$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: RGfZob64vnr7mC2qh50ECdGiSyvuvJS0B4z9M1aG6Mk= Subject key identifier: 0D:37:A8:91:7A:91:93:56:6A:60:C3:98:6E:4E:EB:E5:43:C0:BB:53 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 4E5ABB58F49A37854F81C85F8FF9FC6CE5672506 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 0187 Signing time: Thu 04 Sep 2025 03:41:58 +0000 Manifest this update: Thu 04 Sep 2025 03:36:58 +0000 Manifest next update: Sun 07 Sep 2025 13:32:58 +0000 Files and hashes: 1: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: MC979majGe3jxFd7wkEda/ARTPK6SlZjdshYXBCvItI=) 2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) 3: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 13:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5a:bb:58:f4:9a:37:85:4f:81:c8:5f:8f:f9:fc:6c:e5:67:25:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Sep 4 03:36:58 2025 GMT Not After : Sep 7 13:32:58 2025 GMT Subject: CN=0D37A8917A9193566A60C3986E4EEBE543C0BB53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:21:20:9b:a2:d1:ba:09:d9:3b:1d:28:63:a0: 29:8e:9a:2e:04:b0:2a:ae:9e:4a:02:43:b7:e8:42: 87:f5:ca:3b:f8:14:e1:c5:41:bf:c1:ed:e1:ed:75: 68:ce:9b:31:c6:98:fb:26:a7:7e:ac:61:ac:a5:c1: 88:9b:8b:b4:2e:f4:52:c2:8e:2e:11:8a:1c:9f:7f: 52:44:ae:f2:6c:f8:12:ec:45:ce:2d:11:88:a1:a6: 39:0c:55:6f:a3:92:6f:ec:96:d6:e7:4d:32:ad:0d: 91:fa:8d:d5:f9:9d:5b:ab:ca:a5:33:14:8f:60:86: 5e:33:65:51:d4:05:2f:07:8f:64:44:1d:c4:b3:da: 9d:eb:d8:b0:0e:89:63:27:3f:2a:8c:4c:34:86:fc: 15:a2:ec:bd:6f:2c:8f:d0:50:34:cd:16:fc:d2:84: a2:7b:27:d4:a1:d0:2c:c7:49:53:fe:c8:ce:20:65: f1:f4:59:3b:49:f1:8e:45:79:2e:f7:5f:7e:a5:3e: 8e:20:e9:07:fe:b3:34:37:05:72:4f:ef:ef:90:09: f1:63:e6:9d:28:a6:4c:3b:be:42:20:e8:10:00:e7: 9e:13:e0:2b:6f:eb:a0:5f:43:e5:3f:e3:96:31:32: 13:f5:24:5f:b1:06:66:4d:1b:80:21:ac:1e:bd:0b: 42:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:37:A8:91:7A:91:93:56:6A:60:C3:98:6E:4E:EB:E5:43:C0:BB:53 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5e:62:cb:9d:b9:64:0b:46:20:8f:16:67:8d:5e:f0:17:c1: c8:5e:a7:b7:04:0c:15:91:5e:4a:3f:97:dd:31:d7:ea:04:5f: b0:85:1f:01:d4:c4:ba:9c:89:34:c3:11:23:9a:10:55:4e:be: ba:2e:48:58:9d:04:a2:3b:38:da:b0:10:81:9c:e6:64:41:9e: 51:78:b1:cd:b6:9b:1e:c1:ce:85:fe:23:d2:2e:00:e5:28:6e: e0:c8:50:0d:b2:dc:18:26:57:da:d9:13:ac:c0:ea:d8:67:a7: 81:24:92:1b:a6:a5:2a:4b:52:74:e5:e7:00:25:d2:94:23:2c: 34:d0:4e:41:36:c2:26:b0:fd:2b:a0:9c:67:7d:63:49:e6:71: 94:78:0f:62:39:03:86:c7:75:7a:08:af:a6:72:fc:b6:77:43: 45:52:d1:e6:f2:7c:b1:27:e5:10:ee:f9:bb:55:b7:0e:78:de: 8a:32:1b:80:20:75:1a:4c:70:51:63:73:56:25:f6:12:f7:c4: 3a:ed:87:49:99:b0:be:d6:91:52:a7:f7:b1:62:3e:63:df:96: bb:de:9f:03:84:30:50:4a:53:6e:90:c3:94:ea:f5:55:a0:9f: 1a:f9:1c:e7:e6:c0:7d:44:f8:60:da:cb:7e:77:42:64:c9:d5: 50:6d:39:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlq7WPSaN4VPgchfj/n8bOVnJQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTA5MDQwMzM2NThaFw0yNTA5MDcxMzMyNThaMDMxMTAvBgNV BAMTKDBEMzdBODkxN0E5MTkzNTY2QTYwQzM5ODZFNEVFQkU1NDNDMEJCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuISCbotG6Cdk7HShjoCmOmi4E sCqunkoCQ7foQof1yjv4FOHFQb/B7eHtdWjOmzHGmPsmp36sYaylwYibi7Qu9FLC ji4Rihyff1JErvJs+BLsRc4tEYihpjkMVW+jkm/sltbnTTKtDZH6jdX5nVuryqUz FI9ghl4zZVHUBS8Hj2REHcSz2p3r2LAOiWMnPyqMTDSG/BWi7L1vLI/QUDTNFvzS hKJ7J9Sh0CzHSVP+yM4gZfH0WTtJ8Y5FeS73X36lPo4g6Qf+szQ3BXJP7++QCfFj 5p0opkw7vkIg6BAA554T4Ctv66BfQ+U/45YxMhP1JF+xBmZNG4AhrB69C0LVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDTeokXqRk1ZqYMOYbk7r5UPAu1MwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9eYsuduWQLRiCPFmeNXvAXwchep7cEDBWR Xko/l90x1+oEX7CFHwHUxLqciTTDESOaEFVOvrouSFidBKI7ONqwEIGc5mRBnlF4 sc22mx7BzoX+I9IuAOUobuDIUA2y3BgmV9rZE6zA6thnp4EkkhumpSpLUnTl5wAl 0pQjLDTQTkE2wiaw/SugnGd9Y0nmcZR4D2I5A4bHdXoIr6Zy/LZ3Q0VS0ebyfLEn 5RDu+btVtw543ooyG4AgdRpMcFFjc1Yl9hL3xDrth0mZsL7WkVKn97FiPmPflrve nwOEMFBKU26Qw5Tq9VWgnxr5HOfmwH1E+GDay353QmTJ1VBtOWU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:44 2025 by rpki-client