$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: u66wRg2gYSdINPQoe/tmZ4m5yYjdJgMfMJGBCejs0x4= Subject key identifier: 58:1E:A4:8C:19:F3:F8:88:71:73:83:0D:92:DC:2C:BC:93:DD:0B:AE Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 1BDD7AF38B9CF64924349AAB5516EF632EA25210 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 051D Signing time: Mon 03 Nov 2025 22:11:11 +0000 Manifest this update: Mon 03 Nov 2025 22:06:11 +0000 Manifest next update: Fri 07 Nov 2025 07:54:11 +0000 Files and hashes: 1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: YafBQ4rspEwVmhkTGMPu4+IWfSFlUDdxX2Q1OKVUols=) 2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:dd:7a:f3:8b:9c:f6:49:24:34:9a:ab:55:16:ef:63:2e:a2:52:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Nov 3 22:06:11 2025 GMT Not After : Nov 7 07:54:11 2025 GMT Subject: CN=581EA48C19F3F8887173830D92DC2CBC93DD0BAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:e7:ea:2f:ca:1f:f8:a6:90:6b:fb:fe:ae: 94:18:12:aa:3d:0d:68:1f:1d:6e:4b:08:0e:32:81: c9:04:ce:0e:f1:03:70:25:50:ed:e3:69:6c:06:f5: 92:d8:b4:3e:87:1d:65:b4:9f:cd:48:66:35:c2:c3: a0:34:23:1d:6e:3b:34:b1:c9:16:87:ca:1a:4b:9d: 1a:ba:15:f8:34:37:c5:10:1a:e4:fa:40:5a:86:c7: 58:b1:89:0b:32:c8:3e:b7:54:1b:31:b2:62:64:0a: b2:5b:8d:cb:9f:8b:5f:49:be:bd:bd:cb:ad:d7:ac: 4e:57:b8:bd:a4:be:3a:fa:80:72:41:8d:26:3a:1d: 98:e5:3c:7e:81:49:5f:9c:24:d9:74:b3:28:78:e8: 37:d6:0d:28:2d:3d:aa:cf:e1:a7:a3:77:cf:d6:c7: 66:1e:2d:ed:b8:ff:2d:96:db:b8:d0:e9:0d:e5:94: 97:ab:6b:bc:c5:b9:a1:e9:33:26:26:fe:c9:76:8c: 46:bd:f0:ee:16:1d:34:17:99:d7:b8:a8:23:65:0b: ff:0f:91:db:4c:68:f5:40:78:d8:86:8f:82:c0:b7: cd:6f:98:f0:21:8b:f7:a0:0a:ed:85:13:04:de:4e: 43:e7:77:bc:96:8a:d7:ef:ed:bd:8c:48:8a:82:e2: ff:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1E:A4:8C:19:F3:F8:88:71:73:83:0D:92:DC:2C:BC:93:DD:0B:AE X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:92:ac:d6:49:9b:82:0c:a4:be:3b:99:95:16:ec:0a:f9:c5: 75:b4:96:92:8d:15:d6:e0:59:52:e3:b9:f8:2e:11:9a:af:21: 54:74:f6:cd:04:40:00:df:7e:64:e8:cd:ef:8e:85:ec:62:d7: 80:f6:00:5e:46:c5:4d:91:9b:4a:6c:49:6b:d4:21:1f:47:bd: e6:6a:df:99:b6:01:e0:b9:1a:99:bc:92:0e:cd:95:af:e9:4a: ba:e5:f0:a4:71:ef:92:5e:86:29:c1:05:b0:49:7b:f0:8d:70: 84:09:54:37:95:7b:1e:e7:b7:bb:5a:55:4c:82:75:72:b2:99: af:bc:da:12:c1:94:68:23:f8:c6:86:0b:85:f0:9c:c6:68:a1: 50:2c:3a:67:3a:ea:d8:af:b7:79:09:be:a8:e2:aa:b6:61:c5: c7:15:10:1f:83:91:bc:fa:9d:f4:c8:0c:bf:c8:96:41:dc:0a: 92:39:79:44:d2:43:ce:e0:b4:61:0e:37:0d:4f:38:48:10:10: 4e:df:dd:11:f7:a9:60:db:e8:7b:2f:26:c7:b7:02:e8:6f:27: ba:86:fb:9b:3d:e3:71:e0:b6:e6:3a:26:99:d4:32:ac:22:8a: b8:58:b4:07:85:83:38:b6:87:19:79:ea:cb:9f:5f:15:f3:2a: 20:0f:b6:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG91684uc9kkkNJqrVRbvYy6iUhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNTExMDMyMjA2MTFaFw0yNTExMDcwNzU0MTFaMDMxMTAvBgNV BAMTKDU4MUVBNDhDMTlGM0Y4ODg3MTczODMwRDkyREMyQ0JDOTNERDBCQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWOfqL8of+KaQa/v+rpQYEqo9 DWgfHW5LCA4ygckEzg7xA3AlUO3jaWwG9ZLYtD6HHWW0n81IZjXCw6A0Ix1uOzSx yRaHyhpLnRq6Ffg0N8UQGuT6QFqGx1ixiQsyyD63VBsxsmJkCrJbjcufi19Jvr29 y63XrE5XuL2kvjr6gHJBjSY6HZjlPH6BSV+cJNl0syh46DfWDSgtParP4aejd8/W x2YeLe24/y2W27jQ6Q3llJera7zFuaHpMyYm/sl2jEa98O4WHTQXmde4qCNlC/8P kdtMaPVAeNiGj4LAt81vmPAhi/egCu2FEwTeTkPnd7yWitfv7b2MSIqC4v9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWB6kjBnz+Ihxc4MNktwsvJPdC64wHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOSrNZJm4IMpL47mZUW7Ar5xXW0lpKNFdbg WVLjufguEZqvIVR09s0EQADffmToze+Ohexi14D2AF5GxU2Rm0psSWvUIR9HveZq 35m2AeC5Gpm8kg7Nla/pSrrl8KRx75JehinBBbBJe/CNcIQJVDeVex7nt7taVUyC dXKyma+82hLBlGgj+MaGC4XwnMZooVAsOmc66tivt3kJvqjiqrZhxccVEB+Dkbz6 nfTIDL/IlkHcCpI5eUTSQ87gtGEONw1POEgQEE7f3RH3qWDb6HsvJse3AuhvJ7qG +5s943HgtuY6JpnUMqwiirhYtAeFgzi2hxl56sufXxXzKiAPttA= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:40 2025 by rpki-client