$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: FKnziz+lamVIosV+CZemZJMy5hJA92KfoAr8MzNR2mo= Subject key identifier: D5:92:CC:6A:E1:4C:52:8D:93:B8:DE:7A:6C:F0:76:0C:F7:A6:AC:94 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 24AAE3046ACC5C969FE770B847D4CB5E9D7FB14D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 01EC Signing time: Fri 17 Apr 2026 17:32:16 +0000 Manifest this update: Fri 17 Apr 2026 17:27:16 +0000 Manifest next update: Mon 20 Apr 2026 19:52:16 +0000 Files and hashes: 1: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: T6EE7CbW35s45e0263f+URwYA2lm21nSH0YTz5UoU4o=) 2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: jW8jdRnHuWV/CGzvWek2GgncM27aFTLWkhF7bsF25vc=) 3: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: x2Hm62E2uEA2xK2KdHiYKgM3ucKI5cMOxdWr+weYfZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:aa:e3:04:6a:cc:5c:96:9f:e7:70:b8:47:d4:cb:5e:9d:7f:b1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Apr 17 17:27:16 2026 GMT Not After : Apr 20 19:52:16 2026 GMT Subject: CN=D592CC6AE14C528D93B8DE7A6CF0760CF7A6AC94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a4:99:f5:e3:97:21:57:3f:20:7c:09:93:31: e8:d5:40:09:21:37:7d:1a:0a:54:57:4d:a9:12:d2: ba:1b:65:09:1d:98:9a:1b:74:c0:97:d4:d7:3b:b7: cd:cd:c4:fc:02:68:b4:86:14:e2:37:96:bd:04:df: 3c:f2:0b:e4:82:0b:33:c4:71:55:7a:b9:2f:5b:b3: 61:b0:6b:e2:a9:42:50:45:d1:d3:f4:44:54:7b:03: 1c:4e:85:5b:3d:2f:2c:51:66:4a:98:ad:ef:ab:4e: ce:d9:4e:64:a0:1b:5d:9b:90:86:56:db:1d:bc:d3: cf:3e:0c:ab:de:e0:90:95:07:fa:87:2e:4c:76:29: 31:e2:8e:c1:c1:f5:53:d0:00:24:86:1e:a9:10:53: d4:6b:b6:eb:0b:78:20:16:8d:ab:54:22:e8:52:d8: d7:42:f7:39:64:e8:77:80:23:4b:e1:39:45:b7:24: d8:96:08:f7:83:64:60:df:59:c2:6a:41:7f:4e:79: df:aa:b2:18:c9:6e:96:dd:05:a9:61:3f:49:f2:74: 6e:d2:e6:d2:d4:25:d6:22:25:12:a2:35:75:ca:1c: d2:a4:b3:50:51:21:f9:43:ab:ea:eb:68:da:33:c9: e7:92:80:b2:1d:e2:16:f1:9d:1c:03:16:38:86:b7: a9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:92:CC:6A:E1:4C:52:8D:93:B8:DE:7A:6C:F0:76:0C:F7:A6:AC:94 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d3:65:6f:90:70:c5:c6:6d:68:70:0b:3e:24:42:10:93:db: 03:3e:48:ba:cf:cb:87:f1:6f:6e:0c:07:88:88:ce:50:33:1b: 7c:59:13:d9:29:61:79:5b:ca:2c:0f:05:53:6c:7b:c3:8a:33: dd:f5:d0:75:0b:02:f0:59:bf:12:08:4b:5b:d7:1b:f3:89:3c: 23:15:fd:e9:49:71:6b:b2:25:57:58:15:c6:e4:80:5b:a7:67: 20:f6:97:9f:3a:90:43:ce:cf:07:da:53:8a:b7:2f:b5:76:b6: 28:ed:35:a0:00:3a:5f:47:56:b1:e9:e0:46:3e:65:88:92:8d: 83:94:35:b5:66:36:75:f2:ab:fb:5c:f0:92:70:1b:70:29:2d: d0:0d:12:ff:b0:64:c0:4f:f3:c9:a7:f6:36:8a:a3:c6:36:68: c2:c8:90:a1:05:49:46:ed:80:d2:c6:e1:16:bf:7e:54:2c:3e: f4:5a:99:43:81:0d:be:0d:3b:e0:c7:78:72:c4:35:fc:ea:b6: 35:f4:2e:b2:be:3b:5d:51:f7:df:04:05:50:66:0f:29:a4:9e: 9c:93:6f:c3:98:77:69:ae:36:d0:6e:be:c0:5a:56:a6:e3:a0: ef:f2:0d:d2:8e:5e:49:46:3f:8e:44:7c:88:e7:cb:a6:91:83: d1:21:31:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKrjBGrMXJaf53C4R9TLXp1/sU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNjA0MTcxNzI3MTZaFw0yNjA0MjAxOTUyMTZaMDMxMTAvBgNV BAMTKEQ1OTJDQzZBRTE0QzUyOEQ5M0I4REU3QTZDRjA3NjBDRjdBNkFDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWpJn145chVz8gfAmTMejVQAkh N30aClRXTakS0robZQkdmJobdMCX1Nc7t83NxPwCaLSGFOI3lr0E3zzyC+SCCzPE cVV6uS9bs2Gwa+KpQlBF0dP0RFR7AxxOhVs9LyxRZkqYre+rTs7ZTmSgG12bkIZW 2x28088+DKve4JCVB/qHLkx2KTHijsHB9VPQACSGHqkQU9RrtusLeCAWjatUIuhS 2NdC9zlk6HeAI0vhOUW3JNiWCPeDZGDfWcJqQX9Oed+qshjJbpbdBalhP0nydG7S 5tLUJdYiJRKiNXXKHNKks1BRIflDq+rraNozyeeSgLId4hbxnRwDFjiGt6mdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ZLMauFMUo2TuN56bPB2DPemrJQwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPTZW+QcMXGbWhwCz4kQhCT2wM+SLrPy4fx b24MB4iIzlAzG3xZE9kpYXlbyiwPBVNse8OKM9310HULAvBZvxIIS1vXG/OJPCMV /elJcWuyJVdYFcbkgFunZyD2l586kEPOzwfaU4q3L7V2tijtNaAAOl9HVrHp4EY+ ZYiSjYOUNbVmNnXyq/tc8JJwG3ApLdANEv+wZMBP88mn9jaKo8Y2aMLIkKEFSUbt gNLG4Ra/flQsPvRamUOBDb4NO+DHeHLENfzqtjX0LrK+O11R998EBVBmDymknpyT b8OYd2muNtBuvsBaVqbjoO/yDdKOXklGP45EfIjny6aRg9EhMZY= -----END CERTIFICATE-----Generated at Fri Apr 17 23:37:57 2026 by rpki-client