$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json) Hash identifier: DsaqcxNl66mA/aBGcHLOOOC0PQxWyBeVgBLY0+FMY88= Subject key identifier: 91:28:47:F2:20:F5:D6:25:2E:63:9A:8A:57:3B:61:54:D3:C4:FC:EB Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Certificate serial: 1CB951C6E68FC29A361A7DBF131B89F466E4D544 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft Manifest number: 044C Signing time: Tue 22 Jul 2025 13:50:02 +0000 Manifest this update: Tue 22 Jul 2025 13:45:02 +0000 Manifest next update: Fri 25 Jul 2025 22:46:02 +0000 Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: 6FjgvobKVIviDiUjUE/9+t72kw6nroUIeHQEixlGml8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b9:51:c6:e6:8f:c2:9a:36:1a:7d:bf:13:1b:89:f4:66:e4:d5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Validity Not Before: Jul 22 13:45:02 2025 GMT Not After : Jul 25 22:46:02 2025 GMT Subject: CN=912847F220F5D6252E639A8A573B6154D3C4FCEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0a:c1:9e:09:10:cf:74:0d:2e:89:14:df:64: e0:07:2f:64:de:8d:02:8f:c1:b1:82:bd:01:c2:94: 2a:2e:d7:de:50:b3:5a:b1:7d:9c:07:3c:ba:a5:3f: cb:be:03:71:91:7f:55:eb:09:6d:ed:a0:10:79:83: f2:a8:5a:94:eb:f7:4f:70:79:04:01:48:83:60:c7: e5:6b:3f:d1:72:82:f1:1e:e1:1e:fd:dd:45:39:f0: 8e:1b:15:75:82:37:01:11:c6:cf:6e:46:1a:bc:1b: b4:c6:4c:8f:ff:87:99:62:f1:aa:ba:7a:03:04:ae: f6:05:a6:10:7e:03:53:65:8f:c6:fd:f3:fc:89:22: 58:f3:ae:ec:2d:7f:d8:12:15:ab:9a:08:32:d0:85: cd:63:6c:9e:c4:5d:f5:0a:a7:e5:47:bc:56:a1:de: 96:6a:50:aa:f5:03:ac:26:10:f5:8c:8d:90:3a:67: b8:10:9c:a8:57:69:9a:37:f7:9c:82:78:fd:25:a1: ba:2b:1a:b9:d4:b6:b0:68:5a:d3:ec:7f:a4:5f:b0: e0:b2:02:0f:54:ad:6d:29:bc:15:b9:53:d3:b6:26: e3:bd:a0:59:8c:5a:35:43:6a:28:53:98:8e:94:45: 03:d7:29:08:49:81:48:1e:9a:5c:bf:13:b1:2c:1b: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:28:47:F2:20:F5:D6:25:2E:63:9A:8A:57:3B:61:54:D3:C4:FC:EB X509v3 Authority Key Identifier: keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:72:d6:d0:70:ca:50:20:42:bc:4f:53:df:bc:2e:91:c4:dd: 95:ec:5c:0d:08:d4:a4:32:63:af:1e:c4:dd:c7:36:bb:38:b4: 28:69:3d:1d:9a:f8:cd:52:db:00:7b:75:82:bc:10:87:74:0a: 85:c4:37:ea:b2:2f:66:72:0f:1b:6d:21:77:5e:0f:5f:03:c9: b9:40:6d:b9:91:cc:4b:64:d7:34:f6:94:17:6a:85:b2:30:51: 1c:1d:62:91:0c:c9:a7:27:af:83:e4:ad:fe:ca:2d:41:87:bf: 50:2c:6e:ec:a4:3a:49:7c:23:4d:91:38:63:01:52:25:f6:3a: 24:6b:99:78:70:8c:13:b3:5a:67:bb:60:6c:3a:16:0c:26:fe: 27:35:74:08:7b:23:a9:62:88:34:77:4c:37:55:95:b2:f9:67: 71:31:39:52:65:d0:57:30:0c:64:f8:28:73:2f:f5:ae:c8:74: e4:13:68:95:da:b5:6f:6d:a6:d7:12:ce:85:4f:cb:e0:02:18: c1:c2:0e:41:20:5b:96:69:2e:c1:56:d1:39:bc:a8:4a:21:0c: 8d:81:d8:95:22:f6:c2:e5:16:1c:88:b7:40:ca:c0:60:46:5c: 7c:91:51:c0:1a:a8:a4:d5:0a:bc:30:db:f7:9f:36:09:64:a7: d5:41:5d:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLlRxuaPwpo2Gn2/ExuJ9Gbk1UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2 QUM4RTQwQzAeFw0yNTA3MjIxMzQ1MDJaFw0yNTA3MjUyMjQ2MDJaMDMxMTAvBgNV BAMTKDkxMjg0N0YyMjBGNUQ2MjUyRTYzOUE4QTU3M0I2MTU0RDNDNEZDRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCsGeCRDPdA0uiRTfZOAHL2Te jQKPwbGCvQHClCou195Qs1qxfZwHPLqlP8u+A3GRf1XrCW3toBB5g/KoWpTr909w eQQBSINgx+VrP9FygvEe4R793UU58I4bFXWCNwERxs9uRhq8G7TGTI//h5li8aq6 egMErvYFphB+A1Nlj8b98/yJIljzruwtf9gSFauaCDLQhc1jbJ7EXfUKp+VHvFah 3pZqUKr1A6wmEPWMjZA6Z7gQnKhXaZo395yCeP0loborGrnUtrBoWtPsf6RfsOCy Ag9UrW0pvBW5U9O2JuO9oFmMWjVDaihTmI6URQPXKQhJgUgemly/E7EsG6+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkShH8iD11iUuY5qKVzthVNPE/OswHwYDVR0j BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4 RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVy1tBwylAgQrxPU9+8LpHE3ZXsXA0I1KQy Y68exN3HNrs4tChpPR2a+M1S2wB7dYK8EId0CoXEN+qyL2ZyDxttIXdeD18DyblA bbmRzEtk1zT2lBdqhbIwURwdYpEMyacnr4Pkrf7KLUGHv1AsbuykOkl8I02ROGMB UiX2OiRrmXhwjBOzWme7YGw6Fgwm/ic1dAh7I6liiDR3TDdVlbL5Z3ExOVJl0Fcw DGT4KHMv9a7IdOQTaJXatW9tptcSzoVPy+ACGMHCDkEgW5ZpLsFW0Tm8qEohDI2B 2JUi9sLlFhyIt0DKwGBGXHyRUcAaqKTVCrww2/efNglkp9VBXbA= -----END CERTIFICATE-----Generated at Wed Jul 23 02:00:13 2025 by rpki-client