$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: YeK+g/JNOt5z81TIEOQvL3DN91qsBNjUXnCYH7cs9GM= Subject key identifier: 7C:D7:F9:89:79:65:49:5D:86:7F:73:92:AC:55:59:4C:F9:16:20:B1 Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 48CCAEFAAF2D88C8CAC9D6A2D44A01F35A3DBF9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: D4 Signing time: Sun 20 Jul 2025 18:21:23 +0000 Manifest this update: Sun 20 Jul 2025 18:16:23 +0000 Manifest next update: Wed 23 Jul 2025 23:08:23 +0000 Files and hashes: 1: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: cw2fHCgddE6T9Bseh4OGA0Yi5+A2YR1eG3gA/uI75IM=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: JcxcaxwKLkaXPPx4myqNJpdCaATZRCOkTz9pp1mz/yI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 23:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:cc:ae:fa:af:2d:88:c8:ca:c9:d6:a2:d4:4a:01:f3:5a:3d:bf:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Jul 20 18:16:23 2025 GMT Not After : Jul 23 23:08:23 2025 GMT Subject: CN=7CD7F9897965495D867F7392AC55594CF91620B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:69:30:dd:c0:13:dc:07:cd:e0:42:d2:8f: 70:10:4f:f1:5e:02:f4:a5:8e:be:de:14:1a:42:b5: 7f:6b:00:9c:13:3c:53:1a:b3:e1:cd:61:e9:ec:ca: 81:9d:ac:de:2e:66:8c:ef:b6:e5:b8:68:aa:24:0a: 5b:13:64:7c:12:0b:6a:c1:af:2a:53:10:d5:20:24: 8d:19:8b:86:90:cb:9d:ce:6d:db:d6:1d:46:76:bc: 84:5c:70:dc:d4:7b:e1:6d:4c:27:0f:4c:ae:69:69: 29:22:af:12:b4:a4:54:66:9e:60:61:61:1b:38:a0: 41:bd:9a:95:7f:38:1f:04:8b:01:8e:93:ce:81:ab: e6:2b:93:59:e5:3e:50:55:f2:ce:08:ed:41:82:88: 1d:c2:5f:0e:3d:94:ae:cf:67:d4:74:8e:76:5e:ee: e8:ab:cd:e5:b2:29:6d:03:46:3c:91:bf:2f:96:df: 06:89:46:50:d4:9b:a8:6d:eb:1f:84:b2:a1:c4:eb: e7:69:e0:20:9a:14:2f:46:46:a0:4b:6d:78:ca:18: d7:7c:ea:9d:82:9d:5b:f0:7d:cf:2e:5f:96:6d:76: 4a:f9:d9:8f:0e:46:67:55:94:7c:39:f6:e8:0d:d4: a1:34:7f:d3:dc:71:63:78:2b:c8:2a:c4:48:23:08: fb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D7:F9:89:79:65:49:5D:86:7F:73:92:AC:55:59:4C:F9:16:20:B1 X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:14:cb:e2:f1:a0:e6:2b:20:6f:da:fd:57:04:bf:56:c7:f0: 28:15:3d:6e:94:2a:6a:46:10:ba:23:45:88:85:9d:67:03:b3: 69:71:9f:8c:8e:cd:87:e7:a2:66:a6:33:6e:f0:06:f4:1a:a7: 98:ac:18:db:6e:46:40:d7:33:2b:ec:c7:3f:04:62:83:8b:11: 3f:40:ab:0f:10:5f:aa:5a:3a:bf:fd:7b:5e:51:71:39:c8:67: 88:f5:03:31:d6:91:bc:86:84:77:d6:b2:6a:9c:cf:21:c6:7a: 4a:65:9e:e8:da:be:c8:0f:43:c3:86:fa:8b:73:c7:22:dc:7f: de:ed:66:c0:96:ac:28:eb:98:e4:1e:ac:13:39:c1:ab:8d:79: 85:0b:34:14:89:5b:7a:ef:0e:67:e5:ab:5a:8f:c8:ac:22:54: 52:26:e8:93:15:08:bf:3e:74:5e:06:d8:2f:19:fd:fa:ed:ee: 59:6f:4c:ee:06:cf:b3:46:7a:30:fd:0e:97:fc:e4:4e:60:6c: 11:ca:54:bf:30:2f:3d:0e:cc:d5:9b:e8:f3:86:41:09:31:c8: 64:63:86:22:26:55:94:7c:8e:39:80:c8:70:73:48:7b:64:10: 76:90:9a:a6:d9:17:50:c0:63:d1:ec:9c:3c:ac:5d:45:60:97: c6:44:ca:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSMyu+q8tiMjKydai1EoB81o9v5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNTA3MjAxODE2MjNaFw0yNTA3MjMyMzA4MjNaMDMxMTAvBgNV BAMTKDdDRDdGOTg5Nzk2NTQ5NUQ4NjdGNzM5MkFDNTU1OTRDRjkxNjIwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkGkw3cAT3AfN4ELSj3AQT/Fe AvSljr7eFBpCtX9rAJwTPFMas+HNYensyoGdrN4uZozvtuW4aKokClsTZHwSC2rB rypTENUgJI0Zi4aQy53ObdvWHUZ2vIRccNzUe+FtTCcPTK5paSkirxK0pFRmnmBh YRs4oEG9mpV/OB8EiwGOk86Bq+Yrk1nlPlBV8s4I7UGCiB3CXw49lK7PZ9R0jnZe 7uirzeWyKW0DRjyRvy+W3waJRlDUm6ht6x+EsqHE6+dp4CCaFC9GRqBLbXjKGNd8 6p2CnVvwfc8uX5Ztdkr52Y8ORmdVlHw59ugN1KE0f9PccWN4K8gqxEgjCPsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfNf5iXllSV2Gf3OSrFVZTPkWILEwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMsUy+LxoOYrIG/a/VcEv1bH8CgVPW6UKmpG ELojRYiFnWcDs2lxn4yOzYfnomamM27wBvQap5isGNtuRkDXMyvsxz8EYoOLET9A qw8QX6paOr/9e15RcTnIZ4j1AzHWkbyGhHfWsmqczyHGekplnujavsgPQ8OG+otz xyLcf97tZsCWrCjrmOQerBM5wauNeYULNBSJW3rvDmflq1qPyKwiVFIm6JMVCL8+ dF4G2C8Z/frt7llvTO4Gz7NGejD9Dpf85E5gbBHKVL8wLz0OzNWb6POGQQkxyGRj hiImVZR8jjmAyHBzSHtkEHaQmqbZF1DAY9HsnDysXUVgl8ZEypg= -----END CERTIFICATE-----Generated at Tue Jul 22 06:15:44 2025 by rpki-client