$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: F32EoAB17kU46RZG/7NiYom0vp0hnjOmdFepJSHX1IE= Subject key identifier: 70:70:9B:6C:BD:79:86:3D:0C:A1:6C:94:15:D2:80:21:84:1B:DD:DB Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 286708E97E9FF03AF1F1B3CF803B6AC8FD4404EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 04C9 Signing time: Tue 29 Apr 2025 18:01:09 +0000 Manifest this update: Tue 29 Apr 2025 17:56:09 +0000 Manifest next update: Sat 03 May 2025 02:26:09 +0000 Files and hashes: 1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: O+s63bruG2uw4Vm14b7wKS+u4FFhMuUV5G+Fu+kkSnk=) 2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: PHUFI70Yd8/eQH1IB5Bqra7jl3oU7toK/ScFCZQ9jng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:67:08:e9:7e:9f:f0:3a:f1:f1:b3:cf:80:3b:6a:c8:fd:44:04:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Apr 29 17:56:09 2025 GMT Not After : May 3 02:26:09 2025 GMT Subject: CN=70709B6CBD79863D0CA16C9415D28021841BDDDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:9e:cd:f9:18:cb:a3:8b:45:d5:46:dc:fa: 1f:40:c1:5a:8f:27:09:e7:8b:40:79:60:44:8a:c7: c5:48:35:c1:ac:46:e2:68:cf:f7:61:0a:38:e5:39: 6b:c0:c7:5c:17:69:24:dd:ef:5c:05:13:38:2c:c9: 0d:42:6e:51:d4:8b:63:e5:57:a9:d4:63:e6:82:72: c9:66:d9:08:93:44:c4:36:21:2c:a8:88:5d:34:22: cc:f7:11:ae:ab:53:6a:e5:98:63:6b:ac:81:04:4f: b7:c4:09:48:bf:f3:3f:be:f5:3b:05:65:59:75:6d: ea:e8:b1:42:f6:af:e0:1a:c0:b1:40:06:81:b3:10: f2:e2:5a:9b:8c:ae:ba:87:e5:09:73:08:2e:74:87: 50:e6:9f:67:90:e1:f8:00:83:b9:b0:0c:c2:01:bf: f4:99:b8:5a:f4:31:54:dc:a6:6b:1f:9e:59:20:1e: b9:05:5c:31:68:d6:55:8e:42:4f:b1:34:84:fe:0b: 1f:3b:64:5c:9b:29:83:33:10:4e:39:4f:11:6e:0e: 3f:a1:3f:70:4d:79:45:61:c4:c8:4b:ed:7c:6a:4c: 16:ff:0b:e7:16:bd:30:72:bd:5f:8c:f7:14:b6:59: 0a:46:0f:6b:49:82:59:2d:a8:55:6c:10:f2:11:b1: 58:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:70:9B:6C:BD:79:86:3D:0C:A1:6C:94:15:D2:80:21:84:1B:DD:DB X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a3:dd:46:83:35:0d:17:81:90:60:4e:7b:f2:ec:d8:6f:6a: 98:62:5a:54:cd:49:f5:e5:6b:2a:c5:3a:30:aa:a5:0f:a4:b5: 7a:0e:06:ed:38:20:24:94:9e:78:b7:9b:ae:42:8f:25:a2:b7: dc:49:4b:0a:9d:61:8c:da:32:17:8b:6d:81:13:b9:a3:d6:a8: 0b:6c:41:c6:16:71:c5:12:d8:d4:42:6d:6c:e9:a4:a1:7d:82: 1c:fe:31:83:4f:1c:07:59:ca:44:5a:43:ac:97:7d:a4:57:57: f3:fb:d5:25:32:11:8f:c2:4e:59:2f:3b:fd:b5:47:9d:c1:bf: 58:f2:21:ca:41:72:c8:cb:c9:dc:2d:39:4f:45:8d:60:f8:7b: e0:0d:43:2b:bd:15:0c:bd:4d:88:a9:4f:8f:46:e5:fc:b4:9f: ff:1f:7e:ab:35:35:41:f9:c5:ff:d3:1a:e8:07:88:7f:a1:29: c7:49:64:56:d5:65:87:8d:79:8f:ec:29:50:30:4f:8b:e9:51: 03:16:3c:0b:72:2b:f6:d4:41:1e:e0:77:6c:1a:e3:aa:1c:89: 63:ac:ba:18:11:da:fb:77:67:e3:4c:e2:fa:d5:8f:29:55:58: a1:64:31:8d:4d:ca:c5:1c:4f:b1:ec:54:33:d2:51:d1:14:cf: ac:65:80:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKGcI6X6f8Drx8bPPgDtqyP1EBOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNTA0MjkxNzU2MDlaFw0yNTA1MDMwMjI2MDlaMDMxMTAvBgNV BAMTKDcwNzA5QjZDQkQ3OTg2M0QwQ0ExNkM5NDE1RDI4MDIxODQxQkREREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSp57N+RjLo4tF1Ubc+h9AwVqP Jwnni0B5YESKx8VINcGsRuJoz/dhCjjlOWvAx1wXaSTd71wFEzgsyQ1CblHUi2Pl V6nUY+aCcslm2QiTRMQ2ISyoiF00Isz3Ea6rU2rlmGNrrIEET7fECUi/8z++9TsF ZVl1berosUL2r+AawLFABoGzEPLiWpuMrrqH5QlzCC50h1Dmn2eQ4fgAg7mwDMIB v/SZuFr0MVTcpmsfnlkgHrkFXDFo1lWOQk+xNIT+Cx87ZFybKYMzEE45TxFuDj+h P3BNeUVhxMhL7XxqTBb/C+cWvTByvV+M9xS2WQpGD2tJglktqFVsEPIRsVixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcHCbbL15hj0MoWyUFdKAIYQb3dswHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCj3UaDNQ0XgZBgTnvy7NhvaphiWlTNSfXl ayrFOjCqpQ+ktXoOBu04ICSUnni3m65CjyWit9xJSwqdYYzaMheLbYETuaPWqAts QcYWccUS2NRCbWzppKF9ghz+MYNPHAdZykRaQ6yXfaRXV/P71SUyEY/CTlkvO/21 R53Bv1jyIcpBcsjLydwtOU9FjWD4e+ANQyu9FQy9TYipT49G5fy0n/8ffqs1NUH5 xf/TGugHiH+hKcdJZFbVZYeNeY/sKVAwT4vpUQMWPAtyK/bUQR7gd2wa46ociWOs uhgR2vt3Z+NM4vrVjylVWKFkMY1NysUcT7HsVDPSUdEUz6xlgPs= -----END CERTIFICATE-----Generated at Wed Apr 30 08:19:19 2025 by rpki-client