$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: XwAFLNI0C7pjRvMcKK8vubR0/+1uRbiQxQXIXzd8sTQ= Subject key identifier: 3B:6B:91:AB:EF:0C:A4:96:6E:44:E1:94:4F:C8:1A:EC:D4:7D:1F:F2 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 56E325848171EA3818D9E0C410EE85C2D97FAC87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 051D Signing time: Mon 03 Nov 2025 07:20:01 +0000 Manifest this update: Mon 03 Nov 2025 07:15:01 +0000 Manifest next update: Thu 06 Nov 2025 10:34:01 +0000 Files and hashes: 1: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: K5dIRtaAzvPQdQX0jG4NV8ORL04+LhvY2zk/4+1nHT8=) 2: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) 3: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) 4: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e3:25:84:81:71:ea:38:18:d9:e0:c4:10:ee:85:c2:d9:7f:ac:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Nov 3 07:15:01 2025 GMT Not After : Nov 6 10:34:01 2025 GMT Subject: CN=3B6B91ABEF0CA4966E44E1944FC81AECD47D1FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1a:5f:7a:76:a4:b8:ca:a9:b8:9b:6c:70:47: 73:59:79:da:05:d9:3a:59:c2:29:3b:61:d0:8a:68: 74:d5:1d:4b:3f:9c:e1:2d:58:23:e9:b7:cf:c8:bc: b3:9e:21:6c:ec:b1:70:21:b5:c4:4e:a3:6e:b0:4d: e0:88:13:83:8a:d6:2f:1c:a8:08:41:96:f0:19:50: 03:af:0b:59:20:b0:84:25:c2:b1:6c:ac:28:8f:6c: 99:f8:d7:d4:6f:01:b4:c7:c8:4c:e2:73:34:82:67: 0a:0c:94:42:16:a9:73:96:43:bd:64:71:d2:07:18: 8a:de:02:9d:4e:9a:3f:aa:8f:11:fe:4b:25:9b:c0: 1c:63:01:5e:78:d7:a6:7b:20:3b:8c:8a:d7:55:b2: dd:e3:b6:33:b0:78:56:1c:65:0a:26:35:b1:e1:ce: 97:73:0b:01:b2:c2:5e:f0:65:d7:a6:5a:c5:ed:77: c8:6a:76:a2:f6:1f:29:db:ce:8d:cd:73:f7:34:f7: 9f:17:10:29:51:2c:9a:5c:b1:27:18:ec:ff:2a:5b: 6e:f5:82:54:31:a6:50:05:4d:24:fc:f7:aa:68:48: b5:86:87:a6:64:f8:4b:1d:a7:15:15:ae:ef:90:6c: b5:83:94:6d:6e:28:52:a6:52:d6:18:f6:d1:45:5e: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6B:91:AB:EF:0C:A4:96:6E:44:E1:94:4F:C8:1A:EC:D4:7D:1F:F2 X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:49:c2:df:52:c6:f8:65:59:6d:b2:00:46:d3:44:f9:35:8f: 59:64:91:ad:8a:b6:c9:e9:6b:f2:f9:4b:59:81:89:db:a6:d8: cc:47:7e:17:c2:bc:90:3f:3e:22:40:41:3a:65:0f:e6:64:8f: 44:e2:d8:7e:f1:23:88:13:81:47:2e:91:8b:ef:3d:ce:0c:55: 04:e9:c7:49:c9:71:d4:02:21:f4:29:55:bf:f9:96:8b:09:24: 65:ea:b1:d9:1b:64:62:7f:b2:6b:95:c4:f1:2d:44:16:eb:ab: c9:b4:ce:b2:cb:39:49:b9:0d:f6:72:26:f3:c1:44:2a:08:3e: 9f:f7:29:d9:48:24:61:ab:bb:ed:b3:10:52:9d:97:32:a1:9c: 97:d5:a6:09:40:6d:a6:00:e8:03:be:96:f6:ad:8f:d4:89:ef: 3b:bd:e4:c9:b5:cb:fa:de:18:8f:75:08:dd:6d:cb:01:6f:e3: 0d:8a:76:ea:64:0e:03:c9:61:7a:18:94:91:c7:bf:9d:61:0d: 1e:43:45:7a:fa:a5:72:00:4d:f4:41:f3:36:1b:b5:44:be:a3: fc:13:d1:a6:c2:cc:e8:b3:a5:c2:9d:1f:3a:17:61:a5:03:77: 0a:cf:70:4d:11:84:33:48:8f:3d:d6:ef:5e:fb:ff:a1:b0:b2: 5f:8a:25:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVuMlhIFx6jgY2eDEEO6Fwtl/rIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTExMDMwNzE1MDFaFw0yNTExMDYxMDM0MDFaMDMxMTAvBgNV BAMTKDNCNkI5MUFCRUYwQ0E0OTY2RTQ0RTE5NDRGQzgxQUVDRDQ3RDFGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGl96dqS4yqm4m2xwR3NZedoF 2TpZwik7YdCKaHTVHUs/nOEtWCPpt8/IvLOeIWzssXAhtcROo26wTeCIE4OK1i8c qAhBlvAZUAOvC1kgsIQlwrFsrCiPbJn419RvAbTHyEziczSCZwoMlEIWqXOWQ71k cdIHGIreAp1Omj+qjxH+SyWbwBxjAV5416Z7IDuMitdVst3jtjOweFYcZQomNbHh zpdzCwGywl7wZdemWsXtd8hqdqL2Hynbzo3Nc/c0958XEClRLJpcsScY7P8qW271 glQxplAFTST896poSLWGh6Zk+EsdpxUVru+QbLWDlG1uKFKmUtYY9tFFXpkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO2uRq+8MpJZuROGUT8ga7NR9H/IwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhJwt9SxvhlWW2yAEbTRPk1j1lkka2Ktsnp a/L5S1mBidum2MxHfhfCvJA/PiJAQTplD+Zkj0Ti2H7xI4gTgUcukYvvPc4MVQTp x0nJcdQCIfQpVb/5losJJGXqsdkbZGJ/smuVxPEtRBbrq8m0zrLLOUm5DfZyJvPB RCoIPp/3KdlIJGGru+2zEFKdlzKhnJfVpglAbaYA6AO+lvatj9SJ7zu95Mm1y/re GI91CN1tywFv4w2KdupkDgPJYXoYlJHHv51hDR5DRXr6pXIATfRB8zYbtUS+o/wT 0abCzOizpcKdHzoXYaUDdwrPcE0RhDNIjz3W7177/6Gwsl+KJc8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:33 2025 by rpki-client