$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft (raw, json) Hash identifier: C7R2Bn+iIYUDWtMnOhOUcqcb91bAVpOXH4Xhk+JeVO4= Subject key identifier: 3C:B9:4A:72:CA:02:B1:3E:FF:56:27:51:34:61:46:3B:5C:7C:A2:6B Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 6753C7846D18514BCDDDC9EBCD3D07927674A52E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft Manifest number: DE Signing time: Sat 07 Mar 2026 05:20:01 +0000 Manifest this update: Sat 07 Mar 2026 05:15:01 +0000 Manifest next update: Tue 10 Mar 2026 12:15:01 +0000 Files and hashes: 1: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: 3Egq3cRo6EJ7UqcOfpeiiHWc5fNhn+xEtBo+/Cw0jbA=) 2: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl (hash: x32nPq1UMZjDNvoG0Om7IpWkppHuwsBy/sBFem6CG2s=) 3: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: llbK8JVFmbrLSSzLv9Ovv2C1Mqs66Yxl6xm9VnsVOAw=) 4: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: 9Rk+bLwCtN8F40lqmzQmjy2Qn3pf5qNIMJVV2njhbNk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:53:c7:84:6d:18:51:4b:cd:dd:c9:eb:cd:3d:07:92:76:74:a5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Mar 7 05:15:01 2026 GMT Not After : Mar 10 12:15:01 2026 GMT Subject: CN=3CB94A72CA02B13EFF5627513461463B5C7CA26B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:94:26:c0:8c:af:e8:3b:94:f9:c5:98:df:55: 68:72:da:28:8b:d2:0c:ca:49:1e:36:7b:2d:cc:9d: 83:4d:eb:67:5c:87:a7:b9:d9:f5:06:61:2a:23:ff: 21:9c:7d:3a:b5:8a:89:ce:f8:c1:59:5d:6a:09:a2: e8:8b:ee:10:a4:e5:71:39:05:02:57:47:9d:dc:47: f5:cc:49:5b:87:30:3b:ce:93:c5:18:42:59:bc:83: cd:11:54:7a:f1:28:76:53:03:12:a2:50:1e:93:72: ef:46:be:31:22:ad:c8:2a:46:a0:e9:1a:84:1a:22: d7:2c:9a:d2:d8:77:78:54:3a:40:bb:b1:c8:58:51: f4:7b:12:99:2c:58:b0:0a:a9:f7:16:40:db:4c:de: 0a:6d:37:bc:f8:ab:3e:8c:d5:af:79:83:0f:b2:ab: a6:fa:a6:f6:99:c0:7c:f4:11:6a:78:df:eb:61:63: 9b:10:da:dd:01:35:3e:8a:e5:02:9f:b5:29:e1:b9: 95:3c:b1:49:30:5e:c6:97:94:f2:fd:67:47:91:cd: 37:d7:e4:89:02:d3:0a:ce:13:1f:ff:47:0b:35:83: db:92:8d:7f:a3:8c:cc:3c:15:ae:b7:0b:10:a5:6f: 82:83:fd:d4:eb:d9:78:c4:ea:a4:68:af:ee:d9:92: 58:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B9:4A:72:CA:02:B1:3E:FF:56:27:51:34:61:46:3B:5C:7C:A2:6B X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ac:12:44:3d:71:dd:9a:25:75:d1:59:a2:dc:21:ec:99:b5: c6:43:11:0e:00:6f:3f:53:89:94:49:8f:eb:1c:48:66:fb:7d: d9:22:aa:79:89:c8:92:d1:d1:c8:ad:e5:98:ed:d5:66:b9:34: 11:d1:92:ee:05:ce:0d:23:33:8c:1d:e2:38:84:8b:d2:06:b8: f2:70:ad:6b:ef:43:7e:e2:66:b4:2f:b3:2e:2d:8d:9f:cd:ea: 7d:f4:49:b9:b2:37:96:b6:da:e0:38:53:ae:65:d2:0c:a9:b8: 38:84:ae:ec:8b:42:eb:f3:7b:e6:65:58:f0:96:00:5b:41:2f: e6:8a:df:c7:fa:a7:b3:c8:2c:8d:e7:d1:66:dd:6e:f6:d0:95: fb:35:48:e1:25:dc:66:c3:49:dd:aa:db:de:23:03:eb:3a:cd: e5:89:d7:92:3a:e3:2b:e0:dd:46:83:d0:d9:98:37:8d:1f:59: d2:e5:25:d2:5e:6e:2c:c3:56:87:64:e0:e2:94:59:85:e3:67: 67:ca:31:75:e4:47:ce:5b:68:57:91:f2:cb:c8:a0:42:ad:70: 61:29:b3:01:db:a4:03:16:a2:d5:80:e3:f8:42:9b:9f:01:0e: 8a:8b:ba:20:7c:fa:bd:ac:b0:bb:cd:2a:09:a5:69:54:6f:11: 7f:40:35:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1PHhG0YUUvN3cnrzT0HknZ0pS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNjAzMDcwNTE1MDFaFw0yNjAzMTAxMjE1MDFaMDMxMTAvBgNV BAMTKDNDQjk0QTcyQ0EwMkIxM0VGRjU2Mjc1MTM0NjE0NjNCNUM3Q0EyNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDklCbAjK/oO5T5xZjfVWhy2iiL 0gzKSR42ey3MnYNN62dch6e52fUGYSoj/yGcfTq1ionO+MFZXWoJouiL7hCk5XE5 BQJXR53cR/XMSVuHMDvOk8UYQlm8g80RVHrxKHZTAxKiUB6Tcu9GvjEircgqRqDp GoQaItcsmtLYd3hUOkC7schYUfR7EpksWLAKqfcWQNtM3gptN7z4qz6M1a95gw+y q6b6pvaZwHz0EWp43+thY5sQ2t0BNT6K5QKftSnhuZU8sUkwXsaXlPL9Z0eRzTfX 5IkC0wrOEx//Rws1g9uSjX+jjMw8Fa63CxClb4KD/dTr2XjE6qRor+7ZkljBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPLlKcsoCsT7/VidRNGFGO1x8omswHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdmMmMxOTAtMzBmNS00ZjE5LWJm Y2EtMGI5ODdhNTJmZDU1LzAvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1 NkZDRURFQzNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFesEkQ9cd2aJXXRWaLcIeyZtcZDEQ4Abz9T iZRJj+scSGb7fdkiqnmJyJLR0cit5Zjt1Wa5NBHRku4Fzg0jM4wd4jiEi9IGuPJw rWvvQ37iZrQvsy4tjZ/N6n30SbmyN5a22uA4U65l0gypuDiEruyLQuvze+ZlWPCW AFtBL+aK38f6p7PILI3n0WbdbvbQlfs1SOEl3GbDSd2q294jA+s6zeWJ15I64yvg 3UaD0NmYN40fWdLlJdJebizDVodk4OKUWYXjZ2fKMXXkR85baFeR8svIoEKtcGEp swHbpAMWotWA4/hCm58BDoqLuiB8+r2ssLvNKgmlaVRvEX9ANfQ= -----END CERTIFICATE-----Generated at Sat Mar 7 17:48:44 2026 by rpki-client