$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: FSadaVBZ54efJlleA2wRlNmbDanED/TevejEf0cwf7c= Subject key identifier: 08:A6:B9:10:3B:0A:6F:28:7B:04:92:1A:D2:D1:7E:95:67:5E:C1:E4 Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 7496794AAF6CB5CF7EB84B55006B3400EABCB2FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 01DC Signing time: Sun 07 Sep 2025 01:40:36 +0000 Manifest this update: Sun 07 Sep 2025 01:35:36 +0000 Manifest next update: Wed 10 Sep 2025 02:44:36 +0000 Files and hashes: 1: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: dpsVZ+drdVlwSb9JlbrILhlRuU2UJ3hxfBIe5rk0gDI=) 2: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: sF8zLAMjgs1FczFI2Z8JpQ/VusAoAJ74LI3j1E4hYto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:96:79:4a:af:6c:b5:cf:7e:b8:4b:55:00:6b:34:00:ea:bc:b2:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Sep 7 01:35:36 2025 GMT Not After : Sep 10 02:44:36 2025 GMT Subject: CN=08A6B9103B0A6F287B04921AD2D17E95675EC1E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:61:c8:aa:ec:66:83:9a:60:ad:ae:ee:6d:75: ed:36:57:ea:38:99:ff:61:ff:be:0d:76:3a:73:28: 6b:78:f0:0c:7a:8c:75:d8:d0:d7:48:32:11:ab:37: 50:b4:67:ea:11:da:91:ab:bb:d2:8d:2b:a8:09:eb: 75:c4:1c:ea:a5:20:82:14:8f:f9:08:94:5d:46:67: a8:91:cd:4c:63:6b:69:a4:31:db:96:0b:6b:8a:30: 45:d6:81:4f:9b:44:91:a3:3e:cd:12:db:6b:62:3c: be:af:f4:b2:67:1e:27:80:f9:0e:d5:0f:35:4b:1a: ae:12:a4:f1:0c:f5:85:29:48:5b:86:43:bc:f2:51: cd:30:17:11:40:de:c7:73:42:9a:90:a0:04:bf:cd: 0f:f2:c8:c5:f5:0b:36:59:66:e5:bd:fe:e3:a4:02: 6e:77:34:b8:1f:90:2b:a2:39:b2:29:d4:87:9a:3b: bf:8b:cf:37:2c:39:b8:34:6f:01:38:39:c4:4d:65: 94:b8:f2:59:c8:b2:de:12:3f:41:c3:9c:47:7e:a0: 16:83:71:2d:67:a1:df:1c:ea:a8:2f:88:64:2a:61: 88:cd:63:d5:ab:ac:3a:3f:46:84:0d:b8:ee:0a:87: f8:c5:e2:a7:93:e9:1b:79:6c:70:72:87:9d:3d:48: 7e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A6:B9:10:3B:0A:6F:28:7B:04:92:1A:D2:D1:7E:95:67:5E:C1:E4 X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:69:d8:e6:9a:70:9b:e1:52:f9:6c:d9:f9:58:fe:46:87:35: cb:ea:35:e8:d8:f4:6c:f0:89:ab:44:c2:46:4c:8a:0d:74:de: ca:f8:1e:05:3c:98:5e:5e:31:18:13:e2:0f:b0:16:ff:f4:37: bc:90:cd:28:e2:29:51:c5:a1:7e:31:7e:c0:fd:21:75:d0:8e: de:b4:e0:de:7e:80:7e:bc:c8:ba:b2:1e:85:f3:a4:02:10:c9: 77:a7:bb:fb:f6:32:29:2e:40:95:09:4c:f2:5a:af:6f:cd:6c: 49:b6:0f:8b:8c:27:c4:d2:0e:8e:b7:7d:d1:77:fa:8f:73:42: 51:2e:58:0c:eb:fb:c9:49:fa:bd:9f:f6:d9:07:e8:3b:64:3a: 7f:5b:64:75:ed:23:35:67:c4:1a:24:2f:6f:3d:ad:3b:f1:f4: 7c:7d:e1:88:10:fd:f7:f4:f1:48:6c:14:a1:5d:2e:ef:e7:0d: 84:d7:85:16:0e:a5:c0:55:c3:ab:c6:ef:47:9a:15:2d:6e:48: 75:64:d0:83:11:be:be:a3:b4:cf:25:81:38:93:f5:27:d5:fd: ae:51:04:d5:2a:c9:05:6b:31:6c:74:fa:da:b7:d8:38:04:b7: 42:24:21:2e:77:13:17:fb:fb:aa:c8:bd:2b:4a:9b:10:53:00: c5:07:d1:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJZ5Sq9stc9+uEtVAGs0AOq8svowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNTA5MDcwMTM1MzZaFw0yNTA5MTAwMjQ0MzZaMDMxMTAvBgNV BAMTKDA4QTZCOTEwM0IwQTZGMjg3QjA0OTIxQUQyRDE3RTk1Njc1RUMxRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYciq7GaDmmCtru5tde02V+o4 mf9h/74NdjpzKGt48Ax6jHXY0NdIMhGrN1C0Z+oR2pGru9KNK6gJ63XEHOqlIIIU j/kIlF1GZ6iRzUxja2mkMduWC2uKMEXWgU+bRJGjPs0S22tiPL6v9LJnHieA+Q7V DzVLGq4SpPEM9YUpSFuGQ7zyUc0wFxFA3sdzQpqQoAS/zQ/yyMX1CzZZZuW9/uOk Am53NLgfkCuiObIp1IeaO7+LzzcsObg0bwE4OcRNZZS48lnIst4SP0HDnEd+oBaD cS1nod8c6qgviGQqYYjNY9WrrDo/RoQNuO4Kh/jF4qeT6Rt5bHByh509SH7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCKa5EDsKbyh7BJIa0tF+lWdeweQwHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFp2OaacJvhUvls2flY/kaHNcvqNejY9Gzw iatEwkZMig103sr4HgU8mF5eMRgT4g+wFv/0N7yQzSjiKVHFoX4xfsD9IXXQjt60 4N5+gH68yLqyHoXzpAIQyXenu/v2MikuQJUJTPJar2/NbEm2D4uMJ8TSDo63fdF3 +o9zQlEuWAzr+8lJ+r2f9tkH6DtkOn9bZHXtIzVnxBokL289rTvx9Hx94YgQ/ff0 8UhsFKFdLu/nDYTXhRYOpcBVw6vG70eaFS1uSHVk0IMRvr6jtM8lgTiT9SfV/a5R BNUqyQVrMWx0+tq32DgEt0IkIS53Exf7+6rIvStKmxBTAMUH0aI= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:20 2025 by rpki-client