$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: I5hUUyYzBfYYLwh7X6EuVop9JEaypIQpVm/9xhTvX0A= Subject key identifier: 73:54:E8:FD:74:6E:4B:0F:BB:69:AC:10:8A:6E:6A:8B:77:F7:89:4D Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 4542BC3A25F60A728A18B65D652DA7DAC80C48A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 0278 Signing time: Tue 05 Aug 2025 11:52:07 +0000 Manifest this update: Tue 05 Aug 2025 11:47:07 +0000 Manifest next update: Fri 08 Aug 2025 18:27:07 +0000 Files and hashes: 1: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: DisRQXCAVY/15/vvxmLeztdwIkqHu76HzEPZhxvhZvg=) 2: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: 8PoVgFfgdv0P+Y4Af6XkrWx9EOtSeERWvAdTwZHIcYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:42:bc:3a:25:f6:0a:72:8a:18:b6:5d:65:2d:a7:da:c8:0c:48:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Aug 5 11:47:07 2025 GMT Not After : Aug 8 18:27:07 2025 GMT Subject: CN=7354E8FD746E4B0FBB69AC108A6E6A8B77F7894D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:db:a8:dc:0a:63:6f:8c:6b:98:85:a8:cf:0f: aa:7e:b6:e1:12:79:f1:cd:e3:1a:a2:62:69:20:e8: 2c:a3:f4:b3:55:cf:f6:e4:7e:f5:4f:ba:21:4f:85: 53:30:d9:fe:8e:07:3c:e1:a4:ef:e7:9e:bc:ad:c3: b4:d1:26:46:91:ef:77:02:85:d3:85:14:5d:a9:30: 02:41:d0:ea:c2:23:11:78:d8:b9:18:19:d5:28:0f: ab:a6:66:89:b9:e0:bc:76:72:62:67:f5:80:43:d8: 05:49:56:a2:41:55:0a:8e:d0:61:8d:8d:74:5f:19: 9e:08:5c:7d:c5:42:09:a5:4e:0c:28:9c:54:24:ce: eb:e9:0e:e0:d9:0e:19:da:71:70:25:55:09:b4:d6: 46:9e:1b:52:f6:6e:34:e8:c4:8c:ba:2f:ed:92:4d: 58:9a:46:ff:75:6e:83:ed:18:a4:33:54:c0:25:2e: 76:3c:25:e1:b2:af:47:ee:4b:6d:ee:fc:50:4d:cc: 3c:31:ab:b3:fc:c6:a6:e0:0d:a2:ea:4f:55:96:37: 2f:75:19:ec:2b:59:66:9a:e0:d7:c2:36:8c:58:d7: 6e:17:e1:55:79:f7:49:c1:b9:52:57:99:a0:3e:09: 4b:7f:b8:a7:f8:0f:4a:bf:c4:f7:fc:fb:77:26:ae: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:54:E8:FD:74:6E:4B:0F:BB:69:AC:10:8A:6E:6A:8B:77:F7:89:4D X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:f2:f1:78:1d:8d:e9:f3:86:a1:7f:35:f2:d4:9c:1c:8e:59: 02:6f:40:7b:40:ea:e7:87:79:fa:69:90:b9:84:9b:07:25:d1: 23:e1:9d:59:0b:ac:36:51:f9:05:9b:57:20:6d:88:bf:85:06: da:0e:9d:c7:3a:7a:b6:a2:43:29:21:ff:cf:b3:57:fd:26:30: a0:d0:14:df:4e:0d:31:21:e2:68:0b:fa:6f:6a:e8:d6:80:05: 66:5a:f4:f9:cf:6c:b2:de:1d:45:73:b3:5b:a1:f1:aa:f5:13: 9a:ea:e5:87:14:a7:57:2f:2e:60:63:2d:ed:d3:f7:b0:59:dc: a8:31:5d:5c:95:86:96:9d:bd:db:e8:71:65:a9:df:62:f0:e3: fb:f9:73:a0:02:f9:6a:60:9b:c4:2f:8f:0d:9c:b2:8e:d9:5c: 72:5d:61:af:4a:e9:e6:01:00:35:bc:de:0d:5b:ab:6d:90:f1: 82:8d:8e:10:0d:34:7a:6f:7e:97:8a:e7:fc:57:60:69:77:7e: a3:8d:d8:a9:90:c2:aa:0c:81:52:eb:de:36:03:fd:8a:25:b0: 40:84:5c:cb:3e:05:f0:a2:50:90:3e:dc:91:08:aa:17:75:f9: f5:62:03:a4:9b:87:57:b8:f8:7b:0b:db:ec:98:a6:b5:49:91: e2:28:80:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURUK8OiX2CnKKGLZdZS2n2sgMSKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNTA4MDUxMTQ3MDdaFw0yNTA4MDgxODI3MDdaMDMxMTAvBgNV BAMTKDczNTRFOEZENzQ2RTRCMEZCQjY5QUMxMDhBNkU2QThCNzdGNzg5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk26jcCmNvjGuYhajPD6p+tuES efHN4xqiYmkg6Cyj9LNVz/bkfvVPuiFPhVMw2f6OBzzhpO/nnrytw7TRJkaR73cC hdOFFF2pMAJB0OrCIxF42LkYGdUoD6umZom54Lx2cmJn9YBD2AVJVqJBVQqO0GGN jXRfGZ4IXH3FQgmlTgwonFQkzuvpDuDZDhnacXAlVQm01kaeG1L2bjToxIy6L+2S TViaRv91boPtGKQzVMAlLnY8JeGyr0fuS23u/FBNzDwxq7P8xqbgDaLqT1WWNy91 GewrWWaa4NfCNoxY124X4VV590nBuVJXmaA+CUt/uKf4D0q/xPf8+3cmrjh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc1To/XRuSw+7aawQim5qi3f3iU0wHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjy8XgdjenzhqF/NfLUnByOWQJvQHtA6ueH efppkLmEmwcl0SPhnVkLrDZR+QWbVyBtiL+FBtoOncc6eraiQykh/8+zV/0mMKDQ FN9ODTEh4mgL+m9q6NaABWZa9PnPbLLeHUVzs1uh8ar1E5rq5YcUp1cvLmBjLe3T 97BZ3KgxXVyVhpadvdvocWWp32Lw4/v5c6AC+Wpgm8Qvjw2cso7ZXHJdYa9K6eYB ADW83g1bq22Q8YKNjhANNHpvfpeK5/xXYGl3fqON2KmQwqoMgVLr3jYD/YolsECE XMs+BfCiUJA+3JEIqhd1+fViA6Sbh1e4+HsL2+yYprVJkeIogIk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:02 2025 by rpki-client