$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: Il5XQ0tfaxEjTPy+myfqj+4CJ34T0sK+B3iB/sMh5SY= Subject key identifier: C0:70:3E:7C:BF:C5:A2:22:44:18:8C:61:64:44:18:D7:72:4A:93:AB Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 4435DCD236D24E8FDEACF3FDF4FBE04F9C562E08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 0261 Signing time: Sat 14 Jun 2025 11:22:03 +0000 Manifest this update: Sat 14 Jun 2025 11:17:03 +0000 Manifest next update: Tue 17 Jun 2025 11:37:03 +0000 Files and hashes: 1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: 8PoVgFfgdv0P+Y4Af6XkrWx9EOtSeERWvAdTwZHIcYM=) 2: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: yY9vttNTs1n7dtaFPhbLoWIq3ARCANlmVa4Wq3+dgJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 11:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:35:dc:d2:36:d2:4e:8f:de:ac:f3:fd:f4:fb:e0:4f:9c:56:2e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Jun 14 11:17:03 2025 GMT Not After : Jun 17 11:37:03 2025 GMT Subject: CN=C0703E7CBFC5A22244188C61644418D7724A93AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:f3:f9:ac:95:4c:df:ab:f9:ef:2f:90:93: 27:64:2a:66:71:fb:b2:24:75:88:c6:09:3f:8d:35: 81:30:83:8b:46:3a:a5:87:0e:0e:13:72:f8:24:84: 1b:81:87:fb:a9:2f:7d:67:a8:e3:36:e7:00:c3:5c: e6:dd:b8:d7:66:44:82:ab:89:27:9b:41:a7:fa:7f: 1f:77:69:e3:9d:6b:0a:a8:95:7e:81:75:8f:69:3c: 8a:0c:25:09:f7:47:5a:1e:02:a0:40:c1:43:47:ef: 51:1a:6a:51:ee:ba:1f:cf:8d:74:2c:bb:b2:a5:b3: 95:04:47:51:3b:d5:63:04:d7:76:d8:ec:7f:8a:d3: ed:fa:7a:0b:6f:d0:40:66:3b:d0:ad:a7:4c:65:e9: 3f:0d:98:95:e4:4c:7a:e1:f7:1a:f5:ab:3d:00:63: 94:84:2a:6a:2f:7b:38:46:86:d2:aa:cc:7f:ed:de: 6f:90:62:1a:52:71:e5:79:4f:5c:74:98:7b:2d:78: a9:ef:fa:45:5f:2f:7c:d2:5c:f9:e9:e6:47:5a:8d: 43:63:cb:dc:2c:d3:bb:89:d2:5d:83:fa:e6:2b:9a: 63:29:74:7e:04:37:3f:be:0e:8e:37:c5:8f:08:67: 86:22:e9:16:df:3b:e0:94:74:03:46:db:f3:4a:a6: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:70:3E:7C:BF:C5:A2:22:44:18:8C:61:64:44:18:D7:72:4A:93:AB X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:b3:a9:a3:56:6d:c6:bd:88:fc:12:ba:ee:38:fd:e7:c1:0c: 7a:65:11:67:db:9f:8a:27:09:9d:7d:e9:5a:81:02:75:cb:73: eb:de:e4:4b:db:a8:fd:f0:a8:4a:09:c1:9e:3a:2c:93:4d:69: 7e:bf:e9:7e:e6:1e:92:3c:96:6a:ea:b8:b8:a5:0d:b3:ab:86: 96:d3:c6:d1:d9:10:36:22:05:3e:5b:c9:11:0e:a8:23:0d:53: 40:40:62:d5:e9:fe:ed:24:3f:59:03:3f:fc:8f:d0:af:7d:c5: 2f:48:c5:74:66:b0:8a:2b:9c:84:5f:88:a2:74:a4:37:a6:99: 2f:9b:20:93:94:95:58:d7:0c:1c:62:c7:db:df:98:fa:fb:38: b2:22:cd:da:09:e9:06:37:b1:cc:3d:9e:e2:82:b4:8e:9a:96: c7:25:61:87:aa:aa:ab:64:25:80:0d:f2:ae:76:0a:8f:7c:e9: 13:67:9e:7a:1e:90:31:ac:ff:6b:65:16:ed:e3:ec:d6:e3:47: 25:4b:a5:f1:55:90:37:cb:2f:03:79:9d:ec:d2:01:34:f5:1f: cc:60:66:47:f0:46:90:27:38:aa:d0:da:c7:b6:50:d0:e4:44: d6:08:0b:7c:68:ed:e4:97:b2:22:e9:14:60:7e:72:05:25:84: 9b:36:4d:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDXc0jbSTo/erPP99PvgT5xWLggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNTA2MTQxMTE3MDNaFw0yNTA2MTcxMTM3MDNaMDMxMTAvBgNV BAMTKEMwNzAzRTdDQkZDNUEyMjI0NDE4OEM2MTY0NDQxOEQ3NzI0QTkzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jvP5rJVM36v57y+QkydkKmZx +7IkdYjGCT+NNYEwg4tGOqWHDg4TcvgkhBuBh/upL31nqOM25wDDXObduNdmRIKr iSebQaf6fx93aeOdawqolX6BdY9pPIoMJQn3R1oeAqBAwUNH71EaalHuuh/PjXQs u7Kls5UER1E71WME13bY7H+K0+36egtv0EBmO9Ctp0xl6T8NmJXkTHrh9xr1qz0A Y5SEKmovezhGhtKqzH/t3m+QYhpSceV5T1x0mHsteKnv+kVfL3zSXPnp5kdajUNj y9ws07uJ0l2D+uYrmmMpdH4ENz++Do43xY8IZ4Yi6RbfO+CUdANG2/NKplbhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwHA+fL/FoiJEGIxhZEQY13JKk6swHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOzqaNWbca9iPwSuu44/efBDHplEWfbn4on CZ196VqBAnXLc+ve5EvbqP3wqEoJwZ46LJNNaX6/6X7mHpI8lmrquLilDbOrhpbT xtHZEDYiBT5byREOqCMNU0BAYtXp/u0kP1kDP/yP0K99xS9IxXRmsIornIRfiKJ0 pDemmS+bIJOUlVjXDBxix9vfmPr7OLIizdoJ6QY3scw9nuKCtI6alsclYYeqqqtk JYAN8q52Co986RNnnnoekDGs/2tlFu3j7NbjRyVLpfFVkDfLLwN5nezSATT1H8xg ZkfwRpAnOKrQ2se2UNDkRNYIC3xo7eSXsiLpFGB+cgUlhJs2TbE= -----END CERTIFICATE-----Generated at Mon Jun 16 04:37:30 2025 by rpki-client