$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: F4U01IWOkKOL8nh40ESc7Mj40EtIldLGqS09ZAmIKGI= Subject key identifier: 0D:2B:A0:87:32:2A:4D:23:0C:82:05:6E:6C:4F:91:E5:7F:1C:B2:23 Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 9231F380673412252B4159B125C19174EEBF76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 02B6 Signing time: Thu 19 Mar 2026 09:11:49 +0000 Manifest this update: Thu 19 Mar 2026 09:06:49 +0000 Manifest next update: Sun 22 Mar 2026 10:58:49 +0000 Files and hashes: 1: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=) 2: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: bHsU6lsJHVLmlMbvE/7wDsc0LXfxNDKD9ia81+em0Tk=) 3: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo=) 4: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: K4U8d+sUzMLgrI4fy436tf9syDLx6SvZlYhSkGTWcb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 10:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92:31:f3:80:67:34:12:25:2b:41:59:b1:25:c1:91:74:ee:bf:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Mar 19 09:06:49 2026 GMT Not After : Mar 22 10:58:49 2026 GMT Subject: CN=0D2BA087322A4D230C82056E6C4F91E57F1CB223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1b:8d:a6:c4:4e:c3:bd:9e:d9:18:d5:b5:7d: 2f:6d:27:8a:b2:a9:fb:f3:4c:ec:d4:e9:8c:45:4f: aa:b1:a4:84:50:18:4c:cc:aa:ac:f1:86:33:bf:52: 3f:d0:74:25:3c:cf:77:4a:fc:2a:eb:cf:4f:31:c5: 3e:45:a2:a7:f1:4b:d6:88:d3:a1:a7:6a:4a:74:66: ac:d7:7e:06:d1:20:d8:87:cd:ba:64:58:ff:81:9e: 72:b9:1d:c3:85:3a:ea:f4:54:63:7f:88:dd:07:16: 89:d2:02:fd:d8:1a:3f:28:a3:4a:9c:65:cf:48:dc: c6:8c:9c:ca:70:44:d5:87:73:90:d0:21:59:97:a3: 21:71:4e:dd:7a:2f:25:98:21:fc:c0:f6:f1:20:ab: 97:fd:fd:23:5c:ad:78:1f:82:bb:a8:60:13:cc:3b: c1:e7:50:02:8f:15:f0:95:22:93:6f:3f:ac:10:0a: bd:4e:88:59:a6:f2:18:38:d5:11:55:9a:88:76:a4: ad:36:78:09:ad:e3:7a:37:fa:4f:5b:bf:8c:97:a9: d1:67:e7:8f:32:e6:18:0e:95:1e:f8:45:99:ef:75: 02:6d:8c:10:ac:dc:b4:58:c8:44:5d:d1:af:68:68: b4:86:4e:da:f9:7d:0a:a3:6d:4d:30:fa:af:e3:7b: e7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2B:A0:87:32:2A:4D:23:0C:82:05:6E:6C:4F:91:E5:7F:1C:B2:23 X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:10:1d:1e:69:51:60:e9:f7:9f:b9:0e:3b:1b:89:96:1c:fb: 87:10:72:fc:52:52:74:b9:a0:a8:6b:21:87:a8:c5:97:7e:f6: 60:8c:e8:bd:37:f7:6a:b1:67:54:15:ab:35:4f:c1:26:83:6a: 8d:fa:b8:9c:75:77:f1:5d:b3:57:fa:4a:3e:1b:61:c4:0d:45: 02:ae:90:06:aa:a2:40:50:31:83:2e:5b:e0:07:c7:1f:6c:3f: 6f:9e:29:af:25:a6:42:bf:5a:01:07:4c:f5:48:21:fb:45:60: 03:93:91:d8:96:67:21:ab:91:f7:72:c5:ad:9f:17:99:c3:43: 62:ca:30:c4:63:a7:30:ad:ae:52:06:2e:35:cc:92:97:77:72: 3e:42:8f:1e:41:2b:22:15:92:44:39:68:df:71:6b:0b:09:54: 2a:4e:da:04:5b:db:61:0a:39:7c:7d:26:7a:e9:4a:6a:ac:05: 4d:6c:7e:c9:c0:a2:16:ea:c0:b9:0d:db:98:98:a6:f5:06:25: 73:53:68:67:00:2e:4a:af:b1:f6:2a:fa:92:f6:17:3c:de:4b: ff:82:16:fc:a1:dc:e3:8c:44:8b:d5:73:dd:96:72:d4:3d:77: 02:8c:ee:c7:b4:9b:ca:96:cb:8c:3f:ee:6c:14:61:22:5b:23: 66:0d:32:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJIx84BnNBIlK0FZsSXBkXTuv3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNjAzMTkwOTA2NDlaFw0yNjAzMjIxMDU4NDlaMDMxMTAvBgNV BAMTKDBEMkJBMDg3MzIyQTREMjMwQzgyMDU2RTZDNEY5MUU1N0YxQ0IyMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTG42mxE7DvZ7ZGNW1fS9tJ4qy qfvzTOzU6YxFT6qxpIRQGEzMqqzxhjO/Uj/QdCU8z3dK/Crrz08xxT5FoqfxS9aI 06Gnakp0ZqzXfgbRINiHzbpkWP+BnnK5HcOFOur0VGN/iN0HFonSAv3YGj8oo0qc Zc9I3MaMnMpwRNWHc5DQIVmXoyFxTt16LyWYIfzA9vEgq5f9/SNcrXgfgruoYBPM O8HnUAKPFfCVIpNvP6wQCr1OiFmm8hg41RFVmoh2pK02eAmt43o3+k9bv4yXqdFn 548y5hgOlR74RZnvdQJtjBCs3LRYyERd0a9oaLSGTtr5fQqjbU0w+q/je+d3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDSughzIqTSMMggVubE+R5X8csiMwHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYQHR5pUWDp95+5DjsbiZYc+4cQcvxSUnS5 oKhrIYeoxZd+9mCM6L0392qxZ1QVqzVPwSaDao36uJx1d/Fds1f6Sj4bYcQNRQKu kAaqokBQMYMuW+AHxx9sP2+eKa8lpkK/WgEHTPVIIftFYAOTkdiWZyGrkfdyxa2f F5nDQ2LKMMRjpzCtrlIGLjXMkpd3cj5Cjx5BKyIVkkQ5aN9xawsJVCpO2gRb22EK OXx9JnrpSmqsBU1sfsnAohbqwLkN25iYpvUGJXNTaGcALkqvsfYq+pL2FzzeS/+C Fvyh3OOMRIvVc92WctQ9dwKM7se0m8qWy4w/7mwUYSJbI2YNMgU= -----END CERTIFICATE-----Generated at Fri Mar 20 12:42:52 2026 by rpki-client