$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: AXAomqBLHlUMNiVt/WlgY2W3XfrMN7G6WgAw6Zw30j8= Subject key identifier: F7:50:FD:98:94:80:40:97:0B:45:E7:AE:79:B7:FA:28:DD:4D:65:04 Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 67697130F9066E2AECCF2542E9E8B26984A67EBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 01BD Signing time: Sun 29 Jun 2025 16:00:35 +0000 Manifest this update: Sun 29 Jun 2025 15:55:35 +0000 Manifest next update: Wed 02 Jul 2025 19:49:35 +0000 Files and hashes: 1: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: N10tjcLUUj7/urItl4ZID6tu6Pnn7yhnHnO8HiF0gco=) 2: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: sF8zLAMjgs1FczFI2Z8JpQ/VusAoAJ74LI3j1E4hYto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:69:71:30:f9:06:6e:2a:ec:cf:25:42:e9:e8:b2:69:84:a6:7e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Jun 29 15:55:35 2025 GMT Not After : Jul 2 19:49:35 2025 GMT Subject: CN=F750FD98948040970B45E7AE79B7FA28DD4D6504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:34:dc:15:76:43:1b:c8:ec:54:3f:c4:b7: ee:dc:7c:4a:24:8d:0b:93:97:cf:a6:d6:8e:cb:05: b9:7f:af:21:05:eb:d2:8e:5d:45:d8:0a:52:5a:d2: 36:13:4c:6d:ec:b1:c9:1a:96:b0:36:5a:e6:96:7e: 20:60:dc:73:cd:82:47:06:6f:2e:d4:0f:88:e1:ec: ef:8a:c0:d8:c1:b9:b6:92:16:8e:1f:e5:ea:3d:6e: 85:8e:0c:45:bb:61:50:b8:fa:8d:6f:74:8d:cd:71: 4e:95:d9:9e:a2:56:89:80:12:a3:27:34:4b:af:c4: d5:8e:b8:7a:17:50:6b:57:b2:77:2d:c3:19:17:d4: 57:36:ed:0e:eb:e7:14:fd:6f:44:04:fa:12:55:f7: 91:ad:46:f5:87:2d:e0:7d:52:08:32:f7:b2:69:5f: be:f3:37:89:53:65:13:2d:24:18:63:fb:5e:e0:c1: 84:a9:b1:65:92:98:64:e8:a4:0b:af:f6:1c:12:c6: de:3f:ff:91:5f:60:c4:98:f6:74:93:b2:fb:0d:cf: 8b:2d:3d:0b:23:33:8e:b7:9a:b1:e8:d3:6c:41:c0: 37:cc:2c:ed:2e:ee:de:1d:64:63:ce:bf:0f:5f:8c: 7d:3f:b2:1a:7a:04:56:1f:9c:ab:a8:62:2b:2f:1f: 54:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:50:FD:98:94:80:40:97:0B:45:E7:AE:79:B7:FA:28:DD:4D:65:04 X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:05:97:f9:8c:77:90:38:42:7a:c9:79:2e:02:5a:e6:f1:66: 52:c2:f6:cf:c7:97:51:f5:17:96:fc:e1:26:53:04:b8:06:15: 60:c2:74:bc:92:c1:57:27:f6:50:23:85:0e:8c:ac:fb:68:98: 45:64:d2:81:5f:9b:a0:74:a5:71:23:4c:0a:f2:da:42:83:4a: 14:29:93:e0:a7:f7:24:55:f4:a2:95:e8:8f:89:95:93:ad:5c: 3a:fe:41:33:be:c5:04:df:cd:17:0a:b5:db:a2:1b:81:3f:51: 8d:41:75:05:6e:44:68:01:31:14:d3:2b:65:e9:3b:fc:fc:28: b7:84:2f:58:13:d3:35:76:31:06:ab:da:cc:89:e5:f2:51:de: f0:62:5c:f0:3d:e7:23:8e:bf:39:c7:ce:5e:71:4f:15:bf:43: a7:fe:0d:0b:3a:be:01:6e:c2:56:c8:58:49:16:c7:9c:ed:f0: b7:b6:fa:99:19:1d:8c:97:f6:c3:19:47:3f:88:09:bf:c0:26: af:81:dd:88:f9:ce:b4:37:ce:60:4b:69:11:c9:72:51:65:9e: f5:f7:a6:72:04:8b:c4:a1:01:06:94:e8:94:09:3b:67:ab:60: 63:12:e6:25:07:66:dd:26:30:3c:87:48:3f:ef:ac:6a:5a:84: b6:12:33:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ2lxMPkGbirszyVC6eiyaYSmfr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNTA2MjkxNTU1MzVaFw0yNTA3MDIxOTQ5MzVaMDMxMTAvBgNV BAMTKEY3NTBGRDk4OTQ4MDQwOTcwQjQ1RTdBRTc5QjdGQTI4REQ0RDY1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVeTTcFXZDG8jsVD/Et+7cfEok jQuTl8+m1o7LBbl/ryEF69KOXUXYClJa0jYTTG3ssckalrA2WuaWfiBg3HPNgkcG by7UD4jh7O+KwNjBubaSFo4f5eo9boWODEW7YVC4+o1vdI3NcU6V2Z6iVomAEqMn NEuvxNWOuHoXUGtXsnctwxkX1Fc27Q7r5xT9b0QE+hJV95GtRvWHLeB9Uggy97Jp X77zN4lTZRMtJBhj+17gwYSpsWWSmGTopAuv9hwSxt4//5FfYMSY9nSTsvsNz4st PQsjM463mrHo02xBwDfMLO0u7t4dZGPOvw9fjH0/shp6BFYfnKuoYisvH1R/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU91D9mJSAQJcLReeuebf6KN1NZQQwHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4Fl/mMd5A4QnrJeS4CWubxZlLC9s/Hl1H1 F5b84SZTBLgGFWDCdLySwVcn9lAjhQ6MrPtomEVk0oFfm6B0pXEjTAry2kKDShQp k+Cn9yRV9KKV6I+JlZOtXDr+QTO+xQTfzRcKtduiG4E/UY1BdQVuRGgBMRTTK2Xp O/z8KLeEL1gT0zV2MQar2syJ5fJR3vBiXPA95yOOvznHzl5xTxW/Q6f+DQs6vgFu wlbIWEkWx5zt8Le2+pkZHYyX9sMZRz+ICb/AJq+B3Yj5zrQ3zmBLaRHJclFlnvX3 pnIEi8ShAQaU6JQJO2erYGMS5iUHZt0mMDyHSD/vrGpahLYSM/s= -----END CERTIFICATE-----Generated at Sun Jun 29 18:47:29 2025 by rpki-client