$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: K7322A9Qgbyu9CuS4riHwMW97euwJh0oWF7mQXBTv5A= Subject key identifier: B5:BE:6D:C0:24:21:90:EB:70:05:7D:47:5A:C0:B3:63:C7:7C:35:EC Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 057BEB2B04D3E8487700E3E60AE66ABD80D26F1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 04F6 Signing time: Wed 06 Aug 2025 05:30:01 +0000 Manifest this update: Wed 06 Aug 2025 05:25:01 +0000 Manifest next update: Sat 09 Aug 2025 15:48:01 +0000 Files and hashes: 1: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) 2: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) 3: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: eRlQiJjjsSZ/pHK7LjDu9UMDGHMLCxiRse7H9TXZ58M=) 4: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7b:eb:2b:04:d3:e8:48:77:00:e3:e6:0a:e6:6a:bd:80:d2:6f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Aug 6 05:25:01 2025 GMT Not After : Aug 9 15:48:01 2025 GMT Subject: CN=B5BE6DC0242190EB70057D475AC0B363C77C35EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:44:b1:90:0e:81:99:7d:e5:8e:d8:ce:e2:45: 5d:51:c9:e1:3b:13:b2:bc:a3:c5:6b:59:12:9b:5a: ce:73:be:f7:f9:f8:4e:33:ad:fc:b4:8a:ad:6f:60: a5:87:d0:be:3e:6f:a7:8d:e2:9e:49:65:4b:46:cd: 75:1d:79:41:3c:e2:85:d4:2e:f3:0f:52:99:6c:89: ce:be:e0:a2:c2:ee:46:05:b0:d8:b2:be:8a:d3:14: dd:8b:28:ed:33:60:88:47:fa:19:ea:4b:67:ea:73: 0e:d1:2a:e0:84:24:c6:39:f2:db:f7:b0:14:eb:19: 78:28:1a:71:6a:35:47:7f:16:b1:fb:9c:1a:cd:31: ab:6b:1d:fb:ac:9e:1a:f2:b2:de:e7:ed:09:b7:d8: 5a:e8:ed:e9:86:89:e5:3e:0e:36:26:16:a7:82:08: 97:11:0f:ba:8b:2f:e1:8e:45:c3:47:76:49:d7:fe: 36:d7:19:5d:dc:22:ce:0f:06:16:e1:61:00:c2:3d: 60:8b:db:1e:f9:1d:ef:40:02:11:cd:63:37:62:ac: 4a:b2:46:87:47:92:35:fe:d0:31:94:79:7c:d1:b2: e0:a9:15:f6:ec:e1:24:a1:19:90:7c:b6:3e:30:5f: 15:1f:d8:01:8f:ef:92:eb:e8:3d:95:fb:56:e0:2c: f8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BE:6D:C0:24:21:90:EB:70:05:7D:47:5A:C0:B3:63:C7:7C:35:EC X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d0:ed:58:ec:c4:cd:73:01:4f:c0:29:a4:a0:14:e0:13:7f: 4a:cd:7e:54:c8:81:85:76:dd:8a:a5:2f:66:56:64:a6:f6:e5: c1:8f:8a:45:2a:87:3d:24:0c:6c:6f:d1:b6:ae:5a:72:f5:b2: 92:09:c7:30:bc:8b:69:00:f0:5a:e2:15:ac:50:7c:66:86:61: 00:e7:da:00:d3:ba:d2:ad:fb:48:50:bd:24:11:fe:d8:34:ae: f7:88:a2:46:14:ce:a3:95:5c:62:c9:1c:e7:b1:73:0f:cb:d1: 4b:0c:ec:5d:3d:a9:23:04:9a:f4:ea:9a:d7:70:89:63:8d:86: af:ba:9e:ab:7c:68:63:44:fc:27:7d:c1:f5:4a:26:18:74:80: f7:92:81:ba:38:d6:81:e3:4c:45:ed:73:5d:d7:18:4a:d6:19: 90:d4:3c:e1:d6:b1:34:89:e5:92:20:2c:fb:bc:23:32:36:f1: 4b:21:16:13:ea:fe:54:3a:57:64:2d:49:59:11:5a:d3:90:9d: 70:ae:5b:92:83:98:ab:e9:90:b1:05:a0:09:c5:fe:06:c6:1c: 59:bc:58:32:aa:d3:8a:da:51:62:da:c1:80:78:f9:3c:60:31: 1e:eb:74:99:8f:b2:c8:09:d4:96:a9:87:95:2a:a5:9a:7d:05: 3d:b2:8b:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBXvrKwTT6Eh3AOPmCuZqvYDSbxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTA4MDYwNTI1MDFaFw0yNTA4MDkxNTQ4MDFaMDMxMTAvBgNV BAMTKEI1QkU2REMwMjQyMTkwRUI3MDA1N0Q0NzVBQzBCMzYzQzc3QzM1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQRLGQDoGZfeWO2M7iRV1RyeE7 E7K8o8VrWRKbWs5zvvf5+E4zrfy0iq1vYKWH0L4+b6eN4p5JZUtGzXUdeUE84oXU LvMPUplsic6+4KLC7kYFsNiyvorTFN2LKO0zYIhH+hnqS2fqcw7RKuCEJMY58tv3 sBTrGXgoGnFqNUd/FrH7nBrNMatrHfusnhryst7n7Qm32Fro7emGieU+DjYmFqeC CJcRD7qLL+GORcNHdknX/jbXGV3cIs4PBhbhYQDCPWCL2x75He9AAhHNYzdirEqy RodHkjX+0DGUeXzRsuCpFfbs4SShGZB8tj4wXxUf2AGP75Lr6D2V+1bgLPjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtb5twCQhkOtwBX1HWsCzY8d8NewwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrQ7VjsxM1zAU/AKaSgFOATf0rNflTIgYV2 3YqlL2ZWZKb25cGPikUqhz0kDGxv0bauWnL1spIJxzC8i2kA8FriFaxQfGaGYQDn 2gDTutKt+0hQvSQR/tg0rveIokYUzqOVXGLJHOexcw/L0UsM7F09qSMEmvTqmtdw iWONhq+6nqt8aGNE/Cd9wfVKJhh0gPeSgbo41oHjTEXtc13XGErWGZDUPOHWsTSJ 5ZIgLPu8IzI28UshFhPq/lQ6V2QtSVkRWtOQnXCuW5KDmKvpkLEFoAnF/gbGHFm8 WDKq04raUWLawYB4+TxgMR7rdJmPssgJ1Japh5UqpZp9BT2yi5Y= -----END CERTIFICATE-----Generated at Thu Aug 7 04:25:09 2025 by rpki-client