$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: Nmy8eFa/uibNo90me2fZTykOGq1mWvD6bA8o1NB7nzA= Subject key identifier: BA:98:C6:CD:22:CD:5E:18:6C:13:2A:E7:63:BE:37:43:D3:0D:C2:8B Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 325264B606BF2EC7499BD807A39251BA0A1DFE50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 0299 Signing time: Sat 18 Oct 2025 01:02:06 +0000 Manifest this update: Sat 18 Oct 2025 00:57:06 +0000 Manifest next update: Tue 21 Oct 2025 12:28:06 +0000 Files and hashes: 1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: ZUhqRkopz2aAEIpLVfRWO4+f532BAakRUcbL26qkTI0=) 2: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: NPIDx0c8LLClK1cXESD4LRsuGvk7bgufsj8gRedmVbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:52:64:b6:06:bf:2e:c7:49:9b:d8:07:a3:92:51:ba:0a:1d:fe:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Oct 18 00:57:06 2025 GMT Not After : Oct 21 12:28:06 2025 GMT Subject: CN=BA98C6CD22CD5E186C132AE763BE3743D30DC28B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:91:e2:17:f9:d6:c9:a2:8b:cd:12:5e:c2: e3:2b:4a:cb:c8:44:f1:b4:81:37:2b:2e:21:53:02: e4:49:bc:7b:52:3d:fb:eb:7a:db:d5:48:94:30:48: 72:a8:a1:be:e3:a4:c3:c6:cc:c9:7e:23:ac:47:de: 27:f8:ce:d4:d4:d7:31:b3:2f:2d:a8:bf:15:cd:a5: 48:57:f1:d9:5c:a4:06:da:75:1b:06:0e:c9:bf:84: bd:7c:f7:73:47:07:bf:7c:9d:0f:75:1b:11:e6:5c: fe:83:92:d5:8e:1e:f3:a0:4c:c4:4d:31:2e:78:90: 87:90:50:6e:26:78:f4:e8:3c:09:69:b6:16:65:39: f6:63:44:52:1f:a1:72:eb:36:7c:e5:09:c3:f0:d9: 7d:b6:72:ff:30:90:d1:80:9b:6e:84:12:c7:01:59: 6b:bc:28:11:88:8a:24:1f:3a:b9:79:4f:d0:24:24: 17:1c:48:93:30:17:1a:95:53:bf:50:d4:62:a5:eb: bd:25:d1:b1:b3:e8:21:e7:6d:9b:2e:f0:1c:39:b1: 21:24:71:70:23:e2:2f:14:a5:b1:3d:37:6a:91:07: 5d:96:cc:95:4f:9a:bb:b4:85:52:2c:77:39:3a:8a: 12:c4:b5:2a:79:94:69:72:e2:b9:e8:3e:2a:63:5d: c8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:98:C6:CD:22:CD:5E:18:6C:13:2A:E7:63:BE:37:43:D3:0D:C2:8B X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d6:df:8b:a1:03:28:96:6a:3d:14:2f:88:cb:7f:7d:57:81: 6b:56:a6:f5:49:50:12:f8:0a:1a:a2:88:a8:e2:e6:4e:6a:f2: 44:b1:b3:d8:ef:e1:17:e3:14:96:71:b9:c0:aa:e2:20:16:b7: dd:0c:95:0e:97:eb:5b:46:c7:e2:61:bd:03:5e:13:66:93:b8: 26:f9:a1:21:fd:1c:a7:90:a3:1e:15:eb:d0:e9:fb:e0:9f:3f: a1:35:38:ba:83:3a:11:14:c3:e0:c9:01:1b:b8:f8:09:ab:70: a6:33:73:60:e9:e6:09:32:1c:8c:13:15:87:1e:bf:89:2a:c0: 3b:62:2d:88:44:7e:56:98:78:48:58:a6:ff:58:ed:73:1d:fe: 2a:2b:6f:d3:8f:de:39:0d:99:5c:da:4a:7e:4f:d5:0c:7a:d5: a4:68:f9:a1:25:e2:b3:18:2c:ab:1c:e2:2d:36:4d:72:7c:99: bb:2c:a0:52:97:64:0d:22:6a:ae:c4:12:31:90:b5:03:37:cf: c2:eb:bb:63:8a:74:67:28:01:af:3b:7a:0e:63:ae:06:d4:4b: 46:7e:94:03:5f:ff:4e:45:57:0c:29:06:fb:cb:06:da:45:93: db:96:bf:30:1e:c2:05:c6:4c:85:86:d9:82:3d:1b:0b:d7:8c: b8:22:f7:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMlJktga/LsdJm9gHo5JRugod/lAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNTEwMTgwMDU3MDZaFw0yNTEwMjExMjI4MDZaMDMxMTAvBgNV BAMTKEJBOThDNkNEMjJDRDVFMTg2QzEzMkFFNzYzQkUzNzQzRDMwREMyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMJHiF/nWyaKLzRJewuMrSsvI RPG0gTcrLiFTAuRJvHtSPfvretvVSJQwSHKoob7jpMPGzMl+I6xH3if4ztTU1zGz Ly2ovxXNpUhX8dlcpAbadRsGDsm/hL1893NHB798nQ91GxHmXP6DktWOHvOgTMRN MS54kIeQUG4mePToPAlpthZlOfZjRFIfoXLrNnzlCcPw2X22cv8wkNGAm26EEscB WWu8KBGIiiQfOrl5T9AkJBccSJMwFxqVU79Q1GKl670l0bGz6CHnbZsu8Bw5sSEk cXAj4i8UpbE9N2qRB12WzJVPmru0hVIsdzk6ihLEtSp5lGly4rnoPipjXciNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUupjGzSLNXhhsEyrnY743Q9MNwoswHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbW34uhAyiWaj0UL4jLf31XgWtWpvVJUBL4 ChqiiKji5k5q8kSxs9jv4RfjFJZxucCq4iAWt90MlQ6X61tGx+JhvQNeE2aTuCb5 oSH9HKeQox4V69Dp++CfP6E1OLqDOhEUw+DJARu4+AmrcKYzc2Dp5gkyHIwTFYce v4kqwDtiLYhEflaYeEhYpv9Y7XMd/iorb9OP3jkNmVzaSn5P1Qx61aRo+aEl4rMY LKsc4i02TXJ8mbssoFKXZA0iaq7EEjGQtQM3z8Lru2OKdGcoAa87eg5jrgbUS0Z+ lANf/05FVwwpBvvLBtpFk9uWvzAewgXGTIWG2YI9GwvXjLgi94Q= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:23 2025 by rpki-client