$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: 4rYtoMOr9xefxYQ3PXFGwTmLQYIcFl/MuNrJjSBawe8= Subject key identifier: 6A:40:6F:FF:5B:18:4C:1B:83:9D:6B:CE:41:88:BD:17:E7:41:B2:77 Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 3E6BC3806DFBA12B2C131536D6378919406061DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 04D9 Signing time: Wed 04 Jun 2025 08:11:10 +0000 Manifest this update: Wed 04 Jun 2025 08:06:10 +0000 Manifest next update: Sat 07 Jun 2025 10:00:10 +0000 Files and hashes: 1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: 18oOL/d3313XF16rQxW/dIw3gESdHQGHOHEmxKVp1dA=) 2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6b:c3:80:6d:fb:a1:2b:2c:13:15:36:d6:37:89:19:40:60:61:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Jun 4 08:06:10 2025 GMT Not After : Jun 7 10:00:10 2025 GMT Subject: CN=6A406FFF5B184C1B839D6BCE4188BD17E741B277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:4b:35:8b:29:07:09:d5:26:30:8f:a6:b6: 33:54:85:d3:4a:93:49:6a:e7:63:c3:eb:14:07:52: ec:06:d4:74:d3:67:45:ec:aa:77:af:a0:a9:fa:4a: a5:90:2c:9f:65:dd:06:8c:0c:b4:98:9a:e1:59:b8: c8:a2:d5:c0:a5:61:26:86:c3:0e:4f:cc:6b:c0:e6: 98:6f:17:13:bd:ef:8d:89:13:28:5b:4a:0b:7c:ae: 0d:c6:fe:f2:af:e3:17:6f:22:04:0c:09:25:c9:a1: 5f:82:a7:e4:69:47:dc:a5:ec:1f:93:52:eb:b2:33: 51:88:f7:ac:5d:53:ad:ff:fb:12:58:93:6f:e2:9b: 38:8d:f1:77:90:b3:d1:f8:c5:a5:95:23:e4:e9:40: 96:1c:4c:d4:7f:f9:95:a1:fe:ca:a1:49:9f:d4:85: 62:c7:0b:d6:ee:b8:65:df:a0:05:62:d7:20:9c:65: 1b:01:11:02:f9:60:41:4a:ab:77:2a:5e:42:25:c7: 34:26:2d:c0:b5:09:0f:3c:2b:7d:e5:a5:03:a8:36: d2:e7:ad:a0:53:44:7a:14:5d:ce:60:01:5a:f3:18: 60:93:34:53:d7:c0:b4:28:35:e9:dc:5a:3e:29:2e: d1:d2:40:a5:b8:af:70:a5:57:1d:9f:4b:2e:29:2d: c7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:40:6F:FF:5B:18:4C:1B:83:9D:6B:CE:41:88:BD:17:E7:41:B2:77 X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:24:bd:64:8b:fb:da:05:8d:ed:48:dd:7c:90:e0:e0:e4:e8: c8:fa:a5:f8:52:14:36:a0:a9:68:59:92:0b:b6:38:b0:df:a8: 1f:5e:70:af:c4:cb:ff:29:c8:59:d2:99:33:51:84:2c:15:e1: 23:8f:de:19:b2:d4:fa:f6:40:2f:de:9e:b9:62:c9:bb:fd:05: 8e:4a:ca:6d:e4:7d:03:fa:d1:d2:d0:0d:28:31:c6:2f:e4:37: 8a:e0:a0:bb:e7:b7:e7:e4:4c:03:ab:af:65:b4:c2:83:34:c9: 0d:c0:70:a6:74:cf:bd:0e:f1:21:53:fb:df:7d:63:07:8d:82: 82:af:0b:93:96:d7:c2:4d:70:ee:17:ab:61:78:92:12:41:f7: 1a:fc:0d:2d:e9:cb:5b:19:32:01:f9:f4:79:d0:5b:97:5b:b3: fd:29:bf:f2:73:13:8f:c7:a8:35:80:1a:21:b1:9d:4c:5a:ed: 4b:7b:f8:26:7a:16:4e:79:8d:16:17:e4:21:98:da:4b:3b:cc: 94:3a:8c:06:45:4c:fe:81:e5:e5:75:bb:d3:3e:ee:ed:27:fe: 53:47:54:ab:82:82:44:3a:9d:29:85:1e:2d:c1:91:25:45:bf: 47:45:a5:a8:ee:ff:a6:85:4c:bf:32:88:8e:f3:d0:06:00:99: 6e:68:9a:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmvDgG37oSssExU21jeJGUBgYdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNTA2MDQwODA2MTBaFw0yNTA2MDcxMDAwMTBaMDMxMTAvBgNV BAMTKDZBNDA2RkZGNUIxODRDMUI4MzlENkJDRTQxODhCRDE3RTc0MUIyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/Es1iykHCdUmMI+mtjNUhdNK k0lq52PD6xQHUuwG1HTTZ0XsqnevoKn6SqWQLJ9l3QaMDLSYmuFZuMii1cClYSaG ww5PzGvA5phvFxO9742JEyhbSgt8rg3G/vKv4xdvIgQMCSXJoV+Cp+RpR9yl7B+T UuuyM1GI96xdU63/+xJYk2/imziN8XeQs9H4xaWVI+TpQJYcTNR/+ZWh/sqhSZ/U hWLHC9buuGXfoAVi1yCcZRsBEQL5YEFKq3cqXkIlxzQmLcC1CQ88K33lpQOoNtLn raBTRHoUXc5gAVrzGGCTNFPXwLQoNencWj4pLtHSQKW4r3ClVx2fSy4pLcefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUakBv/1sYTBuDnWvOQYi9F+dBsncwHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEkvWSL+9oFje1I3XyQ4ODk6Mj6pfhSFDag qWhZkgu2OLDfqB9ecK/Ey/8pyFnSmTNRhCwV4SOP3hmy1Pr2QC/enrliybv9BY5K ym3kfQP60dLQDSgxxi/kN4rgoLvnt+fkTAOrr2W0woM0yQ3AcKZ0z70O8SFT+999 YweNgoKvC5OW18JNcO4Xq2F4khJB9xr8DS3py1sZMgH59HnQW5dbs/0pv/JzE4/H qDWAGiGxnUxa7Ut7+CZ6Fk55jRYX5CGY2ks7zJQ6jAZFTP6B5eV1u9M+7u0n/lNH VKuCgkQ6nSmFHi3BkSVFv0dFpaju/6aFTL8yiI7z0AYAmW5omtk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:07 2025 by rpki-client