$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: AvrmtofcVRqE9lO0oMnGD+Zvru+QbG7RIsjNdJ4+6uQ= Subject key identifier: C2:60:BA:C5:ED:89:C1:B1:21:85:FB:8A:40:77:6E:1B:EC:78:DF:A8 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 77544C9F42944C640387DDF7F4047DB7E234E719 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 04BF Signing time: Sat 05 Apr 2025 09:30:01 +0000 Manifest this update: Sat 05 Apr 2025 09:25:01 +0000 Manifest next update: Tue 08 Apr 2025 13:24:01 +0000 Files and hashes: 1: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: c1TMxh3Nuprk09A+BhTUU45OC0hyQXoEZrQ5likNeMk=) 2: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: yKj/LcaLHzBONx9eDhSrcYY44Dxzt/MgNKH5+9rrMKk=) 3: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: +gn5K58E6ZIpYG1JbRIaPtWowpbPT7Kl7zJzF2LuH+w=) 4: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: 1/KGFTQyobxhAVI8Z6Ox8PIFy70waImQe4L6pe/5zlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:54:4c:9f:42:94:4c:64:03:87:dd:f7:f4:04:7d:b7:e2:34:e7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Apr 5 09:25:01 2025 GMT Not After : Apr 8 13:24:01 2025 GMT Subject: CN=C260BAC5ED89C1B12185FB8A40776E1BEC78DFA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e8:14:9c:fd:dd:65:83:2c:af:30:3f:a9:eb: 24:a0:c2:fa:c1:48:7c:0e:1b:16:f1:da:d6:c6:a8: ff:c2:e4:33:0a:86:a2:f6:4e:e5:3c:92:9b:a8:55: 60:3c:a8:07:c5:5d:73:84:d4:e5:6f:7f:5b:07:94: 86:fe:09:2b:c5:0d:35:dc:2d:fa:48:45:ee:6d:56: c9:12:5b:c7:6a:97:48:53:bd:b9:19:61:d3:b3:d6: 03:33:16:e1:77:78:22:04:64:4f:fa:27:54:75:9b: 33:7b:7e:a6:36:3f:33:45:2f:7f:90:36:3d:2e:05: 12:14:f3:24:45:51:b9:15:82:7c:02:8a:73:de:f2: 90:4f:e7:47:11:f0:33:7e:69:32:50:08:17:8e:67: 2e:80:ca:ff:2b:2b:be:d2:c7:62:03:d0:49:19:59: a7:c6:12:21:03:19:a9:52:f9:d0:b0:65:10:ec:b6: 3a:a5:d4:e8:e5:fb:7f:10:e0:b9:19:f6:d6:22:33: ef:2e:c3:74:d0:6b:6a:36:83:be:71:11:56:0c:16: 3d:bc:2a:0c:b4:1f:e4:86:b3:e9:54:96:0a:13:e7: 2f:04:64:a7:ea:17:03:b4:46:87:d9:20:91:28:4b: 72:4a:c1:36:64:2d:06:8c:61:a1:bb:fb:ce:c8:ba: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:60:BA:C5:ED:89:C1:B1:21:85:FB:8A:40:77:6E:1B:EC:78:DF:A8 X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:3c:41:a0:fe:53:28:d0:f9:d6:50:73:10:df:27:35:a1:75: b4:ac:b1:30:81:dd:36:70:db:3a:e4:4d:8f:8d:11:71:c7:38: 8e:de:f5:fc:32:72:5e:ad:19:30:69:61:b5:bf:a4:ab:ee:9c: ed:3d:ff:a5:2c:98:10:08:c8:fe:5f:c6:90:19:2c:8b:0f:68: c9:ce:0d:1a:c9:7c:53:7a:59:fa:e0:aa:17:a8:e7:18:96:f3: cb:42:8c:52:ff:01:ca:ca:73:a3:b0:7e:6e:5f:71:b1:a7:77: 21:69:69:c5:1b:3c:a0:d9:7b:7e:6c:13:3e:d0:d8:79:5f:38: ee:e3:79:94:2b:5e:60:2d:db:2b:0d:57:a7:22:cb:88:ac:d5: 78:1d:19:ff:fa:b6:f2:b0:99:f9:ad:55:23:04:d3:f0:d5:19: 3f:fc:c3:28:38:a6:38:9b:e2:0b:8a:c2:e0:36:60:e0:b2:b5: d9:80:12:6a:c1:47:83:dd:61:b1:bd:68:3d:2b:35:ff:17:34: e5:ee:35:d8:99:a0:1d:b4:e1:e7:9c:e2:1f:0c:db:af:a0:30: d9:54:3c:a1:f1:8b:0e:42:39:68:e6:74:cc:ae:3c:6f:ab:6a: f7:88:75:ef:28:94:f0:2e:af:12:d6:e1:d6:3e:ec:0e:8f:ef: 96:05:99:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1RMn0KUTGQDh9339AR9t+I05xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTA0MDUwOTI1MDFaFw0yNTA0MDgxMzI0MDFaMDMxMTAvBgNV BAMTKEMyNjBCQUM1RUQ4OUMxQjEyMTg1RkI4QTQwNzc2RTFCRUM3OERGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD6BSc/d1lgyyvMD+p6ySgwvrB SHwOGxbx2tbGqP/C5DMKhqL2TuU8kpuoVWA8qAfFXXOE1OVvf1sHlIb+CSvFDTXc LfpIRe5tVskSW8dql0hTvbkZYdOz1gMzFuF3eCIEZE/6J1R1mzN7fqY2PzNFL3+Q Nj0uBRIU8yRFUbkVgnwCinPe8pBP50cR8DN+aTJQCBeOZy6Ayv8rK77Sx2ID0EkZ WafGEiEDGalS+dCwZRDstjql1Ojl+38Q4LkZ9tYiM+8uw3TQa2o2g75xEVYMFj28 Kgy0H+SGs+lUlgoT5y8EZKfqFwO0RofZIJEoS3JKwTZkLQaMYaG7+87Iuj5fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwmC6xe2JwbEhhfuKQHduG+x436gwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGE8QaD+UyjQ+dZQcxDfJzWhdbSssTCB3TZw 2zrkTY+NEXHHOI7e9fwycl6tGTBpYbW/pKvunO09/6UsmBAIyP5fxpAZLIsPaMnO DRrJfFN6Wfrgqheo5xiW88tCjFL/AcrKc6Owfm5fcbGndyFpacUbPKDZe35sEz7Q 2HlfOO7jeZQrXmAt2ysNV6ciy4is1XgdGf/6tvKwmfmtVSME0/DVGT/8wyg4pjib 4guKwuA2YOCytdmAEmrBR4PdYbG9aD0rNf8XNOXuNdiZoB204eec4h8M26+gMNlU PKHxiw5COWjmdMyuPG+raveIde8olPAurxLW4dY+7A6P75YFmTY= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:17 2025 by rpki-client