$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: Uzz9ZRX3bJ713Gh67AE9Ig4u1EFOUFOTTRAgsHRP9wI= Subject key identifier: 65:4D:03:C0:2A:EC:D4:AD:4B:73:82:CC:95:A2:48:53:29:94:01:73 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 665AED5D5C46C2BC968E6E2DBEEF0BC127762FC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 0516 Signing time: Sat 18 Oct 2025 04:30:01 +0000 Manifest this update: Sat 18 Oct 2025 04:25:01 +0000 Manifest next update: Tue 21 Oct 2025 14:11:01 +0000 Files and hashes: 1: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) 2: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) 3: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: vq+qNP39P2bq5aaTVyyI2ZFqNrN3oPBd77DtmZ5XOi4=) 4: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5a:ed:5d:5c:46:c2:bc:96:8e:6e:2d:be:ef:0b:c1:27:76:2f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Oct 18 04:25:01 2025 GMT Not After : Oct 21 14:11:01 2025 GMT Subject: CN=654D03C02AECD4AD4B7382CC95A2485329940173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:df:89:67:1f:65:02:0e:2e:76:71:e9:15:d1: de:50:94:f5:1c:85:6a:2c:c8:d5:9f:7d:e3:8f:c1: 02:b8:63:14:ce:6b:a0:2c:74:7c:63:b1:6f:a9:ad: 22:e9:0b:7b:ba:e1:3b:84:cf:aa:c8:50:60:15:1a: 3a:af:4a:2e:0e:42:a1:52:66:d9:7d:fa:0f:f3:b2: f6:01:c5:5d:ea:e1:30:c7:87:61:7d:7d:08:4b:bc: 90:1b:81:ae:4b:80:97:5b:fb:39:50:f4:cf:08:ab: 4e:62:3d:81:40:bb:df:3f:b1:12:95:56:7d:94:b0: ed:7b:4c:c4:78:c7:7d:5c:98:9e:a0:56:23:a0:27: 2d:76:10:a0:a7:87:c4:b5:31:ef:c9:e7:8e:b2:50: cd:ec:9e:ec:72:42:b8:03:e5:6e:4e:65:71:0f:65: d4:d1:91:7c:89:e2:78:ea:88:e2:b0:e5:ff:ec:b2: f5:12:b6:e0:b2:27:09:15:94:d6:0b:3d:42:b2:08: 89:bc:72:d8:ce:e0:bb:3b:99:7d:b5:c9:eb:32:17: 49:b9:e7:17:68:5e:01:dd:8c:00:8e:86:c7:37:2b: 3e:c1:bf:bd:1c:e8:e9:77:df:be:78:d5:1e:e1:05: ea:d6:6c:79:22:86:24:b1:80:eb:98:6c:aa:fc:c3: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4D:03:C0:2A:EC:D4:AD:4B:73:82:CC:95:A2:48:53:29:94:01:73 X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6b:12:b6:5e:7e:e3:98:99:25:7b:9e:21:b0:7e:ad:29:db: 3a:f4:31:01:70:63:26:67:af:db:99:15:05:92:dd:08:fa:bb: 00:3a:9f:cb:ba:49:a9:b5:46:a0:2d:0f:38:8e:e7:8c:bd:e0: b1:15:75:7e:3e:c4:1e:6b:49:f5:fc:ef:60:1f:27:19:ee:ad: 0f:72:01:7a:ab:a4:52:06:ae:af:d1:0b:55:5b:63:d9:5a:74: a3:82:ff:fc:1f:d7:1e:80:8a:5c:7f:c0:31:ba:48:60:1a:af: 6f:b9:45:1b:70:b8:20:88:61:e0:c9:fa:59:c7:56:12:47:29: 45:fc:8c:41:b0:88:ad:a7:07:97:fc:a6:96:2e:20:7b:04:90: b1:4f:38:f0:5c:80:e9:9d:04:e6:49:a6:3b:3c:e3:c4:ed:eb: 09:74:02:83:e2:ce:5b:ce:af:f4:d1:74:04:9b:a7:58:95:2e: 0e:63:b3:ff:1c:59:30:8a:50:4d:59:ab:8c:98:61:f3:67:6f: e6:a9:e2:1a:7a:5e:53:97:00:2d:bc:dc:23:f6:3f:dc:d3:fd: f4:77:ce:5e:14:cc:89:84:56:91:29:90:74:09:b0:78:d8:40: e6:8c:f5:23:38:47:66:0d:db:08:c1:d4:5b:c4:49:11:35:d4: 95:1a:06:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZlrtXVxGwryWjm4tvu8LwSd2L8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTEwMTgwNDI1MDFaFw0yNTEwMjExNDExMDFaMDMxMTAvBgNV BAMTKDY1NEQwM0MwMkFFQ0Q0QUQ0QjczODJDQzk1QTI0ODUzMjk5NDAxNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu34lnH2UCDi52cekV0d5QlPUc hWosyNWffeOPwQK4YxTOa6AsdHxjsW+prSLpC3u64TuEz6rIUGAVGjqvSi4OQqFS Ztl9+g/zsvYBxV3q4TDHh2F9fQhLvJAbga5LgJdb+zlQ9M8Iq05iPYFAu98/sRKV Vn2UsO17TMR4x31cmJ6gViOgJy12EKCnh8S1Me/J546yUM3snuxyQrgD5W5OZXEP ZdTRkXyJ4njqiOKw5f/ssvUStuCyJwkVlNYLPUKyCIm8ctjO4Ls7mX21yesyF0m5 5xdoXgHdjACOhsc3Kz7Bv70c6Ol337541R7hBerWbHkihiSxgOuYbKr8w/sNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZU0DwCrs1K1Lc4LMlaJIUymUAXMwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRrErZefuOYmSV7niGwfq0p2zr0MQFwYyZn r9uZFQWS3Qj6uwA6n8u6Sam1RqAtDziO54y94LEVdX4+xB5rSfX872AfJxnurQ9y AXqrpFIGrq/RC1VbY9ladKOC//wf1x6Ailx/wDG6SGAar2+5RRtwuCCIYeDJ+lnH VhJHKUX8jEGwiK2nB5f8ppYuIHsEkLFPOPBcgOmdBOZJpjs848Tt6wl0AoPizlvO r/TRdASbp1iVLg5js/8cWTCKUE1Zq4yYYfNnb+ap4hp6XlOXAC283CP2P9zT/fR3 zl4UzImEVpEpkHQJsHjYQOaM9SM4R2YN2wjB1FvESRE11JUaBuQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:04 2025 by rpki-client