$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json) Hash identifier: eRBjgE5bFEDsgy4CD4wwlhisASa7R7wuXu4Vj/FGYN8= Subject key identifier: 9C:4B:9E:20:F1:1F:1D:E5:FA:1B:4D:33:30:81:A9:B4:C6:59:71:FE Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Certificate serial: 17F958FA5AB1AB2DB304C6385C2F49B77CA5EBBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft Manifest number: 043C Signing time: Sun 15 Jun 2025 07:40:02 +0000 Manifest this update: Sun 15 Jun 2025 07:35:02 +0000 Manifest next update: Wed 18 Jun 2025 18:58:02 +0000 Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: vbYHkDapJ0kV+z6IOtrqIcB+SpQRXiBdbFPj1Vw2xtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 18:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f9:58:fa:5a:b1:ab:2d:b3:04:c6:38:5c:2f:49:b7:7c:a5:eb:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Validity Not Before: Jun 15 07:35:02 2025 GMT Not After : Jun 18 18:58:02 2025 GMT Subject: CN=9C4B9E20F11F1DE5FA1B4D333081A9B4C65971FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:1d:08:cc:17:84:7d:34:3d:5b:04:b7:0f: 63:74:68:91:35:40:2b:52:2f:1d:4b:e1:07:45:87: 8d:7d:a2:5b:2a:66:72:86:c2:1b:2b:ed:3b:2e:d8: 3b:31:32:05:e4:d4:bd:e4:37:35:21:8f:05:bd:cd: ac:dd:7a:c1:b9:b2:7d:63:a6:23:fc:72:83:e3:fb: d3:94:93:f4:e7:b9:e5:2f:de:ae:4a:67:5d:22:ec: 97:68:e9:31:e0:2d:7b:83:68:f2:9a:41:6b:e0:70: 40:b1:ac:51:af:39:5c:f1:0d:81:f4:ab:04:7a:f0: 93:4e:ee:51:5a:51:ef:5a:d3:50:f0:2e:d0:13:31: b5:fb:10:3e:0b:91:d3:47:c5:4c:fd:0d:8a:78:59: c9:e7:f4:6c:80:26:d6:cf:42:59:d2:9c:09:0e:46: 0e:1e:a4:05:34:89:ce:c4:75:06:94:78:5c:48:ef: 2e:9d:ed:68:35:bd:3e:1a:4d:be:42:d9:d1:c1:ea: ce:d4:df:e4:68:1c:0f:01:77:ec:fb:b0:47:8c:33: 06:34:2e:a1:64:28:d3:17:f1:65:6f:3e:84:b4:c2: de:da:85:de:99:d8:d5:fc:a7:7a:79:a7:8f:09:ce: d3:66:42:6e:1a:8b:b4:23:6a:fc:f4:4f:27:19:13: ee:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4B:9E:20:F1:1F:1D:E5:FA:1B:4D:33:30:81:A9:B4:C6:59:71:FE X509v3 Authority Key Identifier: keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d1:c2:da:c4:c2:a1:3e:5a:99:e9:ea:30:54:34:40:c7:6c: 81:fb:cf:95:92:fb:8a:65:cf:4b:0a:da:83:7d:14:81:19:9e: 68:7c:71:90:cb:73:46:72:11:6a:0b:76:ec:0e:d1:b5:38:8f: fd:75:5e:30:2d:72:68:8b:93:f2:e3:f2:48:2b:4c:b6:c3:04: 76:2c:8f:87:16:d1:10:f0:8b:b4:e5:48:16:ff:40:87:3e:40: 61:10:e9:2f:74:a4:30:52:25:23:2e:aa:f2:c6:c7:af:6e:95: 85:ed:be:c9:5e:0e:a2:c4:f9:3d:3e:47:7d:48:42:fa:b3:32: 26:9f:88:47:27:b0:48:f3:63:95:54:55:58:dd:ba:c6:82:42: b6:7e:f4:7c:88:5f:72:03:c4:bc:1b:ce:10:4f:23:0d:65:bc: fc:54:e7:e2:60:fb:d7:f0:ee:e3:ad:68:22:6b:cd:9b:f5:d4: 9f:ae:e8:78:9e:aa:31:c1:4b:4a:a2:79:6f:07:c2:46:0d:51: 61:94:a0:42:7f:16:d1:8b:3a:69:e6:87:31:60:de:23:b6:07: cd:16:7f:1c:01:e9:4a:18:4a:b8:57:5b:85:41:c4:28:25:36: 7b:ea:41:ae:f2:7b:53:45:6f:97:76:5c:44:e3:35:9d:19:8f: 64:d5:d3:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF/lY+lqxqy2zBMY4XC9Jt3yl674wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2 QUM4RTQwQzAeFw0yNTA2MTUwNzM1MDJaFw0yNTA2MTgxODU4MDJaMDMxMTAvBgNV BAMTKDlDNEI5RTIwRjExRjFERTVGQTFCNEQzMzMwODFBOUI0QzY1OTcxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lR0IzBeEfTQ9WwS3D2N0aJE1 QCtSLx1L4QdFh419olsqZnKGwhsr7Tsu2DsxMgXk1L3kNzUhjwW9zazdesG5sn1j piP8coPj+9OUk/TnueUv3q5KZ10i7Jdo6THgLXuDaPKaQWvgcECxrFGvOVzxDYH0 qwR68JNO7lFaUe9a01DwLtATMbX7ED4LkdNHxUz9DYp4Wcnn9GyAJtbPQlnSnAkO Rg4epAU0ic7EdQaUeFxI7y6d7Wg1vT4aTb5C2dHB6s7U3+RoHA8Bd+z7sEeMMwY0 LqFkKNMX8WVvPoS0wt7ahd6Z2NX8p3p5p48JztNmQm4ai7Qjavz0TycZE+7rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnEueIPEfHeX6G00zMIGptMZZcf4wHwYDVR0j BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4 RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXRwtrEwqE+Wpnp6jBUNEDHbIH7z5WS+4pl z0sK2oN9FIEZnmh8cZDLc0ZyEWoLduwO0bU4j/11XjAtcmiLk/Lj8kgrTLbDBHYs j4cW0RDwi7TlSBb/QIc+QGEQ6S90pDBSJSMuqvLGx69ulYXtvsleDqLE+T0+R31I QvqzMiafiEcnsEjzY5VUVVjdusaCQrZ+9HyIX3IDxLwbzhBPIw1lvPxU5+Jg+9fw 7uOtaCJrzZv11J+u6HieqjHBS0qieW8HwkYNUWGUoEJ/FtGLOmnmhzFg3iO2B80W fxwB6UoYSrhXW4VBxCglNnvqQa7ye1NFb5d2XETjNZ0Zj2TV05s= -----END CERTIFICATE-----Generated at Tue Jun 17 05:44:08 2025 by rpki-client