$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: L5fzXVG7QAa2+cD7ehlNxHSugem7nyiCg/GWLbahZUo= Subject key identifier: 85:FF:8F:E6:80:CE:4A:D5:0E:1D:6D:AB:AE:75:16:E5:CE:58:A5:35 Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 6DF25ABF7D0891FD73B210EB8215026923D6AD64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 0221 Signing time: Sat 18 Oct 2025 22:41:23 +0000 Manifest this update: Sat 18 Oct 2025 22:36:23 +0000 Manifest next update: Wed 22 Oct 2025 06:25:23 +0000 Files and hashes: 1: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) 2: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: QJ5UJTsG6ql9eSeTNBpEH545WEK5mG/+FbkrLqg6l2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f2:5a:bf:7d:08:91:fd:73:b2:10:eb:82:15:02:69:23:d6:ad:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Oct 18 22:36:23 2025 GMT Not After : Oct 22 06:25:23 2025 GMT Subject: CN=85FF8FE680CE4AD50E1D6DABAE7516E5CE58A535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:38:96:11:53:d4:47:c7:5e:54:99:89:f3:07: 51:d5:0a:66:a2:aa:61:e4:c7:c3:ac:4c:d8:1d:32: c7:5b:c3:30:97:f2:75:55:07:51:13:6d:20:80:1f: 47:8a:75:cd:91:2c:f2:31:12:45:4a:6c:39:75:b9: a7:05:3c:06:cf:8a:63:ee:28:68:d9:75:19:38:1e: d6:81:fe:af:8d:7e:e8:b3:95:4d:00:80:b4:5f:8e: 23:45:47:af:29:fa:0e:9a:f4:48:cd:5e:d4:e9:4a: f6:1f:34:3e:69:0a:d7:33:74:ec:c3:6e:10:84:c7: 30:d1:ff:d6:65:23:6e:5e:74:58:3b:5c:f3:58:b9: a9:f1:fc:3b:54:dd:09:eb:0c:dd:46:ea:bf:88:7b: 09:5a:fa:a2:c9:d6:a3:96:fe:24:55:e6:c1:53:84: 0a:15:13:8d:24:b2:e6:ce:36:ee:2b:f2:1f:2b:c3: 6c:34:3a:9b:4f:53:12:2b:02:79:81:2f:45:e4:0c: 1c:5c:77:c0:69:47:de:1b:b5:27:46:f5:e1:4c:27: 85:e0:fc:37:d7:7e:e4:20:e6:7d:31:45:43:b5:25: a2:a1:63:b6:b1:3b:20:3b:1c:ca:ec:fd:ba:d6:77: 53:44:2c:59:dc:8f:12:48:34:86:78:b3:15:bc:a4: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FF:8F:E6:80:CE:4A:D5:0E:1D:6D:AB:AE:75:16:E5:CE:58:A5:35 X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:14:f0:81:a5:d3:3d:c3:17:3e:c2:be:8a:82:5f:bc:82:98: b5:ae:66:75:10:13:67:6a:80:33:1f:40:78:50:1d:13:98:ee: ec:66:6e:2f:44:9e:41:3e:d2:22:ae:53:a4:36:3b:7f:d8:bd: 64:c1:45:0b:2f:51:6a:b2:52:af:43:62:7a:5b:c2:11:0f:2e: fe:6f:da:c9:09:59:35:4d:3b:0f:c1:ad:dd:8c:cf:fa:6f:3e: b7:d3:95:5e:19:d0:55:b1:70:7b:2f:78:8d:3f:d0:d7:b8:dd: 07:9f:91:56:ce:98:44:e2:0f:3d:e9:15:5b:6b:eb:87:60:c2: db:68:b7:47:4b:a0:eb:61:0d:1f:89:13:36:77:ae:a2:17:78: 54:75:50:93:06:cb:b2:08:26:4e:cd:a9:51:45:60:4c:ae:e6: da:6c:5a:5e:8c:60:80:a7:7c:bd:6e:85:d7:49:6f:6d:c8:85: 89:8a:3d:b7:47:40:0e:db:0d:66:39:b4:cb:9c:16:a5:96:51: 08:20:0a:74:0d:47:1b:6e:7d:1b:75:e3:6d:1f:ee:af:9e:16: 87:55:c4:12:05:73:21:3c:4c:90:9f:74:19:46:ad:b2:2a:13: 3f:59:b9:1d:03:26:c0:77:2f:4d:e9:1d:dc:b4:c5:f8:51:01: 7c:ab:56:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbfJav30Ikf1zshDrghUCaSPWrWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNTEwMTgyMjM2MjNaFw0yNTEwMjIwNjI1MjNaMDMxMTAvBgNV BAMTKDg1RkY4RkU2ODBDRTRBRDUwRTFENkRBQkFFNzUxNkU1Q0U1OEE1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOJYRU9RHx15UmYnzB1HVCmai qmHkx8OsTNgdMsdbwzCX8nVVB1ETbSCAH0eKdc2RLPIxEkVKbDl1uacFPAbPimPu KGjZdRk4HtaB/q+NfuizlU0AgLRfjiNFR68p+g6a9EjNXtTpSvYfND5pCtczdOzD bhCExzDR/9ZlI25edFg7XPNYuanx/DtU3QnrDN1G6r+Iewla+qLJ1qOW/iRV5sFT hAoVE40ksubONu4r8h8rw2w0OptPUxIrAnmBL0XkDBxcd8BpR94btSdG9eFMJ4Xg /DfXfuQg5n0xRUO1JaKhY7axOyA7HMrs/brWd1NELFncjxJINIZ4sxW8pBthAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhf+P5oDOStUOHW2rrnUW5c5YpTUwHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMU8IGl0z3DFz7CvoqCX7yCmLWuZnUQE2dq gDMfQHhQHROY7uxmbi9EnkE+0iKuU6Q2O3/YvWTBRQsvUWqyUq9DYnpbwhEPLv5v 2skJWTVNOw/Brd2Mz/pvPrfTlV4Z0FWxcHsveI0/0Ne43QefkVbOmETiDz3pFVtr 64dgwttot0dLoOthDR+JEzZ3rqIXeFR1UJMGy7IIJk7NqVFFYEyu5tpsWl6MYICn fL1uhddJb23IhYmKPbdHQA7bDWY5tMucFqWWUQggCnQNRxtufRt1420f7q+eFodV xBIFcyE8TJCfdBlGrbIqEz9ZuR0DJsB3L03pHdy0xfhRAXyrVkc= -----END CERTIFICATE-----Generated at Mon Oct 20 21:14:59 2025 by rpki-client