$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft (raw, json) Hash identifier: hP1w90psvvqHqdYdeaiO7ubisRN+C8SDRN5ym6SVo1c= Subject key identifier: AE:69:F9:02:6B:D3:79:07:7B:A8:CF:2A:16:44:6A:FE:8C:96:30:FC Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 4CFD61B58AFFB6A7A37192D970031801464729EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft Manifest number: A0 Signing time: Sun 19 Oct 2025 08:00:01 +0000 Manifest this update: Sun 19 Oct 2025 07:55:01 +0000 Manifest next update: Wed 22 Oct 2025 15:12:01 +0000 Files and hashes: 1: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: llbK8JVFmbrLSSzLv9Ovv2C1Mqs66Yxl6xm9VnsVOAw=) 2: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: 9Rk+bLwCtN8F40lqmzQmjy2Qn3pf5qNIMJVV2njhbNk=) 3: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: 3Egq3cRo6EJ7UqcOfpeiiHWc5fNhn+xEtBo+/Cw0jbA=) 4: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl (hash: HF1w8nQMO1kZ2TOwiKzjBDnSdvVJSYEcwsOYdfmwR38=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fd:61:b5:8a:ff:b6:a7:a3:71:92:d9:70:03:18:01:46:47:29:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Oct 19 07:55:01 2025 GMT Not After : Oct 22 15:12:01 2025 GMT Subject: CN=AE69F9026BD379077BA8CF2A16446AFE8C9630FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:6c:7a:58:74:e0:f8:c0:5f:2d:e2:71:93: e1:02:c7:dd:dc:ff:20:b9:46:ac:84:4a:47:1e:2b: 39:a9:52:1e:50:f8:0c:57:ae:56:c1:00:95:44:a4: 49:bb:b4:b6:da:8f:14:3c:5b:b4:3c:27:5f:1b:dc: fd:85:43:60:9e:6e:78:f4:0e:dc:24:7d:d0:bb:1a: ed:ca:d6:8e:01:85:b7:9a:2a:31:2d:3d:ca:9b:d8: 1a:c6:65:88:03:b1:54:11:b8:79:a5:4f:53:a8:54: 63:03:ba:fc:e9:70:1a:33:1b:e7:51:85:60:66:b8: 13:7c:1e:6e:4d:a0:48:a4:23:2d:28:01:98:d0:df: 12:03:d0:9c:61:e0:7e:7d:5b:23:bb:31:b0:c3:da: be:c1:47:bf:0b:af:59:c6:16:3c:bf:e0:78:a2:45: 11:3d:5f:a0:ca:f0:0e:70:c5:74:5d:b7:70:39:b5: 04:24:a9:04:35:8d:82:99:c1:7b:d1:be:e5:47:94: 77:ef:76:da:57:56:5b:21:01:10:9e:6f:de:43:95: 91:aa:c9:10:36:01:54:e4:9e:28:02:9c:34:97:60: 04:14:07:6d:2b:5d:9c:2a:7d:2e:7b:cd:20:0d:7c: 4e:69:33:8c:6a:45:9a:6e:f5:9b:c9:1f:f2:b1:f6: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:69:F9:02:6B:D3:79:07:7B:A8:CF:2A:16:44:6A:FE:8C:96:30:FC X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e4:98:cb:1a:0d:65:8b:44:f8:af:78:90:fd:0f:6b:0c:30: ad:96:2e:9f:db:0f:47:b6:2e:ed:15:91:1b:b2:2f:6a:9a:a0: 89:6d:08:1d:e6:5e:9b:9a:89:17:a1:d9:4b:b8:45:4b:23:d9: f7:e1:3b:64:55:89:09:71:22:0a:e9:7a:06:87:0c:f4:98:89: 4f:d3:ad:9e:10:3a:9c:6c:f9:f7:9f:43:32:50:a8:6a:98:a1: 64:10:e6:23:3c:08:cc:87:39:b5:a3:d4:d0:76:37:ff:7c:5d: 2b:ee:24:44:5a:7d:a2:30:71:de:56:f9:ba:a9:df:7e:4f:e1: f8:16:09:8c:2d:da:bb:66:f4:6c:1d:66:f5:61:bd:d0:98:ff: 3e:24:c3:ad:cc:c5:cf:e9:0c:1e:82:38:f1:1e:41:35:b0:53: 4c:37:43:24:98:67:5e:4d:ae:1b:99:0b:a4:66:42:d7:22:4b: 0a:e2:9b:15:12:d8:3a:ea:43:ee:a6:d0:6d:3a:50:9d:16:25: 38:1e:05:11:3d:7b:da:37:5d:71:58:5b:7a:bb:96:3b:86:83: 96:9a:17:e6:a2:52:4e:6e:16:83:04:37:0e:f4:fa:e3:bf:17: d1:58:ce:cb:18:dd:85:34:76:9d:c2:e0:18:f8:83:89:6e:22: 59:85:aa:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTP1htYr/tqejcZLZcAMYAUZHKeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNTEwMTkwNzU1MDFaFw0yNTEwMjIxNTEyMDFaMDMxMTAvBgNV BAMTKEFFNjlGOTAyNkJEMzc5MDc3QkE4Q0YyQTE2NDQ2QUZFOEM5NjMwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHtGx6WHTg+MBfLeJxk+ECx93c /yC5RqyESkceKzmpUh5Q+AxXrlbBAJVEpEm7tLbajxQ8W7Q8J18b3P2FQ2Cebnj0 DtwkfdC7Gu3K1o4BhbeaKjEtPcqb2BrGZYgDsVQRuHmlT1OoVGMDuvzpcBozG+dR hWBmuBN8Hm5NoEikIy0oAZjQ3xID0Jxh4H59WyO7MbDD2r7BR78Lr1nGFjy/4Hii RRE9X6DK8A5wxXRdt3A5tQQkqQQ1jYKZwXvRvuVHlHfvdtpXVlshARCeb95DlZGq yRA2AVTknigCnDSXYAQUB20rXZwqfS57zSANfE5pM4xqRZpu9ZvJH/Kx9mWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrmn5AmvTeQd7qM8qFkRq/oyWMPwwHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdmMmMxOTAtMzBmNS00ZjE5LWJm Y2EtMGI5ODdhNTJmZDU1LzAvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1 NkZDRURFQzNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnkmMsaDWWLRPiveJD9D2sMMK2WLp/bD0e2 Lu0VkRuyL2qaoIltCB3mXpuaiReh2Uu4RUsj2ffhO2RViQlxIgrpegaHDPSYiU/T rZ4QOpxs+fefQzJQqGqYoWQQ5iM8CMyHObWj1NB2N/98XSvuJERafaIwcd5W+bqp 335P4fgWCYwt2rtm9GwdZvVhvdCY/z4kw63Mxc/pDB6COPEeQTWwU0w3QySYZ15N rhuZC6RmQtciSwrimxUS2DrqQ+6m0G06UJ0WJTgeBRE9e9o3XXFYW3q7ljuGg5aa F+aiUk5uFoMENw70+uO/F9FYzssY3YU0dp3C4Bj4g4luIlmFqqY= -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:30 2025 by rpki-client