$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: Ejkn3GIKXcRukpT94IdPJmFv4Qnw2pNqY4XP1+vmYUI= Subject key identifier: 58:D5:2B:74:FE:DA:19:EC:7B:EF:89:F1:8A:31:FE:11:89:27:6A:3B Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 78FC4C83C23F43D961A6DE3266CF2C7BED71FDA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 02C2 Signing time: Wed 15 Apr 2026 20:21:53 +0000 Manifest this update: Wed 15 Apr 2026 20:16:53 +0000 Manifest next update: Sat 18 Apr 2026 22:02:53 +0000 Files and hashes: 1: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo=) 2: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=) 3: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: K4U8d+sUzMLgrI4fy436tf9syDLx6SvZlYhSkGTWcb8=) 4: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: b3cevPdQetMoeO2FqxRwfEA+wLcVMNhze53G4oLOiiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fc:4c:83:c2:3f:43:d9:61:a6:de:32:66:cf:2c:7b:ed:71:fd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Apr 15 20:16:53 2026 GMT Not After : Apr 18 22:02:53 2026 GMT Subject: CN=58D52B74FEDA19EC7BEF89F18A31FE1189276A3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e7:cf:45:1d:ab:b9:dd:4f:59:a3:b7:d1:27: 02:a5:61:9d:85:72:5e:b8:01:3c:24:60:41:de:98: d3:82:39:20:0d:de:24:81:9d:8c:fa:08:90:fa:55: 85:d7:75:d2:8c:2e:a6:fb:74:cb:30:71:b6:ab:8e: bf:76:82:db:58:c5:98:12:66:bd:66:59:b1:6e:bf: 8f:af:bc:77:2e:4a:45:15:57:b1:43:fd:a2:9e:df: f4:41:dd:39:69:0e:ac:74:dd:f1:9b:2e:dd:c9:f4: 7f:90:92:0a:26:52:bb:23:fc:11:f6:ee:44:de:28: d7:3a:8e:3e:ae:1b:ed:77:72:1b:56:c2:3c:c6:4c: bd:6b:e4:85:8b:a0:97:4a:b1:98:78:f4:ed:a4:41: b4:4d:9f:5a:4e:aa:7f:a9:10:a1:72:85:20:07:aa: 6f:7d:fd:ee:e7:2c:57:b6:9c:b5:90:9e:96:1d:57: 1c:16:2c:5b:fa:e8:db:00:7b:b8:7e:0f:fa:c7:a0: 72:84:2c:91:01:33:15:34:ea:e0:75:0c:23:7e:f1: b4:cc:98:02:aa:a0:b2:b7:16:37:fc:d0:18:8d:a5: 5b:da:08:cf:e8:e5:e6:48:a1:2d:1e:8a:27:d3:ee: c0:61:d3:a3:52:8d:65:07:f3:79:01:73:f8:81:4e: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D5:2B:74:FE:DA:19:EC:7B:EF:89:F1:8A:31:FE:11:89:27:6A:3B X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:38:94:cf:4b:4b:af:65:1f:be:d6:98:72:a1:9a:bf:92:c1: 1c:a6:94:24:94:b6:eb:09:f3:00:a8:21:98:65:b1:c9:fd:ed: 1f:30:35:97:15:6b:1e:e7:43:6c:57:e9:2d:12:5b:a1:c3:c4: f3:dd:80:ee:bf:d8:dc:d9:02:68:bf:da:b4:6c:85:59:6d:fe: 69:df:46:2b:c8:11:47:25:c0:52:f8:b4:12:cc:85:79:d3:42: ac:ad:6c:a3:8a:b6:8d:3b:56:20:71:c2:ec:1e:0b:bd:24:7a: 08:f2:83:c0:35:7d:04:50:4b:30:4b:b5:d1:af:1a:74:7e:7e: 20:39:c7:52:15:b9:42:0d:88:a3:9c:dd:d0:71:70:12:cd:5d: 57:73:67:bd:fd:85:17:ad:5c:52:76:4d:31:5e:b9:64:f8:04: 79:af:4b:ba:83:c5:69:86:15:18:4b:d8:c5:59:d8:a4:c2:3d: 04:ac:c5:a5:f3:6f:25:22:d1:45:d3:e1:dc:34:8f:52:dd:d3: 08:26:ec:8a:ed:aa:d9:7f:12:f6:1f:d5:db:e8:d4:af:91:50: 69:b1:63:d4:d8:9d:c5:2a:d3:a5:41:b8:d4:4b:34:f1:cb:94: cd:28:dd:41:87:c8:69:fb:56:67:9f:07:74:ff:3e:07:0e:03: 97:b8:29:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePxMg8I/Q9lhpt4yZs8se+1x/aYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNjA0MTUyMDE2NTNaFw0yNjA0MTgyMjAyNTNaMDMxMTAvBgNV BAMTKDU4RDUyQjc0RkVEQTE5RUM3QkVGODlGMThBMzFGRTExODkyNzZBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5589FHau53U9Zo7fRJwKlYZ2F cl64ATwkYEHemNOCOSAN3iSBnYz6CJD6VYXXddKMLqb7dMswcbarjr92gttYxZgS Zr1mWbFuv4+vvHcuSkUVV7FD/aKe3/RB3TlpDqx03fGbLt3J9H+QkgomUrsj/BH2 7kTeKNc6jj6uG+13chtWwjzGTL1r5IWLoJdKsZh49O2kQbRNn1pOqn+pEKFyhSAH qm99/e7nLFe2nLWQnpYdVxwWLFv66NsAe7h+D/rHoHKELJEBMxU06uB1DCN+8bTM mAKqoLK3Fjf80BiNpVvaCM/o5eZIoS0eiifT7sBh06NSjWUH83kBc/iBTu5nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWNUrdP7aGex774nxijH+EYknajswHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB84lM9LS69lH77WmHKhmr+SwRymlCSUtusJ 8wCoIZhlscn97R8wNZcVax7nQ2xX6S0SW6HDxPPdgO6/2NzZAmi/2rRshVlt/mnf RivIEUclwFL4tBLMhXnTQqytbKOKto07ViBxwuweC70kegjyg8A1fQRQSzBLtdGv GnR+fiA5x1IVuUINiKOc3dBxcBLNXVdzZ739hRetXFJ2TTFeuWT4BHmvS7qDxWmG FRhL2MVZ2KTCPQSsxaXzbyUi0UXT4dw0j1Ld0wgm7Irtqtl/EvYf1dvo1K+RUGmx Y9TYncUq06VBuNRLNPHLlM0o3UGHyGn7VmefB3T/PgcOA5e4KQI= -----END CERTIFICATE-----Generated at Fri Apr 17 21:37:41 2026 by rpki-client