$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: ei3gXfmNgr42GFYqWVFvDu6DpmDecEt8dmuEWgJMU1k= Subject key identifier: AC:76:24:F4:AF:1A:09:40:E0:5D:0A:30:76:0A:8C:1E:D8:37:01:6F Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 2C221D0785D7A3860E6B090CD09C543CDC3D94C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 02D5 Signing time: Sun 01 Mar 2026 09:02:20 +0000 Manifest this update: Sun 01 Mar 2026 08:57:20 +0000 Manifest next update: Wed 04 Mar 2026 13:47:20 +0000 Files and hashes: 1: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: FjRyuB/GtF1xAM5JK7ypcKHBVCiJGlnbNlWQ7NHmr/M=) 2: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: ZUhqRkopz2aAEIpLVfRWO4+f532BAakRUcbL26qkTI0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:22:1d:07:85:d7:a3:86:0e:6b:09:0c:d0:9c:54:3c:dc:3d:94:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Mar 1 08:57:20 2026 GMT Not After : Mar 4 13:47:20 2026 GMT Subject: CN=AC7624F4AF1A0940E05D0A30760A8C1ED837016F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:12:c6:da:92:4a:83:2f:c2:d5:5c:df:6b: bb:84:54:cd:f9:bf:ef:70:8c:d9:8a:7b:09:d9:ca: 1e:d0:df:0f:19:c8:2b:b3:64:30:9e:e2:dd:f3:26: e2:7f:30:ac:7b:24:f9:01:24:aa:36:77:1c:be:69: 27:66:e9:f5:f5:0f:c3:56:c8:62:9b:a5:e7:f4:e7: 62:de:2c:71:f2:f4:ac:af:9d:f6:00:65:5f:1f:47: 16:ab:ce:0f:5e:ff:37:50:e6:04:26:18:ba:91:e7: fa:ec:cc:06:22:ab:52:71:ca:42:2d:fc:ed:b6:ab: 30:d5:24:c4:5d:dc:16:53:34:33:d0:88:e3:4c:37: ff:e9:1c:df:23:54:9d:14:a0:cc:04:46:57:f0:70: 16:95:9b:b4:fb:2f:cc:a4:e9:78:f9:a8:b4:69:66: a1:db:80:3e:e7:b5:a4:ea:99:96:13:b1:95:69:1a: e3:82:72:5d:b9:01:93:e8:90:57:bf:08:d3:75:2d: 03:11:fa:6c:b6:7e:b8:49:f5:34:ef:2c:7a:52:e0: d1:fa:59:1f:97:08:14:f0:74:a4:48:de:df:42:ca: 0f:5c:04:7d:82:4a:44:9a:26:1e:eb:30:cb:3b:bb: 82:63:12:4f:ed:80:c9:4f:dd:a6:a9:ea:90:ad:7a: 7a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:76:24:F4:AF:1A:09:40:E0:5D:0A:30:76:0A:8C:1E:D8:37:01:6F X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:90:cb:bb:22:62:e2:f9:4a:4c:17:74:bf:8e:83:8f:70:5f: 4f:ed:33:36:f1:a2:8e:26:35:aa:30:df:74:08:4d:e9:6f:69: 1a:a2:ff:10:80:cc:57:f6:f9:f3:f7:43:09:f3:74:66:ef:1b: 5b:1b:07:85:f3:35:2c:12:d0:e9:a6:c5:26:b5:66:f8:5d:5d: f1:88:65:1f:16:64:f5:88:ad:c4:d5:6c:ac:ed:92:da:48:12: 89:70:ee:b4:f7:02:51:a1:18:f5:0e:31:9c:ab:ec:bf:69:77: 47:cd:91:f3:44:4c:9d:c0:64:79:53:59:65:9b:2a:27:d5:3d: 79:a0:15:cd:73:75:15:87:e1:3f:ef:d9:07:ad:58:c9:6c:7c: 2e:30:2d:e1:54:22:1f:8f:2f:55:76:b5:bf:95:01:4e:00:f9: 4f:17:c0:9d:19:11:a1:72:2f:80:b6:8c:00:86:04:73:4c:10: 51:0a:c1:40:10:32:d3:ef:b3:da:27:e5:88:ab:9d:ee:b5:ad: 43:65:26:9b:b2:e5:82:21:00:09:0f:3f:a6:4b:be:3b:f4:7a: 55:8b:5b:6c:c8:61:fb:45:5d:32:dc:b1:db:79:8e:38:2b:55: 01:31:dc:43:8c:4e:2a:a0:a4:33:3b:2f:de:e8:52:ec:ed:ad: 4c:df:8d:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCIdB4XXo4YOawkM0JxUPNw9lMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNjAzMDEwODU3MjBaFw0yNjAzMDQxMzQ3MjBaMDMxMTAvBgNV BAMTKEFDNzYyNEY0QUYxQTA5NDBFMDVEMEEzMDc2MEE4QzFFRDgzNzAxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBuBLG2pJKgy/C1Vzfa7uEVM35 v+9wjNmKewnZyh7Q3w8ZyCuzZDCe4t3zJuJ/MKx7JPkBJKo2dxy+aSdm6fX1D8NW yGKbpef052LeLHHy9KyvnfYAZV8fRxarzg9e/zdQ5gQmGLqR5/rszAYiq1JxykIt /O22qzDVJMRd3BZTNDPQiONMN//pHN8jVJ0UoMwERlfwcBaVm7T7L8yk6Xj5qLRp ZqHbgD7ntaTqmZYTsZVpGuOCcl25AZPokFe/CNN1LQMR+my2frhJ9TTvLHpS4NH6 WR+XCBTwdKRI3t9Cyg9cBH2CSkSaJh7rMMs7u4JjEk/tgMlP3aap6pCtenoLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrHYk9K8aCUDgXQowdgqMHtg3AW8wHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaQy7siYuL5SkwXdL+Og49wX0/tMzbxoo4m Naow33QITelvaRqi/xCAzFf2+fP3QwnzdGbvG1sbB4XzNSwS0OmmxSa1ZvhdXfGI ZR8WZPWIrcTVbKztktpIEolw7rT3AlGhGPUOMZyr7L9pd0fNkfNETJ3AZHlTWWWb KifVPXmgFc1zdRWH4T/v2QetWMlsfC4wLeFUIh+PL1V2tb+VAU4A+U8XwJ0ZEaFy L4C2jACGBHNMEFEKwUAQMtPvs9on5Yirne61rUNlJpuy5YIhAAkPP6ZLvjv0elWL W2zIYftFXTLcsdt5jjgrVQEx3EOMTiqgpDM7L97oUuztrUzfjUo= -----END CERTIFICATE-----Generated at Mon Mar 2 00:45:56 2026 by rpki-client