$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: FNJ0ro8dmNGn349N/Fh6w1Xj6NpjLz+Pg4eXqrzwxVk= Subject key identifier: D9:5C:F2:36:A5:81:AE:04:CE:DC:C2:5C:75:9D:57:02:A3:94:BC:47 Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 674C5594A2550BF7E3A85AD28FE020A2BE740B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 01D5 Signing time: Fri 22 Aug 2025 19:10:38 +0000 Manifest this update: Fri 22 Aug 2025 19:05:38 +0000 Manifest next update: Mon 25 Aug 2025 20:05:38 +0000 Files and hashes: 1: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: sF8zLAMjgs1FczFI2Z8JpQ/VusAoAJ74LI3j1E4hYto=) 2: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: CWHzFoDPMIH1eCVZvwge2JiQTDrcBB6+DOgdZL5oSoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4c:55:94:a2:55:0b:f7:e3:a8:5a:d2:8f:e0:20:a2:be:74:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Aug 22 19:05:38 2025 GMT Not After : Aug 25 20:05:38 2025 GMT Subject: CN=D95CF236A581AE04CEDCC25C759D5702A394BC47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:88:51:09:7a:52:dc:4d:0e:4f:e8:99:61: 0f:2b:b9:62:7d:f5:b7:05:21:c6:9a:50:e3:96:f0: fe:95:b3:35:e7:3b:c2:a2:2f:6f:80:30:da:96:3b: 57:8d:b7:d2:78:30:b0:55:52:2f:48:ab:b2:08:93: e1:e7:87:0e:97:52:61:47:86:0f:fd:d2:2c:aa:8d: f6:e9:f9:33:76:65:1c:d7:c5:1d:4b:ac:c1:b6:71: 04:ee:6a:93:2e:6f:b3:ae:0f:2b:62:4e:eb:7c:13: 59:f4:98:f2:71:13:70:16:2d:6a:4a:73:32:a7:8b: 33:7b:48:76:af:92:86:55:51:1b:2c:11:f0:ea:0c: 3f:6b:4c:dd:2f:e7:f3:80:dc:b9:16:38:4e:a9:62: d2:80:06:28:92:1b:c1:82:c6:c9:c2:89:8a:f7:45: 14:cd:46:42:ad:e0:20:4c:fe:c2:e6:04:7a:c5:14: 66:56:9c:18:e1:5e:3f:0e:ea:ec:65:a2:d4:8d:c1: 26:8f:9c:e3:aa:f8:db:82:4c:1b:f1:fc:56:12:45: f2:9f:15:c0:5c:c6:53:cb:a6:8e:6b:e2:e9:8d:f8: 6f:4f:79:85:c7:b5:a0:ea:26:43:8a:80:48:99:b0: 6f:d3:88:85:99:82:ab:13:f8:4b:fa:fa:f5:cf:f6: f1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5C:F2:36:A5:81:AE:04:CE:DC:C2:5C:75:9D:57:02:A3:94:BC:47 X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:c1:bd:86:00:93:e1:0d:13:9f:3e:7f:43:a7:69:b6:56:19: 2a:87:af:09:9f:1b:6f:c0:a5:7a:43:cf:60:ba:35:7a:6f:62: 50:1b:10:c2:cb:76:27:91:12:39:49:d9:fb:6d:9a:1f:c8:91: 57:53:ed:69:17:0e:84:ca:92:0f:8e:ec:48:7a:8b:b9:b1:2b: 10:34:d9:74:e2:6f:1f:af:0a:27:8e:09:5a:54:fe:54:83:d6: bf:0d:92:30:c4:1d:36:41:c7:73:a6:b8:5d:ce:36:cf:d5:35: 32:71:65:ed:a8:30:95:ef:0d:4b:90:b2:21:9f:ac:5e:6c:68: 9b:21:0e:43:16:de:45:92:3e:ce:2c:dc:f9:e0:40:42:9a:15: c2:a4:3d:57:bc:b9:e0:19:80:66:bc:a0:59:24:1d:76:42:83: 96:4e:18:b8:55:0c:9f:30:e4:f9:6d:73:2f:99:67:33:a5:a3: cc:81:9b:29:a8:01:35:05:76:2c:0d:db:8e:73:8c:76:5d:fd: 34:49:e6:4d:fd:64:9c:fd:9d:c3:c6:b2:13:dd:28:58:95:d0: c2:4a:64:7a:fb:00:28:17:e7:1f:6b:37:34:ec:25:91:a4:4a: 7a:14:91:a3:68:ef:e0:34:45:41:2a:2b:e6:59:27:f9:cb:0c: 37:49:f7:d5 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITZ0xVlKJVC/fjqFrSj+Agor50CzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhBRkNGMDBBOTBCN0U5RUExRTMwMTgyQjBCRkY5MzRCRTRE QzA5NzFDMB4XDTI1MDgyMjE5MDUzOFoXDTI1MDgyNTIwMDUzOFowMzExMC8GA1UE AxMoRDk1Q0YyMzZBNTgxQUUwNENFRENDMjVDNzU5RDU3MDJBMzk0QkM0NzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALpFiFEJelLcTQ5P6JlhDyu5Yn31 twUhxppQ45bw/pWzNec7wqIvb4Aw2pY7V4230ngwsFVSL0irsgiT4eeHDpdSYUeG D/3SLKqN9un5M3ZlHNfFHUuswbZxBO5qky5vs64PK2JO63wTWfSY8nETcBYtakpz MqeLM3tIdq+ShlVRGywR8OoMP2tM3S/n84DcuRY4Tqli0oAGKJIbwYLGycKJivdF FM1GQq3gIEz+wuYEesUUZlacGOFePw7q7GWi1I3BJo+c46r424JMG/H8VhJF8p8V wFzGU8umjmvi6Y34b095hce1oOomQ4qASJmwb9OIhZmCqxP4S/r69c/28QkCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTZXPI2pYGuBM7cwlx1nVcCo5S8RzAfBgNVHSME GDAWgBSvzwCpC36eoeMBgrC/+TS+TcCXHDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI1 NjVhMWNmLTI5NTAtNDdkYy1hMjEyLWY2NTNiOGMzZjVhOS8wL0FGQ0YwMEE5MEI3 RTlFQTFFMzAxODJCMEJGRjkzNEJFNERDMDk3MUMuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9BRkNGMDBBOTBCN0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5 NzFDLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8yNTY1YTFjZi0yOTUwLTQ3ZGMtYTIx Mi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBCN0U5RUExRTMwMTgyQjBCRkY5MzRC RTREQzA5NzFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAk8G9hgCT4Q0Tnz5/Q6dptlYZKoevCZ8bb8Cl ekPPYLo1em9iUBsQwst2J5ESOUnZ+22aH8iRV1PtaRcOhMqSD47sSHqLubErEDTZ dOJvH68KJ44JWlT+VIPWvw2SMMQdNkHHc6a4Xc42z9U1MnFl7agwle8NS5CyIZ+s XmxomyEOQxbeRZI+zizc+eBAQpoVwqQ9V7y54BmAZrygWSQddkKDlk4YuFUMnzDk +W1zL5lnM6WjzIGbKagBNQV2LA3bjnOMdl39NEnmTf1knP2dw8ayE90oWJXQwkpk evsAKBfnH2s3NOwlkaRKehSRo2jv4DRFQSor5lkn+csMN0n31Q== -----END CERTIFICATE-----Generated at Sat Aug 23 22:06:20 2025 by rpki-client