$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: Es2ovyosnJAWlmiJG7R6WEzUhZMZ0meUE5WOQynxD7Y= Subject key identifier: ED:AD:67:7A:60:D0:BB:EF:67:F5:0D:C9:E9:B5:AC:25:5F:AF:29:1E Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 4CBBCD871050E3A807B4C122C2DD6A8DEA9F5321 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: FD Signing time: Mon 20 Oct 2025 01:31:27 +0000 Manifest this update: Mon 20 Oct 2025 01:26:27 +0000 Manifest next update: Thu 23 Oct 2025 11:45:27 +0000 Files and hashes: 1: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: JcxcaxwKLkaXPPx4myqNJpdCaATZRCOkTz9pp1mz/yI=) 2: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: ke4jEVsl3dIqUMdJ7uRGGYFQxLhOhK0cWP8Obk947zY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bb:cd:87:10:50:e3:a8:07:b4:c1:22:c2:dd:6a:8d:ea:9f:53:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Oct 20 01:26:27 2025 GMT Not After : Oct 23 11:45:27 2025 GMT Subject: CN=EDAD677A60D0BBEF67F50DC9E9B5AC255FAF291E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:e0:43:f6:b4:cf:57:8e:77:13:ca:1c:2b: 52:aa:61:49:a9:c1:b3:a6:ca:cf:bd:44:50:51:11: 78:f0:15:ec:3c:ba:91:af:3e:63:4c:9d:d8:d9:56: 4f:2e:b7:ee:fb:1e:8a:ef:eb:c5:04:2a:42:ce:21: a5:c7:7b:c3:fb:42:36:da:91:cc:14:a9:3e:24:33: d1:a2:30:ca:a5:bc:71:d7:61:26:2e:5a:85:ae:83: ba:52:4c:43:dd:21:99:c7:f7:f5:c1:e0:fd:b6:53: 20:8d:14:98:ae:18:3a:08:2e:2c:4d:e1:cd:8f:c5: a0:8a:08:d3:26:f0:be:c4:f8:11:aa:f5:72:33:fa: 93:48:72:b9:af:92:5e:3f:f8:2f:d6:ec:ff:bb:f4: 4c:67:b8:34:c1:90:82:3f:ca:f9:83:10:07:ec:fa: 1f:94:1e:29:93:1a:ac:da:b4:4a:cb:48:3a:08:7d: b6:19:e4:8a:60:45:98:27:7b:a9:fa:a6:1c:c7:c0: 04:78:cc:99:0d:26:2e:1d:1d:21:9f:ec:d2:db:97: 9c:1c:f2:bf:e6:2d:20:24:51:2a:b1:df:ea:e8:2c: 55:14:db:02:fc:b7:c7:df:8e:c4:a4:dc:73:de:a3: fa:66:8b:77:cd:73:ba:78:81:a1:e6:c5:5e:50:cf: e7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AD:67:7A:60:D0:BB:EF:67:F5:0D:C9:E9:B5:AC:25:5F:AF:29:1E X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e9:1f:a3:3f:59:2f:83:2a:cc:d7:99:97:44:af:69:1a:59: 48:be:88:a2:fe:e0:0e:ee:e5:80:88:6d:b2:9d:58:98:85:da: 5e:83:4c:55:66:06:70:89:a7:3a:ec:d3:14:70:b8:13:a9:1a: 9c:3f:98:5b:f3:31:db:2d:43:4e:dc:5f:1f:1d:30:6d:d5:83: ba:13:3e:b3:12:02:b6:df:05:08:26:0f:5f:ed:10:ac:7d:50: dd:e3:64:a0:20:76:ca:fa:47:f9:ab:02:2a:04:c1:64:d8:6c: a1:04:e7:f4:51:93:be:1b:12:a5:66:9f:7b:14:e1:8a:f3:f1: 19:e8:7d:9e:49:1c:e9:d0:b0:58:d9:57:1c:1a:dd:9e:e6:1b: 39:5c:0d:b9:8b:08:5d:93:c6:be:73:a7:07:60:86:c1:97:84: f9:9d:a8:11:38:7a:a8:7a:b9:9a:dc:a3:7b:f8:15:b9:77:bc: b1:db:6c:5c:9d:db:0d:c9:50:9b:0f:f8:4b:22:b0:c7:57:26: c4:5d:00:38:fb:b2:7f:1a:c7:2f:6d:ba:5c:b7:41:ba:88:33: 00:03:b8:13:38:e2:2a:b9:a9:e2:9b:86:a0:e2:1e:83:e4:e6: 61:14:8f:16:03:28:9b:94:0a:3a:7a:a8:df:11:20:12:00:e6: 23:38:e3:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLvNhxBQ46gHtMEiwt1qjeqfUyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNTEwMjAwMTI2MjdaFw0yNTEwMjMxMTQ1MjdaMDMxMTAvBgNV BAMTKEVEQUQ2NzdBNjBEMEJCRUY2N0Y1MERDOUU5QjVBQzI1NUZBRjI5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxeBD9rTPV453E8ocK1KqYUmp wbOmys+9RFBREXjwFew8upGvPmNMndjZVk8ut+77Horv68UEKkLOIaXHe8P7Qjba kcwUqT4kM9GiMMqlvHHXYSYuWoWug7pSTEPdIZnH9/XB4P22UyCNFJiuGDoILixN 4c2PxaCKCNMm8L7E+BGq9XIz+pNIcrmvkl4/+C/W7P+79ExnuDTBkII/yvmDEAfs +h+UHimTGqzatErLSDoIfbYZ5IpgRZgne6n6phzHwAR4zJkNJi4dHSGf7NLbl5wc 8r/mLSAkUSqx3+roLFUU2wL8t8ffjsSk3HPeo/pmi3fNc7p4gaHmxV5Qz+djAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7a1nemDQu+9n9Q3J6bWsJV+vKR4wHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTpH6M/WS+DKszXmZdEr2kaWUi+iKL+4A7u 5YCIbbKdWJiF2l6DTFVmBnCJpzrs0xRwuBOpGpw/mFvzMdstQ07cXx8dMG3Vg7oT PrMSArbfBQgmD1/tEKx9UN3jZKAgdsr6R/mrAioEwWTYbKEE5/RRk74bEqVmn3sU 4Yrz8RnofZ5JHOnQsFjZVxwa3Z7mGzlcDbmLCF2Txr5zpwdghsGXhPmdqBE4eqh6 uZrco3v4Fbl3vLHbbFyd2w3JUJsP+EsisMdXJsRdADj7sn8axy9tuly3QbqIMwAD uBM44iq5qeKbhqDiHoPk5mEUjxYDKJuUCjp6qN8RIBIA5iM440U= -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:29 2025 by rpki-client