$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: SssKvtODi4LrqPBwXKfJLcLLRz0maisNbe0QWmGhVAE= Subject key identifier: 80:77:25:3E:D6:B1:5C:96:60:A7:DA:5F:37:3C:62:0F:36:15:5B:29 Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 0A7254B785F29DBDBBC08FBD335C1504C4BDDF34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: DB Signing time: Tue 05 Aug 2025 08:54:54 +0000 Manifest this update: Tue 05 Aug 2025 08:49:54 +0000 Manifest next update: Fri 08 Aug 2025 14:44:54 +0000 Files and hashes: 1: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: G6/COcBhBQuoowGZRh+LQtrbm1OlIcgGLRDcxdO6c2g=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: JcxcaxwKLkaXPPx4myqNJpdCaATZRCOkTz9pp1mz/yI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:72:54:b7:85:f2:9d:bd:bb:c0:8f:bd:33:5c:15:04:c4:bd:df:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Aug 5 08:49:54 2025 GMT Not After : Aug 8 14:44:54 2025 GMT Subject: CN=8077253ED6B15C9660A7DA5F373C620F36155B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:9c:84:c0:39:61:f8:ae:e3:89:0e:0b:ba: f0:2d:8c:bb:9b:31:b2:33:e1:99:3e:f6:9b:ee:77: 64:fe:26:a0:c6:91:b0:a7:23:2f:af:30:0d:e9:ce: 0e:7f:7f:51:6e:a4:02:51:4b:f0:66:b8:d2:3f:07: 68:1a:71:41:b0:63:e3:9a:ab:53:bc:e1:22:1d:de: c6:03:62:50:be:2f:3f:80:1f:32:05:b3:1c:3f:65: 83:c7:42:15:36:6b:45:3f:8d:03:a4:86:52:1e:0c: 2a:d1:69:fc:57:14:24:4e:87:35:87:0b:26:f6:93: 27:af:08:2d:00:9a:9c:9b:b8:7b:1f:3e:56:ab:bb: 66:e5:d2:f6:02:5a:c7:dc:da:ad:a5:5d:06:5c:27: 83:ac:64:de:2b:46:fa:ee:ff:96:67:29:0c:75:43: 78:6f:8a:47:64:79:1a:37:4e:72:1d:9f:58:ec:48: 73:e7:34:70:26:a4:f0:20:25:b5:03:35:79:90:53: a4:af:6a:74:97:0d:65:f8:d8:0a:a8:14:fa:5b:ae: e5:1e:d7:04:91:8f:b0:b0:73:fe:b7:ef:3e:fa:86: 2f:4b:bf:53:cd:ab:d2:1c:3e:a2:ba:e7:75:9c:e6: 6b:68:f1:3b:35:3b:06:2b:c7:d4:79:ef:c0:6f:cb: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:77:25:3E:D6:B1:5C:96:60:A7:DA:5F:37:3C:62:0F:36:15:5B:29 X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:59:a9:ae:f1:40:08:e3:f1:b1:f4:95:20:ef:33:ae:3a:c6: f5:3c:6d:ea:88:f4:20:f0:a9:ef:3e:17:ab:c2:ef:da:d4:a5: 62:53:54:9a:cf:05:d0:62:5b:e8:3e:c4:dc:ab:78:35:d0:91: b1:16:53:62:01:26:c4:ea:4a:56:2d:b4:44:35:e9:cc:fa:60: f1:66:1f:ff:ed:79:1d:26:9b:e8:49:2b:48:35:be:eb:92:be: 82:21:f6:24:4c:5d:78:b1:b9:fe:97:05:96:ea:20:dd:15:59: f5:55:37:b2:f9:b2:cd:c9:13:df:16:21:b4:c5:c5:0f:e9:93: 32:49:29:34:f5:a6:ee:0e:4f:05:f9:21:1c:9d:9a:5e:e1:76: fc:87:94:29:f9:1f:d3:76:0d:f2:83:1a:66:61:87:2c:14:1e: 8d:99:95:a1:8b:17:65:87:bb:c7:e7:93:36:55:17:e9:ef:67: ab:55:2a:63:95:e6:84:1c:eb:ad:b6:d0:d4:34:52:09:5b:77: ae:bf:4f:37:47:32:ed:94:55:46:0a:3d:f3:75:ff:df:6d:2b: b1:f2:b0:47:03:43:e1:e0:ac:53:ed:cc:37:a7:6b:a4:ca:44: db:30:72:af:66:ad:c4:ff:c7:9b:09:0e:0a:ae:d5:8c:39:9d: a2:e8:44:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnJUt4Xynb27wI+9M1wVBMS93zQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNTA4MDUwODQ5NTRaFw0yNTA4MDgxNDQ0NTRaMDMxMTAvBgNV BAMTKDgwNzcyNTNFRDZCMTVDOTY2MEE3REE1RjM3M0M2MjBGMzYxNTVCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kZyEwDlh+K7jiQ4LuvAtjLub MbIz4Zk+9pvud2T+JqDGkbCnIy+vMA3pzg5/f1FupAJRS/BmuNI/B2gacUGwY+Oa q1O84SId3sYDYlC+Lz+AHzIFsxw/ZYPHQhU2a0U/jQOkhlIeDCrRafxXFCROhzWH Cyb2kyevCC0AmpybuHsfPlaru2bl0vYCWsfc2q2lXQZcJ4OsZN4rRvru/5ZnKQx1 Q3hvikdkeRo3TnIdn1jsSHPnNHAmpPAgJbUDNXmQU6SvanSXDWX42AqoFPpbruUe 1wSRj7Cwc/637z76hi9Lv1PNq9IcPqK653Wc5mto8Ts1OwYrx9R578BvyzZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgHclPtaxXJZgp9pfNzxiDzYVWykwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFZqa7xQAjj8bH0lSDvM646xvU8beqI9CDw qe8+F6vC79rUpWJTVJrPBdBiW+g+xNyreDXQkbEWU2IBJsTqSlYttEQ16cz6YPFm H//teR0mm+hJK0g1vuuSvoIh9iRMXXixuf6XBZbqIN0VWfVVN7L5ss3JE98WIbTF xQ/pkzJJKTT1pu4OTwX5IRydml7hdvyHlCn5H9N2DfKDGmZhhywUHo2ZlaGLF2WH u8fnkzZVF+nvZ6tVKmOV5oQc66220NQ0Uglbd66/TzdHMu2UVUYKPfN1/99tK7Hy sEcDQ+HgrFPtzDena6TKRNswcq9mrcT/x5sJDgqu1Yw5naLoRHE= -----END CERTIFICATE-----Generated at Thu Aug 7 11:17:48 2025 by rpki-client