$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: HHTmmtQ9eVob1wwaHr8vgqlpWP++PF7UPNDkZzWsMrc= Subject key identifier: 4C:A5:E2:13:FD:FB:4F:4F:F1:41:9F:99:82:78:98:6B:D5:38:4A:42 Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 7466C3C615D9D2852329E64EBE85EAE1B8BE267E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 0273 Signing time: Sat 18 Oct 2025 19:21:41 +0000 Manifest this update: Sat 18 Oct 2025 19:16:41 +0000 Manifest next update: Wed 22 Oct 2025 07:03:41 +0000 Files and hashes: 1: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: K4U8d+sUzMLgrI4fy436tf9syDLx6SvZlYhSkGTWcb8=) 2: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo=) 3: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: wuktTkscBY7kLLxM52+Mbnsba9SqIR/vdJ8CpUZSm9U=) 4: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:66:c3:c6:15:d9:d2:85:23:29:e6:4e:be:85:ea:e1:b8:be:26:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Oct 18 19:16:41 2025 GMT Not After : Oct 22 07:03:41 2025 GMT Subject: CN=4CA5E213FDFB4F4FF1419F998278986BD5384A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7d:20:26:ac:7e:2e:a3:4f:64:3a:36:69:ce: 87:96:08:f7:39:ed:dd:ce:73:cf:6c:ea:40:e6:8b: b7:17:8c:c4:71:1b:4e:7a:85:c2:45:0a:6f:f3:98: 21:27:ac:39:b8:7d:8f:e2:66:cb:4c:28:04:e9:b8: a9:f0:4d:76:3b:c7:46:93:8d:f1:62:0a:77:3f:d2: 4f:79:cc:bc:30:2c:c9:d5:cf:3f:4f:ad:3f:e6:f4: 3b:52:56:85:b6:69:11:1c:21:f8:13:0a:a9:7c:21: b0:c2:8b:84:03:18:af:38:c2:f6:75:6d:72:77:61: 1a:65:d3:e9:f9:2a:ce:28:64:a4:9a:c4:53:ad:8b: 82:8a:66:e0:69:f7:26:c4:c6:39:7e:1e:61:7e:a7: 4f:57:5f:4a:67:d9:d1:0e:06:ee:09:43:83:cd:de: 24:66:e1:0e:9b:05:09:46:8b:9f:bc:35:72:b9:f4: 2a:9c:26:ba:b0:31:82:c4:23:17:fd:6d:39:e2:9f: f1:e9:83:86:23:82:34:d7:12:b0:54:6e:3b:87:a5: fd:30:3b:78:65:62:68:05:08:eb:29:43:c8:59:e5: 5e:08:27:4e:72:85:78:22:e7:7c:24:43:dd:82:7b: e0:f6:de:8b:1f:fe:eb:84:1e:28:1e:7f:d7:6e:61: 2f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A5:E2:13:FD:FB:4F:4F:F1:41:9F:99:82:78:98:6B:D5:38:4A:42 X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:44:4f:50:57:4e:10:26:2e:11:77:91:41:9f:7b:44:2c:e4: b3:d0:ea:cb:f6:83:b9:9e:7d:eb:09:8c:dd:ea:93:bf:72:85: 4b:3f:90:94:f7:3b:7e:ad:fa:8b:a0:f3:c3:60:0a:b6:59:68: 66:92:32:42:14:2d:b1:e8:d6:47:8d:6d:64:42:f0:77:78:a2: 7a:a3:2f:73:19:8e:64:eb:c7:59:94:b0:b4:9d:2b:f5:41:d5: 7e:34:b0:b9:c9:a2:bd:34:fc:34:da:3c:a0:17:c8:7a:35:27: 5d:95:2f:3f:9b:65:06:da:ef:82:39:00:69:2c:c5:a0:b5:98: e8:10:08:18:b9:20:ad:8c:7f:39:b6:48:53:0d:87:0a:2a:83: a4:e4:c2:a1:ad:89:85:aa:83:fa:4a:7a:35:f2:8f:c3:0b:98: a8:e5:2a:9f:e4:95:19:ee:8d:50:96:03:34:7d:74:1d:5d:4e: 84:cf:a0:96:6f:4a:a9:9b:70:c5:e4:c5:68:09:e3:e8:3e:aa: 09:c1:07:f0:b0:e2:59:ea:bc:91:73:6d:89:36:d7:bc:d1:79: 10:54:84:7d:2b:f8:cf:8b:4a:e5:ba:e5:7f:57:07:83:bb:0b: 34:ff:ef:a6:c3:f5:08:da:04:6e:2e:ae:95:80:70:e5:54:80: 7a:71:59:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGbDxhXZ0oUjKeZOvoXq4bi+Jn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNTEwMTgxOTE2NDFaFw0yNTEwMjIwNzAzNDFaMDMxMTAvBgNV BAMTKDRDQTVFMjEzRkRGQjRGNEZGMTQxOUY5OTgyNzg5ODZCRDUzODRBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzfSAmrH4uo09kOjZpzoeWCPc5 7d3Oc89s6kDmi7cXjMRxG056hcJFCm/zmCEnrDm4fY/iZstMKATpuKnwTXY7x0aT jfFiCnc/0k95zLwwLMnVzz9PrT/m9DtSVoW2aREcIfgTCql8IbDCi4QDGK84wvZ1 bXJ3YRpl0+n5Ks4oZKSaxFOti4KKZuBp9ybExjl+HmF+p09XX0pn2dEOBu4JQ4PN 3iRm4Q6bBQlGi5+8NXK59CqcJrqwMYLEIxf9bTnin/Hpg4YjgjTXErBUbjuHpf0w O3hlYmgFCOspQ8hZ5V4IJ05yhXgi53wkQ92Ce+D23osf/uuEHigef9duYS83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTKXiE/37T0/xQZ+ZgniYa9U4SkIwHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5ET1BXThAmLhF3kUGfe0Qs5LPQ6sv2g7me fesJjN3qk79yhUs/kJT3O36t+oug88NgCrZZaGaSMkIULbHo1keNbWRC8Hd4onqj L3MZjmTrx1mUsLSdK/VB1X40sLnJor00/DTaPKAXyHo1J12VLz+bZQba74I5AGks xaC1mOgQCBi5IK2Mfzm2SFMNhwoqg6TkwqGtiYWqg/pKejXyj8MLmKjlKp/klRnu jVCWAzR9dB1dToTPoJZvSqmbcMXkxWgJ4+g+qgnBB/Cw4lnqvJFzbYk217zReRBU hH0r+M+LSuW65X9XB4O7CzT/76bD9QjaBG4urpWAcOVUgHpxWa8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:37:12 2025 by rpki-client