$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: VASoJc44VtzZ5/ph8JGEw+vnjbN9YB6DEU/Nl3aKlt0= Subject key identifier: F1:C2:FB:91:82:31:9E:2C:00:79:57:B9:5F:3A:17:63:D3:CD:45:A8 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 168545F6B6EF8B374B4BB5539E00EBE14A33E8BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 0568 Signing time: Sat 18 Apr 2026 17:10:02 +0000 Manifest this update: Sat 18 Apr 2026 17:05:02 +0000 Manifest next update: Wed 22 Apr 2026 04:32:02 +0000 Files and hashes: 1: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: f75+e3P6pGa3KGn64ZdDi/B3nI6jiehmuK9CeFMpT34=) 2: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) 3: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) 4: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 04:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:85:45:f6:b6:ef:8b:37:4b:4b:b5:53:9e:00:eb:e1:4a:33:e8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Apr 18 17:05:02 2026 GMT Not After : Apr 22 04:32:02 2026 GMT Subject: CN=F1C2FB9182319E2C007957B95F3A1763D3CD45A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:18:b7:28:6d:2b:aa:46:ea:e1:a3:97:b0: 98:df:8f:b2:5d:97:d8:3f:d7:cc:44:f8:34:a3:e8: f5:57:64:e2:e7:91:79:8d:3c:67:de:65:8d:4b:53: dd:a5:cd:bd:af:0c:cb:c0:72:3d:3f:44:8a:09:c8: 8a:c1:b2:d2:07:12:d3:c0:d3:4f:c8:85:dd:69:23: 5c:b2:02:23:45:04:ca:32:93:57:fe:30:02:0a:81: 68:57:ef:4e:76:c1:be:a7:9a:40:df:b4:13:40:4f: ba:e1:01:b7:86:69:a6:e8:e7:71:69:f6:9e:6c:18: 86:b1:97:73:f6:2c:9b:c5:23:8b:3b:12:d9:98:31: f1:4f:55:da:a1:fd:f6:c1:7a:19:79:6e:b6:d2:69: e4:ab:27:66:fe:8e:8e:d8:b1:53:30:38:ba:ca:b2: d0:b9:c0:28:5b:15:59:41:11:d5:66:a2:3c:65:e9: 45:d0:eb:46:c3:94:d1:15:45:ec:80:b8:f4:ce:c6: 6c:4e:c1:c3:b4:59:56:15:a0:5e:32:3a:4e:63:f0: 05:fc:5c:85:59:74:b1:89:67:ef:ac:00:1c:e9:a5: e3:ed:32:f5:02:7b:12:1b:91:7e:99:1e:c4:60:7d: de:d3:9f:9f:12:ee:e7:b0:7d:32:09:82:ce:8a:62: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C2:FB:91:82:31:9E:2C:00:79:57:B9:5F:3A:17:63:D3:CD:45:A8 X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ad:4c:22:b6:16:12:2e:51:93:90:65:0f:48:5f:db:d5:04: 9b:ea:5a:57:cc:05:c6:a7:20:f2:97:f0:2e:e7:cf:2e:8a:74: f9:69:4c:19:3d:b2:da:d1:9f:72:6d:55:ac:a8:68:70:dd:52: 17:62:bd:b3:0f:a4:de:17:9b:63:f0:13:f3:c2:10:c7:63:89: 26:1e:02:c8:b4:e6:5a:06:00:0c:10:24:1b:c9:36:3e:d9:42: 06:26:12:b1:12:07:50:01:ea:cd:a4:f4:2a:c5:ee:50:2a:5b: fd:10:00:76:e6:a5:79:ce:fe:71:44:b8:d2:33:a6:17:84:e0: 5b:09:08:af:1c:ad:42:4b:6a:09:12:84:46:0f:67:c4:d9:d1: e4:a7:44:a9:e9:26:44:13:d3:28:4e:c3:5e:eb:38:43:1a:67: 7b:77:70:14:a6:d9:cc:55:7c:db:4b:1c:69:05:29:dd:01:bf: 37:de:f8:33:2c:f0:11:b5:8f:ca:7b:d5:ce:25:ce:9c:ea:c4: 96:77:43:44:1b:63:c8:fb:d4:33:c8:cf:47:d6:69:29:1a:2f: 33:46:e6:25:42:42:a4:58:d9:25:ea:53:2d:1a:18:94:29:d2: b8:a8:03:d1:7f:23:2a:2c:3a:a4:84:64:10:bc:00:9f:7e:b3: 0c:bf:ab:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFoVF9rbvizdLS7VTngDr4Uoz6LowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNjA0MTgxNzA1MDJaFw0yNjA0MjIwNDMyMDJaMDMxMTAvBgNV BAMTKEYxQzJGQjkxODIzMTlFMkMwMDc5NTdCOTVGM0ExNzYzRDNDRDQ1QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6SRi3KG0rqkbq4aOXsJjfj7Jd l9g/18xE+DSj6PVXZOLnkXmNPGfeZY1LU92lzb2vDMvAcj0/RIoJyIrBstIHEtPA 00/Ihd1pI1yyAiNFBMoyk1f+MAIKgWhX7052wb6nmkDftBNAT7rhAbeGaabo53Fp 9p5sGIaxl3P2LJvFI4s7EtmYMfFPVdqh/fbBehl5brbSaeSrJ2b+jo7YsVMwOLrK stC5wChbFVlBEdVmojxl6UXQ60bDlNEVReyAuPTOxmxOwcO0WVYVoF4yOk5j8AX8 XIVZdLGJZ++sABzppePtMvUCexIbkX6ZHsRgfd7Tn58S7uewfTIJgs6KYuEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8cL7kYIxniwAeVe5XzoXY9PNRagwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFStTCK2FhIuUZOQZQ9IX9vVBJvqWlfMBcan IPKX8C7nzy6KdPlpTBk9strRn3JtVayoaHDdUhdivbMPpN4Xm2PwE/PCEMdjiSYe Asi05loGAAwQJBvJNj7ZQgYmErESB1AB6s2k9CrF7lAqW/0QAHbmpXnO/nFEuNIz pheE4FsJCK8crUJLagkShEYPZ8TZ0eSnRKnpJkQT0yhOw17rOEMaZ3t3cBSm2cxV fNtLHGkFKd0Bvzfe+DMs8BG1j8p71c4lzpzqxJZ3Q0QbY8j71DPIz0fWaSkaLzNG 5iVCQqRY2SXqUy0aGJQp0rioA9F/IyosOqSEZBC8AJ9+swy/qzU= -----END CERTIFICATE-----Generated at Sun Apr 19 12:44:23 2026 by rpki-client