$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: BbT2fH37+Ob57JZQgDNWay0pjz3k4u/ESLMi+lJoAYw= Subject key identifier: 41:81:3C:7A:95:48:92:42:83:4C:62:F1:20:D3:34:A1:78:3E:D3:82 Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 30C109F036316D715095BFB7D343F60DA313789B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: 0152 Signing time: Tue 21 Apr 2026 13:21:42 +0000 Manifest this update: Tue 21 Apr 2026 13:16:42 +0000 Manifest next update: Fri 24 Apr 2026 18:17:42 +0000 Files and hashes: 1: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: NYk3QHRxBgfxpgSNEFwb4gQ97d+PnDwmapFCR/WREsE=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: 4ND3+gZBeIoT6g+JB8RrxRMPJN0D54r28ZhCohuiwZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c1:09:f0:36:31:6d:71:50:95:bf:b7:d3:43:f6:0d:a3:13:78:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Apr 21 13:16:42 2026 GMT Not After : Apr 24 18:17:42 2026 GMT Subject: CN=41813C7A95489242834C62F120D334A1783ED382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4c:40:28:9d:a6:14:20:09:1e:28:d7:27:1c: 7b:ab:a7:5d:0a:99:f5:c8:50:ec:a2:c9:c9:24:8f: 9a:08:43:a0:55:d6:ee:81:3c:f3:e8:57:13:64:13: bf:3c:7f:2b:e4:2d:43:3c:e1:c6:b8:de:c0:88:af: b3:24:2c:a0:e2:3f:bf:0a:2a:ef:8c:c6:a6:68:5a: d7:92:05:87:87:c5:42:28:93:35:cb:20:ec:11:fb: 11:4c:7f:62:5b:af:8b:fa:b6:c6:f9:ec:e3:eb:0c: 5c:69:cd:8c:f0:3b:69:8c:e5:44:5c:e8:a5:16:ee: 7d:23:14:2e:2f:87:1a:65:3b:91:13:09:91:7e:00: c8:bd:f8:d9:7e:d0:df:af:3a:c7:9b:7c:fa:9b:ca: 32:6a:f8:f0:f7:f9:aa:8d:5c:df:54:88:e5:e5:c4: 41:48:d1:0d:45:4a:80:a7:e7:ba:67:6e:08:17:f5: be:a5:6f:39:8f:5b:5b:31:d7:e3:b5:8b:e0:ac:3e: 66:6a:ae:14:08:6c:db:d8:aa:30:87:e2:3b:b3:d3: fb:e5:60:35:ed:f1:3e:19:7f:47:0c:6a:14:3d:72: 39:72:ec:2c:05:c8:50:85:34:ec:f2:41:d5:ed:81: 83:43:7c:84:ce:0f:6e:2d:93:9f:e5:ad:0b:37:b7: e4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:81:3C:7A:95:48:92:42:83:4C:62:F1:20:D3:34:A1:78:3E:D3:82 X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:3b:ef:15:93:c8:d3:48:9d:0e:79:8c:30:7b:f5:0b:6f:ab: a1:56:57:2b:76:b1:a2:35:b9:1c:ba:ef:f3:81:03:b8:9d:f5: 8e:b8:6e:34:30:97:51:3f:31:00:6a:40:df:02:cd:df:93:07: 2d:8e:5d:e4:66:bc:c4:7b:a4:26:9a:8e:47:42:0b:98:ff:a6: 1b:b9:2d:e5:1e:d9:c2:4b:f5:75:d3:cb:98:f0:f1:2d:74:fe: 64:2d:bf:61:96:a2:7d:da:c0:7d:26:cb:b8:e5:77:3d:40:6b: 7f:cd:c0:07:4e:46:7c:ad:ba:ea:19:04:53:06:b6:db:c1:7e: ce:8c:01:b6:5f:87:d7:21:8c:42:39:03:92:36:ae:63:3f:68: 08:a3:03:e0:d1:2d:e4:7c:93:96:71:a3:03:56:4f:65:fa:c4: 44:49:58:5f:2d:d2:29:68:c9:24:c6:25:31:8e:02:3a:eb:7b: 28:ed:70:12:02:86:12:e7:a5:01:75:4b:18:87:ba:5d:07:fb: fb:59:65:a1:bd:24:5d:03:be:fc:da:0a:3b:6e:1b:bf:a7:82: 4f:cd:1d:81:61:47:9c:cd:42:05:32:8a:6f:b3:ee:d5:78:e5: ee:59:89:aa:86:f6:d6:13:a9:50:81:a9:5f:ff:ee:f4:89:5c: fa:d5:e2:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMMEJ8DYxbXFQlb+300P2DaMTeJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNjA0MjExMzE2NDJaFw0yNjA0MjQxODE3NDJaMDMxMTAvBgNV BAMTKDQxODEzQzdBOTU0ODkyNDI4MzRDNjJGMTIwRDMzNEExNzgzRUQzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkTEAonaYUIAkeKNcnHHurp10K mfXIUOyiyckkj5oIQ6BV1u6BPPPoVxNkE788fyvkLUM84ca43sCIr7MkLKDiP78K Ku+MxqZoWteSBYeHxUIokzXLIOwR+xFMf2Jbr4v6tsb57OPrDFxpzYzwO2mM5URc 6KUW7n0jFC4vhxplO5ETCZF+AMi9+Nl+0N+vOsebfPqbyjJq+PD3+aqNXN9UiOXl xEFI0Q1FSoCn57pnbggX9b6lbzmPW1sx1+O1i+CsPmZqrhQIbNvYqjCH4juz0/vl YDXt8T4Zf0cMahQ9cjly7CwFyFCFNOzyQdXtgYNDfITOD24tk5/lrQs3t+RpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYE8epVIkkKDTGLxINM0oXg+04IwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO477xWTyNNInQ55jDB79Qtvq6FWVyt2saI1 uRy67/OBA7id9Y64bjQwl1E/MQBqQN8Czd+TBy2OXeRmvMR7pCaajkdCC5j/phu5 LeUe2cJL9XXTy5jw8S10/mQtv2GWon3awH0my7jldz1Aa3/NwAdORnytuuoZBFMG ttvBfs6MAbZfh9chjEI5A5I2rmM/aAijA+DRLeR8k5ZxowNWT2X6xERJWF8t0ilo ySTGJTGOAjrreyjtcBIChhLnpQF1SxiHul0H+/tZZaG9JF0DvvzaCjtuG7+ngk/N HYFhR5zNQgUyim+z7tV45e5ZiaqG9tYTqVCBqV//7vSJXPrV4nk= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:46 2026 by rpki-client