$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: gKBoZpJyEo/RR3rHZ5UtW4VJ0eEoe2LlTKeRjuUWkYA= Subject key identifier: B1:D9:9C:EA:30:2B:4E:3D:00:84:9B:DA:EF:40:56:6C:A8:94:18:3A Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 0B0EA1590AE060907D35D8CDE8C227CD9905067C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 02C3 Signing time: Fri 17 Apr 2026 22:11:49 +0000 Manifest this update: Fri 17 Apr 2026 22:06:49 +0000 Manifest next update: Tue 21 Apr 2026 05:45:49 +0000 Files and hashes: 1: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: K4U8d+sUzMLgrI4fy436tf9syDLx6SvZlYhSkGTWcb8=) 2: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: E6q+YaeGVVUFa3mSWyCIcsl7FP98KHYzOY0KFDXWWtM=) 3: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo=) 4: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0e:a1:59:0a:e0:60:90:7d:35:d8:cd:e8:c2:27:cd:99:05:06:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Apr 17 22:06:49 2026 GMT Not After : Apr 21 05:45:49 2026 GMT Subject: CN=B1D99CEA302B4E3D00849BDAEF40566CA894183A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:fa:1b:80:66:1d:10:86:31:8d:97:ad:66: c2:44:a4:53:fa:95:35:10:11:27:53:fb:5d:c1:2d: f8:d8:96:67:6c:4b:a2:fa:aa:82:d9:36:20:16:34: da:8f:66:80:9f:c9:66:05:6f:82:dd:52:90:3d:8d: 0f:b7:17:f9:5c:20:04:97:22:23:16:a7:46:88:2f: 96:d1:13:e7:3c:4a:ff:35:c8:82:65:b0:57:c3:77: 61:31:4c:e2:7b:df:24:9e:59:8a:41:f5:3a:10:a4: 6c:3f:0a:05:34:36:d3:4c:6a:b1:91:b6:a0:64:d7: 50:3f:bb:d8:12:37:f4:5e:52:a5:a2:0e:a9:55:ae: 3b:88:7e:e6:48:5c:dc:71:63:cd:93:96:80:dc:b5: 9e:bf:49:71:7a:01:1f:c8:6e:33:a3:05:35:97:a2: 6c:ff:4a:b5:7f:e0:b2:53:9a:c6:26:5f:44:a7:c8: d2:90:32:97:c1:d4:54:92:69:3f:e6:57:00:da:8c: a8:87:2c:f7:54:65:d0:00:f3:29:0c:80:57:cc:a9: 8c:eb:03:d1:dc:25:9d:da:b3:5e:6a:ec:58:31:b4: 32:7b:f5:62:3b:10:9e:8e:0b:aa:65:c0:e7:af:d2: 76:a4:85:54:2c:1e:5b:1f:33:49:92:36:40:32:f4: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:9C:EA:30:2B:4E:3D:00:84:9B:DA:EF:40:56:6C:A8:94:18:3A X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:2d:2a:4a:a6:96:e3:34:4d:c6:28:66:e2:0c:a9:79:ce:a2: f5:42:df:c1:72:03:d7:bb:1d:98:0e:0c:88:c4:96:7a:2a:1f: 05:86:d1:2b:00:63:1e:76:6e:33:d7:a3:1f:9c:db:b7:75:3b: 54:aa:c5:89:3f:7c:37:a3:48:84:a2:41:88:f2:5a:72:4a:46: 71:fe:49:38:c6:30:61:38:12:00:cf:ee:17:1d:33:ab:c9:23: a1:05:00:f6:4a:70:bb:42:cb:1a:1e:7c:e4:d7:27:a3:ec:6c: 49:a2:82:40:a5:9b:c9:42:9c:8c:49:33:ec:35:e9:9d:e1:c7: 8a:7b:2d:f0:4d:d9:b9:ca:18:ac:4d:e8:f5:7a:8a:cf:a4:75: 15:08:f1:68:22:1e:eb:1a:34:ca:8e:00:a2:07:1c:41:fd:69: 30:aa:e2:1c:ba:8a:ba:b0:53:b3:e5:48:5b:a9:80:0f:8a:f0: aa:bd:a7:df:30:da:9e:9b:17:b1:55:40:fd:75:c0:30:57:40: 9a:8b:23:53:04:f3:9a:d6:a4:dc:cd:f6:85:a0:6d:b2:63:8a: 1d:a0:3d:42:ba:e0:90:74:18:5a:6b:39:f6:9d:95:cd:c7:0f: b1:35:09:2a:0e:43:0a:86:30:fa:17:2f:86:49:37:51:63:c7: 51:3f:ac:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCw6hWQrgYJB9NdjN6MInzZkFBnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNjA0MTcyMjA2NDlaFw0yNjA0MjEwNTQ1NDlaMDMxMTAvBgNV BAMTKEIxRDk5Q0VBMzAyQjRFM0QwMDg0OUJEQUVGNDA1NjZDQTg5NDE4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSS/obgGYdEIYxjZetZsJEpFP6 lTUQESdT+13BLfjYlmdsS6L6qoLZNiAWNNqPZoCfyWYFb4LdUpA9jQ+3F/lcIASX IiMWp0aIL5bRE+c8Sv81yIJlsFfDd2ExTOJ73ySeWYpB9ToQpGw/CgU0NtNMarGR tqBk11A/u9gSN/ReUqWiDqlVrjuIfuZIXNxxY82TloDctZ6/SXF6AR/IbjOjBTWX omz/SrV/4LJTmsYmX0SnyNKQMpfB1FSSaT/mVwDajKiHLPdUZdAA8ykMgFfMqYzr A9HcJZ3as15q7FgxtDJ79WI7EJ6OC6plwOev0nakhVQsHlsfM0mSNkAy9FQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsdmc6jArTj0AhJva70BWbKiUGDowHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMtKkqmluM0TcYoZuIMqXnOovVC38FyA9e7 HZgODIjElnoqHwWG0SsAYx52bjPXox+c27d1O1SqxYk/fDejSISiQYjyWnJKRnH+ STjGMGE4EgDP7hcdM6vJI6EFAPZKcLtCyxoefOTXJ6PsbEmigkClm8lCnIxJM+w1 6Z3hx4p7LfBN2bnKGKxN6PV6is+kdRUI8WgiHusaNMqOAKIHHEH9aTCq4hy6irqw U7PlSFupgA+K8Kq9p98w2p6bF7FVQP11wDBXQJqLI1ME85rWpNzN9oWgbbJjih2g PUK64JB0GFprOfadlc3HD7E1CSoOQwqGMPoXL4ZJN1Fjx1E/rDI= -----END CERTIFICATE-----Generated at Sat Apr 18 03:03:51 2026 by rpki-client