$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: 9FlQ9o9YmKiSqY7f1E/yleJP39KqnK5E6eJiGjeQEcU= Subject key identifier: B5:0E:A5:4E:D0:95:15:4F:10:F6:4C:C8:EA:B5:1F:5D:B8:82:1D:F7 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 21BB63B11D87C49E01837F5C9B24A97076A2522A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 0504 Signing time: Sun 07 Sep 2025 06:10:01 +0000 Manifest this update: Sun 07 Sep 2025 06:05:01 +0000 Manifest next update: Wed 10 Sep 2025 14:22:01 +0000 Files and hashes: 1: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) 2: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) 3: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) 4: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: Xv1hBbB4qlIoF/ZVjbo9El0FNXk+ATf4KvPSX2yB5O8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bb:63:b1:1d:87:c4:9e:01:83:7f:5c:9b:24:a9:70:76:a2:52:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Sep 7 06:05:01 2025 GMT Not After : Sep 10 14:22:01 2025 GMT Subject: CN=B50EA54ED095154F10F64CC8EAB51F5DB8821DF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:41:98:58:3d:6a:97:90:b2:c4:b1:7f:f4:cf: 1d:d2:8f:6c:c3:5d:4f:47:35:45:21:bb:fb:64:4f: 02:69:69:93:b0:14:25:47:35:34:e0:ee:b2:72:05: bf:a1:1e:b9:11:6d:05:89:52:a5:d3:d4:1b:71:e1: 0f:76:e4:ba:57:71:8d:06:36:4d:f1:5f:b8:bf:13: 45:09:a8:1a:21:92:e8:58:d1:ef:cb:f5:1e:ae:c6: 75:90:6e:00:92:06:1d:fe:98:41:5e:13:0b:b9:c9: 08:40:9a:80:9b:cc:f1:37:9d:bb:bd:db:4f:fb:0c: 8f:41:10:ba:cd:b8:a2:fc:50:17:77:4a:2d:d0:22: 7c:7c:a5:a5:63:67:f2:92:ed:b9:bf:5d:a0:60:2b: 78:f0:fa:a3:2a:b0:47:c5:a2:2c:78:31:a2:a0:f9: e5:22:3b:6b:dd:fe:62:ec:ab:27:6f:f9:15:c7:6b: 6e:80:9c:f1:62:21:6b:da:0e:1f:51:17:a3:6b:0e: 9f:b0:4c:1e:7c:1c:c4:d9:c3:2c:91:4c:44:bc:0b: 9b:08:89:be:cf:80:cf:3a:a7:e1:84:2a:be:d7:80: e4:50:b6:fa:13:af:c0:43:da:5b:cd:3c:16:f2:f6: bf:5f:23:87:5f:18:10:33:37:5b:22:a4:b2:6c:ac: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0E:A5:4E:D0:95:15:4F:10:F6:4C:C8:EA:B5:1F:5D:B8:82:1D:F7 X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:75:fa:e9:a8:0a:a7:ee:26:6c:f7:dd:47:1f:31:2b:05:1e: 09:76:3d:d2:46:b7:aa:6a:3b:ea:7c:ab:c1:83:2f:9f:79:fb: 42:a8:9d:d4:04:7b:88:78:09:42:2d:4c:1e:ab:0f:6d:15:9d: 1c:05:bf:db:31:f8:05:75:3c:69:aa:ca:3a:ea:a1:f8:59:3f: 9a:be:79:3e:6e:d4:1b:52:aa:e3:02:fe:f1:18:33:16:99:02: dd:27:ef:a8:c9:1e:1e:73:8d:02:26:0b:bc:00:cf:57:2f:e1: f7:a4:4d:f9:2f:e2:b0:1e:b4:26:7b:92:a7:2a:08:83:b5:8e: cc:2b:92:2c:f5:e8:b8:d3:92:f0:22:d0:e3:5b:84:7c:af:ac: 37:6a:28:e7:77:ff:e0:f9:c4:43:1f:36:7b:00:73:2f:55:a3: af:89:91:0b:a1:c1:a7:e1:d5:b4:98:0a:d3:39:6b:ec:55:99: 6c:39:02:54:03:5c:48:dd:28:84:5e:d8:c0:96:31:2c:c4:7c: c1:8a:45:34:bd:c9:72:65:58:10:51:94:81:dd:fe:5e:bb:18: fd:54:26:c6:ef:4a:57:cd:53:8b:d9:09:5f:15:0d:bf:a8:bb: a1:fc:78:9b:c9:b2:b4:df:b3:56:ed:d5:39:a9:55:d6:e9:d6: 94:24:e3:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbtjsR2HxJ4Bg39cmySpcHaiUiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTA5MDcwNjA1MDFaFw0yNTA5MTAxNDIyMDFaMDMxMTAvBgNV BAMTKEI1MEVBNTRFRDA5NTE1NEYxMEY2NENDOEVBQjUxRjVEQjg4MjFERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQZhYPWqXkLLEsX/0zx3Sj2zD XU9HNUUhu/tkTwJpaZOwFCVHNTTg7rJyBb+hHrkRbQWJUqXT1Btx4Q925LpXcY0G Nk3xX7i/E0UJqBohkuhY0e/L9R6uxnWQbgCSBh3+mEFeEwu5yQhAmoCbzPE3nbu9 20/7DI9BELrNuKL8UBd3Si3QInx8paVjZ/KS7bm/XaBgK3jw+qMqsEfFoix4MaKg +eUiO2vd/mLsqydv+RXHa26AnPFiIWvaDh9RF6NrDp+wTB58HMTZwyyRTES8C5sI ib7PgM86p+GEKr7XgORQtvoTr8BD2lvNPBby9r9fI4dfGBAzN1sipLJsrB5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtQ6lTtCVFU8Q9kzI6rUfXbiCHfcwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIp1+umoCqfuJmz33UcfMSsFHgl2PdJGt6pq O+p8q8GDL595+0KondQEe4h4CUItTB6rD20VnRwFv9sx+AV1PGmqyjrqofhZP5q+ eT5u1BtSquMC/vEYMxaZAt0n76jJHh5zjQImC7wAz1cv4fekTfkv4rAetCZ7kqcq CIO1jswrkiz16LjTkvAi0ONbhHyvrDdqKOd3/+D5xEMfNnsAcy9Vo6+JkQuhwafh 1bSYCtM5a+xVmWw5AlQDXEjdKIRe2MCWMSzEfMGKRTS9yXJlWBBRlIHd/l67GP1U JsbvSlfNU4vZCV8VDb+ou6H8eJvJsrTfs1bt1TmpVdbp1pQk4zE= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:50 2025 by rpki-client