$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: elJNqjDcREi2GQUyW0ged+2jW4mMIQmQIQxVKWz7SOM= Subject key identifier: 47:7F:2B:74:EA:B1:F1:E5:12:58:37:51:A4:35:D7:EA:4D:FC:25:C2 Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 70CC68AD4352F9D034C762750ED696A1CEA02D72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 019E Signing time: Sat 19 Apr 2025 08:10:34 +0000 Manifest this update: Sat 19 Apr 2025 08:05:34 +0000 Manifest next update: Tue 22 Apr 2025 18:38:34 +0000 Files and hashes: 1: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: sF8zLAMjgs1FczFI2Z8JpQ/VusAoAJ74LI3j1E4hYto=) 2: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: Qqfn73tDwvByuXuNb7ITThAPW10vEt6qZR2kCo/LFyo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cc:68:ad:43:52:f9:d0:34:c7:62:75:0e:d6:96:a1:ce:a0:2d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Apr 19 08:05:34 2025 GMT Not After : Apr 22 18:38:34 2025 GMT Subject: CN=477F2B74EAB1F1E512583751A435D7EA4DFC25C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cf:c3:c0:aa:d0:23:ef:f6:ad:84:70:79:42: dc:06:93:c3:64:10:38:50:21:5b:0d:61:58:c3:b0: 7e:1f:50:83:64:54:0a:36:df:6d:71:c9:83:34:07: 6a:c0:82:5d:ab:ae:c2:8b:b9:63:e1:e1:71:70:9d: b4:c6:41:07:d5:1d:4c:cc:b9:e1:ac:19:b4:7d:9f: 6f:85:a4:0e:5f:d0:57:a2:2a:44:24:4a:76:98:19: 2a:e7:28:64:76:03:a2:69:d0:b1:13:7c:12:31:9d: 71:17:e4:fc:4d:44:97:9f:60:82:09:aa:04:d1:b5: 30:7a:aa:7c:9e:8e:bb:c0:49:2d:2a:e1:fe:ee:4a: d3:76:da:d5:39:73:3a:02:2f:10:b8:85:69:65:dc: 44:62:f1:e7:83:c3:74:71:31:06:14:b0:a3:c7:20: 30:da:5b:fd:a4:c0:85:15:85:4b:dc:9d:a5:3e:48: 79:13:99:bf:c5:0b:ac:42:6e:4a:b6:45:b4:5f:13: 65:aa:3c:ee:bb:e0:3c:2d:2e:2b:7c:fe:60:c2:be: 83:62:2a:f7:7e:26:99:fe:25:ba:85:f1:20:3e:6c: 2d:15:d9:8a:38:44:44:5e:b3:d3:b0:f2:85:89:81: 18:99:17:cf:63:9a:09:ec:4e:8b:4b:6c:35:4e:2e: dc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7F:2B:74:EA:B1:F1:E5:12:58:37:51:A4:35:D7:EA:4D:FC:25:C2 X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ca:0c:7b:d3:d3:2b:4d:7b:d8:dc:bc:83:5c:2c:db:40:fa: c7:a0:f4:de:7c:78:c0:a8:c2:e7:b7:96:2e:3c:14:b1:a3:b3: a4:e8:cf:15:b5:9a:3e:c5:fc:8c:9c:45:a4:f8:f3:af:c3:a2: 0f:49:f2:4d:06:b2:3c:8d:29:b3:51:30:31:98:8e:e7:1d:d3: 7e:8a:4a:ba:9f:69:74:17:d0:cf:7f:2f:2a:c3:32:78:38:b3: 15:40:5b:33:d7:d7:4d:bb:d4:ab:cd:c6:14:3c:46:2a:88:b1: 47:77:d4:f4:03:8b:2f:76:76:39:59:4b:ea:b0:5f:0b:5d:b8: c1:06:cc:63:2e:cc:6a:b2:73:53:bf:ce:17:1b:57:34:e5:b0: 7e:25:d2:9f:46:6d:67:33:5f:4b:07:a4:ca:b6:a5:6f:b0:71: 9e:00:c1:22:cf:4f:2f:0d:f7:65:65:3e:39:4c:26:08:6d:01: a0:74:f1:2a:5c:be:83:9c:bb:f4:69:36:0a:59:f5:ed:b9:0c: 09:1c:26:17:df:2d:cb:32:9c:26:6a:93:8d:05:e0:fa:bb:05: 3d:49:1a:52:4e:4a:e6:49:86:ba:a2:d9:d1:e1:29:e7:7a:03: 04:db:cf:2d:d0:60:0a:72:59:92:30:86:61:c6:9f:d0:fa:02: b8:76:eb:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMxorUNS+dA0x2J1DtaWoc6gLXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNTA0MTkwODA1MzRaFw0yNTA0MjIxODM4MzRaMDMxMTAvBgNV BAMTKDQ3N0YyQjc0RUFCMUYxRTUxMjU4Mzc1MUE0MzVEN0VBNERGQzI1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClz8PAqtAj7/athHB5QtwGk8Nk EDhQIVsNYVjDsH4fUINkVAo2321xyYM0B2rAgl2rrsKLuWPh4XFwnbTGQQfVHUzM ueGsGbR9n2+FpA5f0FeiKkQkSnaYGSrnKGR2A6Jp0LETfBIxnXEX5PxNRJefYIIJ qgTRtTB6qnyejrvASS0q4f7uStN22tU5czoCLxC4hWll3ERi8eeDw3RxMQYUsKPH IDDaW/2kwIUVhUvcnaU+SHkTmb/FC6xCbkq2RbRfE2WqPO674DwtLit8/mDCvoNi Kvd+Jpn+JbqF8SA+bC0V2Yo4RERes9Ow8oWJgRiZF89jmgnsTotLbDVOLtxPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR38rdOqx8eUSWDdRpDXX6k38JcIwHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjKDHvT0ytNe9jcvINcLNtA+seg9N58eMCo wue3li48FLGjs6TozxW1mj7F/IycRaT486/Dog9J8k0GsjyNKbNRMDGYjucd036K SrqfaXQX0M9/LyrDMng4sxVAWzPX10271KvNxhQ8RiqIsUd31PQDiy92djlZS+qw XwtduMEGzGMuzGqyc1O/zhcbVzTlsH4l0p9GbWczX0sHpMq2pW+wcZ4AwSLPTy8N 92VlPjlMJghtAaB08SpcvoOcu/RpNgpZ9e25DAkcJhffLcsynCZqk40F4Pq7BT1J GlJOSuZJhrqi2dHhKed6AwTbzy3QYApyWZIwhmHGn9D6Arh268w= -----END CERTIFICATE-----Generated at Sat Apr 19 12:08:50 2025 by rpki-client