$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: PiEEtX9rP2i3/rf7A9FRDynXLW4iKNJFLYGkmgT/q3w= Subject key identifier: 21:40:12:5B:E3:F7:9F:5A:85:EF:4F:2C:86:C8:FC:8B:C6:FF:DA:64 Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 7BC2FBDCC31BA1CD5F8991906D9812E0603ACF3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: A6 Signing time: Tue 08 Apr 2025 08:31:22 +0000 Manifest this update: Tue 08 Apr 2025 08:26:22 +0000 Manifest next update: Fri 11 Apr 2025 09:45:22 +0000 Files and hashes: 1: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: JcxcaxwKLkaXPPx4myqNJpdCaATZRCOkTz9pp1mz/yI=) 2: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: EQ0mFS1f4sq0pp1jyS9ppSljWoyMDDHeg9J29L5/2e8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 09:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c2:fb:dc:c3:1b:a1:cd:5f:89:91:90:6d:98:12:e0:60:3a:cf:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Apr 8 08:26:22 2025 GMT Not After : Apr 11 09:45:22 2025 GMT Subject: CN=2140125BE3F79F5A85EF4F2C86C8FC8BC6FFDA64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:25:d7:d6:ab:64:d1:f2:b7:90:3b:f5:53: ce:68:40:90:bb:58:80:47:45:fa:44:61:28:4b:6b: 99:5f:26:d2:4c:f1:b0:44:04:c2:f8:b2:8f:b8:3c: cc:e7:ba:05:69:9c:89:2f:30:60:d6:02:ad:9b:ee: a9:37:5b:d2:45:f5:fa:59:7d:95:f3:af:14:2f:ef: c2:11:61:12:17:6f:a1:75:eb:fa:97:5d:4f:08:c8: a5:e3:e5:2a:96:bd:ee:2b:bb:87:3f:ca:84:88:d9: e0:e8:2b:fc:c8:8f:58:07:8d:f7:b9:28:4d:7e:28: 8c:ba:79:62:96:a2:eb:dd:79:c4:e3:04:c3:a9:6f: ba:3a:df:fb:12:a5:42:d8:a7:87:2f:bb:d9:15:70: 39:8c:81:c2:29:6c:74:09:bc:0e:bf:01:fd:d1:fe: a3:b0:26:dd:a3:21:4d:cb:b4:13:52:08:a3:c2:53: d6:1f:0d:dd:a8:9e:b2:f0:df:eb:6f:00:84:4c:28: 46:65:f7:4d:4c:ca:09:fb:e9:ec:d3:44:6d:08:22: 67:53:03:33:f7:0f:c5:b9:b2:72:8c:bf:8b:2c:23: 47:3f:f4:39:38:33:e2:f8:5b:fa:58:93:17:b3:64: 05:54:2b:d4:13:a7:2c:cb:b8:8a:ca:d4:39:61:b8: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:40:12:5B:E3:F7:9F:5A:85:EF:4F:2C:86:C8:FC:8B:C6:FF:DA:64 X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b3:67:f3:ae:27:64:97:09:69:18:06:24:31:35:6b:66:16: c9:d5:b4:f7:23:09:f3:79:bb:d3:49:92:ca:bc:1c:79:46:b2: 25:c4:cd:f0:4f:7d:cf:d3:f4:74:e5:87:4d:36:a2:25:f6:27: 0d:a3:fc:b9:67:ab:28:2f:d7:c6:c1:a4:57:9b:e4:9d:d9:8b: d9:1e:3c:57:79:ce:c6:98:ac:66:36:a4:6e:f8:6d:a9:e8:4f: 45:f5:b7:0c:ec:53:89:e9:37:74:94:0d:e8:ba:ea:5f:7b:5c: 9f:57:a2:56:d3:20:21:5c:7e:5a:2a:db:f0:a6:57:f7:eb:19: 2c:1d:ae:42:1d:02:0d:2c:f7:32:30:61:50:25:82:41:c9:37: 21:e3:29:d0:5f:61:60:9a:0c:f4:3f:fe:c3:a6:7e:24:0a:7a: 16:f2:30:97:d4:51:bc:2a:ee:a2:e4:9c:ce:f3:6b:49:a1:bd: 72:65:6f:45:24:17:f6:49:c4:ac:72:68:de:ac:ec:67:c8:61: 2a:3d:7f:dd:39:c3:b4:9f:02:94:ea:75:07:d0:d0:e6:fb:60: 23:97:2d:4e:f7:b6:ac:7f:13:d1:79:ed:04:33:38:c7:e9:fe: 3a:ed:c6:bc:24:ce:d6:ce:77:fb:23:09:28:be:04:87:03:07: c9:61:a9:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8L73MMboc1fiZGQbZgS4GA6zzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNTA0MDgwODI2MjJaFw0yNTA0MTEwOTQ1MjJaMDMxMTAvBgNV BAMTKDIxNDAxMjVCRTNGNzlGNUE4NUVGNEYyQzg2QzhGQzhCQzZGRkRBNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9byXX1qtk0fK3kDv1U85oQJC7 WIBHRfpEYShLa5lfJtJM8bBEBML4so+4PMznugVpnIkvMGDWAq2b7qk3W9JF9fpZ fZXzrxQv78IRYRIXb6F16/qXXU8IyKXj5SqWve4ru4c/yoSI2eDoK/zIj1gHjfe5 KE1+KIy6eWKWouvdecTjBMOpb7o63/sSpULYp4cvu9kVcDmMgcIpbHQJvA6/Af3R /qOwJt2jIU3LtBNSCKPCU9YfDd2onrLw3+tvAIRMKEZl901Mygn76ezTRG0IImdT AzP3D8W5snKMv4ssI0c/9Dk4M+L4W/pYkxezZAVUK9QTpyzLuIrK1DlhuE5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIUASW+P3n1qF708shsj8i8b/2mQwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSzZ/OuJ2SXCWkYBiQxNWtmFsnVtPcjCfN5 u9NJksq8HHlGsiXEzfBPfc/T9HTlh002oiX2Jw2j/Llnqygv18bBpFeb5J3Zi9ke PFd5zsaYrGY2pG74banoT0X1twzsU4npN3SUDei66l97XJ9XolbTICFcfloq2/Cm V/frGSwdrkIdAg0s9zIwYVAlgkHJNyHjKdBfYWCaDPQ//sOmfiQKehbyMJfUUbwq 7qLknM7za0mhvXJlb0UkF/ZJxKxyaN6s7GfIYSo9f905w7SfApTqdQfQ0Ob7YCOX LU73tqx/E9F57QQzOMfp/jrtxrwkztbOd/sjCSi+BIcDB8lhqXI= -----END CERTIFICATE-----Generated at Wed Apr 9 17:54:24 2025 by rpki-client