$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json) Hash identifier: aRiUyLwPFbVYorwztsVM4FJ1N4Ow7k5tHprVViFSt9A= Subject key identifier: AB:26:76:32:28:0F:BD:35:D8:B8:CE:3B:AF:3A:04:7E:38:AD:CD:78 Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 571858DB568B51C277F79A438548F24BFBF3391A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft Manifest number: 0373 Signing time: Tue 05 Aug 2025 13:31:56 +0000 Manifest this update: Tue 05 Aug 2025 13:26:56 +0000 Manifest next update: Fri 08 Aug 2025 20:58:56 +0000 Files and hashes: 1: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: a1sbfrDF+TBZ0oBRlDoFzDyKMVHWAkOJJ0vTBK63rMI=) 2: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: ylXHQm3DiD4h9n4NuN0yUGCouUxigE+BSv0spOzfo/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:18:58:db:56:8b:51:c2:77:f7:9a:43:85:48:f2:4b:fb:f3:39:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Aug 5 13:26:56 2025 GMT Not After : Aug 8 20:58:56 2025 GMT Subject: CN=AB267632280FBD35D8B8CE3BAF3A047E38ADCD78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:46:66:5d:32:68:12:fc:21:d8:cf:ac:58: 56:c7:aa:92:23:63:f1:c9:32:eb:8f:47:41:3f:dd: 45:46:e4:8b:09:c1:0e:21:14:66:04:91:a0:0a:e1: 80:ab:9b:c1:9a:78:29:c0:1d:d9:9b:5f:d2:4d:fe: e3:79:12:92:80:ab:0b:9b:e5:b2:9e:fd:75:5a:2f: 34:e9:f6:3f:a7:5b:89:45:08:a2:7b:35:05:e1:5a: 97:7d:1f:89:31:57:c7:a2:90:59:b1:0f:ec:b5:1c: 61:fb:b0:95:37:fe:dc:f1:ff:17:d7:46:74:c3:0c: 4f:9f:d1:1c:9e:c5:18:f4:ba:8d:61:b0:ce:f9:11: f3:70:df:65:93:16:6a:9f:72:b9:45:f5:89:28:4c: e2:eb:e2:ec:2e:19:33:13:0a:8d:2c:06:d4:e4:a1: ba:55:83:93:2a:3d:b9:5e:a0:58:62:b4:b2:9f:08: b4:9c:ba:bf:28:08:01:51:13:a3:9c:5a:d6:79:ae: 70:b5:ea:1b:f2:41:4f:8f:1f:36:a8:34:34:0e:f7: fd:3c:ad:45:b0:16:15:0f:99:42:ee:97:ef:ea:e0: f2:0a:fb:6c:d4:a5:75:51:6a:4b:c0:75:db:3d:e5: 36:6d:b1:fa:7f:36:09:35:ff:67:94:84:02:06:0c: 7f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:26:76:32:28:0F:BD:35:D8:B8:CE:3B:AF:3A:04:7E:38:AD:CD:78 X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ae:f5:8e:4d:16:76:2f:80:dc:7b:c1:d7:7e:65:c3:72:1f: d8:c2:cb:b4:b7:19:93:a2:c6:80:b0:0e:01:c9:4c:11:3f:9e: 6c:a5:44:88:9d:f6:04:d5:f3:32:b9:dd:41:30:fb:2c:1f:60: 7d:79:6d:3d:88:b9:18:21:c5:78:f6:86:93:3b:60:f8:55:6b: d1:9c:ab:51:1e:76:69:eb:29:7c:02:8e:84:c9:52:5e:49:18: 3d:7b:33:de:2e:d3:60:f8:dd:c5:e9:39:7a:c2:15:fe:84:05: 16:f7:dc:48:2a:5a:8f:66:99:56:d9:f2:5d:aa:59:18:e6:cf: 7c:04:e3:5b:07:c7:1f:4d:c8:08:2f:60:f1:7e:74:a5:30:89: fc:6b:62:63:49:de:f1:0f:bc:58:77:c7:d7:32:ca:6d:a3:b6: 4e:7f:8c:96:71:cb:87:9e:06:fb:f7:b7:a7:7a:f8:91:b7:b8: 5c:d4:a7:bd:92:5b:ac:e5:72:f1:02:1e:64:22:a8:0f:41:ed: fc:a1:bc:a7:70:c9:67:75:ac:81:68:72:f1:6b:e4:ae:37:16: ed:b3:33:7d:24:85:81:a3:19:20:d0:74:1f:9d:02:5f:73:12: 9d:cc:08:cc:31:e8:d9:62:d4:30:7a:2b:f9:c0:49:1d:24:99: 7a:76:d5:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVxhY21aLUcJ395pDhUjyS/vzORowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yNTA4MDUxMzI2NTZaFw0yNTA4MDgyMDU4NTZaMDMxMTAvBgNV BAMTKEFCMjY3NjMyMjgwRkJEMzVEOEI4Q0UzQkFGM0EwNDdFMzhBRENENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsEZmXTJoEvwh2M+sWFbHqpIj Y/HJMuuPR0E/3UVG5IsJwQ4hFGYEkaAK4YCrm8GaeCnAHdmbX9JN/uN5EpKAqwub 5bKe/XVaLzTp9j+nW4lFCKJ7NQXhWpd9H4kxV8eikFmxD+y1HGH7sJU3/tzx/xfX RnTDDE+f0RyexRj0uo1hsM75EfNw32WTFmqfcrlF9YkoTOLr4uwuGTMTCo0sBtTk obpVg5MqPbleoFhitLKfCLScur8oCAFRE6OcWtZ5rnC16hvyQU+PHzaoNDQO9/08 rUWwFhUPmULul+/q4PIK+2zUpXVRakvAdds95TZtsfp/Ngk1/2eUhAIGDH+vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqyZ2MigPvTXYuM47rzoEfjitzXgwHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAz MTBGMTAwQ0UzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImu9Y5NFnYvgNx7wdd+ZcNyH9jCy7S3GZOi xoCwDgHJTBE/nmylRIid9gTV8zK53UEw+ywfYH15bT2IuRghxXj2hpM7YPhVa9Gc q1EedmnrKXwCjoTJUl5JGD17M94u02D43cXpOXrCFf6EBRb33EgqWo9mmVbZ8l2q WRjmz3wE41sHxx9NyAgvYPF+dKUwifxrYmNJ3vEPvFh3x9cyym2jtk5/jJZxy4ee Bvv3t6d6+JG3uFzUp72SW6zlcvECHmQiqA9B7fyhvKdwyWd1rIFocvFr5K43Fu2z M30khYGjGSDQdB+dAl9zEp3MCMwx6Nli1DB6K/nASR0kmXp21Zk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:07 2025 by rpki-client