$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: sjINZLuh4yOt7mjKkwQTC39oyX8Pt8gU29LHrUTfpiA= Subject key identifier: 25:89:B8:67:AE:FA:C7:15:82:F2:AC:DB:01:2C:38:C8:19:AE:4E:C1 Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 7050525A8B9546FEF0E35BCB81705F7EBD1F70BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 01E4 Signing time: Tue 03 Jun 2025 01:52:47 +0000 Manifest this update: Tue 03 Jun 2025 01:47:47 +0000 Manifest next update: Fri 06 Jun 2025 03:23:47 +0000 Files and hashes: 1: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: 20Q7FmQypD2I59fb55AIUE2BHGqGh/a8oekraNnkYus=) 2: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 03:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:50:52:5a:8b:95:46:fe:f0:e3:5b:cb:81:70:5f:7e:bd:1f:70:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Jun 3 01:47:47 2025 GMT Not After : Jun 6 03:23:47 2025 GMT Subject: CN=2589B867AEFAC71582F2ACDB012C38C819AE4EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8c:1b:f6:18:4d:30:8a:53:a5:f5:8f:38:e4: 37:32:f0:67:ab:70:2e:4b:8e:48:0f:ab:6b:23:90: a3:70:fb:d3:5a:25:90:5c:77:7b:0c:9f:b0:f3:eb: a7:38:30:60:ca:29:b3:3c:7c:28:41:3d:1a:0b:6d: 83:a0:b1:02:a3:db:6b:c3:15:39:2b:4b:a1:f9:39: 22:7b:84:55:6d:10:20:2a:16:3c:46:79:0c:3c:90: b2:53:a2:57:6b:37:c7:5e:9f:ea:20:c1:aa:d5:5c: 4b:f9:8a:2a:db:03:26:9b:cb:0d:fa:c4:d2:1e:1b: e9:f6:1f:bf:17:50:df:b9:45:10:90:4d:21:ea:5a: 29:dd:1d:d4:7b:ec:dc:39:00:86:87:c5:7e:a6:a6: fd:3a:61:4d:05:a2:00:ac:53:05:fc:51:3f:1d:73: 49:fb:30:d1:14:0f:95:c2:a1:51:4b:2b:5d:5d:dc: f5:ef:65:ee:62:82:36:aa:dc:64:33:5a:09:f8:d3: 96:29:5c:4f:4a:d2:97:1f:11:4e:c3:2f:84:d5:87: 08:ea:de:44:47:7e:0f:1a:d6:56:2c:bf:db:4b:e6: 21:3d:60:b2:69:c8:a9:ff:d4:1a:1f:7b:4a:8f:4f: 1a:57:26:9b:f3:94:a6:35:2b:42:63:55:e1:aa:4b: cb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:89:B8:67:AE:FA:C7:15:82:F2:AC:DB:01:2C:38:C8:19:AE:4E:C1 X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c1:50:f1:63:bd:17:43:30:fd:89:6f:4e:78:df:cc:7e:ab: 41:b5:38:b4:f4:db:e7:6d:f5:04:0c:af:59:76:5b:a1:70:d7: 72:b6:33:bd:bd:b6:1f:44:2e:09:7d:d1:6f:c6:40:0e:cf:3b: ec:c3:03:20:06:59:ba:80:8f:e1:48:4c:bc:c1:e0:60:27:d4: e4:52:14:89:b3:f3:76:a8:5c:fc:05:3c:70:4e:90:28:6e:2a: 00:f3:e3:34:e2:8c:ec:57:0b:26:3f:b9:70:92:57:c9:8c:d4: 56:5c:4a:e1:a4:81:82:f9:a9:89:3b:f3:f5:12:f9:a1:bb:ed: 81:16:61:9b:3e:60:a4:9f:a5:36:db:8c:5c:23:ae:34:21:1e: c7:4e:c4:89:56:d7:5f:df:88:26:f4:ba:36:e0:cf:b1:09:43: 19:5d:5a:81:bb:46:4b:9b:4e:f3:9f:a5:e7:82:1b:d3:f1:23: 15:87:2d:6c:f4:4c:6a:26:9d:66:c3:80:f1:84:5a:d4:d1:8e: b3:32:e2:aa:56:a6:b7:91:4a:38:6b:28:bf:a1:2b:e5:34:f1: 16:02:b4:74:05:bb:75:53:24:b4:d6:ca:80:2f:58:8d:b4:54: 2d:05:97:7d:3f:2e:f3:a2:61:49:61:04:04:6d:51:9b:dd:22: 31:9f:9a:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFBSWouVRv7w41vLgXBffr0fcLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNTA2MDMwMTQ3NDdaFw0yNTA2MDYwMzIzNDdaMDMxMTAvBgNV BAMTKDI1ODlCODY3QUVGQUM3MTU4MkYyQUNEQjAxMkMzOEM4MTlBRTRFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUjBv2GE0wilOl9Y845Dcy8Ger cC5LjkgPq2sjkKNw+9NaJZBcd3sMn7Dz66c4MGDKKbM8fChBPRoLbYOgsQKj22vD FTkrS6H5OSJ7hFVtECAqFjxGeQw8kLJToldrN8den+ogwarVXEv5iirbAyabyw36 xNIeG+n2H78XUN+5RRCQTSHqWindHdR77Nw5AIaHxX6mpv06YU0FogCsUwX8UT8d c0n7MNEUD5XCoVFLK11d3PXvZe5igjaq3GQzWgn405YpXE9K0pcfEU7DL4TVhwjq 3kRHfg8a1lYsv9tL5iE9YLJpyKn/1Bofe0qPTxpXJpvzlKY1K0JjVeGqS8sxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYm4Z676xxWC8qzbASw4yBmuTsEwHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbBUPFjvRdDMP2Jb05438x+q0G1OLT02+dt 9QQMr1l2W6Fw13K2M729th9ELgl90W/GQA7PO+zDAyAGWbqAj+FITLzB4GAn1ORS FImz83aoXPwFPHBOkChuKgDz4zTijOxXCyY/uXCSV8mM1FZcSuGkgYL5qYk78/US +aG77YEWYZs+YKSfpTbbjFwjrjQhHsdOxIlW11/fiCb0ujbgz7EJQxldWoG7Rkub TvOfpeeCG9PxIxWHLWz0TGomnWbDgPGEWtTRjrMy4qpWpreRSjhrKL+hK+U08RYC tHQFu3VTJLTWyoAvWI20VC0Fl30/LvOiYUlhBARtUZvdIjGfmnA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:42 2025 by rpki-client