$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: jcoz/Q7sEHJGitpaAYSk1CN1jvH3rfZplDIYWsrZIiw= Subject key identifier: 14:17:49:71:23:94:DD:65:43:E2:A8:06:AE:28:2F:84:BB:1D:4E:47 Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 760C466E281A53DB46449744F34F48E3E67BA3F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 024C Signing time: Mon 28 Apr 2025 12:12:01 +0000 Manifest this update: Mon 28 Apr 2025 12:07:01 +0000 Manifest next update: Thu 01 May 2025 14:04:01 +0000 Files and hashes: 1: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: tXk/XG+ZP7h39/cmSdODRbt0JanmmhuuEgRKM2Ao5wk=) 2: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: 8PoVgFfgdv0P+Y4Af6XkrWx9EOtSeERWvAdTwZHIcYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0c:46:6e:28:1a:53:db:46:44:97:44:f3:4f:48:e3:e6:7b:a3:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Apr 28 12:07:01 2025 GMT Not After : May 1 14:04:01 2025 GMT Subject: CN=141749712394DD6543E2A806AE282F84BB1D4E47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:f0:17:f4:42:6e:55:26:1f:8e:e7:ac:38: 2c:6f:b8:c2:cc:9d:3f:4b:18:f5:8b:87:c8:7d:51: c2:4c:53:9f:d3:c6:cb:77:c4:ec:d4:e9:d9:5d:cb: fe:37:44:8b:fd:0e:22:34:be:f4:a8:bf:3a:68:18: d0:f8:83:ef:cb:31:c0:29:fe:2e:16:2b:6b:01:21: 43:b5:a1:f5:04:73:05:bf:47:1b:30:36:c4:3d:6c: 75:f4:e5:ac:cc:a9:1d:6c:1b:61:49:61:ac:f5:ff: 80:4b:b6:7d:57:fd:99:83:2e:81:91:f1:21:4e:5f: 73:a6:4e:de:bf:a3:62:92:02:5e:c9:24:1e:c7:b7: 36:1b:e1:6b:21:60:6b:cc:ca:ae:b0:1a:95:44:73: 62:f2:2f:29:9d:c0:2c:00:95:c6:dd:27:2e:8d:d3: 83:2a:de:64:17:7d:b6:25:13:8a:1d:ad:3d:68:14: 29:f1:82:d9:85:58:e6:55:68:cb:27:00:63:ef:47: c7:42:52:af:98:42:e9:cd:23:2e:a1:44:81:ec:e9: 46:7d:18:9f:88:e5:ca:c9:bd:fe:09:0b:fa:72:c5: 62:ee:b9:a5:4a:3a:bd:60:4d:f5:b9:67:41:2b:91: 19:c9:35:14:fc:a8:3b:3e:fe:00:e2:9a:65:38:75: 2b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:17:49:71:23:94:DD:65:43:E2:A8:06:AE:28:2F:84:BB:1D:4E:47 X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8c:1b:41:59:18:02:cf:c4:72:5f:be:12:88:ab:30:e7:20: c1:d0:52:21:bd:34:6a:16:52:85:c7:76:e6:62:e0:e8:7e:4c: 0d:0a:0b:dd:dc:f2:fc:91:fc:f4:69:5f:c3:42:81:f3:24:1b: 7a:38:4d:99:36:ac:a9:55:e1:f1:7f:95:28:ec:72:9d:b3:1b: e6:4a:57:6f:47:68:80:c3:85:39:26:e0:75:3f:c9:33:bd:ec: 01:c8:d7:7c:42:d4:eb:7c:2e:1a:1c:82:62:dd:15:81:6c:1a: 71:c7:f2:6e:b5:f4:ef:97:58:97:2d:57:d0:af:60:e4:d1:4f: d5:55:7c:c9:8c:1e:56:10:89:ad:d8:05:37:98:e2:58:ef:e8: 94:eb:75:c6:40:7f:11:25:a9:64:33:6b:57:ca:ad:51:86:13: 1d:b9:95:fc:61:d8:12:ff:76:4a:8b:1e:66:51:65:d5:0e:49: ed:d6:f5:89:4c:3d:0c:f1:22:d4:b3:e2:42:7e:17:3b:05:51: aa:3d:55:fd:dc:5e:44:42:05:13:d9:ef:7f:1c:49:24:0e:26: 12:59:42:8a:fa:69:77:09:86:b4:1f:c7:6c:5f:c3:d4:36:8c: 18:dc:e4:d1:d9:27:20:a0:22:42:e8:5b:45:7b:9e:e4:bc:bb: f5:0e:46:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgxGbigaU9tGRJdE809I4+Z7o/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNTA0MjgxMjA3MDFaFw0yNTA1MDExNDA0MDFaMDMxMTAvBgNV BAMTKDE0MTc0OTcxMjM5NERENjU0M0UyQTgwNkFFMjgyRjg0QkIxRDRFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1/AX9EJuVSYfjuesOCxvuMLM nT9LGPWLh8h9UcJMU5/Txst3xOzU6dldy/43RIv9DiI0vvSovzpoGND4g+/LMcAp /i4WK2sBIUO1ofUEcwW/RxswNsQ9bHX05azMqR1sG2FJYaz1/4BLtn1X/ZmDLoGR 8SFOX3OmTt6/o2KSAl7JJB7HtzYb4WshYGvMyq6wGpVEc2LyLymdwCwAlcbdJy6N 04Mq3mQXfbYlE4odrT1oFCnxgtmFWOZVaMsnAGPvR8dCUq+YQunNIy6hRIHs6UZ9 GJ+I5crJvf4JC/pyxWLuuaVKOr1gTfW5Z0ErkRnJNRT8qDs+/gDimmU4dSslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFBdJcSOU3WVD4qgGrigvhLsdTkcwHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaMG0FZGALPxHJfvhKIqzDnIMHQUiG9NGoW UoXHduZi4Oh+TA0KC93c8vyR/PRpX8NCgfMkG3o4TZk2rKlV4fF/lSjscp2zG+ZK V29HaIDDhTkm4HU/yTO97AHI13xC1Ot8LhocgmLdFYFsGnHH8m619O+XWJctV9Cv YOTRT9VVfMmMHlYQia3YBTeY4ljv6JTrdcZAfxElqWQza1fKrVGGEx25lfxh2BL/ dkqLHmZRZdUOSe3W9YlMPQzxItSz4kJ+FzsFUao9Vf3cXkRCBRPZ738cSSQOJhJZ Qor6aXcJhrQfx2xfw9Q2jBjc5NHZJyCgIkLoW0V7nuS8u/UORvY= -----END CERTIFICATE-----Generated at Wed Apr 30 05:26:54 2025 by rpki-client