$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json) Hash identifier: wpzaZtb+le+Mdo8s1prAlwGcQ6yajpEhvympf9DqNQ8= Subject key identifier: C3:D6:6F:7D:4B:7B:0E:5E:20:DC:35:4A:5B:56:D4:52:E8:9F:5C:D1 Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 31A7CD5882713254526837CA4F99D056F47F6310 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft Manifest number: 0357 Signing time: Tue 03 Jun 2025 17:12:51 +0000 Manifest this update: Tue 03 Jun 2025 17:07:51 +0000 Manifest next update: Sat 07 Jun 2025 03:56:51 +0000 Files and hashes: 1: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: xbHC5eVzATPQpAVauDRB+xAAFvm/ymq96oTG9PUc1nQ=) 2: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: e6zTKV5eeeBjTOLPA4Uct8apjvBjBaHZhQqPX177Lcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a7:cd:58:82:71:32:54:52:68:37:ca:4f:99:d0:56:f4:7f:63:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Jun 3 17:07:51 2025 GMT Not After : Jun 7 03:56:51 2025 GMT Subject: CN=C3D66F7D4B7B0E5E20DC354A5B56D452E89F5CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b6:b6:76:4e:f1:5c:6b:08:e4:ae:f7:0c:78: a5:59:08:be:75:4f:27:04:bd:04:c6:98:01:b8:98: 7b:06:8c:d8:01:61:c3:2f:9e:6d:5d:62:e1:6c:67: f6:e2:80:22:41:8e:34:89:33:59:a9:27:e4:c8:d6: a7:68:0f:8f:5b:d7:ca:c1:d2:71:80:f2:2d:92:98: 63:c1:63:c3:ce:26:7d:53:0c:95:9f:a5:f4:77:6f: c3:d4:74:7a:ac:30:c4:35:8c:f9:6a:96:5b:be:ad: 9a:2d:13:61:9b:4c:19:91:cf:22:64:45:df:c8:5d: e6:c2:e6:89:c1:d1:c4:25:0b:b6:b9:1e:df:51:a8: d7:65:1e:c5:e4:9d:bb:c8:99:ea:54:91:06:dc:2c: 2c:24:a9:d0:9c:cb:c2:a4:73:63:36:ea:1c:32:60: ff:2a:88:b5:52:9a:87:cf:4b:b1:9a:c5:94:c1:4b: 9b:c2:1b:c1:ff:94:f2:07:b6:e6:22:7e:74:f6:29: 8f:8f:00:7b:29:78:1d:86:95:a1:91:ec:e8:36:4e: 7f:0e:34:48:41:05:4b:28:83:80:40:7c:9d:1e:a4: 06:36:92:73:3d:d4:4c:ff:19:a6:ee:ca:ce:01:db: f8:03:e2:e8:87:85:5d:bb:63:f2:95:ac:1b:07:0c: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D6:6F:7D:4B:7B:0E:5E:20:DC:35:4A:5B:56:D4:52:E8:9F:5C:D1 X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:fa:2d:d5:fc:af:7a:b4:23:de:4b:5d:36:fd:5c:c3:39:81: 3a:b9:93:7d:86:f8:25:ca:6e:3e:9a:30:c6:44:85:5a:09:5b: fa:c6:a7:b3:e9:7c:26:1b:80:80:08:2a:d7:a9:51:b0:89:98: e8:5b:42:80:b5:99:0f:b8:82:d3:b7:3e:d4:83:10:ba:9b:e4: cf:4f:68:03:21:7b:21:97:50:84:f1:64:08:2c:e9:e5:46:89: 39:a2:bc:30:b3:cb:e7:d5:02:f0:e9:c6:4c:f3:c5:19:3b:ff: db:7b:85:cd:6c:cd:72:0a:e0:c6:34:15:09:11:70:ae:b0:44: eb:6c:b1:5f:c9:01:78:fc:41:ad:3e:c4:44:be:2c:52:cc:22: ec:25:88:83:71:3e:fe:ec:04:72:85:6c:d1:ee:a7:92:e9:95: 5c:ae:a1:89:49:2f:81:7e:d2:32:ad:d0:3e:f3:8f:fd:b4:98: 60:cd:d2:34:16:e7:40:66:36:46:11:02:d5:fd:af:5e:6e:08: 68:25:34:1e:91:6e:58:68:e8:87:b9:a8:ae:11:0f:12:45:12: 98:7f:3c:50:5a:58:19:d0:72:ad:77:50:29:9f:66:72:8c:43: 78:78:58:b9:39:eb:8a:04:25:2c:7d:2c:a4:30:05:40:53:68: d5:60:84:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMafNWIJxMlRSaDfKT5nQVvR/YxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yNTA2MDMxNzA3NTFaFw0yNTA2MDcwMzU2NTFaMDMxMTAvBgNV BAMTKEMzRDY2RjdENEI3QjBFNUUyMERDMzU0QTVCNTZENDUyRTg5RjVDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtrZ2TvFcawjkrvcMeKVZCL51 TycEvQTGmAG4mHsGjNgBYcMvnm1dYuFsZ/bigCJBjjSJM1mpJ+TI1qdoD49b18rB 0nGA8i2SmGPBY8POJn1TDJWfpfR3b8PUdHqsMMQ1jPlqllu+rZotE2GbTBmRzyJk Rd/IXebC5onB0cQlC7a5Ht9RqNdlHsXknbvImepUkQbcLCwkqdCcy8Kkc2M26hwy YP8qiLVSmofPS7GaxZTBS5vCG8H/lPIHtuYifnT2KY+PAHspeB2GlaGR7Og2Tn8O NEhBBUsog4BAfJ0epAY2knM91Ez/Gabuys4B2/gD4uiHhV27Y/KVrBsHDKH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw9ZvfUt7Dl4g3DVKW1bUUuifXNEwHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAz MTBGMTAwQ0UzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGD6LdX8r3q0I95LXTb9XMM5gTq5k32G+CXK bj6aMMZEhVoJW/rGp7PpfCYbgIAIKtepUbCJmOhbQoC1mQ+4gtO3PtSDELqb5M9P aAMheyGXUITxZAgs6eVGiTmivDCzy+fVAvDpxkzzxRk7/9t7hc1szXIK4MY0FQkR cK6wROtssV/JAXj8Qa0+xES+LFLMIuwliINxPv7sBHKFbNHup5LplVyuoYlJL4F+ 0jKt0D7zj/20mGDN0jQW50BmNkYRAtX9r15uCGglNB6Rblho6Ie5qK4RDxJFEph/ PFBaWBnQcq13UCmfZnKMQ3h4WLk564oEJSx9LKQwBUBTaNVghMc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:46 2025 by rpki-client