$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json) Hash identifier: Eb+qFsSuQHZps6qVusmAOAIDxo8aru6kAbxtBX9zEE4= Subject key identifier: B5:C1:08:5D:4F:74:75:81:D8:A6:C3:A0:35:1E:CC:78:11:66:BD:7C Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 64C7ED9108CD5E9C2130146D19C5D549B135C9BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft Manifest number: 02C8 Signing time: Sun 02 Nov 2025 18:51:36 +0000 Manifest this update: Sun 02 Nov 2025 18:46:36 +0000 Manifest next update: Thu 06 Nov 2025 05:44:36 +0000 Files and hashes: 1: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: CVAgxYO8R81qqT4C00n+9PfjNb1Y2qyMlEV7uDXdJl4=) 2: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: vFZDJyrW7Nf7Z4DcMgOnKecQwvqUWGovWuuXKrThLwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c7:ed:91:08:cd:5e:9c:21:30:14:6d:19:c5:d5:49:b1:35:c9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: Nov 2 18:46:36 2025 GMT Not After : Nov 6 05:44:36 2025 GMT Subject: CN=B5C1085D4F747581D8A6C3A0351ECC781166BD7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4f:f5:d9:b7:b1:86:7b:cc:88:1b:90:1b:eb: 7a:df:15:81:85:c0:fe:ba:4e:8d:74:74:3f:fd:d8: 92:97:f8:f0:19:19:8b:19:f2:ec:08:8e:db:64:7e: f3:66:28:ba:7a:b8:9f:f4:fa:8b:b5:1b:5c:bc:27: ca:9e:05:e1:ad:8f:0a:d7:cd:26:3f:8b:56:d3:78: c5:01:83:32:13:5f:4a:48:1b:ae:4b:56:c5:b3:19: 35:fa:40:32:b3:93:83:df:39:af:c0:9b:e4:a8:43: 8c:55:88:19:7b:d2:37:62:59:1f:7f:fb:69:7f:57: a5:91:b3:fb:92:c0:13:1a:a4:dc:24:83:6b:3f:a2: 38:80:9b:3f:30:64:b3:d7:0b:b3:e3:2b:d7:e6:70: 2f:8d:ee:6a:b0:87:28:d4:32:8b:38:64:9d:9f:5a: 45:ed:30:ea:21:a7:dd:92:3e:ba:9e:4e:9f:b0:6e: e3:9e:18:d9:fb:09:4c:59:62:e5:94:1b:ca:38:ef: 16:f2:63:34:9d:63:ec:99:fe:b2:0d:55:15:2f:96: 6d:0a:b3:32:0c:75:be:e3:74:70:ce:78:af:b0:5c: b0:a8:b8:2b:4a:12:21:11:88:53:76:ad:8d:d3:78: 89:90:8c:ab:b3:d1:ed:f8:42:be:81:19:48:77:1e: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C1:08:5D:4F:74:75:81:D8:A6:C3:A0:35:1E:CC:78:11:66:BD:7C X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:19:76:13:a5:e1:45:b8:93:3a:7b:82:2c:f7:c1:bd:2c:4b: 2c:64:44:91:f2:11:77:ce:93:95:b5:a2:bd:0d:11:29:68:89: 1a:39:c0:1c:c3:14:25:c7:9c:97:8e:5e:1a:b8:1c:6e:22:75: 45:08:8e:81:ab:ca:08:dd:bf:63:f1:77:f0:e9:5e:f2:91:5c: d7:ba:b7:20:80:43:9f:44:05:36:0a:29:fb:01:9e:19:f0:5f: ee:e4:8d:bc:d5:5f:66:a5:44:59:bb:bc:be:35:09:3a:50:3f: 3d:c6:fb:96:3a:b4:88:7b:ed:7b:aa:99:8a:97:30:e8:f2:a6: 95:68:48:d2:74:00:30:5f:1a:ab:87:7f:d2:4c:c9:2b:d8:c7: 58:69:65:bd:05:0c:bd:37:96:c7:a9:30:60:df:89:8e:e7:11: ee:a0:b8:31:51:55:f1:83:4a:1d:35:d5:73:ed:67:61:44:fa: c8:f0:18:64:be:25:ed:81:ea:d2:57:e8:16:e8:67:d2:5b:5e: 15:c4:3e:8d:5d:29:3c:88:e1:6e:0f:2a:16:73:1e:81:d5:b9: c6:b9:a0:33:d1:fa:f2:69:fa:7c:01:3b:1e:74:cb:52:8e:29: 5d:3a:56:a2:a8:4a:81:77:25:e9:b0:07:c9:0f:3b:5e:60:a2: 2a:46:4e:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMftkQjNXpwhMBRtGcXVSbE1yb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yNTExMDIxODQ2MzZaFw0yNTExMDYwNTQ0MzZaMDMxMTAvBgNV BAMTKEI1QzEwODVENEY3NDc1ODFEOEE2QzNBMDM1MUVDQzc4MTE2NkJEN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmT/XZt7GGe8yIG5Ab63rfFYGF wP66To10dD/92JKX+PAZGYsZ8uwIjttkfvNmKLp6uJ/0+ou1G1y8J8qeBeGtjwrX zSY/i1bTeMUBgzITX0pIG65LVsWzGTX6QDKzk4PfOa/Am+SoQ4xViBl70jdiWR9/ +2l/V6WRs/uSwBMapNwkg2s/ojiAmz8wZLPXC7PjK9fmcC+N7mqwhyjUMos4ZJ2f WkXtMOohp92SPrqeTp+wbuOeGNn7CUxZYuWUG8o47xbyYzSdY+yZ/rINVRUvlm0K szIMdb7jdHDOeK+wXLCouCtKEiERiFN2rY3TeImQjKuz0e34Qr6BGUh3HpAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtcEIXU90dYHYpsOgNR7MeBFmvXwwHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEZdhOl4UW4kzp7giz3wb0sSyxkRJHyEXfO k5W1or0NESloiRo5wBzDFCXHnJeOXhq4HG4idUUIjoGrygjdv2Pxd/DpXvKRXNe6 tyCAQ59EBTYKKfsBnhnwX+7kjbzVX2alRFm7vL41CTpQPz3G+5Y6tIh77XuqmYqX MOjyppVoSNJ0ADBfGquHf9JMySvYx1hpZb0FDL03lsepMGDfiY7nEe6guDFRVfGD Sh011XPtZ2FE+sjwGGS+Je2B6tJX6BboZ9JbXhXEPo1dKTyI4W4PKhZzHoHVuca5 oDPR+vJp+nwBOx50y1KOKV06VqKoSoF3JemwB8kPO15goipGTgE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:57 2025 by rpki-client