$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: zBXc5v2KQgz2P+bW0zGdWQ2U+IiovbEiqxMsG14yTgg= Subject key identifier: A4:3A:4D:9B:58:F7:D1:68:E0:97:BC:57:F6:36:F7:37:1C:80:8B:6C Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 1C7985ADDB445520D8B8C4CC2C2A14215938A4D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 055B Signing time: Tue 24 Mar 2026 03:41:21 +0000 Manifest this update: Tue 24 Mar 2026 03:36:21 +0000 Manifest next update: Fri 27 Mar 2026 13:36:21 +0000 Files and hashes: 1: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=) 2: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: 09eZ254S3Kprd/lgVlSNqlsdp6HhoyTRjPO/X3qCoSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:79:85:ad:db:44:55:20:d8:b8:c4:cc:2c:2a:14:21:59:38:a4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Mar 24 03:36:21 2026 GMT Not After : Mar 27 13:36:21 2026 GMT Subject: CN=A43A4D9B58F7D168E097BC57F636F7371C808B6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:78:8c:80:89:18:df:f6:a8:33:c1:83:8b: 69:52:0e:bf:76:14:65:da:dc:d6:44:7c:3f:6b:2e: 48:e1:3d:00:88:c6:34:f2:64:8f:20:a7:f2:f0:e2: 9a:a4:2a:df:f4:fd:d2:9a:8a:0b:7a:74:82:70:8a: c1:08:1b:c1:76:5c:e4:b4:49:a5:e4:63:bb:3d:2f: 17:71:85:cd:68:6d:75:c7:ca:b9:45:46:e6:59:42: b1:62:5d:19:c3:be:dd:a9:c3:4e:e9:b6:93:d9:d7: 7d:ab:71:6e:96:11:16:0d:45:19:2f:55:92:d7:35: f7:b0:14:9a:fe:37:f2:f1:3b:9a:c7:e5:46:13:b4: ba:16:7b:79:ee:c8:90:7d:f0:16:1f:e7:14:a0:d4: 31:d1:ad:f5:1e:4f:7c:48:22:db:4a:ab:d3:ae:c2: 47:1a:6a:5a:ab:e5:04:3b:81:85:ba:df:6d:55:6a: 5c:cc:e0:3a:9a:ab:e5:d5:00:ce:ec:b5:85:5b:0f: 82:64:d5:24:9f:28:35:48:3a:f0:5c:4a:91:39:82: 55:c4:19:1f:e9:e3:f5:2b:1e:04:fd:3f:9a:64:57: 8d:1d:06:c3:8b:82:ac:13:0f:3d:d9:4e:3f:2a:09: 82:8f:93:dd:6c:fe:cf:cc:d0:65:11:0e:5b:c7:91: 45:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3A:4D:9B:58:F7:D1:68:E0:97:BC:57:F6:36:F7:37:1C:80:8B:6C X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:64:ca:98:d7:61:e2:31:22:ef:a8:62:12:dc:85:aa:77:c3: 42:f1:48:c0:76:2b:55:06:a1:96:76:f1:20:59:60:b5:4d:6d: 7f:69:26:2d:c6:30:5b:39:44:65:54:41:cd:63:80:f9:65:e9: 43:da:78:ed:a8:9c:3b:36:0c:e3:de:7c:d3:c7:fe:7d:21:a2: e7:33:96:86:82:54:c8:2c:4f:0e:f2:45:34:1d:12:16:04:7a: 3c:8d:6a:34:5a:1d:75:bc:6b:47:31:ef:2a:3b:98:26:e2:f9: 88:fd:aa:fb:b8:af:fa:78:30:21:c7:ef:7e:63:44:4a:08:8e: 0f:73:e5:6b:8c:5f:f9:6c:05:25:ee:eb:0b:50:ab:8d:fa:cd: 66:4b:e9:d2:38:11:34:f8:0c:42:39:73:1a:6c:58:fa:97:8f: 31:68:7d:1f:54:23:71:a4:69:e2:ed:d2:9e:50:e1:a9:70:c0: 82:95:69:8b:10:c4:68:2e:e7:85:a5:b6:29:95:d1:98:8e:60: b4:8c:68:03:1e:74:f8:be:99:91:2f:66:a9:9a:9c:f6:3d:ca: 11:e7:4d:e0:5d:b6:36:11:bf:81:72:cb:91:2f:4d:da:89:20: cc:2f:58:6d:84:6f:3b:54:73:ad:ee:d7:e6:ea:09:cd:83:87: 11:78:d6:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHmFrdtEVSDYuMTMLCoUIVk4pNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNjAzMjQwMzM2MjFaFw0yNjAzMjcxMzM2MjFaMDMxMTAvBgNV BAMTKEE0M0E0RDlCNThGN0QxNjhFMDk3QkM1N0Y2MzZGNzM3MUM4MDhCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJP3iMgIkY3/aoM8GDi2lSDr92 FGXa3NZEfD9rLkjhPQCIxjTyZI8gp/Lw4pqkKt/0/dKaigt6dIJwisEIG8F2XOS0 SaXkY7s9Lxdxhc1obXXHyrlFRuZZQrFiXRnDvt2pw07ptpPZ132rcW6WERYNRRkv VZLXNfewFJr+N/LxO5rH5UYTtLoWe3nuyJB98BYf5xSg1DHRrfUeT3xIIttKq9Ou wkcaalqr5QQ7gYW6321ValzM4Dqaq+XVAM7stYVbD4Jk1SSfKDVIOvBcSpE5glXE GR/p4/UrHgT9P5pkV40dBsOLgqwTDz3ZTj8qCYKPk91s/s/M0GURDlvHkUVLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpDpNm1j30Wjgl7xX9jb3NxyAi2wwHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlkypjXYeIxIu+oYhLchap3w0LxSMB2K1UG oZZ28SBZYLVNbX9pJi3GMFs5RGVUQc1jgPll6UPaeO2onDs2DOPefNPH/n0houcz loaCVMgsTw7yRTQdEhYEejyNajRaHXW8a0cx7yo7mCbi+Yj9qvu4r/p4MCHH735j REoIjg9z5WuMX/lsBSXu6wtQq436zWZL6dI4ETT4DEI5cxpsWPqXjzFofR9UI3Gk aeLt0p5Q4alwwIKVaYsQxGgu54WltimV0ZiOYLSMaAMedPi+mZEvZqmanPY9yhHn TeBdtjYRv4Fyy5EvTdqJIMwvWG2EbztUc63u1+bqCc2DhxF41n8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:50 2026 by rpki-client