$ rpki-client -vvf repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft File: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft (raw, json) Hash identifier: cdgKm3KFc20FhB9f2aQ7dLH2HgOlQZVYjZyW8lZ1BfI= Subject key identifier: 2E:90:4F:5F:46:47:6C:A8:74:34:4C:3D:37:0F:48:4B:56:FC:1A:60 Authority key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C Certificate issuer: /CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Certificate serial: 2F13ED2AAE9D72DA8972B2F3FFB01C5D18905AC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft Manifest number: 04C2 Signing time: Sun 06 Apr 2025 11:51:03 +0000 Manifest this update: Sun 06 Apr 2025 11:46:03 +0000 Manifest next update: Wed 09 Apr 2025 22:17:03 +0000 Files and hashes: 1: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Y4jHaeY4QidDK/340ECCQ/4I5FQ55qG4YZL2AdrbzPk=) 2: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: sJLiD+0ejmoupyMGVx6CirdLJG++4SFUftxtfOcobHI=) 3: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: cI0UbQGK9a5poG2NKDvPV81pHS2ve8ooKRdlBJ4PSfs=) 4: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl (hash: VW3gNUWLPEhDerYUrkDwH29eVFfyuLtUAG8nczGkJ3U=) 5: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: u8Au9LMYXcHGihCwMXA0rXB8fgKyjCiixCQrB4ejbv0=) 6: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: gdiZ+9B8KYHztol8GGjqhlAvnuN313/tNDfyNie4eG4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:13:ed:2a:ae:9d:72:da:89:72:b2:f3:ff:b0:1c:5d:18:90:5a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Validity Not Before: Apr 6 11:46:03 2025 GMT Not After : Apr 9 22:17:03 2025 GMT Subject: CN=2E904F5F46476CA874344C3D370F484B56FC1A60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:2d:aa:30:aa:5e:26:f4:b7:60:f6:05:c7: 70:db:ae:17:c4:d1:97:00:3d:0b:f6:1b:24:6e:fd: c4:31:00:a2:e4:0c:e2:fb:d1:eb:05:61:8d:9a:7f: e7:24:43:fa:07:9e:46:a3:5e:13:84:cb:17:81:cf: 0e:38:f4:49:a3:72:80:bb:49:50:34:58:fa:15:f4: 05:97:85:03:3e:20:17:f5:a3:ba:ae:f0:c7:de:e3: db:ae:f8:bd:a2:f6:8a:f4:06:e7:81:c2:9f:f6:1c: ff:2f:e5:ed:97:fb:80:db:71:eb:5f:9a:1c:44:76: 26:97:5c:7d:6e:8a:d1:1b:21:44:c2:2a:16:c0:4f: 8b:32:12:91:e0:d4:29:51:c2:61:11:fa:d1:01:7a: a7:12:55:f3:dc:0a:92:2e:3c:c4:f9:a5:70:2e:51: 10:7a:98:cf:a1:8d:74:5e:ef:e5:e9:15:1e:fd:5a: c9:0e:f7:00:14:cf:8a:fe:b2:93:aa:5a:68:89:27: 59:b0:ad:56:c1:89:23:8c:38:69:e8:ef:40:65:6e: cc:1f:4a:d9:83:76:a8:cc:21:ba:d7:3f:32:43:59: fc:13:76:f8:6e:5c:93:73:2e:76:22:83:5e:33:93: fd:a4:97:89:bd:06:4e:98:00:0b:53:df:f2:12:90: 29:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:90:4F:5F:46:47:6C:A8:74:34:4C:3D:37:0F:48:4B:56:FC:1A:60 X509v3 Authority Key Identifier: keyid:AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e4:2a:2e:38:6c:e5:bf:ab:9d:22:cc:f5:c5:a2:4c:a7:87: c8:1e:f4:1e:e1:37:a6:d3:32:91:a9:89:4f:59:23:6f:fa:16: b4:13:2a:95:f3:c5:eb:61:b2:16:f9:fb:36:96:b7:f8:35:17: a9:c4:17:15:78:aa:2c:3b:19:5b:6c:eb:ed:80:19:5f:0c:cd: 30:e2:9b:e0:01:07:95:17:f4:7b:c5:69:52:2d:e4:78:f5:88: 89:d0:29:5a:dc:2d:41:30:f0:e2:fd:0e:2d:17:c2:e3:de:96: 66:1a:d0:e2:b0:aa:ab:82:a5:1a:74:b8:f8:64:8f:22:df:53: 67:37:01:b8:e9:1c:20:f1:3f:c2:f2:08:bf:bd:c2:e6:7c:3f: eb:51:ac:d3:34:ad:26:96:6d:00:f3:51:4f:dc:b6:75:e9:67: 50:6a:1b:7e:65:cc:25:e4:48:48:43:8f:d6:6d:2c:73:39:e9: 46:78:84:98:f6:cc:85:fc:78:ab:c1:8f:8e:7b:2e:23:23:bf: de:5a:4f:82:bb:d6:8d:56:fc:54:e8:3a:ac:83:ae:01:7e:97: 81:62:1d:ad:70:7e:af:5e:47:47:c1:84:64:cf:52:10:bd:25: 18:cc:12:0b:11:3f:dd:b5:50:73:f9:26:ae:eb:23:1a:0d:68: 97:4e:45:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxPtKq6dctqJcrLz/7AcXRiQWsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIx MDZBNTk0QzAeFw0yNTA0MDYxMTQ2MDNaFw0yNTA0MDkyMjE3MDNaMDMxMTAvBgNV BAMTKDJFOTA0RjVGNDY0NzZDQTg3NDM0NEMzRDM3MEY0ODRCNTZGQzFBNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxEy2qMKpeJvS3YPYFx3DbrhfE 0ZcAPQv2GyRu/cQxAKLkDOL70esFYY2af+ckQ/oHnkajXhOEyxeBzw449EmjcoC7 SVA0WPoV9AWXhQM+IBf1o7qu8Mfe49uu+L2i9or0BueBwp/2HP8v5e2X+4Dbcetf mhxEdiaXXH1uitEbIUTCKhbAT4syEpHg1ClRwmER+tEBeqcSVfPcCpIuPMT5pXAu URB6mM+hjXRe7+XpFR79WskO9wAUz4r+spOqWmiJJ1mwrVbBiSOMOGno70Blbswf StmDdqjMIbrXPzJDWfwTdvhuXJNzLnYig14zk/2kl4m9Bk6YAAtT3/ISkCm7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULpBPX0ZHbKh0NEw9Nw9IS1b8GmAwHwYDVR0j BBgwFoAUr1LnFt5x7qk1P+qS+/ctohBqWUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMC9BRjUyRTcxNkRF NzFFRUE5MzUzRkVBOTJGQkY3MkRBMjEwNkE1OTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIxMDZB NTk0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJE QTIxMDZBNTk0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzkKi44bOW/q50izPXFokynh8ge9B7hN6bT MpGpiU9ZI2/6FrQTKpXzxethshb5+zaWt/g1F6nEFxV4qiw7GVts6+2AGV8MzTDi m+ABB5UX9HvFaVIt5Hj1iInQKVrcLUEw8OL9Di0XwuPelmYa0OKwqquCpRp0uPhk jyLfU2c3AbjpHCDxP8LyCL+9wuZ8P+tRrNM0rSaWbQDzUU/ctnXpZ1BqG35lzCXk SEhDj9ZtLHM56UZ4hJj2zIX8eKvBj457LiMjv95aT4K71o1W/FToOqyDrgF+l4Fi Ha1wfq9eR0fBhGTPUhC9JRjMEgsRP921UHP5Jq7rIxoNaJdORdc= -----END CERTIFICATE-----Generated at Tue Apr 8 17:31:15 2025 by rpki-client