$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: 4QZX6mI27cCToNEurER21/B9Y55SgsseBB6Z9AixdyE= Subject key identifier: 9F:56:FD:3D:74:71:90:E7:B2:AE:66:80:19:9C:95:1D:4E:95:88:D1 Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 162681A79EA570C0580166BC01E150125A0840DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: 0150 Signing time: Fri 17 Apr 2026 00:21:43 +0000 Manifest this update: Fri 17 Apr 2026 00:16:43 +0000 Manifest next update: Mon 20 Apr 2026 04:06:43 +0000 Files and hashes: 1: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: Z4SO4jO//O1mnBhfRnWHe6InicnSiLa1FUujJ5yPfwU=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: 4ND3+gZBeIoT6g+JB8RrxRMPJN0D54r28ZhCohuiwZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:26:81:a7:9e:a5:70:c0:58:01:66:bc:01:e1:50:12:5a:08:40:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Apr 17 00:16:43 2026 GMT Not After : Apr 20 04:06:43 2026 GMT Subject: CN=9F56FD3D747190E7B2AE6680199C951D4E9588D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:da:0c:8c:e4:ed:ce:8a:e6:ae:3a:5c:e0:03: bd:86:c0:2f:84:25:4d:a1:e6:2c:79:4c:c9:eb:be: 8c:34:77:d9:0d:7a:60:56:73:52:53:96:c9:31:8e: 43:28:8d:bc:79:50:be:49:16:c0:32:8f:f0:12:c3: 60:60:4a:8e:7c:82:14:d5:91:1b:a3:81:02:1c:50: 8d:c4:10:c4:b8:d3:4d:aa:c1:f8:89:14:bb:80:b7: 84:ac:1d:22:78:8e:33:91:34:fd:aa:bb:fb:28:3d: 7a:8a:1c:b3:67:1e:10:12:d2:03:38:6b:62:3a:65: 31:34:9c:4d:0d:a0:69:96:c4:bb:e9:a5:79:9f:90: fa:b6:19:f6:b0:5b:dd:d8:65:fa:d2:40:2e:78:20: 46:56:f8:aa:28:ab:67:48:da:d4:2e:e8:d0:d6:2c: 9a:eb:5e:c2:44:d5:b8:c7:93:18:6d:ce:89:d1:20: 8a:54:fd:38:39:7e:f0:96:3c:d9:b7:59:07:e8:42: 84:da:e5:ab:bb:ec:89:e4:d6:2e:c3:a1:6e:fb:7b: 6e:54:8b:e3:58:c2:d4:84:6d:ea:30:71:cd:08:75: 98:e5:9e:7c:ef:71:da:72:21:6b:01:5a:cc:f3:f9: e0:cb:56:15:82:6e:14:8b:a6:3a:27:55:39:e9:87: b7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:56:FD:3D:74:71:90:E7:B2:AE:66:80:19:9C:95:1D:4E:95:88:D1 X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:fd:b0:81:d1:d4:0f:99:06:05:5c:14:98:34:0e:66:ba:20: 71:66:11:14:f8:37:a2:7c:1c:f7:58:18:5b:77:6d:0d:86:20: 4b:bc:0d:37:01:ca:5a:31:c1:d8:11:e7:1a:ba:b1:09:bf:51: 81:ad:43:4e:5b:2e:f9:b2:66:aa:c4:18:7a:2f:32:c1:c4:87: 72:66:45:18:3a:8b:63:2b:8a:2d:9b:6e:de:93:32:0f:ef:c7: 82:63:c9:23:89:00:c2:09:54:69:63:86:87:19:9e:d2:6f:1a: c7:3a:6e:04:d2:de:91:8f:c7:dc:75:b6:55:1c:f8:a3:f1:63: 1c:91:a4:8a:5b:d0:2b:3a:ac:e8:d2:63:a3:cd:31:09:83:9f: b3:43:3f:17:11:b4:ae:47:c2:ea:79:0d:fe:4f:57:41:e8:b8: d5:ce:5c:25:c6:3c:45:56:6b:f9:99:06:70:e2:0b:7a:3c:ee: 32:df:53:29:51:cb:9d:f6:b3:b9:32:5b:81:3e:e6:5f:db:11: b6:ab:bd:ff:25:14:70:00:04:6a:8e:14:ac:49:80:e3:9c:dd: 20:41:5a:b5:56:e0:b3:20:64:60:9f:da:8c:6d:86:68:45:84: c6:2c:6b:72:0f:94:ad:77:3f:04:3a:eb:f3:0b:c4:c7:9b:a8: ec:3b:36:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFiaBp56lcMBYAWa8AeFQEloIQNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNjA0MTcwMDE2NDNaFw0yNjA0MjAwNDA2NDNaMDMxMTAvBgNV BAMTKDlGNTZGRDNENzQ3MTkwRTdCMkFFNjY4MDE5OUM5NTFENEU5NTg4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32gyM5O3OiuauOlzgA72GwC+E JU2h5ix5TMnrvow0d9kNemBWc1JTlskxjkMojbx5UL5JFsAyj/ASw2BgSo58ghTV kRujgQIcUI3EEMS4002qwfiJFLuAt4SsHSJ4jjORNP2qu/soPXqKHLNnHhAS0gM4 a2I6ZTE0nE0NoGmWxLvppXmfkPq2GfawW93YZfrSQC54IEZW+Kooq2dI2tQu6NDW LJrrXsJE1bjHkxhtzonRIIpU/Tg5fvCWPNm3WQfoQoTa5au77Ink1i7DoW77e25U i+NYwtSEbeowcc0IdZjlnnzvcdpyIWsBWszz+eDLVhWCbhSLpjonVTnph7fNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn1b9PXRxkOeyrmaAGZyVHU6ViNEwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGb9sIHR1A+ZBgVcFJg0Dma6IHFmERT4N6J8 HPdYGFt3bQ2GIEu8DTcByloxwdgR5xq6sQm/UYGtQ05bLvmyZqrEGHovMsHEh3Jm RRg6i2Mrii2bbt6TMg/vx4JjySOJAMIJVGljhocZntJvGsc6bgTS3pGPx9x1tlUc +KPxYxyRpIpb0Cs6rOjSY6PNMQmDn7NDPxcRtK5Hwup5Df5PV0HouNXOXCXGPEVW a/mZBnDiC3o87jLfUylRy532s7kyW4E+5l/bEbarvf8lFHAABGqOFKxJgOOc3SBB WrVW4LMgZGCf2oxthmhFhMYsa3IPlK13PwQ66/MLxMebqOw7Nsw= -----END CERTIFICATE-----Generated at Sat Apr 18 00:05:14 2026 by rpki-client