$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json) Hash identifier: AcHrvHbyEN5mfKihpufoyhjgPIwFKRP4ycKrwaIzx8E= Subject key identifier: AB:B9:74:39:FA:80:FE:04:8A:DB:EE:9E:47:76:57:FF:2A:D8:6C:79 Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 28D3A3F2901E4D87D63B07FF86F838CEA71002BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft Manifest number: 02A8 Signing time: Fri 22 Aug 2025 20:02:04 +0000 Manifest this update: Fri 22 Aug 2025 19:57:04 +0000 Manifest next update: Mon 25 Aug 2025 22:23:04 +0000 Files and hashes: 1: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: HEyTYmJJGQnYRUVum2G0vvtpPMK6k/ar1YQeXyIkz34=) 2: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: vFZDJyrW7Nf7Z4DcMgOnKecQwvqUWGovWuuXKrThLwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d3:a3:f2:90:1e:4d:87:d6:3b:07:ff:86:f8:38:ce:a7:10:02:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: Aug 22 19:57:04 2025 GMT Not After : Aug 25 22:23:04 2025 GMT Subject: CN=ABB97439FA80FE048ADBEE9E477657FF2AD86C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:64:70:b4:4e:6b:35:2a:8b:4a:ac:36:2a:ab: ab:f1:ac:8e:1c:d0:9a:15:de:f1:9d:8b:c4:c5:bf: 06:b7:e8:76:09:8d:75:74:51:b2:32:a3:d5:57:b0: d4:d2:e0:fe:5e:7c:d0:e8:cf:96:05:49:37:fc:cb: 29:b7:7d:c1:3a:1e:9a:99:b3:05:44:34:c9:1d:5c: eb:49:e6:2a:70:58:db:a4:23:9d:ad:f8:70:b3:20: 5d:c2:62:66:bf:22:45:0d:8a:2c:6b:f0:af:42:2e: 85:79:24:e5:8a:85:24:78:d4:7c:fa:ce:5b:28:10: 1b:a4:97:f7:90:8b:bc:6f:38:78:a1:dc:f6:83:fc: 20:a6:43:52:fd:b7:ac:78:3b:8e:37:ac:f9:9f:21: df:a0:e8:06:ec:ac:bc:67:3a:17:69:12:ef:e2:3e: 1c:21:3a:42:32:36:51:24:7a:68:61:8a:20:99:f6: de:d0:f2:fd:f9:e5:71:9e:d0:11:39:95:52:11:fe: 0c:d8:32:0a:8d:39:82:10:19:38:30:25:0c:5f:b2: a9:de:8e:e0:e0:de:72:17:8b:1c:eb:bd:17:ad:77: 72:b3:d4:9c:f4:7a:95:70:0c:23:fd:ab:68:f8:57: 91:f4:6a:7e:11:af:cd:4d:71:b6:49:8d:e8:bf:c5: d0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B9:74:39:FA:80:FE:04:8A:DB:EE:9E:47:76:57:FF:2A:D8:6C:79 X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:65:fd:da:19:ac:fc:63:cb:1f:5a:30:1b:8a:0a:20:8b:21: 01:4f:59:aa:cd:4b:d0:cb:a9:86:fa:07:5a:c5:f3:24:ef:4f: c3:11:b3:18:41:ae:ee:10:4a:e3:5e:67:77:67:74:aa:85:71: d2:2d:59:33:26:ef:58:e2:11:26:51:84:38:61:3d:2f:31:ee: 55:ee:64:93:94:0b:36:53:c6:59:40:3f:65:53:c0:7c:f6:3b: 7f:17:c2:88:ea:0a:0c:06:90:39:a2:09:64:42:af:0e:c5:1f: 64:8f:8a:56:6d:94:e4:ca:e5:05:97:67:5c:5f:d6:f8:9f:6a: 63:d9:aa:73:e4:da:e3:f8:2a:6c:32:11:a4:bb:37:7b:59:e3: eb:d4:c3:59:ab:7d:03:77:79:30:ae:39:67:fc:76:c2:75:b6: dc:73:a9:8c:1b:73:f9:97:ac:ee:1e:2e:79:c1:86:7c:42:f2: 44:26:f2:57:0a:16:30:4d:81:03:cb:05:e8:f8:cb:9a:bc:10: 37:25:e0:94:3b:65:94:64:e8:68:94:74:a7:6a:8e:e8:d0:f0: b6:fa:35:fe:01:45:0b:af:9f:4b:11:08:ac:b9:c0:3c:1e:07: f1:cd:f8:da:8d:d3:db:e5:8b:89:eb:aa:4d:ed:c7:e7:c9:98: f6:db:f4:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKNOj8pAeTYfWOwf/hvg4zqcQAr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yNTA4MjIxOTU3MDRaFw0yNTA4MjUyMjIzMDRaMDMxMTAvBgNV BAMTKEFCQjk3NDM5RkE4MEZFMDQ4QURCRUU5RTQ3NzY1N0ZGMkFEODZDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbZHC0Tms1KotKrDYqq6vxrI4c 0JoV3vGdi8TFvwa36HYJjXV0UbIyo9VXsNTS4P5efNDoz5YFSTf8yym3fcE6HpqZ swVENMkdXOtJ5ipwWNukI52t+HCzIF3CYma/IkUNiixr8K9CLoV5JOWKhSR41Hz6 zlsoEBukl/eQi7xvOHih3PaD/CCmQ1L9t6x4O443rPmfId+g6AbsrLxnOhdpEu/i PhwhOkIyNlEkemhhiiCZ9t7Q8v355XGe0BE5lVIR/gzYMgqNOYIQGTgwJQxfsqne juDg3nIXixzrvRetd3Kz1Jz0epVwDCP9q2j4V5H0an4Rr81NcbZJjei/xdAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq7l0OfqA/gSK2+6eR3ZX/yrYbHkwHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdl/doZrPxjyx9aMBuKCiCLIQFPWarNS9DL qYb6B1rF8yTvT8MRsxhBru4QSuNeZ3dndKqFcdItWTMm71jiESZRhDhhPS8x7lXu ZJOUCzZTxllAP2VTwHz2O38XwojqCgwGkDmiCWRCrw7FH2SPilZtlOTK5QWXZ1xf 1vifamPZqnPk2uP4KmwyEaS7N3tZ4+vUw1mrfQN3eTCuOWf8dsJ1ttxzqYwbc/mX rO4eLnnBhnxC8kQm8lcKFjBNgQPLBej4y5q8EDcl4JQ7ZZRk6GiUdKdqjujQ8Lb6 Nf4BRQuvn0sRCKy5wDweB/HN+NqN09vli4nrqk3tx+fJmPbb9Ec= -----END CERTIFICATE-----Generated at Sat Aug 23 22:02:35 2025 by rpki-client