$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: 7Igf/mZ44+m4Swj7xuP0iulhrWM2mgUeMYnYC+ruROw= Subject key identifier: 32:79:93:2C:73:1F:38:05:00:DE:11:BE:7D:F8:1B:FA:BF:B1:70:58 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 2BFE40E3ECC0388267EFED1E70091A8D19C6ECCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 04D9 Signing time: Mon 02 Jun 2025 02:03:12 +0000 Manifest this update: Mon 02 Jun 2025 01:58:12 +0000 Manifest next update: Thu 05 Jun 2025 12:09:12 +0000 Files and hashes: 1: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) 2: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) 3: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) 4: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: kfCLT8GvNYbHGP0vKlEZ1Z+RS04vWWH0/QPlDwqBXK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 12:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:fe:40:e3:ec:c0:38:82:67:ef:ed:1e:70:09:1a:8d:19:c6:ec:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Jun 2 01:58:12 2025 GMT Not After : Jun 5 12:09:12 2025 GMT Subject: CN=3279932C731F380500DE11BE7DF81BFABFB17058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:65:0a:bc:42:7b:5b:94:d6:bf:33:92:5a: 6c:ce:32:eb:e6:15:de:b1:55:cc:66:96:91:6a:1c: 42:7b:9a:bf:dd:00:c1:a3:b8:54:8c:9e:4e:e2:55: e6:0d:6a:73:ef:49:a5:d1:a8:0b:fe:35:95:42:07: df:7c:b6:58:b9:be:39:c0:68:bf:b8:03:a1:ee:d3: 11:85:ab:6c:7e:57:45:ef:d4:2d:50:26:fc:1c:6a: d5:c4:a9:b3:9b:d3:8d:21:55:83:90:24:94:de:b7: dd:b9:83:90:8b:6d:1c:dd:cc:21:aa:79:57:36:e7: 83:a9:26:8c:4b:9e:86:3c:3e:5b:fc:ad:fc:2c:07: d2:56:63:43:39:a3:0d:e0:4e:aa:ef:62:83:0b:a8: 0d:af:1b:72:a1:ac:02:fc:7f:f8:b8:a4:b8:2c:aa: 8f:91:b7:4e:2b:55:9a:75:58:f9:51:89:dd:3e:6c: 35:bb:12:3d:a0:1b:d5:9b:83:b1:05:ef:2c:96:06: 66:46:de:85:a4:52:59:82:ac:2b:13:e4:75:92:22: c0:72:00:7a:93:26:60:80:f3:df:91:87:51:bf:49: 2c:a2:6f:8e:b1:62:33:8d:79:df:70:b7:7c:cb:43: 44:8b:dd:00:47:ee:39:35:fa:6e:3b:ef:ae:aa:e2: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:79:93:2C:73:1F:38:05:00:DE:11:BE:7D:F8:1B:FA:BF:B1:70:58 X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:95:57:b7:5a:69:07:7e:3d:76:1f:99:46:dd:49:16:06:e0: b8:9b:37:61:cb:64:a6:50:2b:23:ae:5f:33:61:96:c5:ad:c1: 6d:13:2a:97:66:3d:2f:0d:e9:41:e7:7e:7f:b1:49:6b:96:a3: 04:59:17:10:c4:41:0d:4d:51:b0:00:f2:2f:b1:0e:2c:08:33: 71:70:0c:ee:8d:57:00:08:96:15:e2:ee:15:f4:2d:7e:d3:e4: 98:ba:23:c5:2a:de:a6:2e:2d:97:2e:97:94:81:fa:31:d9:de: db:8e:91:25:a2:60:24:c7:ea:e5:cd:99:f9:30:24:ed:8f:14: f7:35:4d:b0:b6:69:d4:e8:87:d0:45:06:52:59:28:d0:83:0e: 59:14:dd:db:bb:6e:fb:48:9f:99:b1:e8:2f:00:07:a3:60:03: 77:66:7f:3e:a8:a0:46:17:31:fe:bc:32:0e:ec:41:81:06:39: 35:d0:b4:47:b5:04:82:4d:61:3d:98:cb:18:83:9b:c1:87:e4: f0:7f:a7:ec:1e:20:75:53:ab:75:59:d8:e3:ed:93:28:39:28: d2:fe:58:f5:58:b0:2b:12:66:c4:32:1c:b3:e6:65:40:67:2d: 93:59:83:c4:45:31:24:64:0e:17:94:ce:ab:d6:ed:e6:3b:b3: b1:e9:e0:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/5A4+zAOIJn7+0ecAkajRnG7M8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTA2MDIwMTU4MTJaFw0yNTA2MDUxMjA5MTJaMDMxMTAvBgNV BAMTKDMyNzk5MzJDNzMxRjM4MDUwMERFMTFCRTdERjgxQkZBQkZCMTcwNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKWUKvEJ7W5TWvzOSWmzOMuvm Fd6xVcxmlpFqHEJ7mr/dAMGjuFSMnk7iVeYNanPvSaXRqAv+NZVCB998tli5vjnA aL+4A6Hu0xGFq2x+V0Xv1C1QJvwcatXEqbOb040hVYOQJJTet925g5CLbRzdzCGq eVc254OpJoxLnoY8Plv8rfwsB9JWY0M5ow3gTqrvYoMLqA2vG3KhrAL8f/i4pLgs qo+Rt04rVZp1WPlRid0+bDW7Ej2gG9Wbg7EF7yyWBmZG3oWkUlmCrCsT5HWSIsBy AHqTJmCA89+Rh1G/SSyib46xYjONed9wt3zLQ0SL3QBH7jk1+m47766q4hYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMnmTLHMfOAUA3hG+ffgb+r+xcFgwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmVV7daaQd+PXYfmUbdSRYG4LibN2HLZKZQ KyOuXzNhlsWtwW0TKpdmPS8N6UHnfn+xSWuWowRZFxDEQQ1NUbAA8i+xDiwIM3Fw DO6NVwAIlhXi7hX0LX7T5Ji6I8Uq3qYuLZcul5SB+jHZ3tuOkSWiYCTH6uXNmfkw JO2PFPc1TbC2adToh9BFBlJZKNCDDlkU3du7bvtIn5mx6C8AB6NgA3dmfz6ooEYX Mf68Mg7sQYEGOTXQtEe1BIJNYT2YyxiDm8GH5PB/p+weIHVTq3VZ2OPtkyg5KNL+ WPVYsCsSZsQyHLPmZUBnLZNZg8RFMSRkDheUzqvW7eY7s7Hp4Pw= -----END CERTIFICATE-----Generated at Tue Jun 3 23:18:13 2025 by rpki-client