$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: mTusSrNfM5v5Wv4lz9zMURmtTeRimKxHOTOYGP6+rqE= Subject key identifier: AB:3D:0D:14:CB:54:E3:D1:F7:BA:DD:2A:79:91:D0:44:0C:5E:17:90 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 6996BDAD59BE88121D9DFFC233F213C6B94879FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 01A2 Signing time: Mon 03 Nov 2025 15:31:58 +0000 Manifest this update: Mon 03 Nov 2025 15:26:58 +0000 Manifest next update: Fri 07 Nov 2025 00:06:58 +0000 Files and hashes: 1: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: VYTj/y216dPaoZX8miz6hPrIxbYp5wwsOlWTkRkvFsc=) 2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) 3: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:96:bd:ad:59:be:88:12:1d:9d:ff:c2:33:f2:13:c6:b9:48:79:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Nov 3 15:26:58 2025 GMT Not After : Nov 7 00:06:58 2025 GMT Subject: CN=AB3D0D14CB54E3D1F7BADD2A7991D0440C5E1790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:98:97:82:f1:b0:80:1f:31:12:cb:03:82:e3: bc:0d:7e:2e:c3:b2:79:2e:1b:4a:51:8f:32:98:f0: 16:b0:9d:c7:b6:ec:be:56:08:d7:09:25:5f:f8:7c: 0a:81:6e:7b:f9:b1:0b:f2:0c:a0:c7:18:eb:3b:aa: e6:2b:88:17:3d:6b:ca:f7:87:32:00:7b:9e:39:bb: a3:1d:d0:bf:52:d7:f8:40:f4:e1:3a:f4:57:c8:f1: 8a:ad:fc:46:2f:5f:d7:dc:9f:4f:54:24:8c:24:0e: 14:83:c6:1d:7a:93:a9:dc:d4:c7:d5:b4:3e:b6:9f: dd:56:ae:06:8a:9f:59:91:14:a0:0b:1f:93:07:49: 98:cd:28:cd:a8:9c:c1:1a:0f:a1:63:0d:48:b4:e7: 8b:98:30:dd:7a:03:88:1c:58:13:4b:95:27:43:b9: f1:6b:d4:80:40:18:e8:0c:53:56:67:1a:08:84:16: ce:6f:d4:e1:0f:c0:70:41:22:ec:a0:6c:c3:a5:9c: 60:a0:3e:ae:53:3d:88:b7:e6:5d:05:c8:75:d2:a6: a9:c0:33:ea:df:2c:ee:da:e1:fe:e0:75:4c:ba:a8: 04:f4:ee:3a:6c:5c:4c:83:0c:ec:6f:75:2c:a2:1e: 59:f8:e1:04:3f:c3:54:28:88:a6:bc:a2:8e:cb:a6: 35:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3D:0D:14:CB:54:E3:D1:F7:BA:DD:2A:79:91:D0:44:0C:5E:17:90 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3a:36:65:88:b1:6f:77:c8:a5:08:bf:c7:32:8a:2b:81:9c: f1:9f:1a:5a:b9:dc:b4:3e:47:04:a1:92:73:0d:43:38:5e:3f: 41:27:45:cf:ef:d3:a0:02:7e:56:66:9b:05:b6:8c:84:b1:30: 9f:b7:02:81:41:77:c9:80:1c:e1:9e:f5:e6:90:9b:d8:79:bf: ad:1c:ec:67:5a:ec:29:18:01:bc:3b:58:06:34:05:3e:07:06: 8d:54:d8:bd:ce:bf:16:8a:99:66:1a:43:37:43:5b:10:a6:9b: 85:88:9e:d5:ef:94:62:33:54:80:37:49:f5:e4:72:6b:ae:8a: ec:f1:c5:51:3e:0e:92:51:8a:81:b4:d2:b2:30:7f:b6:88:c4: 1b:e3:01:f6:85:f4:b1:9f:14:5a:3f:af:bc:62:be:e7:e9:94: 1c:2f:fe:df:77:89:28:4e:24:78:f2:8e:04:8f:00:77:b8:57: 39:32:4a:10:21:ea:26:2c:4b:a5:82:3e:96:bb:ea:e0:b8:22: 46:c0:cf:64:05:36:af:d1:e3:95:23:12:36:17:73:23:93:59: bd:cd:6e:61:96:bd:9e:11:98:f1:4f:22:3c:96:f0:c7:10:bd: 75:e0:bf:84:8a:ae:27:ca:38:57:10:f3:7c:ba:cb:fd:15:d8: 66:03:56:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZa9rVm+iBIdnf/CM/ITxrlIef0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTExMDMxNTI2NThaFw0yNTExMDcwMDA2NThaMDMxMTAvBgNV BAMTKEFCM0QwRDE0Q0I1NEUzRDFGN0JBREQyQTc5OTFEMDQ0MEM1RTE3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZmJeC8bCAHzESywOC47wNfi7D snkuG0pRjzKY8Bawnce27L5WCNcJJV/4fAqBbnv5sQvyDKDHGOs7quYriBc9a8r3 hzIAe545u6Md0L9S1/hA9OE69FfI8Yqt/EYvX9fcn09UJIwkDhSDxh16k6nc1MfV tD62n91WrgaKn1mRFKALH5MHSZjNKM2onMEaD6FjDUi054uYMN16A4gcWBNLlSdD ufFr1IBAGOgMU1ZnGgiEFs5v1OEPwHBBIuygbMOlnGCgPq5TPYi35l0FyHXSpqnA M+rfLO7a4f7gdUy6qAT07jpsXEyDDOxvdSyiHln44QQ/w1QoiKa8oo7LpjX7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqz0NFMtU49H3ut0qeZHQRAxeF5AwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAo6NmWIsW93yKUIv8cyiiuBnPGfGlq53LQ+ RwShknMNQzheP0EnRc/v06ACflZmmwW2jISxMJ+3AoFBd8mAHOGe9eaQm9h5v60c 7Gda7CkYAbw7WAY0BT4HBo1U2L3OvxaKmWYaQzdDWxCmm4WIntXvlGIzVIA3SfXk cmuuiuzxxVE+DpJRioG00rIwf7aIxBvjAfaF9LGfFFo/r7xivufplBwv/t93iShO JHjyjgSPAHe4VzkyShAh6iYsS6WCPpa76uC4IkbAz2QFNq/R45UjEjYXcyOTWb3N bmGWvZ4RmPFPIjyW8McQvXXgv4SKrifKOFcQ83y6y/0V2GYDVg4= -----END CERTIFICATE-----Generated at Tue Nov 4 19:08:57 2025 by rpki-client