$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: 5Pnpx0Hsk+UoI4+movZbAHSi8b7kwLVXU2s4x04i/dU= Subject key identifier: 03:DC:61:A9:60:54:B1:CD:1B:70:11:A1:A8:4F:C4:CD:2B:38:CF:F0 Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 7FB7AB973D2716EBCEB04E75FF77A7FC0BF89320 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 023C Signing time: Mon 16 Jun 2025 16:11:38 +0000 Manifest this update: Mon 16 Jun 2025 16:06:38 +0000 Manifest next update: Thu 19 Jun 2025 20:20:38 +0000 Files and hashes: 1: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: fRQ4q8q8ErULTmyxZND6FTjjIWYakEnY9GYMqH9egC0=) 2: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=) 3: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo=) 4: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: K4U8d+sUzMLgrI4fy436tf9syDLx6SvZlYhSkGTWcb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b7:ab:97:3d:27:16:eb:ce:b0:4e:75:ff:77:a7:fc:0b:f8:93:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Jun 16 16:06:38 2025 GMT Not After : Jun 19 20:20:38 2025 GMT Subject: CN=03DC61A96054B1CD1B7011A1A84FC4CD2B38CFF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:c4:50:d9:fd:84:00:60:4f:13:f3:2a:88: 37:42:94:00:8c:a6:08:dc:06:4f:74:e9:40:14:98: 48:0f:de:de:ea:95:e2:b7:16:86:12:7a:62:b2:14: f3:df:6a:f0:7f:74:80:48:1b:20:88:a9:90:1b:4a: d8:5c:db:05:cd:f9:44:0f:6f:c8:f0:16:a8:d7:ca: 29:b6:7e:96:46:5d:80:a4:07:b7:33:cb:b0:94:47: ec:44:b1:0d:f3:c8:72:2d:6b:d5:b7:9c:cf:f5:94: 55:8b:eb:f7:d6:a4:4b:e5:86:f9:75:fb:ac:6a:29: 3c:38:0f:cc:f2:42:d5:ae:92:10:5a:0e:c4:82:ad: 2e:07:50:a2:a3:ce:72:c0:fd:6e:95:8f:09:8e:4b: 11:cc:95:71:d2:40:23:5e:cc:82:83:15:08:3b:0e: f9:ed:6c:45:87:1a:20:13:de:b8:46:87:42:62:a3: 12:f6:f9:b1:6c:cf:af:91:60:f4:a9:b6:78:42:f4: f0:76:3a:ae:3d:44:c3:50:8c:18:47:a8:d4:5d:46: 23:13:e2:53:34:53:d8:71:d2:c2:1a:31:1e:e8:5b: 3e:da:12:d8:32:df:31:31:56:9c:4d:15:e8:b1:ae: f2:28:b1:f5:69:cb:99:7c:4a:b4:a2:b6:12:d8:00: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DC:61:A9:60:54:B1:CD:1B:70:11:A1:A8:4F:C4:CD:2B:38:CF:F0 X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b6:3d:ab:f8:81:16:64:74:12:b9:9b:dc:49:46:5f:11:ce: 1c:ed:78:87:1e:03:69:00:1f:c3:a6:ec:cc:bd:35:72:ed:17: 36:ec:af:a7:f2:9e:71:74:f3:39:31:0e:83:23:b6:be:23:22: 15:99:b0:5b:db:74:e7:cc:9d:70:b5:c3:f0:e8:a6:c0:05:9e: e6:ed:f1:7f:82:ac:a3:fc:21:70:5b:db:a6:ad:f3:77:27:1c: 55:72:ab:96:71:3e:7e:6a:0b:41:2e:6a:17:a2:b1:2e:59:ea: 1f:03:7a:52:8b:b1:3c:02:93:8c:56:52:3e:76:bd:be:01:3b: da:73:47:84:35:bb:99:20:1a:dd:e0:38:87:4a:c0:3a:b7:f2: 85:5c:8f:f2:47:5f:71:89:00:ec:5d:51:d3:dc:24:bb:9f:9b: b5:73:61:04:bc:60:b1:61:e0:f7:04:84:94:1e:60:c8:c4:df: 0b:a4:de:ad:ba:3b:e5:4d:07:97:1e:38:43:ee:11:10:ea:59: 4b:b4:73:54:5c:a7:b3:f1:21:73:67:64:95:23:fb:93:88:02: 87:4c:20:e8:59:12:3d:32:ab:d9:74:6c:fc:2e:00:54:9d:77: ab:fe:f0:52:df:1c:83:4d:b8:07:46:95:f3:d8:8f:fb:5e:c5: 45:a0:ec:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7erlz0nFuvOsE51/3en/Av4kyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNTA2MTYxNjA2MzhaFw0yNTA2MTkyMDIwMzhaMDMxMTAvBgNV BAMTKDAzREM2MUE5NjA1NEIxQ0QxQjcwMTFBMUE4NEZDNENEMkIzOENGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrncRQ2f2EAGBPE/MqiDdClACM pgjcBk906UAUmEgP3t7qleK3FoYSemKyFPPfavB/dIBIGyCIqZAbSthc2wXN+UQP b8jwFqjXyim2fpZGXYCkB7czy7CUR+xEsQ3zyHIta9W3nM/1lFWL6/fWpEvlhvl1 +6xqKTw4D8zyQtWukhBaDsSCrS4HUKKjznLA/W6VjwmOSxHMlXHSQCNezIKDFQg7 DvntbEWHGiAT3rhGh0JioxL2+bFsz6+RYPSptnhC9PB2Oq49RMNQjBhHqNRdRiMT 4lM0U9hx0sIaMR7oWz7aEtgy3zExVpxNFeixrvIosfVpy5l8SrSithLYAErzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA9xhqWBUsc0bcBGhqE/EzSs4z/AwHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEm2Pav4gRZkdBK5m9xJRl8RzhzteIceA2kA H8Om7My9NXLtFzbsr6fynnF08zkxDoMjtr4jIhWZsFvbdOfMnXC1w/DopsAFnubt 8X+CrKP8IXBb26at83cnHFVyq5ZxPn5qC0EuaheisS5Z6h8DelKLsTwCk4xWUj52 vb4BO9pzR4Q1u5kgGt3gOIdKwDq38oVcj/JHX3GJAOxdUdPcJLufm7VzYQS8YLFh 4PcEhJQeYMjE3wuk3q26O+VNB5ceOEPuERDqWUu0c1Rcp7PxIXNnZJUj+5OIAodM IOhZEj0yq9l0bPwuAFSdd6v+8FLfHINNuAdGlfPYj/texUWg7OY= -----END CERTIFICATE-----Generated at Tue Jun 17 03:25:37 2025 by rpki-client