$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft File: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json) Hash identifier: pHqOBXU5u/UwGuH/V6V7yEZ3H222CvdyRcX30AIjAWE= Subject key identifier: 54:24:14:E0:0A:D1:36:59:46:E9:83:22:EA:05:F2:A1:AD:4B:DC:97 Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB Certificate issuer: /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Certificate serial: 1062A3EB3040363062FABB7EA5020E3D677759EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft Manifest number: 038A Signing time: Fri 06 Jun 2025 02:01:31 +0000 Manifest this update: Fri 06 Jun 2025 01:56:31 +0000 Manifest next update: Mon 09 Jun 2025 03:24:31 +0000 Files and hashes: 1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: VQXAPXLz4yDfuTtj7m/Yd8q33hBABQubM8UITCB7NWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 03:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:62:a3:eb:30:40:36:30:62:fa:bb:7e:a5:02:0e:3d:67:77:59:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Validity Not Before: Jun 6 01:56:31 2025 GMT Not After : Jun 9 03:24:31 2025 GMT Subject: CN=542414E00AD1365946E98322EA05F2A1AD4BDC97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:80:51:d1:b3:07:16:32:ab:c1:88:2b:20:74: 85:51:25:0c:ae:7a:a8:2c:91:06:5f:e6:d7:c5:ab: 91:26:3a:e7:15:45:dd:4a:9a:f2:b4:e9:dd:2c:81: b3:eb:28:ff:46:3a:46:cd:52:63:41:f8:22:04:59: 0c:f7:8d:e0:2d:5c:33:68:fb:58:fe:0a:73:17:77: e4:5c:bc:8d:66:92:f2:e7:1b:77:e8:03:af:bd:e9: 24:c2:0c:28:d2:c4:f8:c2:91:8b:de:9e:94:df:ff: 5b:7d:cc:39:4b:b1:2b:2f:a2:b9:8b:6b:48:a6:54: 6a:55:86:0e:ff:38:43:c6:12:f1:b4:e4:41:f3:f1: 30:86:c8:36:fe:92:4f:b4:cb:bb:49:fb:39:51:e7: 1d:d1:9f:1e:76:df:6d:b5:c1:e8:8d:21:24:e3:cf: 26:1c:eb:b4:f9:f1:9a:72:e4:87:be:41:28:cd:0b: 37:d3:f3:df:ae:48:92:1b:4b:18:fa:b6:8c:dd:ed: 29:60:e0:03:e9:b6:32:1a:13:ff:8e:60:f2:06:8d: c6:9a:83:5b:42:34:5b:ec:81:67:6a:0f:34:0c:a7: 0a:4e:8b:0d:c6:a1:2a:7e:92:12:56:5b:0c:a2:21: 82:83:be:54:aa:d6:c4:f1:a4:48:62:41:ea:a3:73: ab:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:24:14:E0:0A:D1:36:59:46:E9:83:22:EA:05:F2:A1:AD:4B:DC:97 X509v3 Authority Key Identifier: keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9d:5a:07:b5:42:4d:5c:61:a1:84:fe:5a:ce:73:71:5c:c8: 3b:1f:48:3b:42:81:50:68:00:98:85:02:8d:59:76:c2:46:51: 6a:47:29:09:33:12:3a:78:da:12:f0:44:51:f3:f0:6d:6d:7a: 5c:73:e8:f9:ba:f7:67:61:f3:76:95:65:d6:a1:42:80:6f:9d: 08:c9:06:4b:87:bf:99:74:8b:15:fa:9a:dd:4a:44:2f:be:83: 07:03:05:6b:08:dc:06:0a:2a:61:45:0d:8d:1f:4d:af:44:b2: 5c:39:79:db:ca:21:93:fe:8e:ae:15:d1:ac:30:22:62:5c:3c: e7:cd:64:aa:30:b1:52:77:a3:72:53:04:82:b5:30:ef:81:4a: 81:69:d2:50:07:a1:f0:2e:d3:75:bd:fc:f3:46:83:a4:7b:2c: e3:86:fc:55:c9:06:3d:d4:82:40:62:46:60:e2:91:f6:b0:aa: fe:f0:65:9e:57:3e:d7:91:cf:ff:72:10:e8:e7:3c:ec:fe:81: b9:91:2f:19:d3:d9:7a:dd:de:19:c5:12:b8:72:61:a9:2d:6c: 55:61:03:38:d2:6c:3e:3c:51:87:6f:ad:d6:79:eb:40:c7:03: e6:66:10:6d:83:05:54:2f:cb:c9:b5:d7:7e:ff:cc:43:79:c3: 39:30:5c:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGKj6zBANjBi+rt+pQIOPWd3WeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIx MjQzQkZGQjAeFw0yNTA2MDYwMTU2MzFaFw0yNTA2MDkwMzI0MzFaMDMxMTAvBgNV BAMTKDU0MjQxNEUwMEFEMTM2NTk0NkU5ODMyMkVBMDVGMkExQUQ0QkRDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgFHRswcWMqvBiCsgdIVRJQyu eqgskQZf5tfFq5EmOucVRd1KmvK06d0sgbPrKP9GOkbNUmNB+CIEWQz3jeAtXDNo +1j+CnMXd+RcvI1mkvLnG3foA6+96STCDCjSxPjCkYvenpTf/1t9zDlLsSsvormL a0imVGpVhg7/OEPGEvG05EHz8TCGyDb+kk+0y7tJ+zlR5x3Rnx523221weiNISTj zyYc67T58Zpy5Ie+QSjNCzfT89+uSJIbSxj6tozd7Slg4APptjIaE/+OYPIGjcaa g1tCNFvsgWdqDzQMpwpOiw3GoSp+khJWWwyiIYKDvlSq1sTxpEhiQeqjc6v3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVCQU4ArRNllG6YMi6gXyoa1L3JcwHwYDVR0j BBgwFoAUr9/V0cSzny+qu6W8FSNMKxJDv/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NGZlMTgxMS1jMDNmLTQ5ZDgtOTIxNy0xM2ZmMjJhMzFlYmUvMC9BRkRGRDVEMUM0 QjM5RjJGQUFCQkE1QkMxNTIzNEMyQjEyNDNCRkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIxMjQz QkZGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTRmZTE4MTEtYzAzZi00OWQ4LTky MTctMTNmZjIyYTMxZWJlLzAvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRD MkIxMjQzQkZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6dWge1Qk1cYaGE/lrOc3FcyDsfSDtCgVBo AJiFAo1ZdsJGUWpHKQkzEjp42hLwRFHz8G1telxz6Pm692dh83aVZdahQoBvnQjJ BkuHv5l0ixX6mt1KRC++gwcDBWsI3AYKKmFFDY0fTa9Eslw5edvKIZP+jq4V0aww ImJcPOfNZKowsVJ3o3JTBIK1MO+BSoFp0lAHofAu03W9/PNGg6R7LOOG/FXJBj3U gkBiRmDikfawqv7wZZ5XPteRz/9yEOjnPOz+gbmRLxnT2Xrd3hnFErhyYaktbFVh AzjSbD48UYdvrdZ560DHA+ZmEG2DBVQvy8m1137/zEN5wzkwXMM= -----END CERTIFICATE-----Generated at Fri Jun 6 16:26:35 2025 by rpki-client