$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: 4qLxW5RWazlUw4F85XgNoYZC0fzx/6JIWeBqGqT7tjo= Subject key identifier: 94:CA:A3:FC:3F:C5:DF:C0:16:62:CD:10:72:B2:F7:3C:D7:AD:AE:9B Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 7A702C967A631F230274CC7876822DC1F8B2992D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 020F Signing time: Sat 06 Sep 2025 20:51:21 +0000 Manifest this update: Sat 06 Sep 2025 20:46:21 +0000 Manifest next update: Wed 10 Sep 2025 07:40:21 +0000 Files and hashes: 1: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: 4l2ratOub21XHzbOdjTYDWnPCaEBCYmAt4qSH3OyYjw=) 2: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:70:2c:96:7a:63:1f:23:02:74:cc:78:76:82:2d:c1:f8:b2:99:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Sep 6 20:46:21 2025 GMT Not After : Sep 10 07:40:21 2025 GMT Subject: CN=94CAA3FC3FC5DFC01662CD1072B2F73CD7ADAE9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:ec:68:65:a9:5b:bf:c8:a8:8a:8e:d4:b7: b3:f1:8e:b4:41:24:b8:f3:0c:74:3b:58:f6:ae:a0: 22:36:ca:f6:a1:d4:01:60:9c:9b:03:1d:7c:03:a5: 79:31:1d:9b:aa:4c:55:f0:7b:48:c2:57:78:8b:ec: c1:63:5e:3a:90:27:e7:83:1b:2e:c6:44:a9:7a:54: 38:fe:8c:bc:bd:c9:45:b3:8d:08:bc:98:34:f4:a4: d0:44:33:7a:6a:3f:10:53:05:98:b3:38:2a:5a:c0: 1c:30:39:0b:4c:df:bc:e1:cd:4a:e4:c4:9f:b7:c8: 25:d3:e4:59:14:15:ed:a2:ba:db:87:87:09:94:b8: a6:50:24:5f:a1:4d:f2:fa:5b:67:a8:44:82:28:a2: 1a:91:b0:9f:46:59:b7:11:8b:8b:ed:0d:d7:fd:a2: 0c:86:2c:c6:3e:19:a7:f8:63:cf:94:a5:f6:6d:0f: 8f:75:f8:50:92:63:54:e3:9d:c2:c7:46:27:78:30: 47:62:d0:f5:8d:84:0d:9b:d6:3e:e8:ad:18:6f:b7: 3e:be:08:a4:2c:90:c4:4e:e9:db:39:de:43:3b:5f: f0:a3:cb:7b:34:7f:21:04:28:0c:87:19:5b:3d:88: d7:35:9d:cc:b3:b1:4c:1f:2e:fd:67:94:ef:f5:68: 89:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CA:A3:FC:3F:C5:DF:C0:16:62:CD:10:72:B2:F7:3C:D7:AD:AE:9B X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fa:2b:75:e7:1c:f8:0f:ef:f1:28:36:8d:0c:35:e3:8c:f7: 2e:2f:08:73:a5:f6:97:ae:d8:ea:1f:96:dd:60:46:c6:58:f6: b2:19:b8:4e:00:45:6c:cf:bc:fd:79:aa:ec:1c:47:18:ac:f0: 3d:8e:44:ad:db:fd:47:7f:1c:a2:91:d0:7e:74:e0:eb:62:fb: df:60:0a:fd:5e:54:fc:97:4c:d9:c4:ec:6a:35:85:5d:a6:52: 9d:38:e4:1c:4f:e5:a1:b4:74:49:47:78:ce:3e:fb:60:2f:ea: 4b:84:c5:c2:41:a7:d1:8a:89:a0:42:2e:2a:bf:71:11:87:96: 50:6e:bf:7b:7c:0a:88:2d:b7:a9:b3:ea:1e:46:f0:63:0d:89: dd:fa:12:31:47:04:72:5a:79:bf:b1:e6:29:b2:fe:b1:ac:7e: 78:32:da:a5:b5:9c:54:ce:e7:2b:89:50:e7:85:ef:27:8f:fb: 97:24:4d:1b:fe:7d:57:17:ac:13:b4:da:a5:b6:ae:94:4d:54: a8:42:8e:ca:87:9b:36:ff:27:fc:8c:39:a5:ef:53:a4:a3:e4: fd:32:6c:df:16:4c:9c:8c:68:9c:12:66:51:ad:2c:7e:fc:91: cb:22:6f:29:27:fc:3e:8a:51:fa:7d:53:02:59:7f:ff:fd:80: 7f:a3:0b:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUenAslnpjHyMCdMx4doItwfiymS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNTA5MDYyMDQ2MjFaFw0yNTA5MTAwNzQwMjFaMDMxMTAvBgNV BAMTKDk0Q0FBM0ZDM0ZDNURGQzAxNjYyQ0QxMDcyQjJGNzNDRDdBREFFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nOxoZalbv8ioio7Ut7PxjrRB JLjzDHQ7WPauoCI2yvah1AFgnJsDHXwDpXkxHZuqTFXwe0jCV3iL7MFjXjqQJ+eD Gy7GRKl6VDj+jLy9yUWzjQi8mDT0pNBEM3pqPxBTBZizOCpawBwwOQtM37zhzUrk xJ+3yCXT5FkUFe2iutuHhwmUuKZQJF+hTfL6W2eoRIIoohqRsJ9GWbcRi4vtDdf9 ogyGLMY+Gaf4Y8+UpfZtD491+FCSY1TjncLHRid4MEdi0PWNhA2b1j7orRhvtz6+ CKQskMRO6ds53kM7X/Cjy3s0fyEEKAyHGVs9iNc1ncyzsUwfLv1nlO/1aIl7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlMqj/D/F38AWYs0QcrL3PNetrpswHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ36K3XnHPgP7/EoNo0MNeOM9y4vCHOl9peu 2Ooflt1gRsZY9rIZuE4ARWzPvP15quwcRxis8D2ORK3b/Ud/HKKR0H504Oti+99g Cv1eVPyXTNnE7Go1hV2mUp045BxP5aG0dElHeM4++2Av6kuExcJBp9GKiaBCLiq/ cRGHllBuv3t8Cogtt6mz6h5G8GMNid36EjFHBHJaeb+x5imy/rGsfngy2qW1nFTO 5yuJUOeF7yeP+5ckTRv+fVcXrBO02qW2rpRNVKhCjsqHmzb/J/yMOaXvU6Sj5P0y bN8WTJyMaJwSZlGtLH78kcsibykn/D6KUfp9UwJZf//9gH+jC0Q= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:47 2025 by rpki-client