$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json) Hash identifier: FWYUvzW+sEhpUPukMXQs4d3Zz+bNIV04WDDoaZlBIgo= Subject key identifier: CA:DD:0B:97:80:30:E0:DE:F5:9D:25:62:99:0D:79:56:F4:18:10:BF Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 68FA23B484ED755A49083B5689FD7F9D7E8722A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft Manifest number: 02A0 Signing time: Tue 05 Aug 2025 21:41:33 +0000 Manifest this update: Tue 05 Aug 2025 21:36:33 +0000 Manifest next update: Fri 08 Aug 2025 23:10:33 +0000 Files and hashes: 1: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: lU7gvDWUYgjBYFENXZi0I9vSejsIGK10ppM2J/7K2I8=) 2: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: nbrMCd1FrZtyUDsSqPOwiezNZhmsRsgvcmYK466mrE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fa:23:b4:84:ed:75:5a:49:08:3b:56:89:fd:7f:9d:7e:87:22:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: Aug 5 21:36:33 2025 GMT Not After : Aug 8 23:10:33 2025 GMT Subject: CN=CADD0B978030E0DEF59D2562990D7956F41810BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:10:2c:ad:d1:9a:25:4e:a3:40:62:ea:13: c3:0d:92:06:56:9b:51:4a:07:c4:34:c7:2e:d4:9a: 2f:15:36:26:ba:fe:aa:c5:48:92:dd:2d:3d:cb:5c: 93:6c:f3:b8:d5:00:ad:d1:9e:52:5d:55:22:38:f4: 32:fa:80:5f:b6:90:de:05:2b:26:5e:c0:ca:aa:6d: 68:71:af:4e:72:68:6b:fa:a5:9c:f4:0b:1c:65:96: 38:09:64:47:2c:3b:87:ca:6b:c0:e4:77:f2:d4:52: 9c:8b:46:cc:45:59:88:39:32:49:f9:d2:95:66:81: 61:f9:80:ae:bb:4b:ef:ef:58:9f:1c:d6:97:1b:f3: 46:16:f8:c8:83:71:e6:e5:93:14:d1:d3:9b:0b:8b: 65:ed:06:f6:4c:d1:1d:49:00:b6:9f:c9:fc:a0:c4: 12:28:a5:1c:26:34:aa:66:60:69:33:dc:99:f7:a1: fb:39:1f:70:bb:d2:b0:8d:76:25:ca:c8:ad:95:44: 3c:cd:cf:aa:eb:df:f8:f8:82:59:78:c5:3a:7e:44: bf:41:16:f3:0a:02:8d:3e:d0:72:e0:6c:8b:7b:36: 38:b0:83:0d:d6:a0:3e:c5:b1:e5:c8:04:a3:59:0d: 7f:04:13:38:59:89:a7:8f:ac:ae:18:15:41:7f:3c: 40:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DD:0B:97:80:30:E0:DE:F5:9D:25:62:99:0D:79:56:F4:18:10:BF X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:6b:71:dc:2f:2f:f0:b8:8c:f2:b1:b2:68:db:69:a3:43:aa: 12:c2:0c:bf:3d:95:86:dd:06:8d:49:a2:c3:a8:1b:2f:dc:1d: 11:11:e5:6b:8c:b3:e1:99:4b:e3:f4:21:4d:a0:9c:90:31:bf: 53:1a:b3:7d:47:f5:9f:51:93:d8:8b:0e:d7:7c:aa:54:25:2c: b2:01:a5:cd:e3:99:f8:bd:b6:44:19:75:9f:d0:62:22:e4:6c: ad:1e:5c:74:dc:37:29:b0:88:93:28:55:6c:8e:43:6c:5f:15: 75:09:72:e3:95:f7:39:2b:c5:de:f9:e9:e2:47:6d:77:ef:c1: d5:e4:6b:48:14:ee:9b:36:84:5d:cc:a6:11:17:95:b3:4b:e7: 22:75:e0:9d:36:2b:7d:b6:88:7b:0a:2e:3a:6e:e6:6f:ee:de: 37:aa:b5:57:ff:2f:95:e9:c0:6f:a9:63:3d:e3:f1:89:b9:1c: 8f:48:fc:64:9d:50:cf:fe:ce:f0:8c:fc:50:c8:a4:f7:5c:4f: a3:af:d4:c9:98:4b:e2:a9:6b:88:1c:6e:91:d1:a3:7d:2f:7c: 4b:00:ac:f3:08:61:62:7d:77:e4:8c:cf:79:03:e2:78:90:b1: 39:87:7a:12:8d:5d:39:63:fc:89:3b:14:3f:67:86:2b:66:58: b5:f2:00:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPojtITtdVpJCDtWif1/nX6HIqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yNTA4MDUyMTM2MzNaFw0yNTA4MDgyMzEwMzNaMDMxMTAvBgNV BAMTKENBREQwQjk3ODAzMEUwREVGNTlEMjU2Mjk5MEQ3OTU2RjQxODEwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFRAsrdGaJU6jQGLqE8MNkgZW m1FKB8Q0xy7Umi8VNia6/qrFSJLdLT3LXJNs87jVAK3RnlJdVSI49DL6gF+2kN4F KyZewMqqbWhxr05yaGv6pZz0CxxlljgJZEcsO4fKa8Dkd/LUUpyLRsxFWYg5Mkn5 0pVmgWH5gK67S+/vWJ8c1pcb80YW+MiDceblkxTR05sLi2XtBvZM0R1JALafyfyg xBIopRwmNKpmYGkz3Jn3ofs5H3C70rCNdiXKyK2VRDzNz6rr3/j4gll4xTp+RL9B FvMKAo0+0HLgbIt7Njiwgw3WoD7FseXIBKNZDX8EEzhZiaePrK4YFUF/PEDfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyt0Ll4Aw4N71nSVimQ15VvQYEL8wHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVrcdwvL/C4jPKxsmjbaaNDqhLCDL89lYbd Bo1JosOoGy/cHRER5WuMs+GZS+P0IU2gnJAxv1Mas31H9Z9Rk9iLDtd8qlQlLLIB pc3jmfi9tkQZdZ/QYiLkbK0eXHTcNymwiJMoVWyOQ2xfFXUJcuOV9zkrxd756eJH bXfvwdXka0gU7ps2hF3MphEXlbNL5yJ14J02K322iHsKLjpu5m/u3jeqtVf/L5Xp wG+pYz3j8Ym5HI9I/GSdUM/+zvCM/FDIpPdcT6Ov1MmYS+Kpa4gcbpHRo30vfEsA rPMIYWJ9d+SMz3kD4niQsTmHehKNXTlj/Ik7FD9nhitmWLXyAPA= -----END CERTIFICATE-----Generated at Thu Aug 7 00:39:00 2025 by rpki-client