$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: hCicb0eimMp0/ou913KYdcsziYf0hpdIPP9mPJBBkXw= Subject key identifier: 72:6B:8B:7F:E9:0F:C2:CD:E4:4F:78:A4:E0:F4:03:CF:A0:28:2E:E2 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 1A164B4248CD92AB326D461FAF600FF2C0ACA7AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 017A Signing time: Wed 06 Aug 2025 06:12:01 +0000 Manifest this update: Wed 06 Aug 2025 06:07:01 +0000 Manifest next update: Sat 09 Aug 2025 17:12:01 +0000 Files and hashes: 1: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) 2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) 3: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: l2HaMBKAi6Lfpd1UM1fbaIplABPpU5CuTPVPge7KgtY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:16:4b:42:48:cd:92:ab:32:6d:46:1f:af:60:0f:f2:c0:ac:a7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Aug 6 06:07:01 2025 GMT Not After : Aug 9 17:12:01 2025 GMT Subject: CN=726B8B7FE90FC2CDE44F78A4E0F403CFA0282EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:3a:c9:6b:9f:85:f4:29:98:6e:11:e5:a8: 13:30:a1:0b:44:fb:98:b6:9b:e3:f8:ee:9d:fb:b6: 5b:5a:89:ad:df:44:8e:b4:f8:4e:76:e8:7c:70:48: 78:66:c1:2a:6f:a4:d7:ab:3a:e0:46:d0:d8:6d:81: 5e:3a:75:26:12:4a:32:bf:c3:f3:ee:6a:4c:84:58: 26:2a:7c:7f:45:7f:c7:3c:fe:52:27:f8:01:73:7f: d6:2f:a3:95:aa:a8:74:0a:3c:68:9f:82:4b:25:be: f5:c2:b0:52:dd:6d:36:bb:d0:37:bb:30:cf:05:f4: 31:bc:c7:25:5f:80:7e:a7:54:01:d6:af:b0:90:3f: cf:21:1e:f9:e7:9e:a2:27:7e:de:8f:6d:28:75:18: 97:b0:af:9d:4f:c5:a6:db:01:8d:a0:61:9e:96:d4: 50:c8:d7:1f:b6:d9:bf:55:2e:6b:4d:02:d2:70:fa: 9a:c2:e5:db:53:dc:50:c2:fe:89:fe:18:ba:ea:f5: 14:40:ed:bc:09:8c:f1:1a:20:49:a5:a2:96:3b:08: 7d:34:26:39:15:35:32:1f:c1:91:c0:1a:a1:a9:b4: 5a:b0:d1:17:86:bc:c4:89:2c:cd:15:28:df:5a:ad: d8:12:4c:fc:71:28:db:8e:31:dc:47:25:98:dc:0a: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6B:8B:7F:E9:0F:C2:CD:E4:4F:78:A4:E0:F4:03:CF:A0:28:2E:E2 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:5d:8b:23:d0:3e:78:2b:2f:eb:85:a2:42:ed:af:f2:2c:1e: eb:9d:8d:fe:e8:56:cb:89:5f:2e:99:2c:c2:b5:12:ab:96:7e: d3:71:c1:37:40:a5:4b:e9:c2:da:cf:91:15:99:58:db:3f:99: 2d:9e:e8:5d:a2:d4:9b:70:ab:0b:e8:ef:11:34:fb:79:ad:2e: ea:74:1f:9d:5e:e8:2f:cc:8b:aa:b7:92:38:3f:d4:e4:72:d0: 35:98:36:e7:89:a9:02:bb:30:6d:63:17:05:9b:7b:31:d0:82: 24:61:8b:cb:0f:60:15:1b:f0:d2:6f:89:94:ca:1d:05:01:cd: 07:05:73:91:b8:3c:3b:ab:e0:cb:f9:f6:3f:b2:cb:a6:21:b6: 2c:ba:8f:34:b7:9e:19:22:66:a7:3f:dc:1d:52:ee:9c:0e:a0: 1d:97:c8:69:62:9b:79:20:d3:2d:f1:c7:7c:37:d6:a8:2b:b4: 20:3d:3d:48:c2:c3:75:c8:95:6b:cc:fd:cf:00:16:2b:03:d5: f2:88:85:40:5e:be:f3:a8:ee:6b:0c:74:49:5b:9f:86:20:1a: 01:16:86:07:31:b7:e9:e2:9d:fa:50:4e:f1:32:9c:a2:1a:07: 23:43:4d:b2:3f:27:64:9e:ac:33:05:bc:09:d0:3b:ed:d8:47: 8c:4e:3a:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhZLQkjNkqsybUYfr2AP8sCsp68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTA4MDYwNjA3MDFaFw0yNTA4MDkxNzEyMDFaMDMxMTAvBgNV BAMTKDcyNkI4QjdGRTkwRkMyQ0RFNDRGNzhBNEUwRjQwM0NGQTAyODJFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMYjrJa5+F9CmYbhHlqBMwoQtE +5i2m+P47p37tltaia3fRI60+E526HxwSHhmwSpvpNerOuBG0NhtgV46dSYSSjK/ w/PuakyEWCYqfH9Ff8c8/lIn+AFzf9Yvo5WqqHQKPGifgkslvvXCsFLdbTa70De7 MM8F9DG8xyVfgH6nVAHWr7CQP88hHvnnnqInft6PbSh1GJewr51PxabbAY2gYZ6W 1FDI1x+22b9VLmtNAtJw+prC5dtT3FDC/on+GLrq9RRA7bwJjPEaIEmlopY7CH00 JjkVNTIfwZHAGqGptFqw0ReGvMSJLM0VKN9ardgSTPxxKNuOMdxHJZjcCkBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcmuLf+kPws3kT3ik4PQDz6AoLuIwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRdiyPQPngrL+uFokLtr/IsHuudjf7oVsuJ Xy6ZLMK1EquWftNxwTdApUvpwtrPkRWZWNs/mS2e6F2i1Jtwqwvo7xE0+3mtLup0 H51e6C/Mi6q3kjg/1ORy0DWYNueJqQK7MG1jFwWbezHQgiRhi8sPYBUb8NJviZTK HQUBzQcFc5G4PDur4Mv59j+yy6Yhtiy6jzS3nhkiZqc/3B1S7pwOoB2XyGlim3kg 0y3xx3w31qgrtCA9PUjCw3XIlWvM/c8AFisD1fKIhUBevvOo7msMdElbn4YgGgEW hgcxt+ninfpQTvEynKIaByNDTbI/J2SerDMFvAnQO+3YR4xOOl8= -----END CERTIFICATE-----Generated at Thu Aug 7 20:12:16 2025 by rpki-client