$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft File: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json) Hash identifier: +gZPdDkKkiNYiNAMFG60LAsIpi4DzRdpYduM6Xd9KLo= Subject key identifier: 39:D4:4A:CD:EF:7C:13:FB:CA:63:8C:8F:77:3C:E4:84:A2:50:15:93 Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB Certificate issuer: /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Certificate serial: 37A63ED828C641F9C2BCD4070D1BA04A5BF473B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft Manifest number: 03B3 Signing time: Sat 06 Sep 2025 22:11:27 +0000 Manifest this update: Sat 06 Sep 2025 22:06:27 +0000 Manifest next update: Wed 10 Sep 2025 01:52:27 +0000 Files and hashes: 1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: 39u/BYz+e+btt2d+3pF4GTsJLk2hOUbzn+2ZLMdN85o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a6:3e:d8:28:c6:41:f9:c2:bc:d4:07:0d:1b:a0:4a:5b:f4:73:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Validity Not Before: Sep 6 22:06:27 2025 GMT Not After : Sep 10 01:52:27 2025 GMT Subject: CN=39D44ACDEF7C13FBCA638C8F773CE484A2501593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:89:5c:b9:d8:8d:c5:2f:af:30:49:f5:13: b3:8a:96:5b:94:a3:4a:b9:32:41:96:e0:f8:88:d2: cf:ea:c3:42:f9:48:ea:de:3e:ea:8b:f0:b5:a9:ee: 34:50:df:28:4f:a2:28:8b:89:00:0f:70:cf:e2:a7: 80:9f:2d:40:8b:96:82:0f:61:77:15:8c:24:e4:94: d3:d1:62:91:76:d2:46:6a:14:18:7f:90:05:df:fc: 93:8a:2f:f3:68:84:1c:37:e2:a3:a0:e5:3b:f3:4a: f5:75:d4:bf:f5:07:1f:4e:37:7b:0c:51:1b:2d:1e: b8:90:bd:70:cd:72:c1:f3:1e:21:32:c7:02:3b:63: 97:4f:46:af:fd:8f:97:4f:2e:e5:bf:60:1a:65:3b: 99:f2:a8:d7:70:c3:a6:7c:f6:89:bc:2e:0b:99:9a: d8:a6:16:73:00:2d:ad:59:ec:9e:8d:7c:e3:7d:87: 4d:e5:dd:00:b3:1f:a2:18:15:4a:88:28:8f:54:ad: 92:26:4a:56:ca:45:32:c8:41:4c:21:b5:ee:b6:b8: dc:c8:05:be:cd:1e:0a:d2:66:20:2a:74:13:04:92: 0e:87:83:b5:8d:8e:49:0e:12:8f:2d:7e:2d:fb:0e: 4b:80:18:8e:0b:6c:87:5d:77:48:a3:e6:1d:4e:e0: cd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D4:4A:CD:EF:7C:13:FB:CA:63:8C:8F:77:3C:E4:84:A2:50:15:93 X509v3 Authority Key Identifier: keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b3:97:25:89:9c:56:46:69:4d:e9:bc:60:df:ec:50:22:e1: 40:6e:b1:79:c8:26:8a:a4:8f:8e:e9:ad:94:90:f8:f2:41:d7: 5f:99:12:92:20:fd:70:e2:74:25:0d:3c:f7:8c:b7:82:31:6c: 94:ff:0f:d9:ed:ad:aa:a1:13:dd:e2:2a:57:62:61:90:3f:f7: f1:25:78:45:0f:a1:9f:df:b7:43:7f:c1:8d:41:0b:20:90:d7: ad:8f:ae:24:60:e9:20:b1:13:db:07:7e:37:38:5a:c0:24:6e: e7:de:b1:28:49:7e:d9:d9:bd:ad:60:13:64:ae:65:fe:06:01: c2:06:be:ed:91:51:46:18:81:08:7a:c8:49:82:92:f7:f3:fa: 21:c1:7c:d2:83:de:26:27:ad:b8:72:b1:a3:bb:8b:de:80:48: 51:95:3f:fd:a1:eb:ca:95:a7:7b:c2:2b:7b:8c:6a:cc:cd:a4: c3:08:7d:5e:43:65:69:9b:88:8d:2f:9b:1a:64:98:b3:54:39: 6a:17:6f:eb:b5:4e:97:89:02:7b:55:57:de:41:4d:81:79:b5: ab:ec:d1:b3:46:83:24:e7:76:07:e2:29:57:3a:33:c8:44:3a: dc:e8:1a:13:e8:7f:44:76:8e:17:eb:6f:73:a6:d2:bf:4f:ad: aa:fc:33:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6Y+2CjGQfnCvNQHDRugSlv0c7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIx MjQzQkZGQjAeFw0yNTA5MDYyMjA2MjdaFw0yNTA5MTAwMTUyMjdaMDMxMTAvBgNV BAMTKDM5RDQ0QUNERUY3QzEzRkJDQTYzOEM4Rjc3M0NFNDg0QTI1MDE1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC974lcudiNxS+vMEn1E7OKlluU o0q5MkGW4PiI0s/qw0L5SOrePuqL8LWp7jRQ3yhPoiiLiQAPcM/ip4CfLUCLloIP YXcVjCTklNPRYpF20kZqFBh/kAXf/JOKL/NohBw34qOg5TvzSvV11L/1Bx9ON3sM URstHriQvXDNcsHzHiEyxwI7Y5dPRq/9j5dPLuW/YBplO5nyqNdww6Z89om8LguZ mtimFnMALa1Z7J6NfON9h03l3QCzH6IYFUqIKI9UrZImSlbKRTLIQUwhte62uNzI Bb7NHgrSZiAqdBMEkg6Hg7WNjkkOEo8tfi37DkuAGI4LbIddd0ij5h1O4M3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOdRKze98E/vKY4yPdzzkhKJQFZMwHwYDVR0j BBgwFoAUr9/V0cSzny+qu6W8FSNMKxJDv/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NGZlMTgxMS1jMDNmLTQ5ZDgtOTIxNy0xM2ZmMjJhMzFlYmUvMC9BRkRGRDVEMUM0 QjM5RjJGQUFCQkE1QkMxNTIzNEMyQjEyNDNCRkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIxMjQz QkZGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTRmZTE4MTEtYzAzZi00OWQ4LTky MTctMTNmZjIyYTMxZWJlLzAvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRD MkIxMjQzQkZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6zlyWJnFZGaU3pvGDf7FAi4UBusXnIJoqk j47prZSQ+PJB11+ZEpIg/XDidCUNPPeMt4IxbJT/D9ntraqhE93iKldiYZA/9/El eEUPoZ/ft0N/wY1BCyCQ162PriRg6SCxE9sHfjc4WsAkbufesShJftnZva1gE2Su Zf4GAcIGvu2RUUYYgQh6yEmCkvfz+iHBfNKD3iYnrbhysaO7i96ASFGVP/2h68qV p3vCK3uMaszNpMMIfV5DZWmbiI0vmxpkmLNUOWoXb+u1TpeJAntVV95BTYF5tavs 0bNGgyTndgfiKVc6M8hEOtzoGhPof0R2jhfrb3Om0r9Prar8MzI= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:22 2025 by rpki-client