$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: ppep0kcRxLwNSUhr1C/6W/sLw3b3eV31pfW+f9qz0zU= Subject key identifier: EF:86:C2:B3:6A:F6:B0:BA:F6:3D:F4:98:95:6E:53:B0:E1:6E:52:42 Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 74BE6A888DABFFBD4A8F7BC3B5186E2DF6F48930 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 01CA Signing time: Sat 05 Apr 2025 06:41:20 +0000 Manifest this update: Sat 05 Apr 2025 06:36:20 +0000 Manifest next update: Tue 08 Apr 2025 11:52:20 +0000 Files and hashes: 1: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) 2: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: MdHBdpbCbKJU19ucY85BaMVGZZA8nhas/EjdLjv3A6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:be:6a:88:8d:ab:ff:bd:4a:8f:7b:c3:b5:18:6e:2d:f6:f4:89:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Apr 5 06:36:20 2025 GMT Not After : Apr 8 11:52:20 2025 GMT Subject: CN=EF86C2B36AF6B0BAF63DF498956E53B0E16E5242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:bd:ee:0a:50:b4:92:8b:2b:03:6d:c0:a6: 67:e6:9a:ea:42:ff:8d:0f:a7:11:e4:cd:9b:9c:78: 0c:e7:e1:0e:8b:15:aa:45:f4:55:fe:f4:46:37:06: dd:d0:63:07:de:a1:54:15:25:f4:d7:4e:4e:a3:c0: 04:26:ad:9d:22:f3:a7:ba:2f:1e:d4:82:68:49:43: 32:8e:96:a9:50:e4:ab:d2:57:fb:54:2f:a3:d9:62: 9e:4e:34:49:a9:a3:f5:06:19:c5:75:f4:0a:3f:0b: c1:47:89:34:16:24:03:b4:75:06:8d:58:ec:0d:ad: 3a:71:66:1d:91:db:41:e1:97:b0:5f:2d:97:8a:31: e0:0f:cb:56:64:c3:ac:7f:b9:a6:8d:5d:9d:d8:30: ca:ca:7e:9f:b2:9a:cc:9e:c2:9d:bc:1d:9e:ea:a3: 34:a6:14:b1:a4:ea:3c:54:6a:15:e5:39:0d:38:15: a0:21:71:15:ca:97:05:22:d5:1b:43:a5:38:88:74: 87:98:30:e1:f2:0b:94:af:f5:85:d6:80:a0:d4:84: 1f:ea:d6:a5:3d:79:13:57:ce:9b:69:5c:6a:e5:32: c2:39:64:dd:74:8f:60:30:60:56:96:4e:12:5f:55: 0a:24:4b:6a:7b:07:aa:86:60:5e:d3:7e:1d:86:f7: b6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:86:C2:B3:6A:F6:B0:BA:F6:3D:F4:98:95:6E:53:B0:E1:6E:52:42 X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:dd:3b:a3:80:7a:19:97:8d:7f:a5:0d:21:50:c2:c8:69:8a: 4f:58:77:6b:c3:02:f0:2f:07:1d:f2:c0:d5:da:eb:0c:50:34: a5:b8:b2:c3:d0:72:80:80:e4:b8:f8:22:2a:21:7d:1b:02:cf: 76:6d:9f:83:63:45:20:e9:c3:00:44:58:23:66:0a:87:49:c9: 40:42:84:fe:68:a3:a1:f9:9a:29:4a:c6:35:11:fd:0a:cf:87: 58:da:60:20:31:34:52:21:bf:37:27:df:7b:cc:1d:92:af:d7: 2c:cb:3a:ee:bd:5d:69:bc:37:58:b2:ac:75:b1:11:58:6b:98: 5c:f6:ab:0f:f3:fb:ea:b0:63:3f:e1:ef:d7:e8:2e:7f:5e:fb: 70:c7:50:ce:5f:e9:9e:3f:97:99:6c:3f:69:32:f4:fe:fb:3d: f5:b7:7e:3e:2a:87:f7:54:73:9a:1b:9f:a3:1a:88:58:46:f4: 8a:8e:26:ae:82:98:a7:2e:b9:c6:0f:da:60:72:c4:3d:2c:69: d1:a7:56:f2:df:8a:d4:74:1e:b1:23:c3:9e:88:94:53:10:ec: 33:80:e8:96:8b:af:b8:4f:2b:d3:a6:76:fd:cb:ce:7f:a6:a5: ed:59:71:26:dd:38:eb:64:f2:ae:0f:45:f5:e2:bb:f4:92:b0: ab:63:c4:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdL5qiI2r/71Kj3vDtRhuLfb0iTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNTA0MDUwNjM2MjBaFw0yNTA0MDgxMTUyMjBaMDMxMTAvBgNV BAMTKEVGODZDMkIzNkFGNkIwQkFGNjNERjQ5ODk1NkU1M0IwRTE2RTUyNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIb3uClC0kosrA23ApmfmmupC /40PpxHkzZuceAzn4Q6LFapF9FX+9EY3Bt3QYwfeoVQVJfTXTk6jwAQmrZ0i86e6 Lx7UgmhJQzKOlqlQ5KvSV/tUL6PZYp5ONEmpo/UGGcV19Ao/C8FHiTQWJAO0dQaN WOwNrTpxZh2R20Hhl7BfLZeKMeAPy1Zkw6x/uaaNXZ3YMMrKfp+ymsyewp28HZ7q ozSmFLGk6jxUahXlOQ04FaAhcRXKlwUi1RtDpTiIdIeYMOHyC5Sv9YXWgKDUhB/q 1qU9eRNXzptpXGrlMsI5ZN10j2AwYFaWThJfVQokS2p7B6qGYF7Tfh2G97YBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU74bCs2r2sLr2PfSYlW5TsOFuUkIwHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/dO6OAehmXjX+lDSFQwshpik9Yd2vDAvAv Bx3ywNXa6wxQNKW4ssPQcoCA5Lj4IiohfRsCz3Ztn4NjRSDpwwBEWCNmCodJyUBC hP5oo6H5milKxjUR/QrPh1jaYCAxNFIhvzcn33vMHZKv1yzLOu69XWm8N1iyrHWx EVhrmFz2qw/z++qwYz/h79foLn9e+3DHUM5f6Z4/l5lsP2ky9P77PfW3fj4qh/dU c5obn6MaiFhG9IqOJq6CmKcuucYP2mByxD0sadGnVvLfitR0HrEjw56IlFMQ7DOA 6JaLr7hPK9Omdv3Lzn+mpe1ZcSbdOOtk8q4PRfXiu/SSsKtjxCo= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:33 2025 by rpki-client