$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json) Hash identifier: Uww1E+JXXk9vVrgdDiuBPKVd3j11CP0fg4lfX+RezsQ= Subject key identifier: D4:8C:D0:92:56:D6:AC:92:3B:35:BA:2E:1B:72:2B:C5:AC:9E:D4:62 Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 08B0A4EB3CC42798BF316BE8925411FCF2C4A392 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft Manifest number: 0394 Signing time: Sun 19 Oct 2025 15:11:57 +0000 Manifest this update: Sun 19 Oct 2025 15:06:57 +0000 Manifest next update: Wed 22 Oct 2025 22:42:57 +0000 Files and hashes: 1: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: awRdruRhe5HRbdgeOyxI3thV6EOcRsZM3Q2FrnkH2Po=) 2: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: ylXHQm3DiD4h9n4NuN0yUGCouUxigE+BSv0spOzfo/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b0:a4:eb:3c:c4:27:98:bf:31:6b:e8:92:54:11:fc:f2:c4:a3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Oct 19 15:06:57 2025 GMT Not After : Oct 22 22:42:57 2025 GMT Subject: CN=D48CD09256D6AC923B35BA2E1B722BC5AC9ED462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0c:2f:ca:92:5f:55:55:de:32:8e:f2:cf:a3: 2d:fc:28:59:1c:4f:c3:24:d0:0b:98:96:9e:b4:fa: 72:be:54:0f:8a:3f:ce:1a:12:c1:e3:74:8f:85:e0: 99:da:49:4b:14:02:ff:da:b3:c3:a0:7f:78:83:e9: af:61:55:74:d1:4b:73:63:c6:5a:53:bd:b4:1f:70: 83:bf:4b:85:d9:e1:0a:b4:47:4c:f3:a4:78:c6:d9: 0e:a1:6a:ab:bb:02:ba:e0:5a:12:de:c5:45:b3:29: 74:14:cd:2c:90:33:eb:91:6e:ed:f2:7c:a5:fb:b5: 1c:4d:26:9d:d0:04:eb:f8:66:38:8f:e2:dc:9a:0c: 31:d0:79:cd:46:e3:13:6d:1f:6e:ae:ea:4b:25:78: 60:af:48:20:37:c5:f3:1a:5e:97:be:b3:7d:9f:e7: 79:0e:bf:3f:e1:6e:f8:ff:d1:b5:27:40:fe:75:df: 88:88:65:41:ac:5c:42:84:1e:66:e4:28:09:f0:ef: d5:1c:df:9e:60:f2:7d:b3:27:eb:6b:0b:34:77:55: bf:54:41:8b:95:ad:c7:f7:69:e6:d1:b0:4f:b0:89: 81:99:ee:bd:29:a6:bf:46:59:dc:57:7a:ae:02:2a: ac:54:ee:d9:80:d1:f4:c8:f7:61:e9:1a:00:e9:00: 8b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8C:D0:92:56:D6:AC:92:3B:35:BA:2E:1B:72:2B:C5:AC:9E:D4:62 X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:41:b1:e3:cd:2e:26:39:c8:b5:d0:79:29:4b:a8:f8:96:08: df:b2:ac:a3:d6:a8:67:41:17:fb:37:b6:e6:50:7a:d2:85:51: 2a:98:57:9d:1c:41:eb:2d:dc:9f:d6:2a:0f:77:14:8d:b6:4d: 99:00:ba:54:5f:ff:ea:04:01:f1:43:22:3e:e2:f0:0b:05:ea: 5d:95:f8:9b:e6:f2:71:4e:82:2d:15:1e:b0:7b:7b:c2:1f:f0: 86:61:60:2e:3a:17:70:16:1d:3a:f8:48:f4:16:f4:b8:81:38: 99:4f:47:56:be:8e:67:8b:a0:1c:6c:8c:a8:cd:57:51:2f:64: 07:6d:a4:b7:e7:54:5c:fc:76:27:56:ef:bc:e6:2f:b4:82:0d: c2:50:43:5b:fa:89:59:b8:10:28:fa:5e:3f:0e:9a:dd:b3:85: dd:4a:64:52:8c:2a:20:e8:00:f4:ef:cb:68:31:a1:c4:fa:2d: 7e:66:ab:54:7c:95:71:10:08:c8:ab:e6:56:f5:d9:55:53:25: d2:ae:10:17:b1:4b:c3:54:8a:68:c6:60:d1:ed:68:13:9a:65: 57:1f:33:f2:5c:c0:2b:43:b0:48:ce:7c:d4:f6:75:af:88:d6: 21:13:8a:ad:67:f1:7c:40:b8:95:fa:2f:04:a3:8c:37:d6:74: 99:5d:d2:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCLCk6zzEJ5i/MWvoklQR/PLEo5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yNTEwMTkxNTA2NTdaFw0yNTEwMjIyMjQyNTdaMDMxMTAvBgNV BAMTKEQ0OENEMDkyNTZENkFDOTIzQjM1QkEyRTFCNzIyQkM1QUM5RUQ0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkDC/Kkl9VVd4yjvLPoy38KFkc T8Mk0AuYlp60+nK+VA+KP84aEsHjdI+F4JnaSUsUAv/as8Ogf3iD6a9hVXTRS3Nj xlpTvbQfcIO/S4XZ4Qq0R0zzpHjG2Q6haqu7ArrgWhLexUWzKXQUzSyQM+uRbu3y fKX7tRxNJp3QBOv4ZjiP4tyaDDHQec1G4xNtH26u6ksleGCvSCA3xfMaXpe+s32f 53kOvz/hbvj/0bUnQP5134iIZUGsXEKEHmbkKAnw79Uc355g8n2zJ+trCzR3Vb9U QYuVrcf3aebRsE+wiYGZ7r0ppr9GWdxXeq4CKqxU7tmA0fTI92HpGgDpAIvLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1IzQklbWrJI7NbouG3Irxaye1GIwHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAz MTBGMTAwQ0UzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVBsePNLiY5yLXQeSlLqPiWCN+yrKPWqGdB F/s3tuZQetKFUSqYV50cQest3J/WKg93FI22TZkAulRf/+oEAfFDIj7i8AsF6l2V +Jvm8nFOgi0VHrB7e8If8IZhYC46F3AWHTr4SPQW9LiBOJlPR1a+jmeLoBxsjKjN V1EvZAdtpLfnVFz8didW77zmL7SCDcJQQ1v6iVm4ECj6Xj8Omt2zhd1KZFKMKiDo APTvy2gxocT6LX5mq1R8lXEQCMir5lb12VVTJdKuEBexS8NUimjGYNHtaBOaZVcf M/JcwCtDsEjOfNT2da+I1iETiq1n8XxAuJX6LwSjjDfWdJld0i0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:56 2025 by rpki-client