$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft (raw, json) Hash identifier: SbNfUA4V+3KMXSGpjWvvBSuCPZrq2Pk8OtPWmOJeAXw= Subject key identifier: 27:04:FD:82:9F:97:0C:0E:30:B6:B1:62:9B:BA:3C:09:47:A5:31:87 Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 7922513ED33AF3597C41E098E7DFB0110FE5062D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft Manifest number: 49 Signing time: Wed 09 Apr 2025 09:40:01 +0000 Manifest this update: Wed 09 Apr 2025 09:35:01 +0000 Manifest next update: Sat 12 Apr 2025 19:10:01 +0000 Files and hashes: 1: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: XF0z782r3sHF+OrwCSt8ZCAVQ0WZ8tu8nYx4HOA7soI=) 2: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl (hash: rpMQa6f2sNaKz0USE/x0FpIhMzaygUnDqbYhaU23VEU=) 3: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: AjW16B5R157K3hvjOmHF0WbVknW4Cg9BK3NqgeP7LAQ=) 4: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: /DFyNaEsyO2usBnFzIOmfhaGZCRB0eHYovN+KsopEbs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:22:51:3e:d3:3a:f3:59:7c:41:e0:98:e7:df:b0:11:0f:e5:06:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Apr 9 09:35:01 2025 GMT Not After : Apr 12 19:10:01 2025 GMT Subject: CN=2704FD829F970C0E30B6B1629BBA3C0947A53187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:03:c1:6b:af:5e:35:49:d2:57:94:f0:23:88: ec:cc:05:d0:77:19:78:1d:e1:21:e3:84:d5:01:52: 4a:0c:de:d5:54:1a:31:00:7a:ba:95:f3:98:a2:e1: 8d:56:9f:1e:b0:b9:3f:9d:ed:15:d2:6d:ef:cd:49: 22:a9:2b:4d:4c:01:d2:f9:e8:38:64:ce:bd:1d:31: ed:dc:bc:cd:cb:a5:3e:a1:ff:0a:4e:6d:32:3f:50: f8:9b:84:24:4a:da:5a:b0:d8:1d:70:20:4c:ac:c9: a6:f1:aa:61:99:be:07:b8:e6:48:1a:0a:6f:cf:c5: ac:cc:4e:50:6d:8a:fa:7b:c4:ce:58:4f:5d:65:0a: 0d:6d:e4:17:c7:80:7e:02:37:be:f3:9d:29:8d:aa: 4a:11:4d:24:c6:1c:b2:f0:98:ad:8d:72:e6:fa:2e: 8e:c8:a7:90:16:b7:53:4d:e3:d2:65:53:1f:0d:45: f5:7a:2f:74:bb:d5:13:e1:44:03:83:4f:10:7b:82: 1c:7a:e2:bb:8e:ae:3d:4a:83:b6:8c:01:9e:7a:fe: ff:e6:53:af:13:22:cd:31:80:bc:ae:b9:6a:65:86: a7:4c:c3:37:7b:bb:28:e8:77:c1:eb:05:f0:07:4b: d8:bb:fb:c3:78:f4:72:72:fd:46:9e:9c:88:c2:f5: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:04:FD:82:9F:97:0C:0E:30:B6:B1:62:9B:BA:3C:09:47:A5:31:87 X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:87:de:31:b9:9c:e1:bc:cf:f5:f1:5b:02:39:b7:3e:f8:b4: ea:61:98:96:12:bc:65:16:89:fb:17:11:8a:76:7f:61:a5:51: 52:da:a8:d3:c9:a2:55:0d:bd:fe:d8:dc:ac:38:1f:d6:20:59: e9:98:f7:29:db:d0:f7:6f:fe:28:a7:e4:fa:18:93:58:c0:2c: 09:7e:f5:0c:b0:71:18:6f:9f:35:96:11:6a:75:58:28:af:43: 09:48:53:11:63:2b:91:50:dd:f9:2d:82:0a:f8:d8:e0:0b:bf: 1a:69:33:54:19:1e:e4:bb:6e:87:ca:20:18:b8:01:65:21:84: 46:84:db:91:fb:42:aa:8e:f2:86:d5:82:b2:2a:a6:a0:f4:db: ec:cc:9d:da:78:a2:d3:43:66:6c:7a:f0:3c:b4:ba:71:ad:bd: b1:93:72:39:a9:e5:05:a5:17:17:4e:72:0c:17:f5:37:7e:1a: f0:82:58:bf:ae:c1:cc:63:33:73:d1:50:0a:d3:3f:84:b6:c0: 08:d5:c0:f3:76:4d:1a:b9:83:6e:06:26:72:4d:34:49:36:99: d0:df:e1:18:e8:44:fa:eb:da:4e:bf:87:40:8d:75:2b:a9:da: ea:f1:91:0c:c3:f5:bf:84:7c:bd:61:78:d9:d1:92:41:c8:19: 8b:10:49:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSJRPtM681l8QeCY59+wEQ/lBi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNTA0MDkwOTM1MDFaFw0yNTA0MTIxOTEwMDFaMDMxMTAvBgNV BAMTKDI3MDRGRDgyOUY5NzBDMEUzMEI2QjE2MjlCQkEzQzA5NDdBNTMxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWA8Frr141SdJXlPAjiOzMBdB3 GXgd4SHjhNUBUkoM3tVUGjEAerqV85ii4Y1Wnx6wuT+d7RXSbe/NSSKpK01MAdL5 6Dhkzr0dMe3cvM3LpT6h/wpObTI/UPibhCRK2lqw2B1wIEysyabxqmGZvge45kga Cm/PxazMTlBtivp7xM5YT11lCg1t5BfHgH4CN77znSmNqkoRTSTGHLLwmK2Ncub6 Lo7Ip5AWt1NN49JlUx8NRfV6L3S71RPhRAODTxB7ghx64ruOrj1Kg7aMAZ56/v/m U68TIs0xgLyuuWplhqdMwzd7uyjod8HrBfAHS9i7+8N49HJy/UaenIjC9dnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJwT9gp+XDA4wtrFim7o8CUelMYcwHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdmMmMxOTAtMzBmNS00ZjE5LWJm Y2EtMGI5ODdhNTJmZDU1LzAvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1 NkZDRURFQzNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSH3jG5nOG8z/XxWwI5tz74tOphmJYSvGUW ifsXEYp2f2GlUVLaqNPJolUNvf7Y3Kw4H9YgWemY9ynb0Pdv/iin5PoYk1jALAl+ 9QywcRhvnzWWEWp1WCivQwlIUxFjK5FQ3fktggr42OALvxppM1QZHuS7bofKIBi4 AWUhhEaE25H7QqqO8obVgrIqpqD02+zMndp4otNDZmx68Dy0unGtvbGTcjmp5QWl FxdOcgwX9Td+GvCCWL+uwcxjM3PRUArTP4S2wAjVwPN2TRq5g24GJnJNNEk2mdDf 4RjoRPrr2k6/h0CNdSup2urxkQzD9b+EfL1heNnRkkHIGYsQSWQ= -----END CERTIFICATE-----Generated at Wed Apr 9 16:58:00 2025 by rpki-client