$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json) Hash identifier: YKDo4KRDuwZsmN1CM8FkQCcYB0w7FujX3g2vwP/zHvs= Subject key identifier: AC:5F:2C:99:A2:D6:18:35:C9:DA:5A:94:83:61:18:D8:64:52:9B:56 Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 74D857730058B845A84A791349E8F99173763930 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft Manifest number: 0299 Signing time: Sun 20 Jul 2025 17:31:29 +0000 Manifest this update: Sun 20 Jul 2025 17:26:29 +0000 Manifest next update: Thu 24 Jul 2025 02:22:29 +0000 Files and hashes: 1: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: nbrMCd1FrZtyUDsSqPOwiezNZhmsRsgvcmYK466mrE4=) 2: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: E+qkUpfVe8CCUcLOKLYSTfYOdg7N7qlcOqU9JnEPI7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 02:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d8:57:73:00:58:b8:45:a8:4a:79:13:49:e8:f9:91:73:76:39:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: Jul 20 17:26:29 2025 GMT Not After : Jul 24 02:22:29 2025 GMT Subject: CN=AC5F2C99A2D61835C9DA5A94836118D864529B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:15:c9:63:5b:a2:a0:0f:d7:77:87:b6:d3: c2:44:16:d6:be:b6:08:b8:b9:53:4b:b9:83:71:41: c2:7a:dc:80:e2:af:70:0e:76:cc:a7:c4:63:21:e3: 5d:f9:56:aa:98:03:37:19:e5:1b:28:a3:76:bf:75: 46:fb:34:7c:2e:50:f8:54:e6:81:8f:9d:b6:e7:a1: 29:04:1c:92:c0:85:57:60:c8:85:09:62:2d:73:2c: ac:99:1b:39:ee:db:c4:52:48:f4:7f:df:10:96:e8: 2c:78:68:e0:fd:1c:0d:39:83:80:76:3f:7a:78:65: ea:40:ca:25:5d:99:1a:81:45:ba:c1:68:48:76:e9: 7f:0e:2b:de:9b:fe:72:82:46:92:f6:b3:ef:c6:c2: f1:ed:47:3a:35:8d:a3:e0:d3:55:89:b1:8d:a5:18: 61:59:94:e3:30:d9:64:e5:67:35:5e:17:3b:de:7e: 0c:d3:03:ac:bc:d2:94:43:2c:99:4a:8e:3e:a7:9f: e6:de:14:de:a0:5d:aa:da:92:e9:a0:0e:d9:a8:ce: ae:7b:77:7f:d6:0b:86:42:b8:b7:9b:55:18:1b:19: d7:e8:0e:76:af:0d:cb:37:7f:fd:0e:44:6a:6a:8d: d2:83:da:eb:c0:d2:c8:bf:13:9f:35:c9:8a:9f:db: 80:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5F:2C:99:A2:D6:18:35:C9:DA:5A:94:83:61:18:D8:64:52:9B:56 X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3a:67:d4:a7:a7:b2:d6:68:39:7d:4f:bc:8a:ac:59:97:4a: 7f:1e:01:e6:e6:77:c1:3c:59:a7:32:49:d6:2b:e2:b0:4b:ad: 56:2f:46:4e:4f:e4:66:3e:46:2d:53:b6:fe:a6:39:99:92:53: 84:65:ad:31:92:e1:6d:85:21:36:cb:04:ce:65:f8:60:89:96: 02:45:d0:21:60:18:46:32:80:cf:74:4f:69:bf:d6:31:5e:59: 2c:23:0c:a0:4d:ee:c0:5e:39:59:6e:69:6a:3a:6a:0f:9e:81: 97:ba:67:1d:19:d6:a3:d6:d2:99:8e:8c:5e:db:dc:d0:c3:4d: 73:68:a8:e7:6d:67:35:94:18:21:de:db:d3:f7:da:ae:6e:3a: 2e:16:3e:b7:9d:03:2d:1a:d7:b7:d7:24:48:63:70:18:cc:b5: 67:51:30:56:29:6f:cf:79:ae:1f:ac:c9:1c:6e:92:56:bd:60: 05:09:10:1d:7b:3d:ab:de:2a:f2:d3:7c:b6:1d:b9:3d:08:35: 77:88:e7:8f:72:d3:ca:1c:04:12:d2:54:5c:b3:a3:ff:97:2f: e5:e3:ab:a1:4c:04:0d:8f:bb:d5:90:d3:aa:5b:a2:69:1e:f4: e9:21:9d:4d:1e:6b:f0:3c:81:a9:3e:83:32:63:8b:bd:cb:1d: 42:1e:50:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNhXcwBYuEWoSnkTSej5kXN2OTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yNTA3MjAxNzI2MjlaFw0yNTA3MjQwMjIyMjlaMDMxMTAvBgNV BAMTKEFDNUYyQzk5QTJENjE4MzVDOURBNUE5NDgzNjExOEQ4NjQ1MjlCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOwxXJY1uioA/Xd4e208JEFta+ tgi4uVNLuYNxQcJ63IDir3AOdsynxGMh4135VqqYAzcZ5Rsoo3a/dUb7NHwuUPhU 5oGPnbbnoSkEHJLAhVdgyIUJYi1zLKyZGznu28RSSPR/3xCW6Cx4aOD9HA05g4B2 P3p4ZepAyiVdmRqBRbrBaEh26X8OK96b/nKCRpL2s+/GwvHtRzo1jaPg01WJsY2l GGFZlOMw2WTlZzVeFzvefgzTA6y80pRDLJlKjj6nn+beFN6gXarakumgDtmozq57 d3/WC4ZCuLebVRgbGdfoDnavDcs3f/0ORGpqjdKD2uvA0si/E581yYqf24CLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrF8smaLWGDXJ2lqUg2EY2GRSm1YwHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI86Z9Snp7LWaDl9T7yKrFmXSn8eAebmd8E8 WacySdYr4rBLrVYvRk5P5GY+Ri1Ttv6mOZmSU4RlrTGS4W2FITbLBM5l+GCJlgJF 0CFgGEYygM90T2m/1jFeWSwjDKBN7sBeOVluaWo6ag+egZe6Zx0Z1qPW0pmOjF7b 3NDDTXNoqOdtZzWUGCHe29P32q5uOi4WPredAy0a17fXJEhjcBjMtWdRMFYpb895 rh+syRxukla9YAUJEB17PaveKvLTfLYduT0INXeI549y08ocBBLSVFyzo/+XL+Xj q6FMBA2Pu9WQ06pbomke9OkhnU0ea/A8gak+gzJji73LHUIeUKg= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:35 2025 by rpki-client