$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: nEWFXQBstjoh2tffw++7b4GgtXq7tB6h5PTTBkPhQIU= Subject key identifier: 05:56:A9:D9:D0:A4:F3:11:C7:CF:F6:6A:69:E2:5A:12:B9:55:EA:31 Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 1A2BEA57955CE6AB1C76AF99E18BD5247DEDCE90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 0208 Signing time: Fri 22 Aug 2025 03:21:22 +0000 Manifest this update: Fri 22 Aug 2025 03:16:22 +0000 Manifest next update: Mon 25 Aug 2025 08:26:22 +0000 Files and hashes: 1: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: hxYFx99aoxB/ulmJaBrqZRsdVRlSUrO4VV+xJh//RUY=) 2: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2b:ea:57:95:5c:e6:ab:1c:76:af:99:e1:8b:d5:24:7d:ed:ce:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Aug 22 03:16:22 2025 GMT Not After : Aug 25 08:26:22 2025 GMT Subject: CN=0556A9D9D0A4F311C7CFF66A69E25A12B955EA31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1a:6e:77:03:c6:28:49:22:f4:03:98:e6:87: 62:d6:f2:e2:84:1c:fa:de:89:6a:01:0e:0d:4d:e7: 7c:3c:52:26:34:07:c4:49:87:6b:1b:32:0a:d3:e1: fb:11:e5:23:74:29:7b:fb:af:c5:d5:12:6c:f7:9a: 29:76:92:79:db:d2:16:8a:eb:00:0d:7d:5d:be:e1: ec:b5:48:41:cf:36:f7:e8:d8:db:92:3d:d2:b4:6d: 42:01:df:23:de:d9:ec:4b:a7:6d:ea:17:c3:81:97: cf:a7:9a:a5:9e:41:80:53:8f:4e:67:83:6d:dc:f5: 7a:98:51:eb:f4:8c:f5:ee:33:f5:44:be:7c:d7:0f: a2:32:f0:6f:68:9d:e9:ec:79:ac:67:9f:2d:02:75: f8:d5:03:f3:2c:ce:45:2f:b9:4c:b0:7b:b8:50:6f: f5:1f:d8:ec:3e:27:b9:0c:97:8e:fc:b5:29:94:3e: 1d:dc:95:7f:ec:1b:6d:4d:e6:80:1b:88:87:f8:48: 84:4e:8d:ba:92:b7:2e:18:77:35:cb:f6:f9:1a:ef: b9:3c:6d:9d:bf:32:9b:76:ea:07:68:20:f8:ad:23: ee:0f:e3:24:21:6d:c0:3b:9b:17:b9:2d:8d:91:ab: b4:88:4b:e5:75:eb:0b:fc:b4:ab:5b:ab:39:d6:f8: 97:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:56:A9:D9:D0:A4:F3:11:C7:CF:F6:6A:69:E2:5A:12:B9:55:EA:31 X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:84:60:f1:80:4e:14:77:d0:84:b1:c3:e5:1d:08:56:84:16: bd:03:07:77:f5:f2:2f:bc:8a:66:9f:d6:21:4c:95:87:06:93: 7d:5a:b3:90:5e:7a:88:59:ea:2b:36:8d:4a:ae:55:9d:10:3b: ae:15:08:da:19:98:92:77:bf:18:ad:31:bf:13:ce:42:77:ab: e0:14:8c:dd:dd:94:cd:d7:c2:d8:27:f8:de:c7:cc:e0:21:e9: ab:22:49:ea:c7:d7:bd:f9:eb:9c:ea:dd:1a:1d:e8:c3:6f:61: b9:c0:89:9a:a9:26:71:51:89:06:ed:ee:50:f9:c7:aa:26:43: 78:bc:40:dc:45:b6:ee:e3:3e:62:65:a7:bc:36:e6:da:a8:4c: c0:25:89:43:b7:d6:c2:7e:19:d5:09:af:42:64:d2:4a:33:0d: ed:8b:49:1e:28:3b:c7:76:43:62:87:71:48:0a:7f:ad:a4:e9: e2:e4:55:b6:d6:86:e3:06:84:ea:da:df:f2:42:2f:7a:c5:bc: c0:d2:e0:3f:ce:66:0a:64:c6:c9:bd:be:87:80:ef:2c:66:f2: b4:10:0e:a5:86:47:18:45:64:d3:d4:ce:95:e2:a7:32:4d:51: 7c:26:4b:6e:40:0d:37:03:ef:90:54:a6:b0:2f:8f:ae:11:57: 8a:9b:f8:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGivqV5Vc5qscdq+Z4YvVJH3tzpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNTA4MjIwMzE2MjJaFw0yNTA4MjUwODI2MjJaMDMxMTAvBgNV BAMTKDA1NTZBOUQ5RDBBNEYzMTFDN0NGRjY2QTY5RTI1QTEyQjk1NUVBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGm53A8YoSSL0A5jmh2LW8uKE HPreiWoBDg1N53w8UiY0B8RJh2sbMgrT4fsR5SN0KXv7r8XVEmz3mil2knnb0haK 6wANfV2+4ey1SEHPNvfo2NuSPdK0bUIB3yPe2exLp23qF8OBl8+nmqWeQYBTj05n g23c9XqYUev0jPXuM/VEvnzXD6Iy8G9onenseaxnny0CdfjVA/MszkUvuUywe7hQ b/Uf2Ow+J7kMl478tSmUPh3clX/sG21N5oAbiIf4SIROjbqSty4YdzXL9vka77k8 bZ2/Mpt26gdoIPitI+4P4yQhbcA7mxe5LY2Rq7SIS+V16wv8tKtbqznW+JcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBVap2dCk8xHHz/ZqaeJaErlV6jEwHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaEYPGAThR30ISxw+UdCFaEFr0DB3f18i+8 imaf1iFMlYcGk31as5BeeohZ6is2jUquVZ0QO64VCNoZmJJ3vxitMb8TzkJ3q+AU jN3dlM3Xwtgn+N7HzOAh6asiSerH173565zq3Rod6MNvYbnAiZqpJnFRiQbt7lD5 x6omQ3i8QNxFtu7jPmJlp7w25tqoTMAliUO31sJ+GdUJr0Jk0kozDe2LSR4oO8d2 Q2KHcUgKf62k6eLkVbbWhuMGhOra3/JCL3rFvMDS4D/OZgpkxsm9voeA7yxm8rQQ DqWGRxhFZNPUzpXipzJNUXwmS25ADTcD75BUprAvj64RV4qb+L0= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:20 2025 by rpki-client