$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft (raw, json) Hash identifier: hCEcZ0xFqjM8aeW+/GCf1/X00z5+i26DF9ERsSk6J2o= Subject key identifier: 55:38:4D:E6:93:CD:63:2E:76:03:13:F4:20:29:F0:48:3C:E1:76:00 Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 091364B6E6B7D84CBE953555574432894ACF28FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft Manifest number: F2 Signing time: Wed 22 Apr 2026 02:50:01 +0000 Manifest this update: Wed 22 Apr 2026 02:45:01 +0000 Manifest next update: Sat 25 Apr 2026 06:01:01 +0000 Files and hashes: 1: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl (hash: HESCfEBye8FIbO56bI1rN16eO0/XMsEJwrPHwp16VYE=) 2: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: llbK8JVFmbrLSSzLv9Ovv2C1Mqs66Yxl6xm9VnsVOAw=) 3: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: 3Egq3cRo6EJ7UqcOfpeiiHWc5fNhn+xEtBo+/Cw0jbA=) 4: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: 9Rk+bLwCtN8F40lqmzQmjy2Qn3pf5qNIMJVV2njhbNk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:13:64:b6:e6:b7:d8:4c:be:95:35:55:57:44:32:89:4a:cf:28:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Apr 22 02:45:01 2026 GMT Not After : Apr 25 06:01:01 2026 GMT Subject: CN=55384DE693CD632E760313F42029F0483CE17600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7f:63:7c:22:0d:e6:17:d5:14:53:d1:f9:b4: f9:45:f3:f9:c8:b6:1b:0c:c0:09:ad:66:8b:e1:4d: 28:ea:d4:3f:dc:83:98:5b:1e:b2:0a:dd:fc:7f:f7: 67:9a:8e:6c:8d:f5:4b:ef:67:61:17:a9:36:7e:b2: fd:71:4f:61:ff:0a:ed:e3:53:de:ad:52:ef:48:0f: 25:a2:e8:b7:65:0a:21:02:c1:b0:45:fe:96:c4:94: 0f:72:f0:c3:62:22:70:ba:25:a9:d1:bc:96:e5:44: 9a:bd:df:a6:97:59:72:a4:68:d1:24:42:be:89:39: 40:63:f9:11:0d:e6:27:e3:63:f9:f2:09:ea:e0:d0: 33:8e:6e:17:4e:c5:9f:9d:ae:1b:e0:bc:b5:4a:7e: 9d:09:cb:da:fc:8b:af:be:96:07:0d:74:40:2c:37: 1f:b9:7b:f6:3b:eb:52:a7:0f:0a:6a:fd:eb:01:a9: 56:c6:a5:b1:90:72:6d:2f:f9:3f:b1:c5:c6:9d:95: 59:c3:f0:e3:cc:fa:17:96:61:3c:21:43:7c:8d:6f: 75:a9:0b:8b:4f:55:f5:c3:9d:58:5a:e0:e8:bd:7a: 39:3e:f8:73:99:a1:c3:60:24:6e:05:6c:be:16:d2: 67:ca:71:f3:5c:a8:ef:25:36:2e:01:f6:82:88:f3: 3e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:38:4D:E6:93:CD:63:2E:76:03:13:F4:20:29:F0:48:3C:E1:76:00 X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:24:43:ad:cf:a5:f4:87:2f:36:63:ac:af:33:e9:c0:ad:20: 3c:ae:c0:fb:13:46:6c:cd:c9:5f:8d:35:4f:8a:64:12:44:51: 6e:59:9a:d0:2a:e9:1a:d1:d6:9a:cd:91:2c:8b:6b:d8:ca:10: 8e:13:54:03:82:9d:ac:52:6b:fc:42:23:8e:d4:5c:ac:f6:2d: f6:a0:75:92:fe:5a:44:ca:11:b7:d3:e2:9b:75:26:d0:18:9a: 3c:3e:a3:7f:14:29:d4:2a:74:8e:e2:4a:3c:8e:93:6a:69:85: b4:27:20:fc:01:6a:8c:c1:e6:d9:e5:ec:cf:f4:6c:bc:e6:09: 90:ae:7e:c7:31:bd:83:9a:16:f1:cb:47:d2:61:5f:ba:cf:4f: a8:24:e3:78:dd:b3:96:17:fe:e6:de:a7:68:a0:0b:63:0d:00: e7:a1:fd:1a:e6:d2:40:ad:25:de:16:1e:30:a4:5b:b1:a7:07: e7:dc:a3:b4:90:80:8d:51:38:1b:d2:12:b9:ac:f8:b8:04:dc: 32:51:1b:21:91:8f:ca:39:fc:1c:49:3f:f1:a4:17:9f:6b:d9: 0b:41:16:e8:c7:3e:1a:7c:42:bf:b8:4a:7d:03:ac:e1:1d:e4: ab:88:fe:5e:b6:26:6b:7d:d2:75:54:a4:0b:98:a3:73:67:53: d2:b0:8f:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRNktua32Ey+lTVVV0QyiUrPKPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNjA0MjIwMjQ1MDFaFw0yNjA0MjUwNjAxMDFaMDMxMTAvBgNV BAMTKDU1Mzg0REU2OTNDRDYzMkU3NjAzMTNGNDIwMjlGMDQ4M0NFMTc2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLf2N8Ig3mF9UUU9H5tPlF8/nI thsMwAmtZovhTSjq1D/cg5hbHrIK3fx/92eajmyN9UvvZ2EXqTZ+sv1xT2H/Cu3j U96tUu9IDyWi6LdlCiECwbBF/pbElA9y8MNiInC6JanRvJblRJq936aXWXKkaNEk Qr6JOUBj+REN5ifjY/nyCerg0DOObhdOxZ+drhvgvLVKfp0Jy9r8i6++lgcNdEAs Nx+5e/Y761KnDwpq/esBqVbGpbGQcm0v+T+xxcadlVnD8OPM+heWYTwhQ3yNb3Wp C4tPVfXDnVha4Oi9ejk++HOZocNgJG4FbL4W0mfKcfNcqO8lNi4B9oKI8z45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVThN5pPNYy52AxP0ICnwSDzhdgAwHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdmMmMxOTAtMzBmNS00ZjE5LWJm Y2EtMGI5ODdhNTJmZDU1LzAvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1 NkZDRURFQzNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAkQ63PpfSHLzZjrK8z6cCtIDyuwPsTRmzN yV+NNU+KZBJEUW5ZmtAq6RrR1prNkSyLa9jKEI4TVAOCnaxSa/xCI47UXKz2Lfag dZL+WkTKEbfT4pt1JtAYmjw+o38UKdQqdI7iSjyOk2pphbQnIPwBaozB5tnl7M/0 bLzmCZCufscxvYOaFvHLR9JhX7rPT6gk43jds5YX/ubep2igC2MNAOeh/Rrm0kCt Jd4WHjCkW7GnB+fco7SQgI1ROBvSErms+LgE3DJRGyGRj8o5/BxJP/GkF59r2QtB FujHPhp8Qr+4Sn0DrOEd5KuI/l62Jmt90nVUpAuYo3NnU9Kwj1s= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:04 2026 by rpki-client