$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: YJgqXxF+heLPPM8hK8+FALqNZvM6n3fIxsnvIk6To08= Subject key identifier: D0:EF:23:A5:EA:B1:84:69:79:ED:F2:06:C7:F4:FF:D9:E6:58:93:71 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 36798E6D0CEDC8F701D0EFAC479A4EFBB75C6568 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 04EE Signing time: Fri 18 Jul 2025 23:00:01 +0000 Manifest this update: Fri 18 Jul 2025 22:55:01 +0000 Manifest next update: Tue 22 Jul 2025 05:13:01 +0000 Files and hashes: 1: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) 2: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) 3: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: IDsiq6nG4cvLl6GTWwVYnKqOY4cbhWVYvHHr00hmL3U=) 4: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 05:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:79:8e:6d:0c:ed:c8:f7:01:d0:ef:ac:47:9a:4e:fb:b7:5c:65:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Jul 18 22:55:01 2025 GMT Not After : Jul 22 05:13:01 2025 GMT Subject: CN=D0EF23A5EAB1846979EDF206C7F4FFD9E6589371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:5c:c1:2f:2e:96:5f:32:14:a1:8a:fb:a9: 5a:87:05:d2:4f:12:4b:82:bf:1f:f6:61:22:29:41: f0:44:fa:96:1b:32:58:2c:ea:25:1f:00:f6:9c:eb: f2:39:51:2c:4a:09:42:80:06:d9:ae:72:28:66:6a: 26:13:3e:d9:30:71:94:2d:00:8d:c2:6b:ad:45:bf: d0:10:da:d5:1f:1d:10:b4:4a:5a:b0:2e:12:ed:11: cd:63:af:58:15:09:c3:94:f3:89:f8:04:93:45:9f: 20:e6:ca:76:f6:50:69:93:0a:51:db:e1:e6:f7:e0: 3b:95:b1:b7:18:a3:73:a4:bf:36:e8:9c:fa:80:40: 02:71:d5:3c:fb:84:5d:fb:0f:34:d1:e6:5d:4c:ce: 2f:5e:d2:e4:3b:3c:46:6a:0a:01:17:5a:65:9c:8a: ce:75:b5:3b:0a:13:13:a2:af:78:17:f1:66:12:fb: 29:23:f7:a6:c5:03:61:15:36:62:d8:42:3b:ab:08: c5:ea:08:f4:b4:49:57:91:cd:e6:f8:ad:f2:d8:31: 80:f7:fe:6c:29:56:3b:a6:54:12:50:75:85:be:a1: fd:7a:c8:dd:49:3e:48:cd:a0:17:57:83:76:11:d6: db:c9:68:b4:b6:aa:f1:10:7d:91:4e:78:8e:91:51: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EF:23:A5:EA:B1:84:69:79:ED:F2:06:C7:F4:FF:D9:E6:58:93:71 X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:5f:7e:d4:59:cb:5d:e0:2f:f8:af:d6:d9:b4:97:29:41:a7: ca:71:bc:0f:2c:99:0e:b5:5c:6e:6f:1d:37:b9:d5:13:b4:f3: 66:a8:97:72:4b:31:97:e2:33:34:b7:a8:15:5b:85:42:93:b5: 6d:e6:56:0a:ed:1a:1c:86:b4:cd:77:eb:75:81:cf:2f:24:11: 5e:a1:b4:4e:49:9b:ef:04:f4:d6:99:6f:51:77:d1:aa:c6:d1: ef:f8:0f:53:b9:28:6a:1d:c9:25:d5:7b:6d:d7:40:fd:70:36: 90:e9:d2:f2:b1:69:99:48:16:c5:f8:c0:38:8c:da:44:f8:4e: f9:88:d9:5e:ff:30:1c:5f:93:ae:66:b7:7e:f3:01:dc:56:99: d9:1a:20:2d:af:3b:77:4c:7e:b6:56:64:d9:af:85:15:b7:ac: 94:1a:71:79:87:b8:31:be:99:23:cf:d0:77:35:54:98:36:25: 78:d5:8e:16:cd:87:26:9d:c7:94:11:ac:b2:d8:8b:10:e0:3f: 71:93:0e:9a:18:d0:a7:d3:90:17:e4:37:a9:3a:0c:86:76:04: 47:ff:ae:2d:a6:15:e1:51:4a:68:f0:6c:f6:27:88:36:a1:0f: 80:80:06:af:ed:0c:fd:aa:ec:77:d2:4c:73:4f:7f:ea:d3:c9: 1e:cc:45:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnmObQztyPcB0O+sR5pO+7dcZWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTA3MTgyMjU1MDFaFw0yNTA3MjIwNTEzMDFaMDMxMTAvBgNV BAMTKEQwRUYyM0E1RUFCMTg0Njk3OUVERjIwNkM3RjRGRkQ5RTY1ODkzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVVzBLy6WXzIUoYr7qVqHBdJP EkuCvx/2YSIpQfBE+pYbMlgs6iUfAPac6/I5USxKCUKABtmucihmaiYTPtkwcZQt AI3Ca61Fv9AQ2tUfHRC0SlqwLhLtEc1jr1gVCcOU84n4BJNFnyDmynb2UGmTClHb 4eb34DuVsbcYo3OkvzbonPqAQAJx1Tz7hF37DzTR5l1Mzi9e0uQ7PEZqCgEXWmWc is51tTsKExOir3gX8WYS+ykj96bFA2EVNmLYQjurCMXqCPS0SVeRzeb4rfLYMYD3 /mwpVjumVBJQdYW+of16yN1JPkjNoBdXg3YR1tvJaLS2qvEQfZFOeI6RUWErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0O8jpeqxhGl57fIGx/T/2eZYk3EwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFfftRZy13gL/iv1tm0lylBp8pxvA8smQ61 XG5vHTe51RO082aol3JLMZfiMzS3qBVbhUKTtW3mVgrtGhyGtM1363WBzy8kEV6h tE5Jm+8E9NaZb1F30arG0e/4D1O5KGodySXVe23XQP1wNpDp0vKxaZlIFsX4wDiM 2kT4TvmI2V7/MBxfk65mt37zAdxWmdkaIC2vO3dMfrZWZNmvhRW3rJQacXmHuDG+ mSPP0Hc1VJg2JXjVjhbNhyadx5QRrLLYixDgP3GTDpoY0KfTkBfkN6k6DIZ2BEf/ ri2mFeFRSmjwbPYniDahD4CABq/tDP2q7HfSTHNPf+rTyR7MRR0= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:22 2025 by rpki-client