$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: lkvG24f0tQ7OlczO2weSGn15rMKG9XUI6xknBhMh8gE= Subject key identifier: 75:2E:BF:45:9A:80:44:C9:60:D9:C5:2E:78:8A:0D:BD:E3:B6:AC:B5 Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 4BFDE99B2A948EEC98E3548715DB2A95A11D3E62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 0516 Signing time: Sun 19 Oct 2025 18:51:18 +0000 Manifest this update: Sun 19 Oct 2025 18:46:18 +0000 Manifest next update: Thu 23 Oct 2025 00:27:18 +0000 Files and hashes: 1: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=) 2: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: yMCRWR3lPG7DTkbiOoPlEaicB9UnFGJDQYgfECy38yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fd:e9:9b:2a:94:8e:ec:98:e3:54:87:15:db:2a:95:a1:1d:3e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Oct 19 18:46:18 2025 GMT Not After : Oct 23 00:27:18 2025 GMT Subject: CN=752EBF459A8044C960D9C52E788A0DBDE3B6ACB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:9b:c0:ad:ae:e9:eb:00:08:a6:06:82:0e: 97:4d:66:d4:6a:d8:ff:e8:82:7a:28:3e:c2:87:d7: 24:f1:35:7b:8b:d8:0e:46:ed:b8:0d:b5:46:5f:e3: 04:b9:a8:c8:60:05:6e:d0:73:18:7f:f5:dc:80:0b: f1:b7:f7:dc:32:7d:60:0e:fe:9e:fd:31:47:67:6a: 60:b7:ab:ca:e5:37:32:35:75:c8:17:69:fb:ed:31: 04:70:69:1c:c5:77:fe:4a:ca:a1:a6:0e:82:a8:e3: 45:f2:e0:29:cc:4d:65:bf:91:f0:09:04:b0:6a:64: 4c:52:6b:38:3b:07:6a:a6:9f:d2:65:ed:0f:bf:ae: ff:49:59:49:7d:76:3a:c7:8b:07:9c:e1:0f:19:c4: ee:6d:eb:61:de:98:1e:80:82:53:e1:7c:f3:71:e5: 36:85:70:a8:f5:a8:9c:d9:6b:79:67:52:b0:b3:4c: dd:20:39:72:8c:93:95:c9:ec:9a:a4:fb:51:85:d6: cf:d3:a4:07:56:87:45:1a:63:4c:73:05:68:46:4f: 43:4c:15:0e:ce:aa:72:ef:fc:8c:4c:72:1c:cc:50: 78:fd:e9:d3:17:3e:90:b0:a8:32:6b:30:cb:11:80: 3c:c9:4b:e9:47:c4:30:78:94:65:7d:d0:dc:43:6f: 7b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2E:BF:45:9A:80:44:C9:60:D9:C5:2E:78:8A:0D:BD:E3:B6:AC:B5 X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ed:3c:9f:00:86:5e:e0:8a:70:b0:5c:a4:4c:fb:49:e4:82: 0a:0e:ce:66:37:3c:aa:df:d0:50:ef:f8:ef:22:da:5b:1f:21: fb:f6:a1:02:70:fd:4f:bd:cf:3c:56:71:cf:6e:4a:db:a9:b9: bc:c1:3b:70:64:0c:ef:a9:e4:07:47:2a:36:96:73:97:87:11: 5a:a4:8a:e9:51:89:ff:25:85:7e:fb:cd:f9:d3:d4:07:85:93: a4:9f:b5:57:7e:c5:35:b3:da:05:90:e6:1a:08:9e:35:15:b4: 21:29:11:3e:b2:76:d2:8f:ab:64:32:9d:db:1a:dc:94:f2:e7: 83:3c:85:06:8c:b5:87:61:a0:3b:cd:53:ce:49:73:c4:19:f9: 72:b2:ec:da:b6:62:58:9c:80:f6:e2:2f:2a:ff:4d:2f:59:0d: d7:79:fb:df:8e:4a:ed:af:e5:44:49:df:7f:d9:d0:e2:6e:86: 77:b7:29:42:c4:45:d2:84:f5:a1:73:13:39:31:e6:54:45:cc: 9a:99:0e:c1:0a:56:53:7d:b4:a1:2d:63:89:7b:9d:4b:04:76: f0:21:a9:5a:3c:bc:e2:df:7b:77:d5:32:21:f8:78:fd:45:7a: c0:8f:00:77:60:3f:c6:0a:9e:7d:e6:79:f3:19:69:ae:a5:9a: e0:2e:18:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/3pmyqUjuyY41SHFdsqlaEdPmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNTEwMTkxODQ2MThaFw0yNTEwMjMwMDI3MThaMDMxMTAvBgNV BAMTKDc1MkVCRjQ1OUE4MDQ0Qzk2MEQ5QzUyRTc4OEEwREJERTNCNkFDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RpvAra7p6wAIpgaCDpdNZtRq 2P/ognooPsKH1yTxNXuL2A5G7bgNtUZf4wS5qMhgBW7Qcxh/9dyAC/G399wyfWAO /p79MUdnamC3q8rlNzI1dcgXafvtMQRwaRzFd/5KyqGmDoKo40Xy4CnMTWW/kfAJ BLBqZExSazg7B2qmn9Jl7Q+/rv9JWUl9djrHiwec4Q8ZxO5t62HemB6AglPhfPNx 5TaFcKj1qJzZa3lnUrCzTN0gOXKMk5XJ7Jqk+1GF1s/TpAdWh0UaY0xzBWhGT0NM FQ7OqnLv/IxMchzMUHj96dMXPpCwqDJrMMsRgDzJS+lHxDB4lGV90NxDb3tVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdS6/RZqARMlg2cUueIoNveO2rLUwHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPtPJ8Ahl7ginCwXKRM+0nkggoOzmY3PKrf 0FDv+O8i2lsfIfv2oQJw/U+9zzxWcc9uStupubzBO3BkDO+p5AdHKjaWc5eHEVqk iulRif8lhX77zfnT1AeFk6SftVd+xTWz2gWQ5hoInjUVtCEpET6ydtKPq2Qyndsa 3JTy54M8hQaMtYdhoDvNU85Jc8QZ+XKy7Nq2YlicgPbiLyr/TS9ZDdd5+9+OSu2v 5URJ33/Z0OJuhne3KULERdKE9aFzEzkx5lRFzJqZDsEKVlN9tKEtY4l7nUsEdvAh qVo8vOLfe3fVMiH4eP1FesCPAHdgP8YKnn3mefMZaa6lmuAuGNc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:31 2025 by rpki-client