$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: /NrV6mbxC2vDmRU7I7yHoXl0k0bE3FDeOdu6LZJiEJQ= Subject key identifier: 50:10:27:D7:35:58:77:EF:A0:0B:B9:F5:59:D1:EC:B6:1E:38:DE:A4 Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 7B053EF550D54E5872F7E2381B2A72768CA25624 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: 013B Signing time: Sun 01 Mar 2026 01:11:38 +0000 Manifest this update: Sun 01 Mar 2026 01:06:38 +0000 Manifest next update: Wed 04 Mar 2026 11:36:38 +0000 Files and hashes: 1: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: BdrxvWOjfGvt5APro3Fmge/8yJKK7N6Iji0d+R9JNSY=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: 4ND3+gZBeIoT6g+JB8RrxRMPJN0D54r28ZhCohuiwZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:05:3e:f5:50:d5:4e:58:72:f7:e2:38:1b:2a:72:76:8c:a2:56:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Mar 1 01:06:38 2026 GMT Not After : Mar 4 11:36:38 2026 GMT Subject: CN=501027D7355877EFA00BB9F559D1ECB61E38DEA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:48:41:59:8f:f6:07:d3:ed:e1:b1:9f:5b: 8a:2a:b0:63:0e:6b:5a:09:99:2b:2c:c9:d2:dc:f3: 7d:42:b2:f2:2a:04:6b:52:56:0f:3e:94:fc:6b:02: 24:ac:11:e5:41:f5:14:7d:9c:4e:66:90:48:16:76: 21:bf:05:ae:ca:d4:3c:70:4b:da:16:3c:d7:9d:b7: d8:f6:c0:0a:80:7f:e0:17:0d:90:ff:6b:15:99:47: ae:9b:3c:c8:2a:cd:0d:33:fe:72:24:a4:7b:34:f7: 72:a1:cb:67:df:28:ca:54:0f:cb:35:5e:66:1b:30: 83:df:32:78:ae:84:a5:30:87:0a:9f:2b:09:6c:c5: a7:c3:24:37:11:85:07:e1:55:69:6b:bb:a6:13:2c: 9c:61:df:6f:84:23:11:9e:df:b1:67:47:9f:1c:6a: a8:e3:3f:ea:22:08:e3:39:a4:35:ad:78:7d:80:b8: 4b:ca:26:cb:10:50:0a:c3:46:53:92:d9:f2:cf:fd: 98:96:8f:06:f4:1b:ff:ef:87:80:c4:13:91:7f:86: c4:34:70:46:10:6c:b7:ca:8b:6e:ca:cd:92:55:10: df:dd:bf:b4:aa:19:0b:a8:3c:dd:a2:ca:84:ab:69: cc:fb:32:ad:e4:e3:8d:0d:32:dc:00:6f:f7:90:b2: fa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:10:27:D7:35:58:77:EF:A0:0B:B9:F5:59:D1:EC:B6:1E:38:DE:A4 X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:a1:77:c3:2f:9b:0e:27:c1:74:94:1c:4d:82:ce:b5:2d:44: a1:62:c7:e4:97:c5:0e:30:1f:d0:76:ed:97:d8:ea:76:05:3e: 19:d3:63:c6:9b:80:70:a3:ab:b0:08:1a:29:1f:1f:b4:3c:d0: cd:ef:e5:c1:b8:e5:6e:03:1c:da:09:39:47:7b:12:73:d4:49: 81:15:74:0e:09:e3:8f:b0:d9:8e:7f:0e:05:f3:b5:af:5e:59: a1:b0:a9:f9:13:5b:24:c2:58:cf:39:27:22:83:59:06:92:3f: ee:d0:c4:76:2b:50:e8:ec:37:52:fe:a2:e7:ea:3c:82:b4:f9: 46:c6:82:ed:72:6d:5e:2d:b9:32:d8:a7:f7:82:cd:c2:b8:08: 12:6c:49:cc:dd:1f:b8:12:7d:c4:a8:d8:5b:ca:f4:95:c4:32: 0c:f2:5f:51:1a:82:d9:3e:80:94:71:00:59:20:ed:b5:f6:b8: 6e:21:6a:78:ab:83:72:a4:43:fe:8f:89:77:27:64:75:7c:1f: 46:da:a5:c0:bb:0c:69:ac:4c:ce:27:37:da:0e:84:a1:e9:97: 4e:9d:5b:a0:1f:9f:af:49:b8:af:60:e3:a7:ef:90:cd:f9:19: eb:8f:4c:8c:17:f4:7f:4d:a1:61:68:9a:02:55:87:0f:eb:f7: 97:5a:47:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewU+9VDVTlhy9+I4GypydoyiViQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNjAzMDEwMTA2MzhaFw0yNjAzMDQxMTM2MzhaMDMxMTAvBgNV BAMTKDUwMTAyN0Q3MzU1ODc3RUZBMDBCQjlGNTU5RDFFQ0I2MUUzOERFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMUhBWY/2B9Pt4bGfW4oqsGMO a1oJmSssydLc831CsvIqBGtSVg8+lPxrAiSsEeVB9RR9nE5mkEgWdiG/Ba7K1Dxw S9oWPNedt9j2wAqAf+AXDZD/axWZR66bPMgqzQ0z/nIkpHs093Khy2ffKMpUD8s1 XmYbMIPfMniuhKUwhwqfKwlsxafDJDcRhQfhVWlru6YTLJxh32+EIxGe37FnR58c aqjjP+oiCOM5pDWteH2AuEvKJssQUArDRlOS2fLP/ZiWjwb0G//vh4DEE5F/hsQ0 cEYQbLfKi27KzZJVEN/dv7SqGQuoPN2iyoSracz7Mq3k440NMtwAb/eQsvqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUBAn1zVYd++gC7n1WdHsth443qQwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKihd8Mvmw4nwXSUHE2CzrUtRKFix+SXxQ4w H9B27ZfY6nYFPhnTY8abgHCjq7AIGikfH7Q80M3v5cG45W4DHNoJOUd7EnPUSYEV dA4J44+w2Y5/DgXzta9eWaGwqfkTWyTCWM85JyKDWQaSP+7QxHYrUOjsN1L+oufq PIK0+UbGgu1ybV4tuTLYp/eCzcK4CBJsSczdH7gSfcSo2FvK9JXEMgzyX1Eagtk+ gJRxAFkg7bX2uG4hanirg3KkQ/6PiXcnZHV8H0bapcC7DGmsTM4nN9oOhKHpl06d W6Afn69JuK9g46fvkM35GeuPTIwX9H9NoWFomgJVhw/r95daRwU= -----END CERTIFICATE-----Generated at Mon Mar 2 15:15:49 2026 by rpki-client