$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: Lu9C4qIwQI3L765ef8gQf6FGg0Y1PXJf/pDNAqsaEAA= Subject key identifier: 1E:72:D6:17:89:34:13:01:A1:0C:A6:EA:7E:2B:DE:4F:87:AD:52:F3 Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 79A500DFE4EEE026B2318E5A7BD0C460F1C0152B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 024B Signing time: Sun 20 Jul 2025 00:21:36 +0000 Manifest this update: Sun 20 Jul 2025 00:16:36 +0000 Manifest next update: Wed 23 Jul 2025 06:48:36 +0000 Files and hashes: 1: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: K4U8d+sUzMLgrI4fy436tf9syDLx6SvZlYhSkGTWcb8=) 2: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo=) 3: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=) 4: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: wYKdN9jigVT91wNZiGhQMI6FmJDEP5lRRQxK0jQu02c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a5:00:df:e4:ee:e0:26:b2:31:8e:5a:7b:d0:c4:60:f1:c0:15:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Jul 20 00:16:36 2025 GMT Not After : Jul 23 06:48:36 2025 GMT Subject: CN=1E72D61789341301A10CA6EA7E2BDE4F87AD52F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:31:6b:37:ef:aa:42:17:68:a9:07:b6:89: 4f:91:fd:35:11:e5:35:0d:63:a3:8f:3f:46:80:0c: 00:30:11:fc:4d:e7:e6:fc:69:17:2b:b6:58:a8:ed: 10:e2:65:0b:e6:5f:c2:34:10:7f:67:0a:f9:50:53: 97:f4:09:7d:41:c1:e8:95:a5:ee:b0:bd:ac:44:8c: 7c:6d:ea:a8:d3:9b:97:22:28:98:ca:cf:f9:66:7a: 37:9e:8b:15:3f:97:17:54:f6:6c:e8:ab:5e:b0:0e: 67:0b:45:a7:1c:b3:40:6e:ac:8f:cc:c2:e3:ef:63: 42:c6:6e:06:14:52:6e:7b:67:4e:6c:d9:3f:33:6d: 21:d4:ee:0e:4f:cb:d7:99:54:be:39:6d:c3:2f:b7: c9:b6:91:00:63:c6:14:6e:42:dd:dd:20:46:b4:53: 58:14:fa:64:1f:a3:18:4b:bf:43:f2:c8:67:44:25: ef:ed:f5:26:09:a9:dd:fb:3c:5e:59:04:58:87:76: df:64:e2:95:5d:aa:58:f6:08:d5:9f:a1:0d:39:3d: 93:04:b4:7a:90:bc:50:29:bd:5a:eb:f2:58:f6:2b: f2:bc:9b:99:55:c1:05:95:c1:9a:00:cb:a4:95:60: 8b:9f:23:e5:9d:97:9d:b8:79:93:cf:9b:a4:ed:b2: 52:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:72:D6:17:89:34:13:01:A1:0C:A6:EA:7E:2B:DE:4F:87:AD:52:F3 X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:61:79:0d:4f:2d:34:30:9c:d1:54:fe:ba:84:07:fe:d7:ef: af:08:dc:a2:97:2b:f4:36:3d:bb:2a:08:01:57:00:71:7d:50: 37:ff:ea:77:95:36:66:11:bb:97:02:08:5a:db:52:46:0b:e3: 85:de:0d:e7:af:8d:25:38:a7:86:fe:e0:a8:ce:63:91:c4:d9: ac:82:74:b7:e1:b2:4e:9a:62:ab:02:23:26:bb:2b:47:f5:96: 37:33:cf:04:1f:61:87:21:01:b9:be:d5:7f:db:da:61:b1:d7: ec:02:bf:64:d6:b6:37:73:22:6e:a8:12:ee:f3:53:e7:0a:23: 13:c0:26:b8:7b:aa:2b:7a:63:e1:a7:38:04:cd:7f:57:52:07: d2:ad:5a:27:dc:41:3c:14:17:33:ae:93:5f:8e:ab:75:46:f9: 31:2e:de:4c:60:7f:70:01:c7:0e:fc:c4:c3:ee:99:c4:06:a2: 33:16:cc:6f:70:be:7a:5a:d0:a4:ee:02:79:b1:e9:dc:fc:78: b2:9d:ec:f5:6e:dc:23:9c:82:32:14:e3:dd:f0:45:d0:d8:d9: be:00:8e:76:e7:7f:34:7a:ca:f7:ec:db:2f:b3:6a:f4:dc:8e: f6:d3:ea:0f:c5:c9:3e:c7:82:53:03:a7:76:fa:4b:be:ab:5a: 62:61:a2:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaUA3+Tu4CayMY5ae9DEYPHAFSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNTA3MjAwMDE2MzZaFw0yNTA3MjMwNjQ4MzZaMDMxMTAvBgNV BAMTKDFFNzJENjE3ODkzNDEzMDFBMTBDQTZFQTdFMkJERTRGODdBRDUyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPTFrN++qQhdoqQe2iU+R/TUR 5TUNY6OPP0aADAAwEfxN5+b8aRcrtlio7RDiZQvmX8I0EH9nCvlQU5f0CX1BweiV pe6wvaxEjHxt6qjTm5ciKJjKz/lmejeeixU/lxdU9mzoq16wDmcLRaccs0BurI/M wuPvY0LGbgYUUm57Z05s2T8zbSHU7g5Py9eZVL45bcMvt8m2kQBjxhRuQt3dIEa0 U1gU+mQfoxhLv0PyyGdEJe/t9SYJqd37PF5ZBFiHdt9k4pVdqlj2CNWfoQ05PZME tHqQvFApvVrr8lj2K/K8m5lVwQWVwZoAy6SVYIufI+Wdl524eZPPm6TtslJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHnLWF4k0EwGhDKbqfiveT4etUvMwHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxheQ1PLTQwnNFU/rqEB/7X768I3KKXK/Q2 PbsqCAFXAHF9UDf/6neVNmYRu5cCCFrbUkYL44XeDeevjSU4p4b+4KjOY5HE2ayC dLfhsk6aYqsCIya7K0f1ljczzwQfYYchAbm+1X/b2mGx1+wCv2TWtjdzIm6oEu7z U+cKIxPAJrh7qit6Y+GnOATNf1dSB9KtWifcQTwUFzOuk1+Oq3VG+TEu3kxgf3AB xw78xMPumcQGojMWzG9wvnpa0KTuAnmx6dz8eLKd7PVu3COcgjIU493wRdDY2b4A jnbnfzR6yvfs2y+zavTcjvbT6g/FyT7HglMDp3b6S76rWmJhoj4= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:17 2025 by rpki-client