$ rpki-client -vvf repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft File: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft (raw, json) Hash identifier: mqAQDW1fHbK7sVCmblhS0nFXXxYoy/oNSZssmZ2zs3E= Subject key identifier: 35:EF:97:3F:8B:CD:9B:A4:2F:B5:87:EA:2C:51:04:A7:EA:CA:62:6F Authority key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C Certificate issuer: /CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Certificate serial: 2F42F53370D3BE71BFD33AF815F5ACA638AB11F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft Manifest number: 04F3 Signing time: Tue 22 Jul 2025 06:02:25 +0000 Manifest this update: Tue 22 Jul 2025 05:57:25 +0000 Manifest next update: Fri 25 Jul 2025 10:58:25 +0000 Files and hashes: 1: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: 92iPAvFoV8ZIni26oBvQBCMwojDuPtSnBMptGXhyF7g=) 2: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl (hash: XM/huAvZ/cp3pVGJBsrfnz8YIP1HeBasq61mGKd/PHY=) 3: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: jH+vIlrKU7PfFq1iZrO7cUj2zjNXd2QDgqmIURJ9hHo=) 4: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Y4jHaeY4QidDK/340ECCQ/4I5FQ55qG4YZL2AdrbzPk=) 5: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: NJ/fZulIyr1e7dyoj8v3tiz901wVBYZYjvKtkVFLK3I=) 6: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: Co7QnH1utLTo+OaXOBXDzn1d7u1X3FX72sJ2/V1LcRI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 10:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:42:f5:33:70:d3:be:71:bf:d3:3a:f8:15:f5:ac:a6:38:ab:11:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Validity Not Before: Jul 22 05:57:25 2025 GMT Not After : Jul 25 10:58:25 2025 GMT Subject: CN=35EF973F8BCD9BA42FB587EA2C5104A7EACA626F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:85:d1:a4:83:9a:c5:36:2d:6e:2f:e1:19: 4f:dd:0a:10:ae:42:de:8c:9b:c1:2c:09:bb:69:ca: 97:f7:05:5a:ab:d8:b0:82:da:24:b0:73:34:b0:96: 71:92:34:f5:02:0e:2d:09:ef:76:50:8e:35:18:a4: d9:7f:1f:5f:5b:76:73:c3:a3:aa:68:25:46:3a:3d: 51:6c:07:d9:74:f5:52:5f:ec:80:7d:35:ab:68:ee: ad:f9:e2:d5:40:c8:3d:88:05:b2:fc:ba:f1:4f:82: 83:4c:ca:13:b2:e9:5a:2d:73:08:c8:d8:2f:38:a4: 54:56:a0:70:cb:cd:9b:e6:3e:61:e7:58:92:ce:c4: c7:13:c1:31:a5:58:d4:e1:c3:52:68:e8:19:88:1b: 64:7c:bf:b3:f0:2e:cf:61:f0:f9:88:82:35:4a:cc: 6b:e6:87:1e:ea:b6:36:8f:c2:a5:95:1d:3c:2c:df: a3:52:4a:b9:c0:7d:60:8d:17:14:ba:fc:12:50:75: 98:2c:38:43:27:4c:46:df:91:05:57:e3:c1:44:0f: 92:15:fd:3d:07:d5:ae:4c:de:ab:2f:6f:20:5b:00: 65:5a:88:57:9f:1f:86:ac:0d:08:a2:94:03:4f:e0: 8d:2e:0e:f9:83:6a:73:5c:f2:6c:8a:81:0a:24:82: ad:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EF:97:3F:8B:CD:9B:A4:2F:B5:87:EA:2C:51:04:A7:EA:CA:62:6F X509v3 Authority Key Identifier: keyid:AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:69:ec:75:29:22:27:76:61:f0:57:a0:fc:04:8f:d3:e6:65: 4c:e3:30:ea:0a:88:c0:04:65:0f:2d:03:f8:55:85:70:29:88: 84:62:82:99:8a:be:96:f2:13:7f:d3:ad:e2:57:7e:3b:49:ee: 5a:4a:bc:ff:de:ac:ce:3c:cf:63:6b:74:aa:61:ea:91:51:73: 65:cf:15:1b:a9:54:20:fe:15:96:12:07:dd:53:8f:1c:f0:2e: 41:f7:21:cf:c4:6e:5e:cc:27:20:55:93:6d:b1:fc:1a:1c:7c: 99:57:95:5e:35:29:2b:3b:72:cf:e4:4f:6f:5b:e2:30:2c:82: 24:2b:13:08:fd:2a:f1:77:6a:07:1a:a4:91:fc:16:58:3e:35: 65:3f:98:33:2b:34:3b:45:f0:22:3e:d3:8f:1d:b3:12:aa:5b: 12:47:35:07:dd:e4:63:a8:df:cf:6b:02:4b:a8:c9:09:60:63: f7:c1:75:c1:2c:b2:aa:63:b2:11:e8:2e:87:48:65:d0:e3:4e: cc:14:47:3e:79:c3:3a:83:b7:67:6c:ac:36:83:67:e1:9d:7f: 79:3c:d8:95:d8:b2:ed:a9:7a:36:7f:87:e5:9a:86:90:64:6f: e4:ed:05:bf:e2:5c:c5:1e:e7:2f:93:95:d0:c7:f5:b9:aa:52: 94:d6:5e:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0L1M3DTvnG/0zr4FfWspjirEfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIx MDZBNTk0QzAeFw0yNTA3MjIwNTU3MjVaFw0yNTA3MjUxMDU4MjVaMDMxMTAvBgNV BAMTKDM1RUY5NzNGOEJDRDlCQTQyRkI1ODdFQTJDNTEwNEE3RUFDQTYyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qoXRpIOaxTYtbi/hGU/dChCu Qt6Mm8EsCbtpypf3BVqr2LCC2iSwczSwlnGSNPUCDi0J73ZQjjUYpNl/H19bdnPD o6poJUY6PVFsB9l09VJf7IB9Nato7q354tVAyD2IBbL8uvFPgoNMyhOy6VotcwjI 2C84pFRWoHDLzZvmPmHnWJLOxMcTwTGlWNThw1Jo6BmIG2R8v7PwLs9h8PmIgjVK zGvmhx7qtjaPwqWVHTws36NSSrnAfWCNFxS6/BJQdZgsOEMnTEbfkQVX48FED5IV /T0H1a5M3qsvbyBbAGVaiFefH4asDQiilANP4I0uDvmDanNc8myKgQokgq19AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNe+XP4vNm6QvtYfqLFEEp+rKYm8wHwYDVR0j BBgwFoAUr1LnFt5x7qk1P+qS+/ctohBqWUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMC9BRjUyRTcxNkRF NzFFRUE5MzUzRkVBOTJGQkY3MkRBMjEwNkE1OTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIxMDZB NTk0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJE QTIxMDZBNTk0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApp7HUpIid2YfBXoPwEj9PmZUzjMOoKiMAE ZQ8tA/hVhXApiIRigpmKvpbyE3/TreJXfjtJ7lpKvP/erM48z2NrdKph6pFRc2XP FRupVCD+FZYSB91TjxzwLkH3Ic/Ebl7MJyBVk22x/BocfJlXlV41KSs7cs/kT29b 4jAsgiQrEwj9KvF3agcapJH8Flg+NWU/mDMrNDtF8CI+048dsxKqWxJHNQfd5GOo 389rAkuoyQlgY/fBdcEssqpjshHoLodIZdDjTswURz55wzqDt2dsrDaDZ+Gdf3k8 2JXYsu2pejZ/h+WahpBkb+TtBb/iXMUe5y+TldDH9bmqUpTWXoE= -----END CERTIFICATE-----Generated at Wed Jul 23 02:03:05 2025 by rpki-client