$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: 0Vm//m7e7+4x6p9ObxTopJXcaganWuKO/aK2E906RI0= Subject key identifier: B2:6F:2B:2E:02:30:CF:B7:57:EA:A4:98:0B:57:F0:70:B0:B3:1A:02 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 36DE3FEFCEC48751567E4DC6424298E6B5C24869 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 04E0 Signing time: Tue 17 Jun 2025 23:00:01 +0000 Manifest this update: Tue 17 Jun 2025 22:55:01 +0000 Manifest next update: Sat 21 Jun 2025 10:16:01 +0000 Files and hashes: 1: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: OvwcP/F0q6Yv2Csl+WA+0KBHagLyCFz8LhLhXGqkabA=) 2: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) 3: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) 4: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 10:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:de:3f:ef:ce:c4:87:51:56:7e:4d:c6:42:42:98:e6:b5:c2:48:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Jun 17 22:55:01 2025 GMT Not After : Jun 21 10:16:01 2025 GMT Subject: CN=B26F2B2E0230CFB757EAA4980B57F070B0B31A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:54:e1:c9:04:82:82:d6:f3:e2:41:ca:e8:c3: 2d:ad:7a:27:1e:b0:18:ec:9a:94:40:2d:e0:06:bc: d8:51:8d:2d:f7:a3:58:6c:1e:b5:b8:4a:fb:9e:fe: 1f:5d:7e:38:87:9e:79:21:d1:4f:11:94:b4:24:2b: d3:3a:05:3a:4f:d2:64:cb:09:a4:45:5e:43:d3:1f: f1:04:56:0f:e8:42:92:f6:bf:69:22:b4:b9:8f:f2: 59:a5:ec:f1:2a:08:35:59:f1:3e:03:bb:e5:59:67: 61:1c:b8:fc:1d:80:70:94:51:31:6d:e1:f6:31:30: d2:02:69:73:e4:71:98:9b:07:ec:c3:4b:a4:86:6a: 27:26:2b:f4:89:3e:71:14:33:c7:f9:9c:8d:00:71: ee:d9:61:82:d4:0c:df:2a:66:38:36:b1:b1:ed:24: 91:b6:ad:5c:d4:21:ba:15:f3:7e:ba:44:8c:3b:df: 0c:2d:fd:05:92:bd:2c:55:4b:3f:5c:37:b9:94:4b: 20:43:c8:2f:4b:76:24:bd:8f:51:b3:be:fe:74:ab: c3:4a:91:ad:e5:46:73:52:3a:5b:3a:fb:3e:bd:16: 4a:c6:30:d3:7c:25:3a:16:78:0d:e7:0b:6d:2e:89: 96:57:60:d2:d0:7b:be:cc:70:19:4b:53:fb:50:23: c0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6F:2B:2E:02:30:CF:B7:57:EA:A4:98:0B:57:F0:70:B0:B3:1A:02 X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a4:14:d6:f9:18:f8:dd:db:89:09:24:1c:86:cc:6e:64:32: 77:30:b5:14:1d:7b:49:2e:11:b3:0b:e6:c2:7e:02:43:89:d3: 8c:61:69:b1:a7:a0:d1:40:bd:ad:cf:13:7b:67:2b:b5:61:30: 94:44:92:99:d0:50:02:11:6a:57:76:95:ba:c2:81:4d:38:3e: b4:53:ec:82:b2:da:f4:8a:05:d4:f2:e1:0f:a7:26:91:58:19: c9:d3:23:1d:70:7d:cc:d7:50:c4:84:f7:ad:73:b9:1d:3f:18: ed:d6:d0:b8:ec:bb:46:8a:ee:3d:8b:90:46:ba:3f:5e:7e:d5: 4b:17:d3:2d:c8:c0:f8:75:93:59:f6:da:42:00:6a:5b:9b:08: ea:06:98:82:8a:1c:7e:54:e2:93:0a:14:29:ae:60:90:d4:d0: e0:36:b5:58:a6:42:cb:f9:8e:09:52:2b:dd:47:6c:df:71:fb: e4:d7:65:98:41:de:47:5a:e5:e5:62:be:71:ee:07:47:fa:ad: 7c:69:98:4b:02:a3:cc:e8:8d:bc:cb:66:bf:35:cc:e5:34:72: 5c:c8:75:71:26:cd:f5:82:5c:fb:b9:ae:dc:0f:9f:0e:89:13: 87:c8:01:f6:74:90:15:78:36:30:c0:a7:09:cc:cb:24:bb:30: d2:c1:e7:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNt4/787Eh1FWfk3GQkKY5rXCSGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTA2MTcyMjU1MDFaFw0yNTA2MjExMDE2MDFaMDMxMTAvBgNV BAMTKEIyNkYyQjJFMDIzMENGQjc1N0VBQTQ5ODBCNTdGMDcwQjBCMzFBMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgVOHJBIKC1vPiQcrowy2teice sBjsmpRALeAGvNhRjS33o1hsHrW4Svue/h9dfjiHnnkh0U8RlLQkK9M6BTpP0mTL CaRFXkPTH/EEVg/oQpL2v2kitLmP8lml7PEqCDVZ8T4Du+VZZ2EcuPwdgHCUUTFt 4fYxMNICaXPkcZibB+zDS6SGaicmK/SJPnEUM8f5nI0Ace7ZYYLUDN8qZjg2sbHt JJG2rVzUIboV8366RIw73wwt/QWSvSxVSz9cN7mUSyBDyC9LdiS9j1Gzvv50q8NK ka3lRnNSOls6+z69FkrGMNN8JToWeA3nC20uiZZXYNLQe77McBlLU/tQI8DjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsm8rLgIwz7dX6qSYC1fwcLCzGgIwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmkFNb5GPjd24kJJByGzG5kMncwtRQde0ku EbML5sJ+AkOJ04xhabGnoNFAva3PE3tnK7VhMJREkpnQUAIRald2lbrCgU04PrRT 7IKy2vSKBdTy4Q+nJpFYGcnTIx1wfczXUMSE961zuR0/GO3W0Ljsu0aK7j2LkEa6 P15+1UsX0y3IwPh1k1n22kIAalubCOoGmIKKHH5U4pMKFCmuYJDU0OA2tVimQsv5 jglSK91HbN9x++TXZZhB3kda5eVivnHuB0f6rXxpmEsCo8zojbzLZr81zOU0clzI dXEmzfWCXPu5rtwPnw6JE4fIAfZ0kBV4NjDApwnMyyS7MNLB56A= -----END CERTIFICATE-----Generated at Wed Jun 18 10:40:28 2025 by rpki-client