$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: XsyHNtWgTTuqGCQDzYhMl7RS8E1WXo1/rBEqN2ymH8s= Subject key identifier: 36:86:3F:84:93:C8:68:84:4F:69:A8:A7:EE:7F:40:CA:4E:DA:35:3D Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 647B337533A53F5FE71BC2E054FDD73EDFCD6849 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 01A6 Signing time: Wed 07 May 2025 13:40:35 +0000 Manifest this update: Wed 07 May 2025 13:35:35 +0000 Manifest next update: Sun 11 May 2025 00:08:35 +0000 Files and hashes: 1: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: sF8zLAMjgs1FczFI2Z8JpQ/VusAoAJ74LI3j1E4hYto=) 2: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: v8sW5idgnMVYkPqdZFTFBQMYR4yalzBLQVcVzLCgIbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 00:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7b:33:75:33:a5:3f:5f:e7:1b:c2:e0:54:fd:d7:3e:df:cd:68:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: May 7 13:35:35 2025 GMT Not After : May 11 00:08:35 2025 GMT Subject: CN=36863F8493C868844F69A8A7EE7F40CA4EDA353D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:20:2b:17:f0:47:64:9b:b1:10:d3:07:3b:e6: 1b:40:79:2b:d8:2b:ba:b9:2e:76:f1:85:cf:4c:70: 7a:66:1f:16:1a:0d:6e:a0:19:e7:0b:92:05:2e:cc: a3:14:8c:f4:71:f7:85:27:69:a8:26:da:00:14:12: 3f:d3:63:41:4e:69:e3:34:c0:c1:7a:8e:f3:ff:49: 6b:54:f7:3b:f8:51:3d:bc:30:b5:d5:98:16:4c:97: 42:1f:4b:d2:6c:37:03:9b:41:0b:7d:6e:44:23:f9: 10:83:bc:96:6b:47:57:b2:c4:b1:d6:5f:a3:0c:35: c4:46:fd:34:e6:73:2e:b8:05:54:e6:b4:9c:ac:90: 6f:2e:af:c5:33:fa:2f:53:1c:ca:a8:ed:7e:d0:6c: 93:41:6f:58:84:40:52:14:8c:57:90:a0:3f:40:fa: 72:7c:99:33:14:e5:7e:f9:a4:76:52:f0:67:b3:0c: 52:59:b9:c3:6e:d5:88:74:a5:7c:19:d9:e5:be:37: 70:2c:5f:6e:00:d2:14:b8:a6:63:3f:10:5c:d4:1d: 1b:b5:17:8f:df:1f:81:40:20:44:09:f3:99:48:29: a1:19:c6:ce:4b:3a:77:83:41:98:94:00:82:b8:4a: ba:3a:98:ef:c8:40:d0:e8:61:90:58:0e:7a:21:c8: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:86:3F:84:93:C8:68:84:4F:69:A8:A7:EE:7F:40:CA:4E:DA:35:3D X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:f9:9d:6e:c2:f0:de:93:a4:07:9d:dd:fe:98:de:db:52:2f: ef:bd:68:ff:8e:37:bc:b8:64:3b:bc:2e:87:31:9a:64:a7:39: 75:73:2f:b1:bb:b9:e7:93:01:95:2a:21:96:fa:8b:ac:aa:c4: 25:4b:04:64:95:92:97:d0:e0:84:29:71:0a:df:59:b2:3f:c9: cf:e9:d1:f0:21:52:af:e5:2c:cd:37:c1:bb:66:a9:87:4b:88: a3:11:1d:46:ab:bb:11:2e:ea:ff:00:6d:18:5a:cd:cb:6e:a5: 56:c4:ce:18:cd:9d:f3:ce:32:07:e0:27:4c:b9:fb:9d:31:e3: bf:94:16:e3:d1:dc:95:31:78:70:fe:db:18:d2:d2:ab:58:be: 93:3b:36:18:b6:8a:4f:8e:27:5d:6e:05:6d:01:4d:ff:53:61: 5e:b6:d4:ac:c4:19:de:c9:2c:70:7a:51:9b:5f:5b:90:b8:90: fe:09:ca:d3:1c:f0:4a:d1:d4:0e:5c:f7:5c:79:ea:cc:57:93: 13:44:eb:2b:ba:f2:e3:1a:54:01:cb:99:e1:99:ff:6c:62:b3: 78:d8:d6:2e:96:41:c4:07:3e:7b:6d:ee:5a:b9:2e:28:a1:7c: 40:fa:f3:95:db:eb:e0:ac:3b:be:40:60:05:40:e7:03:3e:7b: be:7d:09:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHszdTOlP1/nG8LgVP3XPt/NaEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNTA1MDcxMzM1MzVaFw0yNTA1MTEwMDA4MzVaMDMxMTAvBgNV BAMTKDM2ODYzRjg0OTNDODY4ODQ0RjY5QThBN0VFN0Y0MENBNEVEQTM1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmICsX8Edkm7EQ0wc75htAeSvY K7q5Lnbxhc9McHpmHxYaDW6gGecLkgUuzKMUjPRx94Unaagm2gAUEj/TY0FOaeM0 wMF6jvP/SWtU9zv4UT28MLXVmBZMl0IfS9JsNwObQQt9bkQj+RCDvJZrR1eyxLHW X6MMNcRG/TTmcy64BVTmtJyskG8ur8Uz+i9THMqo7X7QbJNBb1iEQFIUjFeQoD9A +nJ8mTMU5X75pHZS8GezDFJZucNu1Yh0pXwZ2eW+N3AsX24A0hS4pmM/EFzUHRu1 F4/fH4FAIEQJ85lIKaEZxs5LOneDQZiUAIK4Sro6mO/IQNDoYZBYDnohyGrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNoY/hJPIaIRPaain7n9Ayk7aNT0wHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/5nW7C8N6TpAed3f6Y3ttSL++9aP+ON7y4 ZDu8LocxmmSnOXVzL7G7ueeTAZUqIZb6i6yqxCVLBGSVkpfQ4IQpcQrfWbI/yc/p 0fAhUq/lLM03wbtmqYdLiKMRHUaruxEu6v8AbRhazctupVbEzhjNnfPOMgfgJ0y5 +50x47+UFuPR3JUxeHD+2xjS0qtYvpM7Nhi2ik+OJ11uBW0BTf9TYV621KzEGd7J LHB6UZtfW5C4kP4JytMc8ErR1A5c91x56sxXkxNE6yu68uMaVAHLmeGZ/2xis3jY 1i6WQcQHPntt7lq5LiihfED685Xb6+CsO75AYAVA5wM+e759CRM= -----END CERTIFICATE-----Generated at Fri May 9 03:25:52 2025 by rpki-client