$ rpki-client -vvf repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft File: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft (raw, json) Hash identifier: rOGkeU91lSkbo1PJfjPR/qNEKEz+XVavijWXwSisuJk= Subject key identifier: 07:0A:84:25:68:B5:B1:24:59:E8:54:28:1C:D5:3D:F8:12:B9:BA:17 Authority key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C Certificate issuer: /CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Certificate serial: 6BA2B65B0BA3373622568D46065F5957F953BB1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft Manifest number: 04DD Signing time: Fri 06 Jun 2025 04:21:06 +0000 Manifest this update: Fri 06 Jun 2025 04:16:06 +0000 Manifest next update: Mon 09 Jun 2025 09:56:06 +0000 Files and hashes: 1: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl (hash: 6jBJAocoqDrIjz6BGClz2COoYUuTLS2HcodwILxbmgw=) 2: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: cI0UbQGK9a5poG2NKDvPV81pHS2ve8ooKRdlBJ4PSfs=) 3: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: u8Au9LMYXcHGihCwMXA0rXB8fgKyjCiixCQrB4ejbv0=) 4: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Y4jHaeY4QidDK/340ECCQ/4I5FQ55qG4YZL2AdrbzPk=) 5: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: sJLiD+0ejmoupyMGVx6CirdLJG++4SFUftxtfOcobHI=) 6: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: gdiZ+9B8KYHztol8GGjqhlAvnuN313/tNDfyNie4eG4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 09:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a2:b6:5b:0b:a3:37:36:22:56:8d:46:06:5f:59:57:f9:53:bb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Validity Not Before: Jun 6 04:16:06 2025 GMT Not After : Jun 9 09:56:06 2025 GMT Subject: CN=070A842568B5B12459E854281CD53DF812B9BA17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:27:e7:1f:1b:8b:a8:5c:fd:6f:86:61:ff: 9b:e2:ee:50:c4:1c:18:be:5b:69:a1:ec:68:36:70: 7a:8e:99:48:d0:0d:e6:d0:d5:34:8c:6a:4e:6d:08: 8d:ea:35:3a:bf:43:b9:32:60:a7:95:45:a8:48:c3: a7:f2:a0:68:0d:df:d0:cb:4f:44:8b:13:9f:ce:20: 86:50:c7:6c:89:6d:a3:ac:57:df:9a:81:0e:77:95: fe:4f:bd:7e:fc:93:e0:3c:7f:77:c3:6c:3d:5f:83: 56:c9:a5:6e:dd:98:f8:55:b8:d5:83:57:78:2c:30: 70:68:2a:da:d8:01:8f:60:23:c2:5d:48:10:4b:c8: 51:cb:6a:96:8a:72:2a:37:b8:ff:63:6c:39:f3:53: ad:f5:c9:4c:d9:40:15:fe:99:a2:33:a5:af:ae:6d: 5f:d3:ac:87:df:98:cc:ac:b7:ef:ba:a9:bd:a5:12: ff:72:fb:74:c9:b6:39:68:ff:76:57:15:6f:db:9f: 3f:82:fb:40:90:87:2e:71:b0:e2:3d:92:1f:09:d6: f6:63:d5:a0:e2:f8:02:82:76:f1:3d:e0:be:0d:93: fe:18:e6:65:5b:36:e5:03:ce:32:2d:68:a7:3c:cc: c5:f5:72:c5:be:d6:f2:70:04:bc:02:3c:8e:9f:4f: 8f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0A:84:25:68:B5:B1:24:59:E8:54:28:1C:D5:3D:F8:12:B9:BA:17 X509v3 Authority Key Identifier: keyid:AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a5:86:ef:61:49:79:aa:d7:c1:4f:2a:73:18:ab:2c:b4:b3: c8:db:a4:5e:4e:9d:8b:bf:d6:4b:6d:14:55:b1:8b:c1:0c:40: 31:af:ce:4a:7f:b5:cc:55:55:0b:89:c5:0e:a9:2c:b6:a1:70: 10:e6:5f:51:a2:73:5f:9f:77:28:d6:f6:ce:2b:46:50:39:a7: 5e:70:ae:8a:f0:f1:cf:14:ae:6e:1e:e8:9e:19:78:65:08:e7: b0:05:33:8a:ee:c8:cc:6e:1c:07:db:63:b7:fd:b1:d4:3e:a4: 17:e8:18:20:dd:db:24:45:98:f3:56:6f:b0:b0:d4:d6:c8:4d: c9:26:d4:b4:60:86:97:e8:71:22:8a:65:55:39:83:65:cb:f2: df:a5:94:86:94:83:74:bf:97:8f:67:d2:63:25:66:1b:f4:7c: 24:b2:a3:3b:e9:b7:bc:10:b8:bf:aa:c4:05:81:32:df:ea:4d: 15:34:80:5d:ac:9e:58:a0:ef:43:60:e6:a2:91:2f:96:5f:4a: d8:5f:16:da:03:26:94:63:44:41:fb:db:63:0b:f2:bf:63:ed: 7c:5f:7d:43:4e:8a:49:f0:bf:b1:31:0b:ce:b1:c5:31:1b:17: 25:9b:48:99:00:e2:56:3b:41:18:b9:06:1b:6e:8a:47:25:d7: 05:21:22:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6K2WwujNzYiVo1GBl9ZV/lTuxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIx MDZBNTk0QzAeFw0yNTA2MDYwNDE2MDZaFw0yNTA2MDkwOTU2MDZaMDMxMTAvBgNV BAMTKDA3MEE4NDI1NjhCNUIxMjQ1OUU4NTQyODFDRDUzREY4MTJCOUJBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ZifnHxuLqFz9b4Zh/5vi7lDE HBi+W2mh7Gg2cHqOmUjQDebQ1TSMak5tCI3qNTq/Q7kyYKeVRahIw6fyoGgN39DL T0SLE5/OIIZQx2yJbaOsV9+agQ53lf5PvX78k+A8f3fDbD1fg1bJpW7dmPhVuNWD V3gsMHBoKtrYAY9gI8JdSBBLyFHLapaKcio3uP9jbDnzU631yUzZQBX+maIzpa+u bV/TrIffmMyst++6qb2lEv9y+3TJtjlo/3ZXFW/bnz+C+0CQhy5xsOI9kh8J1vZj 1aDi+AKCdvE94L4Nk/4Y5mVbNuUDzjItaKc8zMX1csW+1vJwBLwCPI6fT4+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBwqEJWi1sSRZ6FQoHNU9+BK5uhcwHwYDVR0j BBgwFoAUr1LnFt5x7qk1P+qS+/ctohBqWUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMC9BRjUyRTcxNkRF NzFFRUE5MzUzRkVBOTJGQkY3MkRBMjEwNkE1OTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIxMDZB NTk0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJE QTIxMDZBNTk0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHalhu9hSXmq18FPKnMYqyy0s8jbpF5OnYu/ 1kttFFWxi8EMQDGvzkp/tcxVVQuJxQ6pLLahcBDmX1Gic1+fdyjW9s4rRlA5p15w rorw8c8Urm4e6J4ZeGUI57AFM4ruyMxuHAfbY7f9sdQ+pBfoGCDd2yRFmPNWb7Cw 1NbITckm1LRghpfocSKKZVU5g2XL8t+llIaUg3S/l49n0mMlZhv0fCSyozvpt7wQ uL+qxAWBMt/qTRU0gF2snlig70Ng5qKRL5ZfSthfFtoDJpRjREH722ML8r9j7Xxf fUNOiknwv7ExC86xxTEbFyWbSJkA4lY7QRi5Bhtuikcl1wUhIus= -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:57 2025 by rpki-client