$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: ttdbdcGLX+D392dDWpZ79C+me5Xw8bB9PRDxl52VMSE= Subject key identifier: 98:DF:ED:C1:AF:91:35:E5:96:BB:58:3D:41:C8:9F:87:85:72:93:81 Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 5FA4DD7FC5C18A9164E8951E56D71BA77C0DB5FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 01F9 Signing time: Sun 20 Jul 2025 05:31:21 +0000 Manifest this update: Sun 20 Jul 2025 05:26:21 +0000 Manifest next update: Wed 23 Jul 2025 06:10:21 +0000 Files and hashes: 1: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: M4Hoy0jmT24/N/qL8ZS2vHuVM10CwGG6O4sL9BpL3Kw=) 2: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a4:dd:7f:c5:c1:8a:91:64:e8:95:1e:56:d7:1b:a7:7c:0d:b5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Jul 20 05:26:21 2025 GMT Not After : Jul 23 06:10:21 2025 GMT Subject: CN=98DFEDC1AF9135E596BB583D41C89F8785729381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:de:cf:70:5d:78:87:55:05:3b:c6:fb:07: ac:c8:19:0d:3d:4c:09:65:3e:d6:bd:11:ef:63:67: 3c:b4:c9:dc:28:14:36:1d:53:52:2f:3c:ab:25:e2: 22:40:62:3e:83:aa:54:74:d2:30:a6:65:f7:19:e1: f4:23:ff:52:47:e5:f4:44:57:26:94:bf:e6:2f:55: 5a:27:bf:48:72:01:83:ed:a6:07:5f:44:65:ae:de: da:64:48:2c:ab:45:62:6a:61:91:0a:20:6c:2c:a2: 4e:38:c0:f9:2d:05:29:65:43:96:2d:20:f7:97:e2: 51:b1:0e:60:36:19:3c:10:0a:7c:a4:78:ca:9d:17: e3:e8:67:a5:65:9f:c2:69:0c:af:4f:fa:ea:a5:2c: 23:ad:eb:96:37:1d:b5:e4:cf:bc:41:cf:58:9d:ca: c1:0f:9b:8b:e3:16:fc:1c:71:9e:9c:0d:39:27:0e: c4:a1:2b:62:b6:e7:2f:a2:11:62:03:cc:73:89:8c: c5:73:e0:7c:f8:57:74:a5:45:15:06:3b:ef:73:9e: 19:f3:e7:ce:0f:66:25:27:7a:5a:c1:d1:9f:df:f9: 68:9a:d6:38:06:de:98:b2:c5:7f:9c:0c:a7:cd:bb: 07:a3:3c:9a:cf:e9:5d:34:45:c1:84:c1:80:5d:69: 59:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DF:ED:C1:AF:91:35:E5:96:BB:58:3D:41:C8:9F:87:85:72:93:81 X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:41:97:bc:29:61:6d:82:9b:de:94:a5:9e:9b:30:44:c4:31: 27:b3:9b:db:17:73:f1:7d:29:5a:5e:44:07:75:46:d8:5e:b3: 2a:26:27:3a:6a:ab:f2:d5:33:10:0e:77:f0:28:75:47:fc:72: 72:ef:32:a9:6c:0a:da:61:0d:41:ad:9d:58:8f:3f:3d:f4:a5: 1b:94:f0:3e:56:25:f4:1e:6f:25:12:77:ba:7d:47:fe:cb:1a: 2a:a7:b9:65:c5:83:bd:70:b1:38:dc:69:bf:34:81:c0:c8:a0: f1:4a:e4:cb:5b:93:78:41:85:ed:83:0f:b6:18:2e:75:0a:1f: 89:84:42:e1:04:98:6c:00:4e:73:2a:24:e8:b2:98:ce:68:41: a0:29:09:57:4b:cc:8b:4e:30:84:65:78:15:04:92:e2:1e:8e: 26:2b:ba:58:67:3b:20:17:74:25:ea:66:4c:d1:6d:a5:01:56: cb:18:21:c0:09:17:8c:1b:ad:e4:0a:09:80:72:a7:94:d9:a1: af:84:e2:ae:b9:fb:d7:f5:4c:56:65:79:30:bc:f1:5a:55:ef: 1c:f0:69:76:64:51:8c:fd:91:d0:07:70:90:c2:a8:43:49:3c: a2:a0:3d:ad:cf:76:79:2c:da:60:8b:2c:b5:79:77:0a:db:f8: a5:5b:90:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6Tdf8XBipFk6JUeVtcbp3wNtfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNTA3MjAwNTI2MjFaFw0yNTA3MjMwNjEwMjFaMDMxMTAvBgNV BAMTKDk4REZFREMxQUY5MTM1RTU5NkJCNTgzRDQxQzg5Rjg3ODU3MjkzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFC97PcF14h1UFO8b7B6zIGQ09 TAllPta9Ee9jZzy0ydwoFDYdU1IvPKsl4iJAYj6DqlR00jCmZfcZ4fQj/1JH5fRE VyaUv+YvVVonv0hyAYPtpgdfRGWu3tpkSCyrRWJqYZEKIGwsok44wPktBSllQ5Yt IPeX4lGxDmA2GTwQCnykeMqdF+PoZ6Vln8JpDK9P+uqlLCOt65Y3HbXkz7xBz1id ysEPm4vjFvwccZ6cDTknDsShK2K25y+iEWIDzHOJjMVz4Hz4V3SlRRUGO+9znhnz 584PZiUnelrB0Z/f+Wia1jgG3piyxX+cDKfNuwejPJrP6V00RcGEwYBdaVnlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmN/twa+RNeWWu1g9Qcifh4Vyk4EwHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1Bl7wpYW2Cm96UpZ6bMETEMSezm9sXc/F9 KVpeRAd1RthesyomJzpqq/LVMxAOd/AodUf8cnLvMqlsCtphDUGtnViPPz30pRuU 8D5WJfQebyUSd7p9R/7LGiqnuWXFg71wsTjcab80gcDIoPFK5Mtbk3hBhe2DD7YY LnUKH4mEQuEEmGwATnMqJOiymM5oQaApCVdLzItOMIRleBUEkuIejiYrulhnOyAX dCXqZkzRbaUBVssYIcAJF4wbreQKCYByp5TZoa+E4q65+9f1TFZleTC88VpV7xzw aXZkUYz9kdAHcJDCqENJPKKgPa3Pdnks2mCLLLV5dwrb+KVbkMY= -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:59 2025 by rpki-client