$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: RkEpmlg3AcvRpCdyznzn+aywt6BPulm8HZCYhqTEDDM= Subject key identifier: C1:A7:3A:9B:9B:3E:D3:6C:DA:26:7B:57:A8:06:C2:64:1F:E1:73:31 Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 210EB9F9E29AE532F8F43E20D3275B5E84E851F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 04DE Signing time: Sun 15 Jun 2025 08:01:10 +0000 Manifest this update: Sun 15 Jun 2025 07:56:10 +0000 Manifest next update: Wed 18 Jun 2025 18:20:10 +0000 Files and hashes: 1: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=) 2: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: 7T7PbxheyBzkpE2ICMzaz+dmn2/+CBaoqajM8QsvgZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 18:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0e:b9:f9:e2:9a:e5:32:f8:f4:3e:20:d3:27:5b:5e:84:e8:51:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Jun 15 07:56:10 2025 GMT Not After : Jun 18 18:20:10 2025 GMT Subject: CN=C1A73A9B9B3ED36CDA267B57A806C2641FE17331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:44:a4:cd:68:be:1f:24:af:56:bf:3f:9b: 97:d6:b0:a7:fd:0a:0e:de:e0:86:d4:09:d3:46:83: b0:70:37:44:53:a7:78:e7:2b:28:a6:89:7b:e0:c6: 6e:8c:5d:3c:3b:24:1c:61:4d:e5:18:26:e9:d9:9b: f4:5c:28:97:ac:92:40:17:e1:87:e6:6e:a5:a6:ee: 43:24:df:de:41:0b:c9:5f:7f:cc:d7:09:82:01:50: c3:95:ae:47:37:3d:3d:96:37:dd:8d:c7:53:bd:ef: ad:a5:e2:98:64:27:8b:01:71:3c:0f:5d:d1:e3:bf: 3e:09:36:6d:e2:b9:28:f4:fc:f7:cc:e1:63:ac:a6: 4b:80:70:87:69:c1:ba:73:81:24:29:05:01:0d:71: a4:07:f9:94:32:a2:97:32:71:3e:96:b5:07:28:dd: 01:97:80:0b:e5:81:1b:44:1f:ce:2e:75:aa:89:be: b0:8a:62:48:4d:c7:ac:1c:3c:7d:a6:cb:06:78:ce: f0:83:4f:03:eb:ff:67:64:2a:ea:18:c0:f7:ba:48: df:c1:02:15:d2:23:d9:eb:67:16:f1:f7:69:52:4c: 1b:e3:99:6c:b4:5b:67:3e:27:b1:12:c8:ea:3e:93: 76:b1:b0:74:7c:5f:5e:0f:cf:4a:ce:4c:a2:97:17: ba:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A7:3A:9B:9B:3E:D3:6C:DA:26:7B:57:A8:06:C2:64:1F:E1:73:31 X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:08:16:44:27:f4:12:f3:d3:78:b9:02:9a:b7:58:48:34:1b: 9a:b4:99:ba:57:11:58:38:3c:02:d6:90:01:34:63:51:0a:10: eb:68:36:4a:63:33:d5:2f:74:dc:a1:1d:ee:46:10:f1:e5:f6: 45:29:18:ca:40:67:da:50:49:e0:1d:e0:96:e3:7c:bf:0b:99: f3:b4:86:fc:98:47:3a:4f:e1:d7:2c:cf:01:68:a9:58:e5:80: e3:30:0d:ea:f9:a9:ab:9a:29:4f:a4:dc:03:03:dc:d8:42:df: 44:50:1d:a9:ce:50:47:ea:39:56:36:8f:cc:bf:e1:92:41:45: 5e:a0:d2:da:00:c7:a1:22:a5:a2:fa:11:02:3e:2d:9b:9a:e7: b2:88:3b:b6:c7:e1:d2:e2:c1:99:5b:78:8d:8e:16:75:f4:75: 93:60:f9:9a:68:f1:d8:e0:30:f2:63:c2:42:6a:d2:dc:13:71: 42:b9:a5:ce:12:dc:d6:65:75:2f:9c:db:da:3e:12:2b:4d:d1: c5:94:75:49:0f:4f:df:b3:7e:4c:f5:bd:2c:df:72:b0:c5:00: a5:6a:86:78:1e:05:b1:08:8c:5a:35:5b:25:92:12:f6:40:e5: 99:ff:58:b7:81:b7:a8:f2:f1:2e:60:cb:ba:21:41:77:f5:30: 9b:13:e5:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQ65+eKa5TL49D4g0ydbXoToUfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNTA2MTUwNzU2MTBaFw0yNTA2MTgxODIwMTBaMDMxMTAvBgNV BAMTKEMxQTczQTlCOUIzRUQzNkNEQTI2N0I1N0E4MDZDMjY0MUZFMTczMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2kSkzWi+HySvVr8/m5fWsKf9 Cg7e4IbUCdNGg7BwN0RTp3jnKyimiXvgxm6MXTw7JBxhTeUYJunZm/RcKJeskkAX 4YfmbqWm7kMk395BC8lff8zXCYIBUMOVrkc3PT2WN92Nx1O9762l4phkJ4sBcTwP XdHjvz4JNm3iuSj0/PfM4WOspkuAcIdpwbpzgSQpBQENcaQH+ZQyopcycT6WtQco 3QGXgAvlgRtEH84udaqJvrCKYkhNx6wcPH2mywZ4zvCDTwPr/2dkKuoYwPe6SN/B AhXSI9nrZxbx92lSTBvjmWy0W2c+J7ESyOo+k3axsHR8X14Pz0rOTKKXF7otAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwac6m5s+02zaJntXqAbCZB/hczEwHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEIFkQn9BLz03i5Apq3WEg0G5q0mbpXEVg4 PALWkAE0Y1EKEOtoNkpjM9UvdNyhHe5GEPHl9kUpGMpAZ9pQSeAd4JbjfL8LmfO0 hvyYRzpP4dcszwFoqVjlgOMwDer5qauaKU+k3AMD3NhC30RQHanOUEfqOVY2j8y/ 4ZJBRV6g0toAx6EipaL6EQI+LZua57KIO7bH4dLiwZlbeI2OFnX0dZNg+Zpo8djg MPJjwkJq0twTcUK5pc4S3NZldS+c29o+EitN0cWUdUkPT9+zfkz1vSzfcrDFAKVq hngeBbEIjFo1WyWSEvZA5Zn/WLeBt6jy8S5gy7ohQXf1MJsT5Y0= -----END CERTIFICATE-----Generated at Mon Jun 16 11:17:35 2025 by rpki-client