$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: 7PyjA88CJA3kT66AbAp+5Qa/qYJ2xrCfn9LhwRI/cVw= Subject key identifier: 4A:C9:83:88:4F:BC:87:20:15:D9:76:48:26:48:82:72:D3:B6:73:8D Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 153047691B0A45319E378FF670AEE87148832308 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 01EA Signing time: Sun 15 Jun 2025 20:01:30 +0000 Manifest this update: Sun 15 Jun 2025 19:56:30 +0000 Manifest next update: Wed 18 Jun 2025 23:28:30 +0000 Files and hashes: 1: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: mK5ioNK+ySeVnDysnsg7Css96QiSgyV+s9K03pbPjXg=) 2: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 23:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:30:47:69:1b:0a:45:31:9e:37:8f:f6:70:ae:e8:71:48:83:23:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Jun 15 19:56:30 2025 GMT Not After : Jun 18 23:28:30 2025 GMT Subject: CN=4AC983884FBC872015D9764826488272D3B6738D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:b3:1a:95:ec:4f:f4:3b:e6:df:bb:8b:7f: 02:bf:d8:72:51:10:e6:ba:20:9f:de:4e:39:b5:d8: 2c:56:35:e6:a9:e7:ad:c4:8b:f7:1c:da:37:99:d2: 2f:8a:62:3f:c8:10:cc:85:bc:ff:1a:6f:83:ca:48: e3:f2:c7:99:b3:00:cb:a9:2d:49:ac:fd:d2:ff:3d: fe:a1:11:ba:f4:2a:86:83:4d:3d:44:37:db:0b:0f: 16:77:3f:06:76:8c:3e:aa:8f:83:79:bd:40:11:14: 08:e2:b6:32:9a:58:36:10:05:11:97:4a:34:1a:b0: 05:ad:5b:34:3f:1b:ed:97:2e:27:e6:6a:f3:a1:02: fd:af:db:bb:aa:bb:18:4f:c2:17:ba:fe:c1:c6:cf: 57:d8:42:d1:f0:f6:24:cb:24:57:64:19:28:82:6f: 8e:b2:cb:e5:f2:d8:c9:a1:10:9a:62:6f:f4:10:a6: 7f:18:ff:30:84:a9:2d:28:f4:aa:7b:e5:54:98:cd: e5:c1:bc:d7:84:91:40:fe:23:f0:d5:b6:cd:5b:b0: 9f:8f:37:c8:9f:a3:b7:8d:95:55:a1:f0:65:81:80: a8:69:e8:f6:64:ed:fe:7b:04:14:26:9d:4e:e0:11: 8e:28:3b:e5:0e:cc:c5:11:31:65:f9:a3:08:2a:3e: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C9:83:88:4F:BC:87:20:15:D9:76:48:26:48:82:72:D3:B6:73:8D X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:51:12:9e:66:1f:b5:27:34:1b:61:f0:51:fa:c0:91:ca:38: 79:d4:93:23:89:e1:2f:07:6e:10:ce:40:ec:e7:d2:24:f5:14: 82:7a:8a:a6:2c:5d:30:b9:3c:0b:92:28:36:5c:17:a3:f2:b3: 68:03:e4:bc:d7:8d:47:a9:f6:21:83:01:8e:ea:10:d9:ab:a1: 4e:cf:96:98:0f:94:26:f9:b0:26:ac:05:fb:9f:9d:15:6d:28: d1:3e:0b:c5:25:f4:fc:e0:04:4d:4e:03:74:48:bd:b4:45:d5: 55:6b:08:e5:e8:85:9d:c7:3a:31:3c:89:6f:57:e0:57:4b:3b: 91:f7:77:bb:14:9d:f2:ab:66:fd:24:b5:43:22:7f:84:b5:1b: b6:76:66:b8:b5:d9:c0:c8:62:b4:4d:a4:94:88:96:04:23:ed: 58:40:97:78:10:aa:05:71:2b:dd:45:ee:56:9b:8f:28:7a:ac: 58:5d:a0:93:50:9a:d9:d2:6a:59:5b:19:80:86:7f:2c:2d:76: 98:08:92:9a:c5:ed:c5:3c:77:e8:94:51:54:3c:16:48:13:d2: d1:1e:fa:40:a7:51:e8:de:ad:26:48:6e:30:a1:46:bd:44:3f: 93:f8:d0:cd:04:5a:dd:67:a3:e7:45:09:c5:08:ee:87:9b:4f: 88:07:dc:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFTBHaRsKRTGeN4/2cK7ocUiDIwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNTA2MTUxOTU2MzBaFw0yNTA2MTgyMzI4MzBaMDMxMTAvBgNV BAMTKDRBQzk4Mzg4NEZCQzg3MjAxNUQ5NzY0ODI2NDg4MjcyRDNCNjczOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4prMalexP9Dvm37uLfwK/2HJR EOa6IJ/eTjm12CxWNeap563Ei/cc2jeZ0i+KYj/IEMyFvP8ab4PKSOPyx5mzAMup LUms/dL/Pf6hEbr0KoaDTT1EN9sLDxZ3PwZ2jD6qj4N5vUARFAjitjKaWDYQBRGX SjQasAWtWzQ/G+2XLifmavOhAv2v27uquxhPwhe6/sHGz1fYQtHw9iTLJFdkGSiC b46yy+Xy2MmhEJpib/QQpn8Y/zCEqS0o9Kp75VSYzeXBvNeEkUD+I/DVts1bsJ+P N8ifo7eNlVWh8GWBgKhp6PZk7f57BBQmnU7gEY4oO+UOzMURMWX5owgqPisDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSsmDiE+8hyAV2XZIJkiCctO2c40wHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZREp5mH7UnNBth8FH6wJHKOHnUkyOJ4S8H bhDOQOzn0iT1FIJ6iqYsXTC5PAuSKDZcF6Pys2gD5LzXjUep9iGDAY7qENmroU7P lpgPlCb5sCasBfufnRVtKNE+C8Ul9PzgBE1OA3RIvbRF1VVrCOXohZ3HOjE8iW9X 4FdLO5H3d7sUnfKrZv0ktUMif4S1G7Z2Zri12cDIYrRNpJSIlgQj7VhAl3gQqgVx K91F7labjyh6rFhdoJNQmtnSallbGYCGfywtdpgIkprF7cU8d+iUUVQ8FkgT0tEe +kCnUejerSZIbjChRr1EP5P40M0EWt1no+dFCcUI7oebT4gH3EU= -----END CERTIFICATE-----Generated at Tue Jun 17 06:31:41 2025 by rpki-client