$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: hxCHrY2D2bH7Q3tLo7S/9esK6RGrJBNYZ/p6bkb+CwY= Subject key identifier: F6:60:AC:2F:20:54:1B:54:97:7D:87:56:FD:F9:C7:8C:F0:04:E9:AF Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 570AEEF8EBA898675042597011CEA9BEADE0049B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 015F Signing time: Thu 05 Jun 2025 21:42:08 +0000 Manifest this update: Thu 05 Jun 2025 21:37:08 +0000 Manifest next update: Mon 09 Jun 2025 03:01:08 +0000 Files and hashes: 1: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: Xb9RcBznBB46/qPrb4IHsoMu3oWoc+DXF3IGcPE58O8=) 2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) 3: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0a:ee:f8:eb:a8:98:67:50:42:59:70:11:ce:a9:be:ad:e0:04:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Jun 5 21:37:08 2025 GMT Not After : Jun 9 03:01:08 2025 GMT Subject: CN=F660AC2F20541B54977D8756FDF9C78CF004E9AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:b3:a8:ab:57:81:35:b9:ae:af:7c:c7:70: 15:f7:9c:d2:f2:7b:6e:5e:a0:2b:3f:19:cb:21:53: de:1e:0e:fb:83:8f:f5:07:38:eb:08:d4:94:95:7a: 17:f6:cc:9e:c7:dc:96:a3:c2:f1:e8:fd:94:a4:a9: 7c:30:e5:24:00:fe:b6:37:e6:a6:85:09:f4:ca:ab: fe:a7:68:bd:9d:15:af:9d:0e:e7:97:01:2e:40:6c: ad:f3:1e:ef:0a:cd:69:1c:86:b4:55:8c:3b:ab:0a: 91:52:a2:1f:33:f3:95:5b:85:0e:b3:f5:21:d7:62: bb:7c:b5:7e:83:47:a2:f2:18:71:65:3b:e5:87:9a: de:51:49:15:fd:36:bd:ac:42:50:c0:8e:68:ab:13: 77:fa:68:cb:11:68:ed:b3:be:a7:31:3a:b9:24:80: 40:27:bc:fc:52:aa:ba:e9:8c:ce:71:6f:08:7e:46: 90:fe:3b:b7:93:1d:b7:44:95:83:fb:ca:e9:9c:1c: e2:ce:3b:d1:71:ea:d6:c9:d3:70:cd:98:b0:e0:e7: ad:f7:b6:60:f4:fd:9f:94:60:8b:0f:c6:9a:a5:3d: 36:38:7f:ca:18:84:e8:22:39:1b:0c:53:b0:f9:b0: 86:ba:e9:14:0e:7d:4a:38:79:3a:dd:4c:e7:43:96: 9f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:60:AC:2F:20:54:1B:54:97:7D:87:56:FD:F9:C7:8C:F0:04:E9:AF X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:91:47:bf:db:4a:16:39:ec:a6:04:6a:c7:32:1f:ea:53:76: 5e:7f:04:6e:d7:3d:4d:9a:46:a9:9f:33:c8:50:8a:b6:ee:32: 1e:20:bf:3b:9b:d6:64:a2:f4:d8:c9:a7:63:fb:8a:6c:84:5d: ba:8c:2d:5d:89:6b:d2:e0:10:23:93:28:01:28:75:c6:ca:19: 33:8a:ca:30:f5:cb:2d:cf:fe:a5:04:f9:68:19:ba:0b:fe:38: 11:aa:75:5f:36:20:ca:1c:a1:d2:7a:5d:5f:cb:c1:77:e4:fc: 38:ee:0a:ff:8f:50:23:aa:5e:59:25:d0:74:cf:d3:53:c6:e5: b2:5f:95:b6:2b:da:bb:2d:f2:99:c4:2f:37:0d:bf:5c:a2:a6: 8b:bb:4b:08:e4:37:35:60:d9:a6:73:aa:f1:23:f1:92:f6:6e: 11:1b:c9:81:9f:fb:d3:55:41:78:1a:13:0d:5a:12:a4:14:0e: dd:1b:34:ff:0e:fd:cb:2b:b8:26:3a:87:b3:48:1a:b9:f7:8a: 0d:0e:33:a3:f6:75:f9:ae:3a:96:f0:df:08:c2:4f:5c:d0:a9: aa:9e:74:2c:ed:82:77:e8:c8:53:a8:40:dc:20:7d:65:20:dc: 17:60:bb:4b:6f:e5:4f:9c:01:6b:af:80:11:e1:ef:62:d9:6b: ed:6a:9b:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwru+OuomGdQQllwEc6pvq3gBJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTA2MDUyMTM3MDhaFw0yNTA2MDkwMzAxMDhaMDMxMTAvBgNV BAMTKEY2NjBBQzJGMjA1NDFCNTQ5NzdEODc1NkZERjlDNzhDRjAwNEU5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCALOoq1eBNbmur3zHcBX3nNLy e25eoCs/GcshU94eDvuDj/UHOOsI1JSVehf2zJ7H3JajwvHo/ZSkqXww5SQA/rY3 5qaFCfTKq/6naL2dFa+dDueXAS5AbK3zHu8KzWkchrRVjDurCpFSoh8z85VbhQ6z 9SHXYrt8tX6DR6LyGHFlO+WHmt5RSRX9Nr2sQlDAjmirE3f6aMsRaO2zvqcxOrkk gEAnvPxSqrrpjM5xbwh+RpD+O7eTHbdElYP7yumcHOLOO9Fx6tbJ03DNmLDg5633 tmD0/Z+UYIsPxpqlPTY4f8oYhOgiORsMU7D5sIa66RQOfUo4eTrdTOdDlp9TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9mCsLyBUG1SXfYdW/fnHjPAE6a8wHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCRR7/bShY57KYEascyH+pTdl5/BG7XPU2a RqmfM8hQirbuMh4gvzub1mSi9NjJp2P7imyEXbqMLV2Ja9LgECOTKAEodcbKGTOK yjD1yy3P/qUE+WgZugv+OBGqdV82IMocodJ6XV/LwXfk/DjuCv+PUCOqXlkl0HTP 01PG5bJflbYr2rst8pnELzcNv1yipou7SwjkNzVg2aZzqvEj8ZL2bhEbyYGf+9NV QXgaEw1aEqQUDt0bNP8O/csruCY6h7NIGrn3ig0OM6P2dfmuOpbw3wjCT1zQqaqe dCztgnfoyFOoQNwgfWUg3Bdgu0tv5U+cAWuvgBHh72LZa+1qm/s= -----END CERTIFICATE-----Generated at Sun Jun 8 04:12:12 2025 by rpki-client