$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: XqhOcEpiD9IM6gq/CXcvuOFAa1LG5QOkA1+3zVJcGIE= Subject key identifier: 24:96:67:B9:2D:53:8B:79:96:64:BF:99:CA:0B:ED:EB:35:28:C2:1B Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 4557CDD4AD7BF683525EE7413713B56EAE4C1CBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 0552 Signing time: Sun 01 Mar 2026 00:00:02 +0000 Manifest this update: Sat 28 Feb 2026 23:55:02 +0000 Manifest next update: Wed 04 Mar 2026 01:04:02 +0000 Files and hashes: 1: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) 2: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: BWg1n7aA62uJ8Apgp4LIYrISSuMdEPB8HxZNrVP558w=) 3: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) 4: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:57:cd:d4:ad:7b:f6:83:52:5e:e7:41:37:13:b5:6e:ae:4c:1c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Feb 28 23:55:02 2026 GMT Not After : Mar 4 01:04:02 2026 GMT Subject: CN=249667B92D538B799664BF99CA0BEDEB3528C21B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:dd:f8:02:7c:ca:97:fa:46:6c:3e:4c:6d: 1d:fa:48:e9:4e:47:7e:da:7b:20:16:fe:3d:72:f2: 29:82:c3:3d:58:ed:4b:90:15:4b:e7:cf:6c:d3:b6: be:55:90:6c:98:1d:4c:cd:db:61:12:d0:ab:7a:62: a4:80:47:34:5d:7a:87:f7:e8:12:f9:78:87:7b:79: a5:14:10:f9:3b:6b:52:c2:07:e2:65:08:91:3b:18: e4:e0:e6:63:03:4f:bb:f1:b2:16:62:10:46:bd:b8: b4:2b:89:79:a6:1b:4d:44:60:f8:07:7b:9c:c1:88: a0:4a:e4:44:73:d3:44:07:40:0f:c1:f2:10:1d:4a: e6:78:53:32:62:22:f1:19:79:a8:f0:ff:3c:82:97: d1:b7:77:b5:c6:69:a7:1b:07:a8:fd:ae:7b:90:e9: c3:37:33:c1:1c:21:f4:73:a3:b6:44:4e:2b:e1:a3: 72:05:a5:73:ea:a0:ee:3b:6a:09:55:61:56:3f:bf: 2e:74:84:fd:eb:9e:95:be:ac:1d:87:0f:f4:25:a3: 7d:e7:8b:f8:ea:3d:3e:04:2a:09:f2:ac:71:2b:f2: ac:97:b7:d5:a6:05:61:e5:2f:57:0c:21:b7:9b:d5: b8:d9:e6:f8:47:14:f4:bf:78:9d:94:50:1f:dd:15: ee:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:96:67:B9:2D:53:8B:79:96:64:BF:99:CA:0B:ED:EB:35:28:C2:1B X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:67:b8:4f:ca:ee:f9:43:a7:ad:3b:ba:ce:ee:91:9c:94:23: 6e:4e:1d:27:d7:61:5a:69:bc:91:a6:d3:c8:cb:ca:06:17:b6: c4:78:af:77:5b:02:e0:bd:83:c6:80:47:8a:12:cf:c9:fe:d3: e2:00:0f:e5:f9:33:da:0e:67:a9:bf:28:f6:fe:d8:75:99:ff: 2d:bb:a9:76:dd:2e:b6:53:f5:55:ab:cf:00:a3:44:b8:ca:9e: e5:91:7f:e7:02:eb:7a:17:bf:82:37:ba:2f:9f:ef:2b:64:70: 67:0e:50:28:c2:2e:98:91:de:76:33:a1:72:3a:c4:8b:ab:37: 15:d0:c9:32:80:65:82:87:82:b7:a3:90:c0:69:f2:40:66:fa: 78:d1:51:e6:a6:1a:d1:e0:f9:a8:4b:ce:15:29:cc:9f:69:c1: 70:d3:fc:c1:51:ad:c0:22:53:04:3a:64:8c:d2:e1:4c:be:a2: 51:20:db:53:f8:c5:bb:ee:46:ba:28:1e:72:44:63:82:6f:d7: c9:0a:5e:12:80:60:52:de:49:c7:f0:6d:cf:d4:6b:b1:de:ba: fc:dd:37:1a:ab:cb:63:5e:21:a6:33:76:3c:b5:0a:15:4e:ca: d0:f6:87:f4:03:3f:6f:f2:bc:37:65:ef:36:de:e4:10:4d:b5: f8:09:e3:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVfN1K179oNSXudBNxO1bq5MHLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNjAyMjgyMzU1MDJaFw0yNjAzMDQwMTA0MDJaMDMxMTAvBgNV BAMTKDI0OTY2N0I5MkQ1MzhCNzk5NjY0QkY5OUNBMEJFREVCMzUyOEMyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPct34AnzKl/pGbD5MbR36SOlO R37aeyAW/j1y8imCwz1Y7UuQFUvnz2zTtr5VkGyYHUzN22ES0Kt6YqSARzRdeof3 6BL5eId7eaUUEPk7a1LCB+JlCJE7GOTg5mMDT7vxshZiEEa9uLQriXmmG01EYPgH e5zBiKBK5ERz00QHQA/B8hAdSuZ4UzJiIvEZeajw/zyCl9G3d7XGaacbB6j9rnuQ 6cM3M8EcIfRzo7ZETivho3IFpXPqoO47aglVYVY/vy50hP3rnpW+rB2HD/Qlo33n i/jqPT4EKgnyrHEr8qyXt9WmBWHlL1cMIbeb1bjZ5vhHFPS/eJ2UUB/dFe6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJJZnuS1Ti3mWZL+Zygvt6zUowhswHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdnuE/K7vlDp607us7ukZyUI25OHSfXYVpp vJGm08jLygYXtsR4r3dbAuC9g8aAR4oSz8n+0+IAD+X5M9oOZ6m/KPb+2HWZ/y27 qXbdLrZT9VWrzwCjRLjKnuWRf+cC63oXv4I3ui+f7ytkcGcOUCjCLpiR3nYzoXI6 xIurNxXQyTKAZYKHgrejkMBp8kBm+njRUeamGtHg+ahLzhUpzJ9pwXDT/MFRrcAi UwQ6ZIzS4Uy+olEg21P4xbvuRrooHnJEY4Jv18kKXhKAYFLeScfwbc/Ua7Heuvzd Nxqry2NeIaYzdjy1ChVOytD2h/QDP2/yvDdl7zbe5BBNtfgJ44E= -----END CERTIFICATE-----Generated at Mon Mar 2 04:11:07 2026 by rpki-client