$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json) Hash identifier: HVpLcPcyJVi6OYswKnE8xi/fznf5Rj97K2IVM+GDMaw= Subject key identifier: F2:68:22:8B:38:85:3A:E7:44:19:87:14:61:E4:E9:30:97:F3:18:AC Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 279DC3168F97263014C0697FE9274871DE0A2A13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft Manifest number: 0362 Signing time: Sat 28 Jun 2025 03:23:18 +0000 Manifest this update: Sat 28 Jun 2025 03:18:18 +0000 Manifest next update: Tue 01 Jul 2025 11:18:18 +0000 Files and hashes: 1: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: oQiXGtw/3dtAFdh403qakK0EgJ8nJT/TIF9h13t6NiA=) 2: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: e6zTKV5eeeBjTOLPA4Uct8apjvBjBaHZhQqPX177Lcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 11:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9d:c3:16:8f:97:26:30:14:c0:69:7f:e9:27:48:71:de:0a:2a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Jun 28 03:18:18 2025 GMT Not After : Jul 1 11:18:18 2025 GMT Subject: CN=F268228B38853AE74419871461E4E93097F318AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:01:4c:cd:52:85:19:66:a4:9a:52:2e:d4:7c: af:34:2d:4f:bc:76:76:61:77:be:7f:e8:ce:e3:a3: d9:20:bd:75:0c:7f:50:af:f1:b6:76:18:75:cb:52: 04:fe:fb:7a:1d:41:86:bd:c4:f7:94:09:73:98:7c: 9e:b7:48:58:d6:73:ec:d7:ef:f3:5c:5c:e4:42:3b: 3a:5b:39:eb:0b:b8:02:1f:97:07:c3:21:e6:2c:04: 8e:2c:e7:f0:2f:c9:e0:3a:1e:99:04:df:48:ea:bc: 9b:af:4a:03:1f:75:f4:23:25:7b:1d:58:55:84:1b: fc:4d:49:ac:53:8f:5a:5d:5b:4a:49:a4:1c:65:39: 85:d4:df:bb:c9:1e:77:78:78:5b:b1:7d:09:86:5b: 7f:fc:57:ff:7c:f7:a1:9d:9b:64:12:3d:c2:b5:18: e2:36:2b:08:2f:5f:17:4d:0c:58:79:f3:87:f5:a0: ec:99:92:c4:58:6d:3b:9a:43:85:99:cb:59:66:d3: 9c:21:30:f1:ca:27:7c:af:47:18:8a:e1:eb:a8:be: d2:60:e7:5f:c8:54:ba:ce:d8:1d:2e:b1:f5:9a:98: aa:ec:bf:58:0b:e6:7b:d9:87:b3:c6:34:64:18:22: 5f:fc:37:40:c1:3b:f4:5a:46:94:c6:b1:91:7c:37: e2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:68:22:8B:38:85:3A:E7:44:19:87:14:61:E4:E9:30:97:F3:18:AC X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:62:06:69:df:38:98:ed:3a:d5:d7:0c:aa:0b:a6:63:b0:1c: 6a:8d:d5:e4:5a:66:8e:18:fc:14:fb:dc:38:38:c4:df:d8:1c: a0:1a:74:b4:cb:bc:e2:8b:1f:73:8a:c8:d0:98:60:2e:2d:bf: 2f:75:85:58:82:a3:c6:ae:5b:06:d7:6d:c0:13:a1:4b:df:1f: cd:80:cb:07:85:76:f3:ab:ed:48:20:a5:6e:63:f1:a7:0a:b6: 7e:4a:cf:14:15:6f:35:36:dd:a5:62:a5:c9:23:1f:ad:36:02: 66:5d:1a:d5:9d:2f:9b:b0:09:ff:fe:63:92:d9:47:b9:5d:c9: a3:98:ab:a5:13:28:43:58:46:5e:ba:9b:56:e4:ca:b2:cb:07: 23:77:79:14:f3:31:c9:91:70:43:65:0c:96:28:47:6a:ef:9e: 3d:4d:64:73:59:95:02:53:52:be:fb:c8:3d:6b:89:ba:3e:8f: 80:5e:cd:07:4a:37:b3:6d:6a:8c:79:67:52:63:81:9d:db:cb: 92:15:a3:d9:93:03:d4:7e:e1:5d:e8:b3:a4:cb:23:99:49:0b: d4:01:ae:f2:80:2d:be:b6:c4:b8:5d:b2:a0:92:a8:16:e5:ee: b1:d3:f8:f5:9b:46:72:72:56:70:2d:c2:fa:f9:e5:a8:77:2d: c4:40:57:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ53DFo+XJjAUwGl/6SdIcd4KKhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yNTA2MjgwMzE4MThaFw0yNTA3MDExMTE4MThaMDMxMTAvBgNV BAMTKEYyNjgyMjhCMzg4NTNBRTc0NDE5ODcxNDYxRTRFOTMwOTdGMzE4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvAUzNUoUZZqSaUi7UfK80LU+8 dnZhd75/6M7jo9kgvXUMf1Cv8bZ2GHXLUgT++3odQYa9xPeUCXOYfJ63SFjWc+zX 7/NcXORCOzpbOesLuAIflwfDIeYsBI4s5/AvyeA6HpkE30jqvJuvSgMfdfQjJXsd WFWEG/xNSaxTj1pdW0pJpBxlOYXU37vJHnd4eFuxfQmGW3/8V/9896Gdm2QSPcK1 GOI2KwgvXxdNDFh584f1oOyZksRYbTuaQ4WZy1lm05whMPHKJ3yvRxiK4euovtJg 51/IVLrO2B0usfWamKrsv1gL5nvZh7PGNGQYIl/8N0DBO/RaRpTGsZF8N+JTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8mgiiziFOudEGYcUYeTpMJfzGKwwHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAz MTBGMTAwQ0UzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtiBmnfOJjtOtXXDKoLpmOwHGqN1eRaZo4Y /BT73Dg4xN/YHKAadLTLvOKLH3OKyNCYYC4tvy91hViCo8auWwbXbcAToUvfH82A yweFdvOr7UggpW5j8acKtn5KzxQVbzU23aVipckjH602AmZdGtWdL5uwCf/+Y5LZ R7ldyaOYq6UTKENYRl66m1bkyrLLByN3eRTzMcmRcENlDJYoR2rvnj1NZHNZlQJT Ur77yD1ribo+j4BezQdKN7Ntaox5Z1JjgZ3by5IVo9mTA9R+4V3os6TLI5lJC9QB rvKALb62xLhdsqCSqBbl7rHT+PWbRnJyVnAtwvr55ah3LcRAV7Q= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:41 2025 by rpki-client