$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json) Hash identifier: bw44nuomFg2NqHvYZE9iJ5i+vi9D5ELSO/jEMhnDR1A= Subject key identifier: B6:13:A3:DD:1F:76:CF:3D:F1:A6:C1:83:EB:47:BE:BB:5A:5C:28:DF Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 2191CB15808971FAFAE4AD2D775FF16E789B35B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft Manifest number: 039A Signing time: Sun 02 Nov 2025 21:41:58 +0000 Manifest this update: Sun 02 Nov 2025 21:36:58 +0000 Manifest next update: Thu 06 Nov 2025 05:24:58 +0000 Files and hashes: 1: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: ylXHQm3DiD4h9n4NuN0yUGCouUxigE+BSv0spOzfo/w=) 2: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: ZW4xzyfBcj4Os+UZH1FhtNzQEs/Bh6MZeVvRC1ZpOWc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:91:cb:15:80:89:71:fa:fa:e4:ad:2d:77:5f:f1:6e:78:9b:35:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Nov 2 21:36:58 2025 GMT Not After : Nov 6 05:24:58 2025 GMT Subject: CN=B613A3DD1F76CF3DF1A6C183EB47BEBB5A5C28DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:56:88:38:a4:8f:ae:df:7d:95:75:81:57: 44:e6:f4:bb:0c:fa:28:39:20:e9:28:26:32:41:2f: 28:b9:ae:52:5a:fa:5c:3f:27:f9:f9:91:9f:a7:4c: f1:54:63:fd:34:0b:07:c3:f4:3c:0d:30:c2:93:2a: ff:a4:77:27:fa:4f:0f:76:38:e7:52:a4:c5:16:8a: 0e:87:74:2c:17:0d:13:8b:b1:a1:60:47:23:c2:94: 17:91:bd:64:12:4c:f8:1a:15:de:bd:70:04:f5:8e: 48:77:12:db:00:8e:96:7f:94:ef:f8:04:06:97:0e: 20:2d:72:25:a6:ac:76:cf:9c:ac:85:90:4d:a3:2d: 80:dc:e6:e2:98:ba:06:86:1f:4e:d2:c3:d2:62:be: 07:f2:d3:bd:16:4f:85:41:68:8a:3c:b7:cb:50:96: 0a:c4:7d:73:72:90:65:a5:27:90:98:8b:75:32:c7: 94:95:4a:31:b4:7d:80:88:a0:77:8b:8c:52:01:48: 21:09:aa:b0:1a:f7:87:e2:4c:16:c5:8b:f5:3b:34: 8e:1a:ce:0a:e0:b8:f2:f2:52:d2:2a:5b:74:92:db: 91:9d:58:b9:2a:5a:fb:55:b1:6c:f0:9b:c4:2a:2f: 7a:e5:37:40:b9:4e:8b:9e:61:b0:f9:b2:eb:ca:49: 87:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:13:A3:DD:1F:76:CF:3D:F1:A6:C1:83:EB:47:BE:BB:5A:5C:28:DF X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c5:5a:8c:13:44:38:49:b2:3c:a8:10:2c:f3:bc:26:3b:36: cd:26:10:48:a6:30:ea:e6:1d:da:c4:29:65:31:5d:8f:fe:a0: 1c:d4:a7:03:9f:2a:e2:83:08:ec:5c:da:7c:4e:38:ce:6a:e1: a6:4a:e9:94:e5:93:fb:a9:71:65:d5:64:66:13:22:d7:84:af: b4:7f:c4:86:29:0c:1e:08:4f:fa:e6:39:30:1a:e7:41:23:7d: 7b:62:f5:64:e0:3f:fc:71:8b:8c:36:fe:13:ca:8e:b8:fb:76: 7e:1e:cb:20:7c:6b:96:bf:19:00:30:36:df:87:aa:e8:f0:d4: 57:3e:cc:15:b6:1f:29:4d:49:3f:62:fe:e2:c0:e2:5c:9b:6c: 6f:33:3c:7e:43:ac:f3:f7:e5:98:ca:51:e6:53:de:3d:e7:73: 63:72:d5:cc:09:0f:25:f6:d0:ff:a6:58:ae:f4:44:a7:3b:95: 76:a1:4a:1a:0e:bb:96:98:f3:fc:ca:fb:7f:81:15:f8:db:07: 72:3b:2f:1f:0e:d8:93:e3:14:18:50:5e:11:63:f5:50:eb:cb: c0:2f:99:56:4a:17:83:7c:cc:25:e1:9d:af:7a:2f:88:fd:ee: 6c:8b:b8:f2:55:e3:14:2c:c7:86:ed:4c:53:e9:62:b8:45:a1: 06:b2:4a:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIZHLFYCJcfr65K0td1/xbnibNbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yNTExMDIyMTM2NThaFw0yNTExMDYwNTI0NThaMDMxMTAvBgNV BAMTKEI2MTNBM0REMUY3NkNGM0RGMUE2QzE4M0VCNDdCRUJCNUE1QzI4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDVaIOKSPrt99lXWBV0Tm9LsM +ig5IOkoJjJBLyi5rlJa+lw/J/n5kZ+nTPFUY/00CwfD9DwNMMKTKv+kdyf6Tw92 OOdSpMUWig6HdCwXDROLsaFgRyPClBeRvWQSTPgaFd69cAT1jkh3EtsAjpZ/lO/4 BAaXDiAtciWmrHbPnKyFkE2jLYDc5uKYugaGH07Sw9Jivgfy070WT4VBaIo8t8tQ lgrEfXNykGWlJ5CYi3Uyx5SVSjG0fYCIoHeLjFIBSCEJqrAa94fiTBbFi/U7NI4a zgrguPLyUtIqW3SS25GdWLkqWvtVsWzwm8QqL3rlN0C5ToueYbD5suvKSYfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUthOj3R92zz3xpsGD60e+u1pcKN8wHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAz MTBGMTAwQ0UzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPFWowTRDhJsjyoECzzvCY7Ns0mEEimMOrm HdrEKWUxXY/+oBzUpwOfKuKDCOxc2nxOOM5q4aZK6ZTlk/upcWXVZGYTIteEr7R/ xIYpDB4IT/rmOTAa50EjfXti9WTgP/xxi4w2/hPKjrj7dn4eyyB8a5a/GQAwNt+H qujw1Fc+zBW2HylNST9i/uLA4lybbG8zPH5DrPP35ZjKUeZT3j3nc2Ny1cwJDyX2 0P+mWK70RKc7lXahShoOu5aY8/zK+3+BFfjbB3I7Lx8O2JPjFBhQXhFj9VDry8Av mVZKF4N8zCXhna96L4j97myLuPJV4xQsx4btTFPpYrhFoQaySms= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:29 2025 by rpki-client