$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: fXHfbxtAXdSqjBylbROBeRCl2xtVz4YaBrJGeiJEc4U= Subject key identifier: FA:92:0E:6F:FB:63:53:3A:D3:5D:C7:59:1D:A8:C2:6D:B0:D6:30:D1 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 70309FD8613A407217FD37F2E7140DBC059E250A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 0163 Signing time: Sun 15 Jun 2025 02:31:57 +0000 Manifest this update: Sun 15 Jun 2025 02:26:57 +0000 Manifest next update: Wed 18 Jun 2025 04:11:57 +0000 Files and hashes: 1: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: XBVveKcdf0FB2hn5qDjvAd7GWHExLBTugGjQF3sJK5s=) 2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) 3: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 04:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:30:9f:d8:61:3a:40:72:17:fd:37:f2:e7:14:0d:bc:05:9e:25:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Jun 15 02:26:57 2025 GMT Not After : Jun 18 04:11:57 2025 GMT Subject: CN=FA920E6FFB63533AD35DC7591DA8C26DB0D630D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:37:8f:24:1b:76:9d:e5:cc:25:2d:f0:c1: 0e:da:4f:23:63:33:53:33:28:2b:80:20:6c:ee:56: d5:de:19:d5:81:a0:e9:18:5f:25:0a:86:f1:34:15: 32:5a:1e:a2:49:9a:4a:cf:d2:e2:fb:71:55:0e:6d: 63:19:31:d6:e8:bf:f0:1d:e4:92:51:f9:68:13:e9: e1:ca:87:b9:48:d1:40:3d:de:33:e4:ef:bb:aa:ee: 16:25:cb:a0:7c:e7:18:eb:cf:a6:c3:96:78:24:cb: 31:0d:c5:fc:0f:7f:f2:8d:ad:2e:a9:ad:96:fd:e5: c6:77:76:f8:55:73:1e:11:5b:80:26:2d:a1:04:a4: 88:8c:3f:86:f7:36:5a:2b:1a:51:df:e7:3d:cd:97: c9:7b:4c:d7:92:47:0a:b3:a8:10:65:0d:96:cd:d7: 00:35:55:91:c2:1d:d5:73:d6:9c:c8:89:4c:ed:51: 9c:42:98:df:69:c9:85:69:8d:cc:85:ff:5b:d5:bc: 5c:5b:42:84:1e:ae:32:35:d2:ed:c6:f6:45:3b:98: 79:38:9f:dc:62:f2:c5:5d:ae:5f:ac:31:73:b0:01: 77:60:19:6e:ea:4a:96:a3:0a:d4:45:99:7e:a5:a9: f6:73:32:93:2f:95:18:67:45:bb:8e:d2:c6:6b:fe: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:92:0E:6F:FB:63:53:3A:D3:5D:C7:59:1D:A8:C2:6D:B0:D6:30:D1 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d9:56:68:51:f8:d9:6d:67:b4:2f:bc:fb:0e:4d:a1:17:6d: fc:32:84:d5:03:5b:c5:6a:fb:a6:9d:0b:c3:2b:9a:4d:61:45: 7f:e7:19:02:9f:3e:e7:1f:42:4a:bc:a5:ca:dd:d6:1e:c7:2a: 43:59:34:43:db:d0:51:4f:5d:53:8f:df:ea:ae:64:43:3c:05: 05:5b:2d:85:0d:dd:63:78:03:56:7c:3c:51:87:15:f4:cb:6b: 7c:18:9c:02:32:76:da:b2:bd:e4:46:80:39:f4:68:8e:3e:fc: 78:ce:c7:1b:0d:4b:71:34:a4:35:34:c5:c7:63:29:a3:98:77: 60:03:7c:40:64:c2:46:36:fe:77:5e:8b:99:72:77:ce:ef:59: 66:65:1e:85:44:a2:85:90:bd:91:7a:4b:75:b1:84:bc:b5:cb: ee:b7:70:b4:1b:a7:29:63:aa:dc:1f:4f:46:fb:d5:2c:26:88: 69:fa:d8:c3:a1:21:a2:f7:40:4c:8e:9a:ec:bf:90:1f:80:4f: 5f:40:66:b2:2f:d7:f7:25:03:e6:11:d6:37:53:f3:eb:9f:93: 57:08:7d:a8:21:66:cc:5a:7b:18:ff:af:eb:08:31:01:b6:79: 0b:e2:6b:0c:c2:68:27:5c:bd:4d:c3:3e:6f:f7:29:86:31:5f: 3c:33:3a:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDCf2GE6QHIX/Tfy5xQNvAWeJQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTA2MTUwMjI2NTdaFw0yNTA2MTgwNDExNTdaMDMxMTAvBgNV BAMTKEZBOTIwRTZGRkI2MzUzM0FEMzVEQzc1OTFEQThDMjZEQjBENjMwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwizePJBt2neXMJS3wwQ7aTyNj M1MzKCuAIGzuVtXeGdWBoOkYXyUKhvE0FTJaHqJJmkrP0uL7cVUObWMZMdbov/Ad 5JJR+WgT6eHKh7lI0UA93jPk77uq7hYly6B85xjrz6bDlngkyzENxfwPf/KNrS6p rZb95cZ3dvhVcx4RW4AmLaEEpIiMP4b3NlorGlHf5z3Nl8l7TNeSRwqzqBBlDZbN 1wA1VZHCHdVz1pzIiUztUZxCmN9pyYVpjcyF/1vVvFxbQoQerjI10u3G9kU7mHk4 n9xi8sVdrl+sMXOwAXdgGW7qSpajCtRFmX6lqfZzMpMvlRhnRbuO0sZr/pUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+pIOb/tjUzrTXcdZHajCbbDWMNEwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzZVmhR+NltZ7QvvPsOTaEXbfwyhNUDW8Vq +6adC8Mrmk1hRX/nGQKfPucfQkq8pcrd1h7HKkNZNEPb0FFPXVOP3+quZEM8BQVb LYUN3WN4A1Z8PFGHFfTLa3wYnAIydtqyveRGgDn0aI4+/HjOxxsNS3E0pDU0xcdj KaOYd2ADfEBkwkY2/ndei5lyd87vWWZlHoVEooWQvZF6S3WxhLy1y+63cLQbpylj qtwfT0b71SwmiGn62MOhIaL3QEyOmuy/kB+AT19AZrIv1/clA+YR1jdT8+ufk1cI faghZsxaexj/r+sIMQG2eQviawzCaCdcvU3DPm/3KYYxXzwzOms= -----END CERTIFICATE-----Generated at Mon Jun 16 13:03:12 2025 by rpki-client