$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: GHFqNkJyXg60PqHy1eacRpFUQ1L1Ps4NwdaEW7Si6ek= Subject key identifier: 52:4F:96:42:22:B5:EC:E2:53:7F:5A:C1:B9:D8:BF:2D:FC:39:3B:D4 Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 19E613C6C041C96141120DC17849E0B04978374C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: 70 Signing time: Sat 14 Jun 2025 14:30:53 +0000 Manifest this update: Sat 14 Jun 2025 14:25:53 +0000 Manifest next update: Tue 17 Jun 2025 20:17:53 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: llXvyGLPDurj6bmSYN1tz+/ct/cQR7nz/GjhVW22jnQ=) 2: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: D/E7DRxGKIU6AB5ldwllpKb5Vx75IRPm+5vi9EOuB0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e6:13:c6:c0:41:c9:61:41:12:0d:c1:78:49:e0:b0:49:78:37:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Jun 14 14:25:53 2025 GMT Not After : Jun 17 20:17:53 2025 GMT Subject: CN=524F964222B5ECE2537F5AC1B9D8BF2DFC393BD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:45:08:a2:b0:93:fb:0f:e6:64:c3:8d:80: 91:bf:7c:e0:24:b4:cf:6b:4b:a1:ec:86:59:e6:a7: d1:e8:01:40:23:fb:ec:38:3a:0e:68:e9:3a:18:1f: 79:1a:0e:aa:5a:1b:d6:60:c3:a4:3b:31:62:52:fe: c5:3f:fd:39:26:d8:5b:d0:5e:8f:07:87:bf:5b:1b: 01:29:92:b9:4a:ca:20:d9:dd:b6:25:23:e1:41:e9: 3e:1e:9d:b7:eb:53:fb:78:66:37:00:2c:e4:84:38: 78:e2:33:d4:cd:78:e8:28:ae:36:64:e2:f8:ea:a4: 3d:0b:f5:1e:dc:61:5f:20:9a:7c:51:2e:0d:c2:8e: 8c:0d:6e:42:15:c1:a3:bd:ae:a3:f7:81:0c:4e:84: 28:1e:ee:a7:bf:c8:da:93:cc:e0:72:a4:ef:cd:9d: 9a:e2:5d:eb:10:9a:f3:c7:b0:1f:a4:d6:c6:7c:4c: a2:74:ab:e4:21:c8:a7:20:e7:6f:db:f9:2a:ae:82: 07:bd:28:46:12:3d:64:0c:51:d5:b2:46:7c:1a:62: 16:e1:04:3a:e6:ec:ec:27:19:3a:2b:26:91:55:3f: 01:88:80:d7:22:a3:e3:da:85:82:bd:01:2b:a3:07: 8f:ef:25:dd:8d:ac:65:e8:48:82:0e:0c:d0:01:02: bb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4F:96:42:22:B5:EC:E2:53:7F:5A:C1:B9:D8:BF:2D:FC:39:3B:D4 X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:7e:87:75:56:af:56:77:86:72:a1:ba:6a:ec:92:38:d6:e2: f5:44:0d:21:25:92:fc:74:04:8e:66:68:58:17:ae:d8:23:d0: d7:c3:03:4c:68:62:19:ff:04:48:47:1f:b7:89:81:23:2a:38: 89:6b:68:22:b9:d3:6a:e4:1f:5f:5a:3d:e9:3a:e7:e5:b9:9b: 51:87:fc:a2:59:ca:22:24:d8:5d:d5:e9:a0:64:a5:90:f6:6b: 0e:60:fb:fa:77:04:42:a4:e2:17:64:90:40:0f:85:da:8b:f0: fd:5a:07:42:e1:48:7b:c4:75:28:54:bc:9c:ad:2d:42:c4:ef: f1:4e:d8:af:de:8d:48:39:4f:fd:e6:d8:d9:54:ae:dc:93:05: ae:0b:13:be:b0:40:bb:d5:cf:f7:ff:9f:6f:35:ad:a6:11:2e: 42:70:f5:4f:d7:91:5c:d2:3d:8f:8d:01:8e:ff:be:48:76:77: 89:3d:95:30:1b:21:13:4a:77:55:db:39:e9:cf:01:06:3a:fd: 76:0c:42:3d:80:b3:66:4c:2f:84:6a:50:e1:85:2c:0a:6a:fd: c7:28:5c:0d:b6:de:d4:64:62:e9:1e:19:b3:88:9a:c8:c0:6e: 10:22:7b:54:90:85:46:81:95:57:51:54:fc:e7:f7:97:d9:f2: 35:c5:2c:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGeYTxsBByWFBEg3BeEngsEl4N0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTA2MTQxNDI1NTNaFw0yNTA2MTcyMDE3NTNaMDMxMTAvBgNV BAMTKDUyNEY5NjQyMjJCNUVDRTI1MzdGNUFDMUI5RDhCRjJERkMzOTNCRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9EUIorCT+w/mZMONgJG/fOAk tM9rS6Hshlnmp9HoAUAj++w4Og5o6ToYH3kaDqpaG9Zgw6Q7MWJS/sU//Tkm2FvQ Xo8Hh79bGwEpkrlKyiDZ3bYlI+FB6T4enbfrU/t4ZjcALOSEOHjiM9TNeOgorjZk 4vjqpD0L9R7cYV8gmnxRLg3CjowNbkIVwaO9rqP3gQxOhCge7qe/yNqTzOBypO/N nZriXesQmvPHsB+k1sZ8TKJ0q+QhyKcg52/b+Squgge9KEYSPWQMUdWyRnwaYhbh BDrm7OwnGTorJpFVPwGIgNcio+PahYK9ASujB4/vJd2NrGXoSIIODNABArutAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUk+WQiK17OJTf1rBudi/Lfw5O9QwHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAV+h3VWr1Z3hnKhumrskjjW4vVEDSElkvx0 BI5maFgXrtgj0NfDA0xoYhn/BEhHH7eJgSMqOIlraCK502rkH19aPek65+W5m1GH /KJZyiIk2F3V6aBkpZD2aw5g+/p3BEKk4hdkkEAPhdqL8P1aB0LhSHvEdShUvJyt LULE7/FO2K/ejUg5T/3m2NlUrtyTBa4LE76wQLvVz/f/n281raYRLkJw9U/XkVzS PY+NAY7/vkh2d4k9lTAbIRNKd1XbOenPAQY6/XYMQj2As2ZML4RqUOGFLApq/cco XA223tRkYukeGbOImsjAbhAie1SQhUaBlVdRVPzn95fZ8jXFLN8= -----END CERTIFICATE-----Generated at Mon Jun 16 00:01:58 2025 by rpki-client