$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: oC7MUR8hnANL2gtesowX2gvUQSeVgjsBAAxhHiK5j5I= Subject key identifier: A7:29:D3:3D:E9:5F:6E:30:33:B0:12:11:08:F9:F9:7B:BE:84:2F:E8 Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 1A1DD16C8DBFD72E85FB40B980DA1EE05D32D2EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 04ED Signing time: Sat 19 Jul 2025 14:41:09 +0000 Manifest this update: Sat 19 Jul 2025 14:36:09 +0000 Manifest next update: Tue 22 Jul 2025 19:51:09 +0000 Files and hashes: 1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: hlhS/H2e0GKhI7K6PAi/7wIlSX3bR9uR9a+Y6QvwEa8=) 2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1d:d1:6c:8d:bf:d7:2e:85:fb:40:b9:80:da:1e:e0:5d:32:d2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Jul 19 14:36:09 2025 GMT Not After : Jul 22 19:51:09 2025 GMT Subject: CN=A729D33DE95F6E3033B0121108F9F97BBE842FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:30:f1:17:42:62:76:3e:34:61:b4:f9:69: 5b:ad:6c:62:90:a7:d1:98:20:3a:6e:7d:e5:d9:58: 79:2f:4b:ce:d2:74:44:e5:5e:8c:44:8f:30:d7:74: 5a:1e:ce:83:e6:3d:83:df:ed:03:4c:85:8b:36:93: ef:97:84:d0:9f:b6:24:5c:49:bf:25:7a:23:a7:6b: 40:b7:cf:55:46:40:07:95:ac:04:9c:69:22:ef:98: 2a:19:17:79:f3:61:76:a8:69:30:e2:01:dc:a4:f1: 99:e4:d0:eb:b7:b8:b4:44:42:04:05:78:81:23:9f: 5a:f6:9f:37:82:67:f5:ea:c8:0b:7d:3d:88:b4:33: 89:9d:8c:9c:ea:c2:f6:66:13:32:6a:b3:27:5b:04: f5:39:bc:61:58:34:e4:7e:ad:74:6f:eb:40:13:55: 74:c9:9f:dc:50:ad:13:24:c2:11:44:2f:64:dc:e0: 03:3f:00:16:a4:a1:49:0e:75:fd:98:4e:36:5c:24: 1c:93:5d:70:99:47:d8:cc:bc:9f:37:4e:9c:0f:2a: c9:c3:91:0b:8c:af:93:f2:54:30:a8:06:c2:83:ed: b5:38:e6:47:d6:7a:c3:fb:44:31:81:7e:d3:0f:84: 97:ce:06:af:1d:93:ac:08:8f:f0:57:25:85:07:d5: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:29:D3:3D:E9:5F:6E:30:33:B0:12:11:08:F9:F9:7B:BE:84:2F:E8 X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:07:9e:5d:8c:f2:a5:cc:b7:c0:1e:39:72:3a:ae:ee:53:1f: c4:a5:3b:81:9d:53:16:01:ea:56:1e:68:16:85:ed:f7:bd:cc: bd:93:89:57:65:5a:a5:72:0b:4d:32:82:5c:13:90:99:98:40: da:6b:20:61:ab:ed:77:5f:40:6c:25:6c:22:02:e3:d1:61:bb: 1e:70:47:25:84:56:56:d3:e7:26:39:3d:9c:1d:d4:c8:15:2d: 26:2b:c4:b3:1e:e4:a5:e0:3e:0d:55:3e:84:19:5c:72:9d:5b: d9:d5:f7:4b:0a:59:c3:95:11:49:8f:02:e2:5f:c1:4a:0f:90: 59:c3:cc:ce:1f:e7:13:f7:5a:8a:7d:f3:db:f4:e4:5e:1b:fd: d0:ac:fa:b7:8e:b9:4c:90:14:45:de:9a:42:d4:50:36:14:da: f8:d7:ff:6f:97:64:5d:dc:24:07:ca:6e:28:9b:5f:ad:54:4b: 3e:07:79:37:b7:bf:94:c0:52:50:c1:4e:ad:af:e7:11:8f:ac: d4:92:0d:cc:e6:03:9c:fb:36:cc:58:bb:99:99:a3:51:cd:56: 75:c1:71:7d:49:df:a4:9a:7b:85:d0:4c:2a:f4:fb:2e:2b:ef: d8:4f:51:b2:1b:b6:f2:13:aa:2e:1f:36:bf:f7:c7:33:83:2e: 53:48:00:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGh3RbI2/1y6F+0C5gNoe4F0y0uswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNTA3MTkxNDM2MDlaFw0yNTA3MjIxOTUxMDlaMDMxMTAvBgNV BAMTKEE3MjlEMzNERTk1RjZFMzAzM0IwMTIxMTA4RjlGOTdCQkU4NDJGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGXjDxF0Jidj40YbT5aVutbGKQ p9GYIDpufeXZWHkvS87SdETlXoxEjzDXdFoezoPmPYPf7QNMhYs2k++XhNCftiRc Sb8leiOna0C3z1VGQAeVrAScaSLvmCoZF3nzYXaoaTDiAdyk8Znk0Ou3uLREQgQF eIEjn1r2nzeCZ/XqyAt9PYi0M4mdjJzqwvZmEzJqsydbBPU5vGFYNOR+rXRv60AT VXTJn9xQrRMkwhFEL2Tc4AM/ABakoUkOdf2YTjZcJByTXXCZR9jMvJ83TpwPKsnD kQuMr5PyVDCoBsKD7bU45kfWesP7RDGBftMPhJfOBq8dk6wIj/BXJYUH1YS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpynTPelfbjAzsBIRCPn5e76EL+gwHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkHnl2M8qXMt8AeOXI6ru5TH8SlO4GdUxYB 6lYeaBaF7fe9zL2TiVdlWqVyC00yglwTkJmYQNprIGGr7XdfQGwlbCIC49Fhux5w RyWEVlbT5yY5PZwd1MgVLSYrxLMe5KXgPg1VPoQZXHKdW9nV90sKWcOVEUmPAuJf wUoPkFnDzM4f5xP3Wop989v05F4b/dCs+reOuUyQFEXemkLUUDYU2vjX/2+XZF3c JAfKbiibX61USz4HeTe3v5TAUlDBTq2v5xGPrNSSDczmA5z7NsxYu5mZo1HNVnXB cX1J36Sae4XQTCr0+y4r79hPUbIbtvITqi4fNr/3xzODLlNIAJg= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:42 2025 by rpki-client