:e8:1a:80:a8:c7:a0:cc:c1:16:05:31:8e:c9:9b: 91:d3:e3:57:ce:1f:4e:ce:fb:57:cf:12:05:e3:e4: 28:3c:fb:97:e4:bb:b6:ac:45:93:1c:53:76:a6:4b: 23:19:74:2a:02:c7:77:df:9a:eb:fe:61:2f:a4:0f: ed:f4:75:b2:3a:da:04:a2:51:73:1e:a4:ba:26:53: fc:6b:24:70:a2:f4:06:8c:57:cf:2e:07:8e:c1:96: 08:df:82:9c:2d:ec:c5:27:6f:9d:98:70:8b:7c:59: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:48:FC:2C:8C:3B:DB:98:66:15:54:D4:6D:31:34:D2:F7:27:2F:96 X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:76:11:02:98:1b:8a:d7:14:5e:1f:c9:4e:df:45:76:59:67: 9c:24:d3:9a:14:d1:7c:30:66:2b:0a:9e:a7:91:e7:26:28:bd: 6d:30:bc:1c:a5:42:74:59:d8:05:95:89:1e:35:35:56:c7:43: 5c:f4:13:9d:ae:b6:59:fa:37:5d:d6:b8:7e:94:48:b8:b0:04: 6d:9c:90:b9:76:36:60:32:96:75:16:30:b0:ac:7f:6f:70:04: 55:d2:4c:11:a9:b7:6d:35:dc:0c:81:d9:5c:2d:30:75:a1:e5: 04:97:e8:19:ac:3a:d7:5d:f4:a8:4f:9c:10:e4:59:87:c4:d8: a1:fd:2c:4c:bb:ae:66:9e:ee:cb:c8:16:d4:01:4e:b3:63:0e: a0:c4:af:a4:05:cb:d3:fd:ca:ef:13:d4:e1:3c:6d:7c:09:32: 29:be:98:b0:35:96:67:0b:80:63:3d:b6:de:55:08:94:8f:32: 02:3f:ab:e5:4e:c1:c4:01:16:75:03:a2:92:ac:19:d0:e0:ff: 46:4d:3e:38:fb:56:bb:92:bb:2e:0a:e5:20:82:b2:d5:67:8e: 07:03:86:44:44:4a:51:3d:93:77:22:5c:c0:2a:ee:e5:f2:74: e3:bf:ca:ba:88:5e:58:95:95:e1:5f:2e:f7:ac:71:e0:aa:e4: 8d:bd:b1:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtynWK1dEOlL18hFeE8dT2pTRAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNjAzMDIwNzQ2NDlaFw0yNjAzMDUwODEzNDlaMDMxMTAvBgNV BAMTKDVDNDhGQzJDOEMzQkRCOTg2NjE1NTRENDZEMzEzNEQyRjcyNzJGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUm5grMn4nDgVfG9QZf352h720 kv3QbkhO6Ozwy5omudEodA+2KqATWsiZjL6swTwkUpMV0nXfdfLT0Bn85a6ZaOzH nGuN90tVgeyXFrnCT096dLLrT9svjuA4EcOQNlKA1cmhyEmfpzKU629NyRgnFHTn bY+APewySga+/ChGOyYr6gwLrdu7BA4HQ8A0gQJboPw7vZboGoCox6DMwRYFMY7J m5HT41fOH07O+1fPEgXj5Cg8+5fku7asRZMcU3amSyMZdCoCx3ffmuv+YS+kD+30 dbI62gSiUXMepLomU/xrJHCi9AaMV88uB47Blgjfgpwt7MUnb52YcIt8WRjpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXEj8LIw725hmFVTUbTE00vcnL5YwHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE12EQKYG4rXFF4fyU7fRXZZZ5wk05oU0Xww ZisKnqeR5yYovW0wvBylQnRZ2AWViR41NVbHQ1z0E52utln6N13WuH6USLiwBG2c kLl2NmAylnUWMLCsf29wBFXSTBGpt2013AyB2VwtMHWh5QSX6BmsOtdd9KhPnBDk WYfE2KH9LEy7rmae7svIFtQBTrNjDqDEr6QFy9P9yu8T1OE8bXwJMim+mLA1lmcL gGM9tt5VCJSPMgI/q+VOwcQBFnUDopKsGdDg/0ZNPjj7VruSuy4K5SCCstVnjgcD hkRESlE9k3ciXMAq7uXydOO/yrqIXliVleFfLvesceCq5I29sTI= -----END CERTIFICATE-----Generated at Mon Mar 2 15:16:28 2026 by rpki-client