$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: g3IMrgKQJTowcYu0cT2rNlyZZeMQEh/oGtQrjWqN68c= Subject key identifier: E5:0A:3B:86:AD:CA:DE:8E:7D:F9:1C:C1:12:66:E4:FF:E7:E1:04:60 Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 7F4E8B5871405EF5B5ED0A1A4C218D91665A0CE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 0272 Signing time: Wed 15 Apr 2026 21:21:34 +0000 Manifest this update: Wed 15 Apr 2026 21:16:34 +0000 Manifest next update: Sat 18 Apr 2026 21:28:34 +0000 Files and hashes: 1: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: jWJsGMBuJ3QbVG9Npov9SY2lsSMC/hMW+hFWJY+8omk=) 2: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: R0aNDrnHSf0tLkC/8PtRRCsGS0bcRfXGzOxxHI5cvgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 21:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4e:8b:58:71:40:5e:f5:b5:ed:0a:1a:4c:21:8d:91:66:5a:0c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Apr 15 21:16:34 2026 GMT Not After : Apr 18 21:28:34 2026 GMT Subject: CN=E50A3B86ADCADE8E7DF91CC11266E4FFE7E10460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:01:c4:9f:62:95:42:58:0f:8e:e8:ad:d5: d1:e2:81:1f:e3:79:04:3e:10:6c:20:da:9e:2b:c8: 55:a3:4d:3b:6a:bb:e3:fc:44:97:d9:26:c9:59:e4: f2:6e:2d:b9:d7:89:0d:7f:bc:7e:17:ee:f1:0c:05: 6e:7e:bb:37:f5:95:bf:54:9b:d5:e1:56:a6:68:80: 27:21:7c:75:2a:04:66:3f:72:74:99:95:12:1e:73: 15:6f:96:5f:5c:8b:25:0c:92:5a:1f:63:74:de:00: 70:db:2d:96:85:a4:f6:b0:a0:44:86:a6:74:9d:49: 12:f4:88:e8:41:7d:7c:8c:0b:7a:f8:e0:51:72:ed: 99:a5:bb:8e:85:97:87:32:46:eb:01:64:36:c9:48: 2a:bb:70:63:b6:62:90:cc:4c:63:46:fe:fa:d2:8b: c7:0b:9b:15:6c:fe:ab:d3:36:5d:d7:7c:83:cf:7e: d2:f1:66:d9:1f:5e:61:98:4b:0e:6e:f4:f3:9c:13: 96:df:e7:63:ff:64:65:a6:89:58:ed:c7:0a:35:ff: e2:e8:6f:a0:7d:bd:3c:e7:00:b3:46:22:ad:0d:61: ca:90:7a:08:0e:e6:33:be:88:3a:3f:a4:00:39:ad: 4b:3b:85:ad:cd:1b:39:eb:74:78:a3:d3:32:36:65: 1e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0A:3B:86:AD:CA:DE:8E:7D:F9:1C:C1:12:66:E4:FF:E7:E1:04:60 X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ed:06:91:42:b3:e1:76:2b:76:e7:97:d5:5b:8b:22:03:fb: 77:d3:e2:ab:87:97:83:39:49:3a:ff:54:73:d8:8a:42:e3:67: 7c:ff:18:d7:a8:02:7c:2e:3d:c1:ff:d4:c1:d1:f9:d5:84:a7: 16:a0:f8:45:99:46:c3:23:39:6b:b4:b2:2b:47:b7:a0:df:90: 6b:16:d7:7f:23:1b:31:de:fe:02:ff:f9:b0:04:00:dd:8b:08: 55:05:92:b5:6e:de:02:9c:0c:35:7b:1a:39:ed:0f:56:c5:de: 3a:c2:73:fb:09:d6:c6:ed:aa:d0:ab:42:9a:6b:d9:1c:74:6f: 71:ae:e6:e8:e0:7d:9a:ee:84:05:79:7b:c4:14:6c:4f:c6:33: cc:85:3f:41:50:bc:9c:35:33:0f:d5:a7:58:1e:0f:ec:ac:6d: e6:33:3e:bd:53:67:aa:c5:e0:c7:b3:c3:0e:21:2e:98:5a:68: 4a:9f:23:79:c6:4a:36:b5:4c:45:9f:2f:f0:9b:d4:91:56:5e: 3f:11:33:9c:34:c8:7b:2e:43:aa:c7:df:84:62:64:e3:eb:0c: c9:b0:36:6c:8f:b7:72:92:fa:61:98:bb:8e:12:ea:54:bb:f1: 40:70:90:72:7c:fa:70:33:7c:65:41:6b:57:31:df:74:fc:53: 25:f2:d6:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf06LWHFAXvW17QoaTCGNkWZaDOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNjA0MTUyMTE2MzRaFw0yNjA0MTgyMTI4MzRaMDMxMTAvBgNV BAMTKEU1MEEzQjg2QURDQURFOEU3REY5MUNDMTEyNjZFNEZGRTdFMTA0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4gHEn2KVQlgPjuit1dHigR/j eQQ+EGwg2p4ryFWjTTtqu+P8RJfZJslZ5PJuLbnXiQ1/vH4X7vEMBW5+uzf1lb9U m9XhVqZogCchfHUqBGY/cnSZlRIecxVvll9ciyUMklofY3TeAHDbLZaFpPawoESG pnSdSRL0iOhBfXyMC3r44FFy7Zmlu46Fl4cyRusBZDbJSCq7cGO2YpDMTGNG/vrS i8cLmxVs/qvTNl3XfIPPftLxZtkfXmGYSw5u9POcE5bf52P/ZGWmiVjtxwo1/+Lo b6B9vTznALNGIq0NYcqQeggO5jO+iDo/pAA5rUs7ha3NGznrdHij0zI2ZR5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Qo7hq3K3o59+RzBEmbk/+fhBGAwHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrtBpFCs+F2K3bnl9VbiyID+3fT4quHl4M5 STr/VHPYikLjZ3z/GNeoAnwuPcH/1MHR+dWEpxag+EWZRsMjOWu0sitHt6DfkGsW 138jGzHe/gL/+bAEAN2LCFUFkrVu3gKcDDV7GjntD1bF3jrCc/sJ1sbtqtCrQppr 2Rx0b3Gu5ujgfZruhAV5e8QUbE/GM8yFP0FQvJw1Mw/Vp1geD+ysbeYzPr1TZ6rF 4Mezww4hLphaaEqfI3nGSja1TEWfL/Cb1JFWXj8RM5w0yHsuQ6rH34RiZOPrDMmw NmyPt3KS+mGYu44S6lS78UBwkHJ8+nAzfGVBa1cx33T8UyXy1jo= -----END CERTIFICATE-----Generated at Fri Apr 17 20:49:55 2026 by rpki-client