$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: 5KDJ3sdhazHkYbiCkScrZ066lKxvEoUNBp9J8xYSX0c= Subject key identifier: 07:0E:C9:BE:DD:C4:C8:2D:AA:73:6E:26:B5:B5:E7:A2:47:34:C4:12 Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 7FE8CFB2CF9F61361A34180CC1B8ADA753BB3E2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 02EA Signing time: Fri 17 Apr 2026 19:42:23 +0000 Manifest this update: Fri 17 Apr 2026 19:37:23 +0000 Manifest next update: Mon 20 Apr 2026 23:48:23 +0000 Files and hashes: 1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: ZUhqRkopz2aAEIpLVfRWO4+f532BAakRUcbL26qkTI0=) 2: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: pg0ePAUCdF+xS/maslDQV6LpY1z4mLomBe8vTcTrdPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e8:cf:b2:cf:9f:61:36:1a:34:18:0c:c1:b8:ad:a7:53:bb:3e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Apr 17 19:37:23 2026 GMT Not After : Apr 20 23:48:23 2026 GMT Subject: CN=070EC9BEDDC4C82DAA736E26B5B5E7A24734C412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:34:df:89:b6:f1:fd:dd:96:7a:6f:80:b3: 6a:4e:13:0f:e0:89:0f:8d:44:46:f8:88:aa:c1:5f: 39:2f:65:f0:b4:62:e8:c2:27:d6:fe:41:f6:14:4c: b8:59:6b:a6:5f:db:75:ac:2e:55:6f:9d:d9:39:81: 8b:ba:e6:c8:94:75:79:86:b1:db:e5:79:66:2a:42: 93:45:d0:9e:d6:22:4e:f7:ca:e4:0b:f0:60:7f:67: 89:9b:4d:8f:1e:f9:94:cd:4a:00:68:57:c6:39:df: 2b:c4:ce:04:de:60:36:6d:28:ea:b4:1f:d6:c7:7b: a1:29:38:9b:d9:10:cc:3f:9d:e9:4d:1e:c1:1c:7b: 16:cb:1f:5e:c8:71:15:8f:bc:54:25:95:5b:85:fa: b8:e9:cf:7b:01:46:0b:11:c7:0f:f6:a1:47:a6:87: 1a:9c:dc:e4:d4:92:66:4b:20:fd:64:87:be:f8:b5: e5:51:05:5e:c1:ec:77:7e:0f:50:9c:3f:a5:f3:2b: 35:f9:0a:1a:71:51:ac:2e:3e:2d:b3:3e:40:b2:1e: bc:58:7f:d7:ac:94:dc:56:c3:31:a3:1a:e3:5d:7d: a3:11:ef:01:9d:0e:34:af:50:5d:6e:47:c5:7a:8f: ce:3a:44:25:c5:8b:79:d4:c6:9a:3d:22:1b:cb:8a: 18:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0E:C9:BE:DD:C4:C8:2D:AA:73:6E:26:B5:B5:E7:A2:47:34:C4:12 X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:d4:a9:90:83:72:ff:bc:75:c6:a7:67:00:71:4a:85:81:67: e3:7c:0a:6d:fc:29:69:9d:8d:fe:49:fa:ef:bc:86:ed:3a:8d: e9:73:e6:ba:bb:96:3d:0d:d8:5e:3b:e4:72:e0:1b:96:ed:34: 43:e7:4a:c6:f7:c3:7b:27:11:47:ff:97:c2:8a:4b:9c:e1:cd: e1:c4:01:d7:39:76:d4:cd:e7:af:48:45:14:b7:57:c9:de:fc: dd:9a:6c:80:3a:90:5b:c5:b2:e4:c3:c4:e9:6e:a7:04:a6:f0: 57:d4:36:14:4d:c0:39:c4:69:e8:2c:94:f1:82:19:5f:23:15: a3:c9:a1:e0:7d:08:66:da:58:e0:70:60:42:9d:9d:25:da:75: 92:f7:1d:c2:01:a7:a2:0b:5a:af:d0:6b:80:b7:5f:50:1c:16: 77:a5:2d:05:06:c8:2e:1c:12:44:be:60:4a:3c:d5:64:f2:ca: b3:05:bf:69:b4:02:96:9e:53:9b:3b:e3:80:55:a9:b6:0b:b9: 92:31:9d:22:9c:a8:33:55:d0:91:49:ed:11:2d:8d:d0:db:eb: 4d:c5:3c:63:cb:dc:f9:73:85:53:25:53:94:1c:99:fe:c6:23: f2:40:38:a0:7e:6c:5b:5c:29:18:f9:91:99:17:45:dc:42:62: a3:c9:77:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+jPss+fYTYaNBgMwbitp1O7Pi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNjA0MTcxOTM3MjNaFw0yNjA0MjAyMzQ4MjNaMDMxMTAvBgNV BAMTKDA3MEVDOUJFRERDNEM4MkRBQTczNkUyNkI1QjVFN0EyNDczNEM0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qTTfibbx/d2Wem+As2pOEw/g iQ+NREb4iKrBXzkvZfC0YujCJ9b+QfYUTLhZa6Zf23WsLlVvndk5gYu65siUdXmG sdvleWYqQpNF0J7WIk73yuQL8GB/Z4mbTY8e+ZTNSgBoV8Y53yvEzgTeYDZtKOq0 H9bHe6EpOJvZEMw/nelNHsEcexbLH17IcRWPvFQllVuF+rjpz3sBRgsRxw/2oUem hxqc3OTUkmZLIP1kh774teVRBV7B7Hd+D1CcP6XzKzX5ChpxUawuPi2zPkCyHrxY f9eslNxWwzGjGuNdfaMR7wGdDjSvUF1uR8V6j846RCXFi3nUxpo9IhvLihjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBw7Jvt3EyC2qc24mtbXnokc0xBIwHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMDUqZCDcv+8dcanZwBxSoWBZ+N8Cm38KWmd jf5J+u+8hu06jelz5rq7lj0N2F475HLgG5btNEPnSsb3w3snEUf/l8KKS5zhzeHE Adc5dtTN569IRRS3V8ne/N2abIA6kFvFsuTDxOlupwSm8FfUNhRNwDnEaegslPGC GV8jFaPJoeB9CGbaWOBwYEKdnSXadZL3HcIBp6ILWq/Qa4C3X1AcFnelLQUGyC4c EkS+YEo81WTyyrMFv2m0ApaeU5s744BVqbYLuZIxnSKcqDNV0JFJ7REtjdDb603F PGPL3PlzhVMlU5Qcmf7GI/JAOKB+bFtcKRj5kZkXRdxCYqPJd7U= -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:42 2026 by rpki-client