$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: v5MGzb+C/RiWFeXZbdqLdNCDW13MEN2YRMk/7Phsq4g= Subject key identifier: 39:6C:09:56:A6:3D:93:49:B8:76:76:79:67:08:70:AD:E8:D4:9D:F1 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 5C3E2344CE30B22E62FE41E7312383F1138CF04D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 0181 Signing time: Fri 22 Aug 2025 09:03:00 +0000 Manifest this update: Fri 22 Aug 2025 08:58:00 +0000 Manifest next update: Mon 25 Aug 2025 11:43:00 +0000 Files and hashes: 1: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) 2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) 3: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: JYh088N/DmSr4PeZaDgh5P1lgHhc5lUqKeTe1jjN17U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:3e:23:44:ce:30:b2:2e:62:fe:41:e7:31:23:83:f1:13:8c:f0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Aug 22 08:58:00 2025 GMT Not After : Aug 25 11:43:00 2025 GMT Subject: CN=396C0956A63D9349B8767679670870ADE8D49DF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:52:66:17:0c:90:b5:1c:f0:f9:18:ee:07: c4:0c:7a:d5:82:8e:8c:04:ef:a8:70:31:8e:02:97: 46:aa:84:2e:af:fe:da:0c:18:05:e2:85:f8:d8:cc: 18:6b:4c:ae:31:63:f9:7f:2d:29:b0:78:bc:ba:17: 25:02:9c:cf:4f:77:37:40:c0:ff:f3:fa:48:77:1f: dd:cb:f3:31:df:b8:dc:10:e7:17:91:64:76:86:9c: 6d:6c:e3:df:80:b1:cb:ab:4c:a9:74:a5:c2:fc:38: bb:e6:03:66:8e:fd:e1:74:20:b0:79:ee:55:2d:e5: 07:a6:23:b0:86:67:50:a6:60:ce:af:65:ed:d2:66: fb:b5:2f:58:dc:57:d1:82:3f:cb:50:26:9e:1b:b5: b4:6e:58:05:31:05:34:89:a0:ed:9c:3d:f7:07:4f: e3:5e:84:7f:12:cd:f3:af:75:bf:d3:3e:b9:4c:30: ca:6f:70:f8:d3:9d:8c:bc:98:0b:0f:9f:00:1d:9b: 20:f1:af:90:d8:fd:35:8b:90:a5:9c:80:8f:a8:dd: 43:bd:be:8f:47:ce:19:51:af:09:98:75:02:2c:a1: ca:47:d8:b6:10:ce:5b:22:72:77:62:88:cd:97:be: f0:5a:ac:36:dd:88:d8:fa:a1:a4:53:30:11:c2:ba: 56:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6C:09:56:A6:3D:93:49:B8:76:76:79:67:08:70:AD:E8:D4:9D:F1 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:13:7e:f6:f0:3b:6e:7d:92:69:50:ec:fe:47:a3:5e:fb:3f: ed:aa:14:e2:ba:80:85:79:9a:21:20:9e:ed:cb:1a:53:c2:7c: 86:07:bb:4f:cb:9d:77:0f:03:1d:63:10:fa:c9:99:aa:5b:2f: 1c:be:e7:04:c6:a3:27:b3:cf:c1:46:74:44:86:cb:dd:f9:7d: 97:7e:62:4d:46:25:e2:59:6b:15:b9:de:ea:fd:60:79:5d:e6: 78:4c:78:96:78:25:a9:fd:0e:c6:80:80:69:9a:70:42:9f:b9: 8a:93:86:ec:fe:14:8e:bd:77:f8:e1:6f:b1:2a:78:e0:b9:2b: 6b:71:06:2f:85:12:9b:de:74:76:d2:9a:b4:ee:0b:2a:d5:cc: 9a:c7:73:ae:54:5b:b9:70:4d:d6:86:46:ce:72:b6:55:78:71: 62:a6:95:62:94:5b:e9:34:07:86:6a:57:fc:7b:dd:29:ef:53: 95:95:93:08:7b:eb:a9:b3:51:e9:ca:92:e4:13:68:b4:6e:e6: 5c:41:21:10:64:78:95:de:00:2b:16:33:da:07:66:72:73:14: 65:d5:33:85:66:9b:6c:49:8e:40:a7:99:3b:ec:85:66:ae:2d: 0b:47:01:15:4b:58:bc:32:3f:a4:a2:f5:62:25:26:29:73:fa: 9b:0b:e2:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXD4jRM4wsi5i/kHnMSOD8ROM8E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTA4MjIwODU4MDBaFw0yNTA4MjUxMTQzMDBaMDMxMTAvBgNV BAMTKDM5NkMwOTU2QTYzRDkzNDlCODc2NzY3OTY3MDg3MEFERThENDlERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/VJmFwyQtRzw+RjuB8QMetWC jowE76hwMY4Cl0aqhC6v/toMGAXihfjYzBhrTK4xY/l/LSmweLy6FyUCnM9PdzdA wP/z+kh3H93L8zHfuNwQ5xeRZHaGnG1s49+AscurTKl0pcL8OLvmA2aO/eF0ILB5 7lUt5QemI7CGZ1CmYM6vZe3SZvu1L1jcV9GCP8tQJp4btbRuWAUxBTSJoO2cPfcH T+NehH8SzfOvdb/TPrlMMMpvcPjTnYy8mAsPnwAdmyDxr5DY/TWLkKWcgI+o3UO9 vo9HzhlRrwmYdQIsocpH2LYQzlsicndiiM2XvvBarDbdiNj6oaRTMBHCulYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOWwJVqY9k0m4dnZ5ZwhwrejUnfEwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMTfvbwO259kmlQ7P5Ho177P+2qFOK6gIV5 miEgnu3LGlPCfIYHu0/LnXcPAx1jEPrJmapbLxy+5wTGoyezz8FGdESGy935fZd+ Yk1GJeJZaxW53ur9YHld5nhMeJZ4Jan9DsaAgGmacEKfuYqThuz+FI69d/jhb7Eq eOC5K2txBi+FEpvedHbSmrTuCyrVzJrHc65UW7lwTdaGRs5ytlV4cWKmlWKUW+k0 B4ZqV/x73SnvU5WVkwh766mzUenKkuQTaLRu5lxBIRBkeJXeACsWM9oHZnJzFGXV M4Vmm2xJjkCnmTvshWauLQtHARVLWLwyP6Si9WIlJilz+psL4sA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:01:45 2025 by rpki-client