$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json) Hash identifier: tDpzoocxLchsJ5oyLBzSIWlYdwWaMQ6TGFeTu/Nos/M= Subject key identifier: D6:7D:BE:6B:C4:4C:1B:B9:1D:9A:57:3C:CB:8D:C4:01:22:18:02:C8 Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Certificate serial: 1F7B3698FB4614B2BC84E60BAE9795FAA268CA32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft Manifest number: 04B7 Signing time: Wed 18 Mar 2026 18:30:03 +0000 Manifest this update: Wed 18 Mar 2026 18:25:03 +0000 Manifest next update: Sun 22 Mar 2026 04:43:03 +0000 Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: MVKKBJOHQhfno3xnLi4C1Jky+2pzhmKQLg4y8rFPGoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 04:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7b:36:98:fb:46:14:b2:bc:84:e6:0b:ae:97:95:fa:a2:68:ca:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Validity Not Before: Mar 18 18:25:03 2026 GMT Not After : Mar 22 04:43:03 2026 GMT Subject: CN=D67DBE6BC44C1BB91D9A573CCB8DC401221802C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:70:fb:31:47:32:04:df:63:37:5d:3b:c8:5f: 03:37:ee:cc:6e:dc:d4:18:19:29:ea:42:78:f9:c9: 14:51:cb:b8:7a:0c:9a:56:07:b2:90:73:1f:68:05: 73:75:f5:2c:96:ab:f8:df:cd:7e:86:67:de:1f:e2: 5a:66:bd:33:23:50:c6:96:cb:90:b5:7f:5a:fb:81: 86:df:92:0b:f5:f4:17:5b:1f:c4:d6:c2:53:5d:12: 01:3f:03:92:7e:4d:f1:52:62:aa:5d:af:04:83:c4: fb:28:b3:8b:2c:84:90:8f:97:3b:b2:e4:25:d4:ca: dd:e2:17:60:7c:92:1c:7f:73:c4:14:1b:78:20:18: 89:34:c7:57:84:47:29:89:de:34:20:af:79:74:cf: f0:47:33:df:ac:a5:d2:0f:30:b8:d8:20:e0:db:14: 6f:c7:45:60:77:fc:b9:dc:be:60:42:b8:68:50:c7: c2:c4:4b:f8:83:15:0d:ee:dd:38:88:b6:57:b2:29: 80:f6:f9:d4:b5:84:51:ad:f2:b5:bc:7b:a3:d0:32: 8b:86:bf:cb:ea:9f:b1:97:68:90:eb:91:7d:4c:62: 65:60:55:80:21:b7:1d:69:c3:06:11:45:b5:38:7a: c3:52:c3:f9:b4:cb:b1:88:02:be:64:b2:f1:69:bb: 00:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7D:BE:6B:C4:4C:1B:B9:1D:9A:57:3C:CB:8D:C4:01:22:18:02:C8 X509v3 Authority Key Identifier: keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:e7:36:70:73:10:f3:35:6e:be:d3:74:80:ab:79:ec:6b:8a: 69:7c:37:ae:4b:cb:32:6b:fe:03:40:b3:1b:a2:ff:fd:97:99: 2a:d0:3e:67:8b:5d:16:e2:6b:38:f5:3e:af:1c:44:4d:00:c6: 93:91:a0:b3:23:bd:40:0b:51:76:02:c7:8c:93:e1:c7:9a:13: 18:76:26:81:c1:26:05:07:f5:90:c1:c3:1b:43:72:bb:f5:68: d2:67:96:72:7d:1f:ad:cc:89:46:4a:96:ee:f1:22:b6:74:a8: 4f:3a:75:9b:61:7d:f4:a8:7e:26:ad:e0:58:a2:bc:49:4c:bb: 02:01:09:12:93:4d:af:65:1e:98:87:5d:8c:de:25:f6:e2:5a: 4a:0d:be:ab:f2:11:55:34:a0:e3:3f:49:f0:c4:37:e3:54:2f: b7:08:47:7c:2c:66:68:7b:02:49:a3:4d:9d:2d:24:d4:bc:a0: 74:12:80:7a:fe:0f:6a:bb:e7:16:7a:d6:e8:7d:93:38:8c:37: 23:a2:68:9d:7d:81:a1:ad:7c:82:16:77:b9:32:90:5e:86:94: bc:3c:39:05:43:a2:01:b3:7c:04:a5:2e:dc:88:80:6a:d2:b6: 51:00:a6:79:5b:93:2a:1a:51:28:1d:33:e5:06:03:ec:f8:4a: c3:cc:88:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3s2mPtGFLK8hOYLrpeV+qJoyjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2 QUM4RTQwQzAeFw0yNjAzMTgxODI1MDNaFw0yNjAzMjIwNDQzMDNaMDMxMTAvBgNV BAMTKEQ2N0RCRTZCQzQ0QzFCQjkxRDlBNTczQ0NCOERDNDAxMjIxODAyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYcPsxRzIE32M3XTvIXwM37sxu 3NQYGSnqQnj5yRRRy7h6DJpWB7KQcx9oBXN19SyWq/jfzX6GZ94f4lpmvTMjUMaW y5C1f1r7gYbfkgv19BdbH8TWwlNdEgE/A5J+TfFSYqpdrwSDxPsos4sshJCPlzuy 5CXUyt3iF2B8khx/c8QUG3ggGIk0x1eERymJ3jQgr3l0z/BHM9+spdIPMLjYIODb FG/HRWB3/LncvmBCuGhQx8LES/iDFQ3u3TiItleyKYD2+dS1hFGt8rW8e6PQMouG v8vqn7GXaJDrkX1MYmVgVYAhtx1pwwYRRbU4esNSw/m0y7GIAr5ksvFpuwApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1n2+a8RMG7kdmlc8y43EASIYAsgwHwYDVR0j BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4 RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOLnNnBzEPM1br7TdICreexriml8N65LyzJr /gNAsxui//2XmSrQPmeLXRbiazj1Pq8cRE0AxpORoLMjvUALUXYCx4yT4ceaExh2 JoHBJgUH9ZDBwxtDcrv1aNJnlnJ9H63MiUZKlu7xIrZ0qE86dZthffSofiat4Fii vElMuwIBCRKTTa9lHpiHXYzeJfbiWkoNvqvyEVU0oOM/SfDEN+NUL7cIR3wsZmh7 AkmjTZ0tJNS8oHQSgHr+D2q75xZ61uh9kziMNyOiaJ19gaGtfIIWd7kykF6GlLw8 OQVDogGzfASlLtyIgGrStlEApnlbkyoaUSgdM+UGA+z4SsPMiPs= -----END CERTIFICATE-----Generated at Thu Mar 19 09:57:12 2026 by rpki-client