$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft (raw, json) Hash identifier: DtcHfTJuKj/mWMjUrECrl21M4eGcJSVZRNxnJIMFFGA= Subject key identifier: A7:14:17:C9:B0:92:68:55:8C:5D:1F:DE:70:FC:E4:F0:87:6B:FE:A7 Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 33AD7AEDCC8CDE8D8A3ACA635F7F5EB45279C853 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft Manifest number: 8B Signing time: Fri 05 Sep 2025 23:30:01 +0000 Manifest this update: Fri 05 Sep 2025 23:25:01 +0000 Manifest next update: Tue 09 Sep 2025 05:41:01 +0000 Files and hashes: 1: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: XF0z782r3sHF+OrwCSt8ZCAVQ0WZ8tu8nYx4HOA7soI=) 2: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: /DFyNaEsyO2usBnFzIOmfhaGZCRB0eHYovN+KsopEbs=) 3: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: AjW16B5R157K3hvjOmHF0WbVknW4Cg9BK3NqgeP7LAQ=) 4: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl (hash: Cdcvcla7MmK+835465z6IVgTwD4TyCbfOjZxTqU6dtM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ad:7a:ed:cc:8c:de:8d:8a:3a:ca:63:5f:7f:5e:b4:52:79:c8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Sep 5 23:25:01 2025 GMT Not After : Sep 9 05:41:01 2025 GMT Subject: CN=A71417C9B09268558C5D1FDE70FCE4F0876BFEA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:0b:bd:c9:4f:c3:6d:b4:f3:a6:9e:1b:59: 31:30:92:da:75:a1:e4:1f:88:80:9f:18:6a:76:ff: 1c:32:18:ed:48:1a:cd:f3:e9:1e:c4:1a:71:17:04: 5a:4d:e2:0b:77:aa:be:a4:c3:70:a6:fa:29:83:88: bf:e6:94:e7:59:2f:d4:cc:e3:89:93:7f:4c:ba:b6: dd:7d:95:82:a3:cb:ff:07:21:d0:df:ca:08:1f:95: 65:fa:e6:9c:45:30:43:9e:92:87:b9:9a:6f:96:d8: c0:43:61:e0:3b:d5:1c:84:f6:00:59:b0:29:4e:03: a5:aa:99:bf:fd:8f:2c:05:64:80:5b:5d:d8:0e:f4: 2a:21:42:20:89:3f:84:49:c2:7d:a4:09:8f:54:55: 05:5e:a7:23:62:e1:80:0b:ab:6a:cc:58:f0:ab:a6: aa:fd:e6:3f:98:d9:2f:33:3d:24:21:b7:46:e7:1e: 29:0c:9b:48:67:67:3d:a7:23:39:a9:c2:5c:e1:72: 57:5d:10:16:bf:db:e1:91:3e:a7:6f:13:94:e7:d4: b6:4e:40:a2:5d:0a:6a:80:25:73:08:b8:fe:e0:7b: 03:35:ad:88:c1:18:39:55:7a:6a:bd:cc:33:2a:cb: f0:c6:d3:19:f9:ed:a8:f3:31:a7:1d:55:11:c2:0e: 0f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:14:17:C9:B0:92:68:55:8C:5D:1F:DE:70:FC:E4:F0:87:6B:FE:A7 X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d9:ef:74:4d:ee:78:6f:44:02:02:e2:c5:13:e7:b3:a3:b0: 3c:93:76:49:db:de:0b:6e:40:9e:39:d1:e4:f2:a1:14:48:b9: 3f:4c:c9:c9:e9:0a:1e:cd:11:9c:bc:3a:bd:39:0c:90:88:be: 5d:29:0f:b1:01:b2:4f:4f:e6:f1:eb:fb:4c:64:f6:54:b1:1e: 3f:0d:25:6b:6a:9c:7d:53:b5:9a:13:67:4b:90:62:cc:f1:15: 0f:76:1d:be:dc:c0:8a:5b:17:e6:9d:f6:af:b5:ed:ec:c3:9c: f3:e6:0e:cb:39:a8:94:3e:41:69:48:30:22:d1:1b:40:75:5c: 7e:76:8d:11:f1:9e:f9:32:c7:1f:3f:c5:2f:4f:17:a6:0c:9f: a1:48:ec:13:62:0a:82:3f:0a:a0:8a:f7:a8:d4:7b:50:75:c9: 56:14:5b:89:3f:e3:13:2c:bd:34:60:03:8d:e5:5f:e7:5e:ac: 0c:50:a0:dd:35:bf:81:92:74:da:83:62:a5:0b:74:51:1b:f7: 05:81:7a:d8:0f:ce:26:11:51:ef:1e:2b:62:4d:2d:06:59:99: 78:dd:28:17:9f:22:d2:82:15:65:de:b5:8a:e7:e1:07:6c:7a: 4d:ce:b0:53:b8:96:5c:a6:6b:eb:b5:c7:0c:64:3e:ff:2c:b5: 01:bc:a5:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6167cyM3o2KOspjX39etFJ5yFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNTA5MDUyMzI1MDFaFw0yNTA5MDkwNTQxMDFaMDMxMTAvBgNV BAMTKEE3MTQxN0M5QjA5MjY4NTU4QzVEMUZERTcwRkNFNEYwODc2QkZFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywAu9yU/DbbTzpp4bWTEwktp1 oeQfiICfGGp2/xwyGO1IGs3z6R7EGnEXBFpN4gt3qr6kw3Cm+imDiL/mlOdZL9TM 44mTf0y6tt19lYKjy/8HIdDfyggflWX65pxFMEOekoe5mm+W2MBDYeA71RyE9gBZ sClOA6Wqmb/9jywFZIBbXdgO9CohQiCJP4RJwn2kCY9UVQVepyNi4YALq2rMWPCr pqr95j+Y2S8zPSQht0bnHikMm0hnZz2nIzmpwlzhclddEBa/2+GRPqdvE5Tn1LZO QKJdCmqAJXMIuP7gewM1rYjBGDlVemq9zDMqy/DG0xn57ajzMacdVRHCDg+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpxQXybCSaFWMXR/ecPzk8Idr/qcwHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdmMmMxOTAtMzBmNS00ZjE5LWJm Y2EtMGI5ODdhNTJmZDU1LzAvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1 NkZDRURFQzNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7Z73RN7nhvRAIC4sUT57OjsDyTdknb3gtu QJ450eTyoRRIuT9MycnpCh7NEZy8Or05DJCIvl0pD7EBsk9P5vHr+0xk9lSxHj8N JWtqnH1TtZoTZ0uQYszxFQ92Hb7cwIpbF+ad9q+17ezDnPPmDss5qJQ+QWlIMCLR G0B1XH52jRHxnvkyxx8/xS9PF6YMn6FI7BNiCoI/CqCK96jUe1B1yVYUW4k/4xMs vTRgA43lX+derAxQoN01v4GSdNqDYqULdFEb9wWBetgPziYRUe8eK2JNLQZZmXjd KBefItKCFWXetYrn4Qdsek3OsFO4llyma+u1xwxkPv8stQG8pbY= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:03 2025 by rpki-client