$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: rRasJuKjDp1s3ci0DI+05p+1MtwiUwm8km2Wsl/2IFs= Subject key identifier: 3A:EB:3A:7A:52:4D:ED:8A:8A:0D:17:D5:5B:33:3F:B5:D2:C0:79:FA Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 040B198EC16178AE09BAC62ECAEAD8E94314C062 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 019B Signing time: Sat 18 Oct 2025 16:51:58 +0000 Manifest this update: Sat 18 Oct 2025 16:46:58 +0000 Manifest next update: Tue 21 Oct 2025 17:32:58 +0000 Files and hashes: 1: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: W/L8BbVhzSeiNgvbbnjqqsb3h2BErwjCjdbaOSqfEcQ=) 2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) 3: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0b:19:8e:c1:61:78:ae:09:ba:c6:2e:ca:ea:d8:e9:43:14:c0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Oct 18 16:46:58 2025 GMT Not After : Oct 21 17:32:58 2025 GMT Subject: CN=3AEB3A7A524DED8A8A0D17D55B333FB5D2C079FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:aa:e8:3c:2f:76:2d:56:f5:90:5e:d6:82: d8:a7:94:52:cd:ef:1c:b5:33:77:5f:af:ed:52:77: 36:ca:5b:57:63:c9:32:96:6e:21:df:64:0d:ad:09: dc:75:52:0e:51:a0:31:79:cb:74:28:b5:4d:0c:de: bd:23:f5:c4:c9:96:d0:6b:88:3f:13:f1:df:f9:c8: 08:dd:af:ec:a8:dd:41:8f:96:e5:78:80:0c:3c:42: 74:d6:a1:fe:61:0b:e3:7d:dc:34:52:a3:df:db:82: 2e:44:4b:8e:99:df:d0:ac:4a:72:f1:2e:3e:c6:ca: fd:c8:da:67:de:ae:7b:ab:93:0a:97:4c:67:c6:07: be:37:b5:a3:6c:54:3f:53:21:c7:05:90:e5:57:f7: 9b:02:53:b8:80:89:f8:3f:38:79:35:a2:46:63:ee: f1:95:01:eb:8f:85:c4:ee:f8:1f:32:85:f4:24:66: ef:b0:25:ab:1b:a9:97:99:9b:94:69:af:d6:da:b3: f7:de:82:f7:b9:ca:46:6d:7f:f7:7a:16:b0:2d:e1: 4a:38:b4:11:79:5e:44:8f:8d:72:98:3f:c1:0d:39: e0:d6:f3:62:5a:08:87:bb:8c:18:0d:6a:2c:4b:e5: 35:2b:67:f7:98:33:2b:0f:18:0a:0c:99:70:d3:df: 3b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EB:3A:7A:52:4D:ED:8A:8A:0D:17:D5:5B:33:3F:B5:D2:C0:79:FA X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c4:fa:da:45:c9:a3:7c:d9:02:65:0c:50:14:07:cd:53:43: e9:81:e0:d9:96:14:37:0e:4f:d4:1a:79:5a:ee:a0:a3:82:16: 5a:82:84:9d:f8:68:6c:d7:c2:e4:5b:91:06:c4:60:ae:e9:c6: 92:b5:b4:52:17:5a:d2:55:7b:d6:86:7a:7c:f3:0a:31:ad:d0: 58:6f:8a:b3:c0:ce:2f:58:1c:06:74:98:fd:5e:bc:c9:f5:67: 5c:55:44:65:3b:14:13:17:1b:da:b0:59:81:f1:4d:2b:4e:31: 01:e4:8e:da:03:bb:bb:09:e0:8b:96:bf:a9:c0:34:78:29:92: 49:30:d9:3e:be:49:95:c4:db:95:b4:ef:f0:1f:5a:7e:44:5b: 12:b5:16:80:e3:1f:92:d0:31:87:eb:da:cc:3a:f8:f7:51:9b: 29:9d:c6:67:d8:36:c1:44:96:50:9d:f3:2c:43:83:a0:52:f7: 6a:31:a5:17:95:71:72:2d:f1:50:d3:02:11:88:8f:a8:5f:04: be:a0:20:56:3d:ad:53:cf:2d:1c:d3:1f:01:f8:17:cf:a2:05: 00:81:0d:e3:e4:8d:fd:35:d9:ed:cc:f6:2a:08:6b:aa:4c:c9: 62:3c:58:cd:43:8a:a7:95:87:8b:89:92:b0:b3:00:ee:85:09: d3:88:f7:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBAsZjsFheK4JusYuyurY6UMUwGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTEwMTgxNjQ2NThaFw0yNTEwMjExNzMyNThaMDMxMTAvBgNV BAMTKDNBRUIzQTdBNTI0REVEOEE4QTBEMTdENTVCMzMzRkI1RDJDMDc5RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTaroPC92LVb1kF7WgtinlFLN 7xy1M3dfr+1SdzbKW1djyTKWbiHfZA2tCdx1Ug5RoDF5y3QotU0M3r0j9cTJltBr iD8T8d/5yAjdr+yo3UGPluV4gAw8QnTWof5hC+N93DRSo9/bgi5ES46Z39CsSnLx Lj7Gyv3I2mfernurkwqXTGfGB743taNsVD9TIccFkOVX95sCU7iAifg/OHk1okZj 7vGVAeuPhcTu+B8yhfQkZu+wJasbqZeZm5Rpr9bas/fegve5ykZtf/d6FrAt4Uo4 tBF5XkSPjXKYP8ENOeDW82JaCIe7jBgNaixL5TUrZ/eYMysPGAoMmXDT3zthAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOus6elJN7YqKDRfVWzM/tdLAefowHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDE+tpFyaN82QJlDFAUB81TQ+mB4NmWFDcO T9QaeVruoKOCFlqChJ34aGzXwuRbkQbEYK7pxpK1tFIXWtJVe9aGenzzCjGt0Fhv irPAzi9YHAZ0mP1evMn1Z1xVRGU7FBMXG9qwWYHxTStOMQHkjtoDu7sJ4IuWv6nA NHgpkkkw2T6+SZXE25W07/AfWn5EWxK1FoDjH5LQMYfr2sw6+PdRmymdxmfYNsFE llCd8yxDg6BS92oxpReVcXIt8VDTAhGIj6hfBL6gIFY9rVPPLRzTHwH4F8+iBQCB DePkjf012e3M9ioIa6pMyWI8WM1DiqeVh4uJkrCzAO6FCdOI9w8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:27 2025 by rpki-client