$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: EoZP69Lfeswjq61F6o7dJz/TN0x2IenS63O/VuphE7A= Subject key identifier: B1:70:9C:8C:96:67:E3:F0:64:0D:35:D0:C7:D3:BD:3B:7A:CD:E5:E8 Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 3765525AB2C96985F377C4AB9339874CC00D9CBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 0551 Signing time: Sun 01 Mar 2026 19:01:20 +0000 Manifest this update: Sun 01 Mar 2026 18:56:20 +0000 Manifest next update: Wed 04 Mar 2026 20:22:20 +0000 Files and hashes: 1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: qPCVxHfq2drSaXGSrcFCqtpcmp1VlNvYDXW7TSiRYPg=) 2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:65:52:5a:b2:c9:69:85:f3:77:c4:ab:93:39:87:4c:c0:0d:9c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Mar 1 18:56:20 2026 GMT Not After : Mar 4 20:22:20 2026 GMT Subject: CN=B1709C8C9667E3F0640D35D0C7D3BD3B7ACDE5E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:c2:b5:c5:96:61:c1:9b:be:97:c1:d0:7d: 6d:5f:a5:0c:be:5f:63:30:49:65:54:57:f4:e4:fe: 04:77:d3:b2:71:64:9c:fa:f1:80:51:bf:b3:53:49: 3f:b9:54:a8:69:80:25:12:43:57:da:86:5e:89:4b: f7:87:04:14:a7:c2:ea:b9:f1:0d:b6:03:47:7c:1b: f0:93:16:c0:c7:0e:11:28:9a:21:28:84:c1:83:58: 00:0d:15:5c:69:58:85:b2:4f:5f:64:ca:cc:63:ac: ec:9a:44:b6:c8:4d:d7:71:5c:87:d2:61:92:1a:6f: 91:2b:16:6e:f7:2f:ae:4f:27:59:53:30:82:3a:cc: 86:a6:90:18:34:54:9c:16:31:37:01:24:fe:0b:2b: 9e:f3:8b:28:5c:af:63:f6:31:b1:a7:14:bc:97:a8: 92:dd:4c:6c:7e:14:76:4e:7d:9c:70:5e:72:19:bc: 46:90:33:d5:c2:20:70:ad:81:7c:1e:73:f0:3d:0e: 0a:e5:8c:44:ac:8e:89:6b:47:b3:35:d4:5d:6e:6a: f8:d3:24:97:69:02:86:b4:cc:dc:bd:e4:12:ae:90: ff:66:d3:a9:c3:02:e0:dc:36:05:c4:ec:3e:d9:93: c5:96:15:c3:2f:25:25:11:93:d9:61:5d:bf:a4:c2: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:70:9C:8C:96:67:E3:F0:64:0D:35:D0:C7:D3:BD:3B:7A:CD:E5:E8 X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:43:c8:b0:4f:87:d8:31:6b:21:7b:a7:72:d4:ad:3a:82:99: 74:6d:8b:fc:16:d8:a9:18:6d:42:81:88:cd:3f:0d:91:51:3a: e0:3d:52:03:04:93:8c:73:8c:b7:e6:b9:ed:05:ab:de:e5:48: 4c:4e:96:b2:68:21:37:0b:47:e2:5c:ac:34:b5:86:0b:b3:b3: 8f:bc:e0:ba:95:41:e1:9f:85:8f:77:7c:7b:64:44:89:1b:98: 8b:a5:dd:f0:43:25:74:5b:e7:82:88:dd:f3:20:9f:21:21:33: 14:83:55:5c:2f:02:85:b7:bf:93:ca:8b:2d:78:de:0d:91:79: 09:96:67:52:a2:bc:03:61:99:55:af:6e:90:42:ea:da:2b:fd: c5:85:90:31:34:1b:36:a3:26:9e:31:ac:8b:c3:39:f5:c8:05: fc:82:ad:62:2f:a6:74:1a:de:db:8b:a9:ee:58:09:d4:27:48: 9a:10:04:38:f9:b4:03:02:19:af:22:ac:63:a2:7b:f3:8d:5b: a2:9b:fe:ae:c1:f5:45:1d:35:5e:c4:9c:d8:bb:fb:70:ae:96: 9d:e4:89:45:fe:f2:78:73:ec:29:fc:7e:1d:57:90:03:8b:47: 87:22:38:96:f0:a9:d3:4b:90:65:bb:d5:37:00:70:ed:4b:57: 8f:5e:52:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2VSWrLJaYXzd8SrkzmHTMANnLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNjAzMDExODU2MjBaFw0yNjAzMDQyMDIyMjBaMDMxMTAvBgNV BAMTKEIxNzA5QzhDOTY2N0UzRjA2NDBEMzVEMEM3RDNCRDNCN0FDREU1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/IsK1xZZhwZu+l8HQfW1fpQy+ X2MwSWVUV/Tk/gR307JxZJz68YBRv7NTST+5VKhpgCUSQ1fahl6JS/eHBBSnwuq5 8Q22A0d8G/CTFsDHDhEomiEohMGDWAANFVxpWIWyT19kysxjrOyaRLbITddxXIfS YZIab5ErFm73L65PJ1lTMII6zIamkBg0VJwWMTcBJP4LK57ziyhcr2P2MbGnFLyX qJLdTGx+FHZOfZxwXnIZvEaQM9XCIHCtgXwec/A9DgrljESsjolrR7M11F1uavjT JJdpAoa0zNy95BKukP9m06nDAuDcNgXE7D7Zk8WWFcMvJSURk9lhXb+kwibnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsXCcjJZn4/BkDTXQx9O9O3rN5egwHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJDyLBPh9gxayF7p3LUrTqCmXRti/wW2KkY bUKBiM0/DZFROuA9UgMEk4xzjLfmue0Fq97lSExOlrJoITcLR+JcrDS1hguzs4+8 4LqVQeGfhY93fHtkRIkbmIul3fBDJXRb54KI3fMgnyEhMxSDVVwvAoW3v5PKiy14 3g2ReQmWZ1KivANhmVWvbpBC6tor/cWFkDE0GzajJp4xrIvDOfXIBfyCrWIvpnQa 3tuLqe5YCdQnSJoQBDj5tAMCGa8irGOie/ONW6Kb/q7B9UUdNV7EnNi7+3Culp3k iUX+8nhz7Cn8fh1XkAOLR4ciOJbwqdNLkGW71TcAcO1LV49eUqk= -----END CERTIFICATE-----Generated at Mon Mar 2 09:06:51 2026 by rpki-client