$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: JGLGxXv89YNwjkBkgNjlrXFFWPOQlxrnY75774C8Tko= Subject key identifier: 20:91:2D:B8:BF:3A:2D:16:D4:E0:67:87:5A:46:C5:94:F0:27:CA:F3 Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 71F6405EE4735DAA0479E0A9812C852D4E4B1D50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 025E Signing time: Mon 02 Mar 2026 06:41:35 +0000 Manifest this update: Mon 02 Mar 2026 06:36:35 +0000 Manifest next update: Thu 05 Mar 2026 11:56:35 +0000 Files and hashes: 1: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: LANd/RVV1wcpwGfbAS9q3aWVivmCyoN1ME1Jcu0Fz+M=) 2: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: jWJsGMBuJ3QbVG9Npov9SY2lsSMC/hMW+hFWJY+8omk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f6:40:5e:e4:73:5d:aa:04:79:e0:a9:81:2c:85:2d:4e:4b:1d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Mar 2 06:36:35 2026 GMT Not After : Mar 5 11:56:35 2026 GMT Subject: CN=20912DB8BF3A2D16D4E067875A46C594F027CAF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:72:b1:70:99:3a:da:13:c6:8b:91:01:e8: aa:1c:8f:26:25:7b:60:35:5e:43:9e:fe:d7:42:26: 27:29:7b:e5:b7:7a:3c:be:24:6d:d8:af:9c:fd:85: 00:3d:d3:0e:7a:33:fe:9b:5a:7a:7b:fb:d5:e9:6f: b2:40:3d:46:c3:90:2c:1f:86:1a:89:5b:7a:a8:97: 9d:46:90:57:7f:5a:7b:0a:2b:b1:a8:51:9f:cd:10: 17:87:37:ed:26:36:a7:1b:fe:25:a7:ec:30:64:35: d1:35:5a:de:b3:42:e3:89:c6:fa:89:43:64:1f:3d: b2:e6:33:8c:e6:a2:85:3a:d9:73:c7:35:95:89:2c: bd:48:83:e6:a3:26:c2:99:ae:ac:24:21:c8:3a:57: c3:72:d1:b8:99:3c:af:c2:53:f5:25:41:be:49:5d: 7b:da:77:e1:4b:f4:2b:39:9e:c6:38:72:56:4d:a9: f0:fc:70:b7:b2:3d:39:84:f9:1a:20:59:ca:be:39: 1a:84:1e:30:91:ef:c7:e6:1d:cd:bf:7c:71:c1:f9: f5:62:23:67:61:1a:a8:e4:87:58:4c:a5:5a:17:2e: 4a:d7:56:40:d2:ca:77:a0:eb:48:93:ab:0d:d5:df: d8:f8:a7:84:00:03:8a:c7:6e:3c:25:5d:0a:ca:f3: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:91:2D:B8:BF:3A:2D:16:D4:E0:67:87:5A:46:C5:94:F0:27:CA:F3 X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4e:1c:40:a1:a0:36:49:36:23:be:ec:58:5c:a3:8b:38:58: 3a:d9:e5:6c:80:f4:22:b2:39:ab:79:65:46:5e:a0:c5:60:a7: 0c:a0:62:66:d2:67:26:95:69:7b:c8:56:66:d3:15:ac:b0:9d: f2:a4:71:4b:71:a0:87:eb:b5:2b:54:da:78:d6:ff:5d:af:e3: 8c:46:0a:f9:86:43:2d:49:e3:0e:7d:23:4c:84:b2:14:43:42: 6e:0b:b9:1e:66:08:1b:51:8d:9b:2d:b8:15:81:3c:5b:5e:45: 56:35:78:81:c7:21:d7:07:e3:5e:e2:b1:57:7e:da:0a:45:5a: b2:17:f9:a7:a4:80:38:6b:91:39:76:f8:ae:36:f6:40:29:42: 57:6d:36:b4:93:63:28:ff:dd:7c:01:be:56:01:cc:67:41:e5: df:ff:06:9b:cf:00:32:50:13:31:22:1a:8f:b5:44:75:f3:b8: a9:c4:92:04:42:28:cd:7a:ba:7f:33:af:42:e4:f6:13:35:81: 90:0e:60:c5:d5:81:37:4f:9f:fc:21:f5:4b:96:f4:af:0a:c7: 2d:60:bd:4c:40:9e:2f:8d:07:79:83:f4:a2:da:e3:73:49:e9: 16:81:a3:df:2f:98:71:de:79:67:96:9e:25:37:8c:66:4e:bf: cb:0b:4d:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfZAXuRzXaoEeeCpgSyFLU5LHVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNjAzMDIwNjM2MzVaFw0yNjAzMDUxMTU2MzVaMDMxMTAvBgNV BAMTKDIwOTEyREI4QkYzQTJEMTZENEUwNjc4NzVBNDZDNTk0RjAyN0NBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQ3KxcJk62hPGi5EB6KocjyYl e2A1XkOe/tdCJicpe+W3ejy+JG3Yr5z9hQA90w56M/6bWnp7+9Xpb7JAPUbDkCwf hhqJW3qol51GkFd/WnsKK7GoUZ/NEBeHN+0mNqcb/iWn7DBkNdE1Wt6zQuOJxvqJ Q2QfPbLmM4zmooU62XPHNZWJLL1Ig+ajJsKZrqwkIcg6V8Ny0biZPK/CU/UlQb5J XXvad+FL9Cs5nsY4clZNqfD8cLeyPTmE+RogWcq+ORqEHjCR78fmHc2/fHHB+fVi I2dhGqjkh1hMpVoXLkrXVkDSyneg60iTqw3V39j4p4QAA4rHbjwlXQrK8yw9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJEtuL86LRbU4GeHWkbFlPAnyvMwHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5OHEChoDZJNiO+7Fhco4s4WDrZ5WyA9CKy Oat5ZUZeoMVgpwygYmbSZyaVaXvIVmbTFaywnfKkcUtxoIfrtStU2njW/12v44xG CvmGQy1J4w59I0yEshRDQm4LuR5mCBtRjZstuBWBPFteRVY1eIHHIdcH417isVd+ 2gpFWrIX+aekgDhrkTl2+K429kApQldtNrSTYyj/3XwBvlYBzGdB5d//BpvPADJQ EzEiGo+1RHXzuKnEkgRCKM16un8zr0Lk9hM1gZAOYMXVgTdPn/wh9UuW9K8Kxy1g vUxAni+NB3mD9KLa43NJ6RaBo98vmHHeeWeWniU3jGZOv8sLTWc= -----END CERTIFICATE-----Generated at Mon Mar 2 10:15:09 2026 by rpki-client