$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: tEtBLx7N2Trqrv9KY0ZPv/xx0gZYb2etcwhva9LfiY4= Subject key identifier: B5:2F:64:DF:41:EE:61:83:CA:4B:DB:56:C3:6C:77:50:82:89:6A:E1 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 78FA388622C39A12935B3FEAAABB3AE407D5C1F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 014A Signing time: Sat 19 Apr 2025 04:21:54 +0000 Manifest this update: Sat 19 Apr 2025 04:16:54 +0000 Manifest next update: Tue 22 Apr 2025 05:21:54 +0000 Files and hashes: 1: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) 2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) 3: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: J+sEK71mTai4oybXrszNI5OIpBH0ICz40Fqfdr0JILE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 05:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fa:38:86:22:c3:9a:12:93:5b:3f:ea:aa:bb:3a:e4:07:d5:c1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Apr 19 04:16:54 2025 GMT Not After : Apr 22 05:21:54 2025 GMT Subject: CN=B52F64DF41EE6183CA4BDB56C36C775082896AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:ce:6f:48:21:86:88:3b:94:c6:0a:0c:75: 84:e0:85:46:a2:2c:95:15:15:d2:60:60:7c:39:55: 19:37:0f:88:5c:6d:8e:de:99:ff:42:8f:23:62:14: ac:72:93:1e:50:9f:96:50:40:c6:a8:e4:89:5a:48: d8:fc:2d:ad:9d:a2:76:0c:0a:be:70:e5:fd:49:21: 81:e8:d7:a3:e6:a4:46:e7:82:bd:c5:7c:16:70:c7: 7c:a6:03:af:55:6c:4d:0a:cc:ca:1b:9c:03:a1:74: b5:0c:dc:b5:36:11:de:de:69:1c:f7:fe:65:d6:ec: 1e:8c:4d:90:a7:97:32:bb:cd:9b:13:1f:43:41:e6: 45:3d:49:43:91:d9:76:26:14:2b:51:74:17:50:2e: 91:8b:97:8a:79:1e:47:0f:c2:f1:4e:f2:19:40:13: a1:70:a9:11:d4:df:08:52:8c:e8:60:ad:36:6b:e9: 6c:fd:44:a7:ef:fa:d4:7d:9b:a7:a3:83:1f:a0:47: 15:9e:44:55:3f:31:a8:38:21:cf:b4:cd:56:92:06: ce:4d:c5:55:a7:de:cc:10:4c:7f:e2:e9:06:85:07: 96:db:67:4e:31:dc:ce:2c:32:0e:fe:11:e2:1b:a7: 3b:b2:c8:11:d4:65:6a:0c:e0:fc:6b:d3:bb:1d:74: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2F:64:DF:41:EE:61:83:CA:4B:DB:56:C3:6C:77:50:82:89:6A:E1 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7d:2b:88:61:3a:85:7d:f0:45:45:eb:15:fb:36:62:b3:47: b1:6d:62:a6:1e:c3:4a:20:aa:a1:3c:7b:c1:8d:07:6f:6e:95: dd:38:ef:15:37:84:68:2f:9d:0a:cb:0f:66:a6:76:a2:48:5a: 33:ab:1c:e9:32:8c:35:2a:cd:d9:7d:a5:79:40:45:bb:a4:f0: f0:16:22:9a:fd:a0:07:fe:f3:d8:22:db:e3:ed:9e:d8:83:f9: 26:7d:13:d4:a5:6f:e0:21:9d:f8:13:d5:77:bc:6c:3e:84:45: e6:60:78:6a:c7:84:e5:f2:bd:a0:e4:f8:d5:cb:51:d6:8a:c6: b8:bc:9b:c9:17:4e:de:da:0a:37:93:7a:87:2e:a7:66:66:53: bd:a6:37:f3:09:54:e2:cd:ec:78:b1:7c:46:c9:46:ff:6c:a9: 13:1f:4f:32:c4:a0:67:17:84:08:08:92:9a:19:dc:f3:d3:65: af:0c:dc:06:bf:3b:45:76:5a:7a:55:51:2e:d1:db:bb:a5:e7: 3a:cc:81:31:59:c3:7d:1e:39:9f:dc:37:1a:fe:cb:97:15:1e: 76:f8:0f:97:b9:a2:6e:cb:4e:78:9c:c7:9b:c8:3b:04:08:31: b0:90:1e:ff:aa:c0:0d:25:83:ba:af:3e:b2:59:56:ee:31:3f: 1b:9e:83:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePo4hiLDmhKTWz/qqrs65AfVwfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTA0MTkwNDE2NTRaFw0yNTA0MjIwNTIxNTRaMDMxMTAvBgNV BAMTKEI1MkY2NERGNDFFRTYxODNDQTRCREI1NkMzNkM3NzUwODI4OTZBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVc5vSCGGiDuUxgoMdYTghUai LJUVFdJgYHw5VRk3D4hcbY7emf9CjyNiFKxykx5Qn5ZQQMao5IlaSNj8La2donYM Cr5w5f1JIYHo16PmpEbngr3FfBZwx3ymA69VbE0KzMobnAOhdLUM3LU2Ed7eaRz3 /mXW7B6MTZCnlzK7zZsTH0NB5kU9SUOR2XYmFCtRdBdQLpGLl4p5HkcPwvFO8hlA E6FwqRHU3whSjOhgrTZr6Wz9RKfv+tR9m6ejgx+gRxWeRFU/Mag4Ic+0zVaSBs5N xVWn3swQTH/i6QaFB5bbZ04x3M4sMg7+EeIbpzuyyBHUZWoM4Pxr07sddLcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtS9k30HuYYPKS9tWw2x3UIKJauEwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKF9K4hhOoV98EVF6xX7NmKzR7FtYqYew0og qqE8e8GNB29uld047xU3hGgvnQrLD2amdqJIWjOrHOkyjDUqzdl9pXlARbuk8PAW Ipr9oAf+89gi2+PtntiD+SZ9E9Slb+AhnfgT1Xe8bD6EReZgeGrHhOXyvaDk+NXL UdaKxri8m8kXTt7aCjeTeocup2ZmU72mN/MJVOLN7HixfEbJRv9sqRMfTzLEoGcX hAgIkpoZ3PPTZa8M3Aa/O0V2WnpVUS7R27ul5zrMgTFZw30eOZ/cNxr+y5cVHnb4 D5e5om7LTnicx5vIOwQIMbCQHv+qwA0lg7qvPrJZVu4xPxuegx4= -----END CERTIFICATE-----Generated at Sun Apr 20 02:49:36 2025 by rpki-client