$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: +XYErkXNEMD8ElGpPIoCTPMVWz9ydbdWnHqgniYqQFI= Subject key identifier: B3:9C:81:BA:34:82:7F:DA:27:FA:73:9C:66:4A:E3:81:03:0F:1B:56 Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 6F3A903ADD53DA4176B63A39DBF838CBDD8C4195 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: EA Signing time: Sun 07 Sep 2025 09:41:25 +0000 Manifest this update: Sun 07 Sep 2025 09:36:25 +0000 Manifest next update: Wed 10 Sep 2025 18:32:25 +0000 Files and hashes: 1: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: JcxcaxwKLkaXPPx4myqNJpdCaATZRCOkTz9pp1mz/yI=) 2: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: Nwy/ZUN0ggUHKqZ8ObeuZK51MKvP48zhMEX8lxXud6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 18:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:3a:90:3a:dd:53:da:41:76:b6:3a:39:db:f8:38:cb:dd:8c:41:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Sep 7 09:36:25 2025 GMT Not After : Sep 10 18:32:25 2025 GMT Subject: CN=B39C81BA34827FDA27FA739C664AE381030F1B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:c2:f9:8b:dc:45:bc:47:6f:f0:1d:23:9d: 92:f1:c9:a5:80:10:7d:a6:e9:db:a8:a9:4e:eb:c4: 34:4a:36:57:ba:f2:0e:de:60:c6:5f:4d:39:20:aa: 49:61:ca:58:03:52:fb:fe:1c:1a:08:12:16:8b:ff: 76:6b:a3:41:1a:3d:72:54:ba:c3:16:86:54:fb:2c: 03:5e:14:1d:9d:24:40:5d:6b:be:7f:3d:70:37:5f: da:f0:a0:01:f6:62:4e:2e:c4:f2:7f:11:b8:20:5f: 1e:d4:a2:b6:db:bd:ba:5f:64:44:79:b4:62:db:8c: 0a:3f:f7:97:3e:af:f9:e2:7f:ce:c4:b4:70:58:69: 03:94:95:20:8a:bd:5b:dd:0d:85:10:83:e8:a6:a0: 5e:c8:0a:f0:f3:26:b0:51:5b:0a:9e:62:12:c2:63: cc:b5:f6:6d:c1:fe:d4:93:d6:99:02:06:dd:91:35: 14:36:21:1a:c7:e0:d1:66:da:14:68:ff:30:97:b7: cd:1d:e1:7c:69:39:96:5c:2d:80:7a:2a:8b:a4:db: 34:9c:c0:c8:9e:99:39:98:17:c1:61:fa:f7:1d:c0: 87:26:fa:54:d6:4c:15:d1:31:08:63:fa:61:1e:6e: 30:de:1e:50:44:9c:f3:a3:1e:8d:d2:5e:ae:44:ab: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9C:81:BA:34:82:7F:DA:27:FA:73:9C:66:4A:E3:81:03:0F:1B:56 X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:43:5d:81:be:39:23:d2:34:8a:bd:13:f3:d5:d6:20:74:9f: c0:19:cc:74:30:65:07:9b:43:10:2a:c0:83:89:22:d5:b6:56: 0e:b7:8c:3b:44:7b:c3:95:77:c6:ce:78:9c:24:f6:13:4b:3c: 94:a4:40:9a:30:fb:ce:62:d8:f4:98:f7:95:2d:e6:77:b8:06: 5f:9e:16:7f:f3:38:d4:ec:f6:f5:f0:05:58:10:82:d3:c8:43: c3:73:70:e1:96:4e:42:ae:63:6d:92:c1:d8:1d:ca:ee:ed:3f: 2e:9f:07:16:06:71:97:bb:1c:9e:d3:3d:38:9c:5c:07:b4:84: 15:3a:ad:11:b7:58:0f:31:b0:d7:54:5f:4b:e0:09:48:3d:fe: 5f:4b:3e:52:17:7c:21:ed:99:38:03:9e:c0:6b:b1:74:f2:28: 8c:4b:8b:ea:74:ea:0f:81:59:66:55:7d:05:f6:71:c0:20:c7: 45:61:bb:aa:33:d6:b1:5f:d3:4f:3e:a4:ba:9f:13:3f:81:3c: 65:13:86:e9:6e:8b:55:a4:d1:3c:ef:cd:f4:69:68:ff:56:34: b6:78:8e:a3:83:a3:cb:1d:9c:e5:04:33:3e:ea:00:83:ba:e1: ae:fe:57:b7:4b:6e:14:29:b9:23:46:54:81:ba:2e:77:1a:01: b2:32:7b:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzqQOt1T2kF2tjo52/g4y92MQZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNTA5MDcwOTM2MjVaFw0yNTA5MTAxODMyMjVaMDMxMTAvBgNV BAMTKEIzOUM4MUJBMzQ4MjdGREEyN0ZBNzM5QzY2NEFFMzgxMDMwRjFCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuAsL5i9xFvEdv8B0jnZLxyaWA EH2m6duoqU7rxDRKNle68g7eYMZfTTkgqklhylgDUvv+HBoIEhaL/3Zro0EaPXJU usMWhlT7LANeFB2dJEBda75/PXA3X9rwoAH2Yk4uxPJ/EbggXx7UorbbvbpfZER5 tGLbjAo/95c+r/nif87EtHBYaQOUlSCKvVvdDYUQg+imoF7ICvDzJrBRWwqeYhLC Y8y19m3B/tST1pkCBt2RNRQ2IRrH4NFm2hRo/zCXt80d4XxpOZZcLYB6Kouk2zSc wMiemTmYF8Fh+vcdwIcm+lTWTBXRMQhj+mEebjDeHlBEnPOjHo3SXq5Eq+tBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs5yBujSCf9on+nOcZkrjgQMPG1YwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFDXYG+OSPSNIq9E/PV1iB0n8AZzHQwZQeb QxAqwIOJItW2Vg63jDtEe8OVd8bOeJwk9hNLPJSkQJow+85i2PSY95Ut5ne4Bl+e Fn/zONTs9vXwBVgQgtPIQ8NzcOGWTkKuY22Swdgdyu7tPy6fBxYGcZe7HJ7TPTic XAe0hBU6rRG3WA8xsNdUX0vgCUg9/l9LPlIXfCHtmTgDnsBrsXTyKIxLi+p06g+B WWZVfQX2ccAgx0Vhu6oz1rFf008+pLqfEz+BPGUThului1Wk0TzvzfRpaP9WNLZ4 jqODo8sdnOUEMz7qAIO64a7+V7dLbhQpuSNGVIG6LncaAbIye8s= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:54 2025 by rpki-client