$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: JJkDQygyuUv6hXd2Wlr7pnOe9arKwSlk+kAPajiZX9U= Subject key identifier: E5:E4:D4:8D:8D:4A:A5:35:0F:55:A9:83:39:CC:ED:F7:90:96:69:7A Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 37FC359549C71D097E277411A23E180DFCC7737E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 0271 Signing time: Sun 20 Jul 2025 02:02:03 +0000 Manifest this update: Sun 20 Jul 2025 01:57:03 +0000 Manifest next update: Wed 23 Jul 2025 07:41:03 +0000 Files and hashes: 1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: 8PoVgFfgdv0P+Y4Af6XkrWx9EOtSeERWvAdTwZHIcYM=) 2: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: vkEtvytTBT5b4ymHuJToShzN5g1TFr87Nv+M1ceG1VA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:fc:35:95:49:c7:1d:09:7e:27:74:11:a2:3e:18:0d:fc:c7:73:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Jul 20 01:57:03 2025 GMT Not After : Jul 23 07:41:03 2025 GMT Subject: CN=E5E4D48D8D4AA5350F55A98339CCEDF79096697A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:29:62:af:9c:aa:f8:cf:98:f1:b9:ab:a9: 82:e0:a9:7f:27:4c:0a:1b:63:51:0d:39:75:4a:91: 4d:c0:42:d2:b0:c4:72:4f:8a:5b:91:84:60:e2:d6: 34:da:d9:9d:12:70:7f:56:3b:50:7f:20:3b:91:53: ea:1e:28:79:0e:7a:7e:46:c1:c8:a6:8f:bb:ac:fb: c6:1f:9f:71:da:48:cf:89:10:db:8d:9b:21:fb:34: 6e:e8:fe:82:b5:02:83:06:e7:95:a0:a3:05:ad:bb: 98:5a:8c:ff:0a:b6:de:d1:a8:75:4f:5b:28:32:33: e0:ef:9b:95:cf:db:30:6e:fc:7b:92:0f:77:72:84: 3f:c7:d0:ec:58:9b:60:87:c8:4b:98:ca:bd:c1:ec: 93:34:04:75:89:c4:69:ac:7d:4f:0f:c2:2d:a0:60: 62:3b:30:1d:47:2a:14:ac:10:fe:5d:ac:14:a0:32: 20:a5:50:ba:18:67:0f:f0:b1:24:95:f3:ce:12:a7: b4:a9:d6:e4:0d:16:b2:fc:d3:0a:68:10:47:5b:11: 20:8b:a7:df:87:bc:95:bf:3b:66:24:28:74:7c:af: 1c:20:41:fa:34:54:b2:7b:08:01:eb:37:de:4f:45: aa:90:df:0d:e6:2d:09:3c:84:5f:e7:bb:4c:17:db: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E4:D4:8D:8D:4A:A5:35:0F:55:A9:83:39:CC:ED:F7:90:96:69:7A X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b7:92:9b:c3:53:8c:03:12:b1:70:92:ab:3b:98:23:f8:5b: 0d:3d:b9:b4:9c:12:05:a7:9c:02:05:6d:27:a5:cc:6b:8d:06: 41:93:ec:ba:6a:d4:67:39:0e:19:3a:7a:25:4f:48:72:b1:8e: 6c:f6:99:2a:49:29:20:5a:81:32:2c:7d:4e:de:c8:97:61:c0: f1:98:18:fc:69:fa:63:ea:5e:b4:f4:88:ba:c7:06:27:54:e8: fe:8e:d0:b0:24:dc:61:95:60:93:e4:87:02:0b:6f:8c:1b:13: a4:1f:a5:2b:95:cf:4a:e4:ce:1c:39:41:c7:28:b1:54:03:dc: 87:79:66:a9:28:77:73:79:6b:28:46:7a:05:c1:5f:61:8c:f5: 18:9a:c1:26:dd:8f:58:e3:8b:c3:d5:fc:fd:d2:ed:e0:a6:29: 1b:43:06:7a:bb:97:6d:22:66:40:99:20:4f:e8:34:f2:e3:06: 9b:2c:26:cd:4a:c6:e6:5e:61:dc:51:53:e2:85:06:7d:30:3a: 1d:1e:e2:f7:62:ff:a2:39:52:36:59:70:ed:9e:cb:60:b2:6e: 9c:38:4f:51:8d:62:ef:c1:7f:75:fd:a0:4b:f6:1c:33:1a:4e: 33:40:4e:ff:ec:61:b8:98:5d:03:3d:6d:ef:8d:19:02:fe:ae: ba:df:82:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN/w1lUnHHQl+J3QRoj4YDfzHc34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNTA3MjAwMTU3MDNaFw0yNTA3MjMwNzQxMDNaMDMxMTAvBgNV BAMTKEU1RTRENDhEOEQ0QUE1MzUwRjU1QTk4MzM5Q0NFREY3OTA5NjY5N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNpClir5yq+M+Y8bmrqYLgqX8n TAobY1ENOXVKkU3AQtKwxHJPiluRhGDi1jTa2Z0ScH9WO1B/IDuRU+oeKHkOen5G wcimj7us+8Yfn3HaSM+JENuNmyH7NG7o/oK1AoMG55WgowWtu5hajP8Ktt7RqHVP WygyM+Dvm5XP2zBu/HuSD3dyhD/H0OxYm2CHyEuYyr3B7JM0BHWJxGmsfU8Pwi2g YGI7MB1HKhSsEP5drBSgMiClULoYZw/wsSSV884Sp7Sp1uQNFrL80wpoEEdbESCL p9+HvJW/O2YkKHR8rxwgQfo0VLJ7CAHrN95PRaqQ3w3mLQk8hF/nu0wX2+XjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5eTUjY1KpTUPVamDOczt95CWaXowHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAW3kpvDU4wDErFwkqs7mCP4Ww09ubScEgWn nAIFbSelzGuNBkGT7Lpq1Gc5Dhk6eiVPSHKxjmz2mSpJKSBagTIsfU7eyJdhwPGY GPxp+mPqXrT0iLrHBidU6P6O0LAk3GGVYJPkhwILb4wbE6QfpSuVz0rkzhw5Qcco sVQD3Id5Zqkod3N5ayhGegXBX2GM9RiawSbdj1jji8PV/P3S7eCmKRtDBnq7l20i ZkCZIE/oNPLjBpssJs1KxuZeYdxRU+KFBn0wOh0e4vdi/6I5UjZZcO2ey2Cybpw4 T1GNYu/Bf3X9oEv2HDMaTjNATv/sYbiYXQM9be+NGQL+rrrfgg0= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:20 2025 by rpki-client