$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: 9r780n8x96fafuIaTqHlFWQhy2CGDjT1Z5QMKo7ALDs= Subject key identifier: 8E:22:27:43:9F:F4:4E:77:A2:83:7C:48:BF:E2:98:D0:B6:C9:7F:EE Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 05FC36DC81D204E29C0FF0062FD279426642D316 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 01EF Signing time: Mon 20 Oct 2025 04:20:37 +0000 Manifest this update: Mon 20 Oct 2025 04:15:37 +0000 Manifest next update: Thu 23 Oct 2025 09:38:37 +0000 Files and hashes: 1: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: sF8zLAMjgs1FczFI2Z8JpQ/VusAoAJ74LI3j1E4hYto=) 2: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: KT9sqkaZgQeJaxmiWv3IoDhNxJdLIwcQPwa1z0Gvr/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:fc:36:dc:81:d2:04:e2:9c:0f:f0:06:2f:d2:79:42:66:42:d3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Oct 20 04:15:37 2025 GMT Not After : Oct 23 09:38:37 2025 GMT Subject: CN=8E2227439FF44E77A2837C48BFE298D0B6C97FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:a7:6e:47:54:0b:d5:c4:4a:38:c2:b3:94: d4:09:7b:93:ac:9c:3e:f0:27:90:c6:00:30:32:03: 34:f4:58:f3:1a:44:2f:47:a9:42:13:44:8e:61:59: df:1e:26:1b:23:e8:07:1f:54:c4:e5:47:05:75:14: c6:19:71:a2:a2:45:fd:bb:5c:59:40:fc:96:a2:f7: 36:a8:4e:eb:38:07:53:d1:90:24:de:82:c5:38:20: 96:eb:bc:e6:2e:9e:ee:06:bd:d3:39:74:69:fa:5a: f5:0f:ed:d4:b3:c5:01:da:2e:1a:1a:59:93:30:a5: 06:08:f5:e2:e1:c7:7f:d0:2c:6e:b5:b1:70:ce:cc: ed:b7:3f:7e:87:bb:0c:9d:74:77:b5:03:0a:6a:98: bf:27:72:c5:e0:66:3f:70:2f:2f:fc:41:09:78:65: 4b:fe:d2:d1:38:b6:b9:ee:2a:0d:8a:af:a7:24:fd: 43:ea:17:ff:5f:b2:f4:df:59:98:90:bb:3b:85:24: 6b:d2:49:29:ba:ef:8a:d8:c6:ac:b6:e3:30:c9:4f: c5:fc:51:8a:4d:07:71:6d:8d:1c:43:91:b9:07:6b: a3:39:b2:a5:41:e4:88:6e:c7:a9:a3:b0:1c:dc:c3: f0:a4:17:ff:df:02:19:4f:5f:0f:c8:86:ef:6c:db: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:22:27:43:9F:F4:4E:77:A2:83:7C:48:BF:E2:98:D0:B6:C9:7F:EE X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:0f:d7:3b:62:e6:9e:28:f8:e8:2c:91:ba:53:12:59:75:88: 60:77:86:50:c6:d0:12:9a:17:39:76:28:22:70:0e:bb:4d:50: fa:d4:51:15:0a:4a:b1:84:71:6b:2f:c0:86:e1:6e:73:ce:1a: e8:ce:d4:19:1b:9c:d0:9d:e4:b5:48:f6:62:c5:03:eb:e4:42: 46:f3:70:95:93:a4:75:14:42:34:a2:ba:a8:0a:2c:24:47:a0: 24:c1:e9:2f:71:0b:99:7d:bb:dc:52:9b:4f:f2:17:52:a4:6e: 2e:b0:b8:54:65:21:e9:5b:05:58:44:e1:dd:15:68:5b:68:08: 60:50:30:7c:ad:dc:2d:e0:8e:5a:d8:c3:90:0c:a6:c8:7c:3f: 96:5b:a0:af:c4:9d:d7:ef:80:69:95:06:b6:50:32:eb:64:1c: 53:c9:79:c1:f9:56:ce:bf:a8:d9:1a:34:bd:c7:57:15:53:fe: cd:d3:4b:a0:d1:42:35:36:21:8c:f0:38:70:cb:e9:19:5c:17: e9:c6:11:11:f9:fd:92:f5:36:f7:a8:32:99:25:f7:c9:88:80: 6f:e6:2c:04:fa:cd:82:10:21:0b:9d:a0:34:53:c2:ce:d1:4a: 5d:26:21:6f:3f:3b:3c:8a:0a:3d:08:be:c4:4a:f8:e1:55:c6: 61:dc:ff:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfw23IHSBOKcD/AGL9J5QmZC0xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNTEwMjAwNDE1MzdaFw0yNTEwMjMwOTM4MzdaMDMxMTAvBgNV BAMTKDhFMjIyNzQzOUZGNDRFNzdBMjgzN0M0OEJGRTI5OEQwQjZDOTdGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWqduR1QL1cRKOMKzlNQJe5Os nD7wJ5DGADAyAzT0WPMaRC9HqUITRI5hWd8eJhsj6AcfVMTlRwV1FMYZcaKiRf27 XFlA/Jai9zaoTus4B1PRkCTegsU4IJbrvOYunu4GvdM5dGn6WvUP7dSzxQHaLhoa WZMwpQYI9eLhx3/QLG61sXDOzO23P36HuwyddHe1AwpqmL8ncsXgZj9wLy/8QQl4 ZUv+0tE4trnuKg2Kr6ck/UPqF/9fsvTfWZiQuzuFJGvSSSm674rYxqy24zDJT8X8 UYpNB3FtjRxDkbkHa6M5sqVB5Ihux6mjsBzcw/CkF//fAhlPXw/Ihu9s2yyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjiInQ5/0Tneig3xIv+KY0LbJf+4wHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQP1zti5p4o+OgskbpTEll1iGB3hlDG0BKa Fzl2KCJwDrtNUPrUURUKSrGEcWsvwIbhbnPOGujO1BkbnNCd5LVI9mLFA+vkQkbz cJWTpHUUQjSiuqgKLCRHoCTB6S9xC5l9u9xSm0/yF1Kkbi6wuFRlIelbBVhE4d0V aFtoCGBQMHyt3C3gjlrYw5AMpsh8P5ZboK/EndfvgGmVBrZQMutkHFPJecH5Vs6/ qNkaNL3HVxVT/s3TS6DRQjU2IYzwOHDL6RlcF+nGERH5/ZL1NveoMpkl98mIgG/m LAT6zYIQIQudoDRTws7RSl0mIW8/OzyKCj0IvsRK+OFVxmHc/+Q= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:04 2025 by rpki-client