$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json) Hash identifier: wVkyb6P+v/L+GbreP0gWw2NPkrFwBgAiiB7aB5gjGQQ= Subject key identifier: 47:D0:29:17:EF:44:E1:1F:E6:09:30:D7:F3:59:DE:5E:14:E2:C3:A1 Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Certificate serial: 5EAF0F556E4DDE78DDA7E56C46E1D62F88202241 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft Manifest number: 0453 Signing time: Thu 07 Aug 2025 05:40:03 +0000 Manifest this update: Thu 07 Aug 2025 05:35:03 +0000 Manifest next update: Sun 10 Aug 2025 08:07:03 +0000 Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: P1/XLcRe84E3dKCs7AkdBhUu+KUXn1yg6NRutqKILCY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:af:0f:55:6e:4d:de:78:dd:a7:e5:6c:46:e1:d6:2f:88:20:22:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Validity Not Before: Aug 7 05:35:03 2025 GMT Not After : Aug 10 08:07:03 2025 GMT Subject: CN=47D02917EF44E11FE60930D7F359DE5E14E2C3A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:03:66:0e:45:49:73:79:0a:65:9f:62:ca:e6: a3:f6:ba:68:13:b1:55:99:7a:6b:50:d1:3d:35:29: bc:dd:01:ab:8c:8d:da:e8:f2:98:e1:0e:ca:a7:53: 22:f4:c8:64:56:f0:ad:a7:a7:ff:f8:59:d9:ca:a7: 29:e3:92:93:e2:d7:cd:c6:3b:df:a1:cc:55:f7:66: f0:4f:ee:ef:5d:1b:27:eb:e3:ca:84:b6:29:1f:47: 19:33:94:20:e2:94:fc:e9:e7:53:ae:43:a8:86:fc: 38:e3:05:0c:b6:ad:c5:f2:44:92:2f:b2:93:7d:35: fd:19:65:44:74:52:f0:c8:75:52:8b:56:0b:75:ae: dd:07:48:f4:65:13:0b:5c:18:9b:79:6b:1c:12:ed: b8:f9:dc:3d:5b:4f:c7:83:ba:ac:ea:52:cc:63:04: a5:59:77:41:77:53:5d:5d:5b:53:7c:f7:95:55:23: 6f:55:0e:94:30:40:ec:43:c7:88:f9:79:b2:f0:6c: 10:a9:7c:5d:b1:ec:a4:54:9c:9d:31:3b:9c:ec:53: 88:0a:d3:e3:7a:01:51:1c:16:21:28:1c:81:bc:d0: 00:5f:9a:d8:40:d5:3b:d7:fb:b9:a8:0d:f1:fd:7e: 56:5c:9b:3c:dd:91:f5:b0:c0:9c:1b:06:d1:82:6b: 49:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D0:29:17:EF:44:E1:1F:E6:09:30:D7:F3:59:DE:5E:14:E2:C3:A1 X509v3 Authority Key Identifier: keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:f8:fe:08:7b:0b:54:0d:ef:bf:e5:d1:c7:bf:e7:7c:94:42: 3c:25:9f:79:72:44:85:39:31:ef:5b:ee:7d:7c:af:35:ba:bd: 3e:3b:9c:0a:14:7c:45:6f:fd:b8:ab:42:f8:de:0a:5a:cb:ce: 9a:0d:4d:b3:5e:61:92:77:37:3d:db:9c:be:36:f1:e7:94:a2: 98:4d:92:6e:24:31:56:72:95:44:11:74:9a:b2:df:62:96:dd: 36:17:0c:21:38:b9:5f:65:90:75:36:39:d0:f1:ad:9d:33:37: da:78:f9:cf:4e:9f:87:2e:3b:09:18:a1:72:ec:b9:e5:18:99: 0c:ef:0f:3d:ee:06:57:02:9c:3e:56:17:0f:31:d7:9b:8a:bd: 2d:32:f1:fd:a6:90:80:3f:b5:93:71:e0:34:4e:2d:c9:50:00: 36:ba:35:dc:08:a4:60:7d:d2:0b:c6:9c:6f:45:bd:5b:c1:37: 31:4b:f4:62:e6:91:ba:ed:73:ed:9d:c8:e1:3e:76:94:a7:2a: 83:74:7b:2d:29:9a:b1:d4:61:22:83:35:08:e9:8b:74:a8:ab: a9:dd:90:2c:b2:42:2f:63:40:8c:53:da:e7:2d:3b:99:40:7c: a0:fe:93:96:e0:a8:5e:c8:4f:78:29:f9:fb:f8:cd:63:81:d3: fb:e8:bf:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXq8PVW5N3njdp+VsRuHWL4ggIkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2 QUM4RTQwQzAeFw0yNTA4MDcwNTM1MDNaFw0yNTA4MTAwODA3MDNaMDMxMTAvBgNV BAMTKDQ3RDAyOTE3RUY0NEUxMUZFNjA5MzBEN0YzNTlERTVFMTRFMkMzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChA2YORUlzeQpln2LK5qP2umgT sVWZemtQ0T01KbzdAauMjdro8pjhDsqnUyL0yGRW8K2np//4WdnKpynjkpPi183G O9+hzFX3ZvBP7u9dGyfr48qEtikfRxkzlCDilPzp51OuQ6iG/DjjBQy2rcXyRJIv spN9Nf0ZZUR0UvDIdVKLVgt1rt0HSPRlEwtcGJt5axwS7bj53D1bT8eDuqzqUsxj BKVZd0F3U11dW1N895VVI29VDpQwQOxDx4j5ebLwbBCpfF2x7KRUnJ0xO5zsU4gK 0+N6AVEcFiEoHIG80ABfmthA1TvX+7moDfH9flZcmzzdkfWwwJwbBtGCa0k5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR9ApF+9E4R/mCTDX81neXhTiw6EwHwYDVR0j BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4 RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHH4/gh7C1QN77/l0ce/53yUQjwln3lyRIU5 Me9b7n18rzW6vT47nAoUfEVv/birQvjeClrLzpoNTbNeYZJ3Nz3bnL428eeUophN km4kMVZylUQRdJqy32KW3TYXDCE4uV9lkHU2OdDxrZ0zN9p4+c9On4cuOwkYoXLs ueUYmQzvDz3uBlcCnD5WFw8x15uKvS0y8f2mkIA/tZNx4DROLclQADa6NdwIpGB9 0gvGnG9FvVvBNzFL9GLmkbrtc+2dyOE+dpSnKoN0ey0pmrHUYSKDNQjpi3Soq6nd kCyyQi9jQIxT2uctO5lAfKD+k5bgqF7IT3gp+fv4zWOB0/vov20= -----END CERTIFICATE-----Generated at Sat Aug 9 05:49:53 2025 by rpki-client