$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: prwdch7AyWEFSV8GsoEH9ZZCaRl+lNTsQkp7Te/5iv8= Subject key identifier: 0D:DF:45:E8:F9:48:58:49:4A:E7:D3:D9:EE:EA:9B:9C:7F:28:77:6B Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: E57C5F1BEC7756985DAC72DD618B72B60D91AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 022A Signing time: Sat 10 May 2025 23:51:35 +0000 Manifest this update: Sat 10 May 2025 23:46:35 +0000 Manifest next update: Wed 14 May 2025 01:16:35 +0000 Files and hashes: 1: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: KQr7FT5BTt34iZBSKfWuQXM57WNoh3bm/oXmMRuQ3Ho=) 2: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: g4PKHZmnKpavtsuSJMsF2PYbJyBS2V/nDYQxkb5Lx0g=) 3: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: 1VLg/u9GKI4uppxLXquFmT+cXGYgO/EMgtr6rNq82Qs=) 4: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: oEGvz5ekNRTmyT1q5mWcENYutpVCXsuKwR/aZOFrdsI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 01:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e5:7c:5f:1b:ec:77:56:98:5d:ac:72:dd:61:8b:72:b6:0d:91:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: May 10 23:46:35 2025 GMT Not After : May 14 01:16:35 2025 GMT Subject: CN=0DDF45E8F94858494AE7D3D9EEEA9B9C7F28776B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7f:9d:aa:ea:3b:8f:ca:43:0d:73:5f:1e:52: c5:34:cd:60:2d:f7:d0:a5:46:43:1e:fd:47:e8:eb: cc:43:e2:53:40:fe:d0:31:db:8b:61:af:9a:5c:85: 28:38:dc:cd:0e:43:eb:e7:e3:33:04:27:e9:d7:c5: 7a:b1:3e:e5:68:62:23:ba:6a:9e:8f:00:39:83:37: 55:b1:1a:f2:02:e1:af:81:9a:2e:5e:fa:8f:0b:25: e5:e3:bf:e3:81:c7:43:dd:11:77:22:c5:48:77:78: 7c:e7:98:77:67:ff:0d:b6:81:dc:d1:53:c8:f6:a9: 12:b4:df:a8:d5:8f:4b:06:25:84:a9:b5:3d:bc:9a: 60:ad:66:5f:6d:53:18:99:0f:a8:30:04:da:a1:55: fe:fc:f3:56:c4:f0:c1:fe:3e:21:76:03:9b:c7:8c: 2a:bd:39:91:ad:03:fe:1f:ae:56:ab:1e:71:65:e9: b6:42:e3:49:5b:6d:74:52:cf:16:32:78:5c:3b:21: 83:ab:4d:e2:92:34:69:13:64:8f:89:b5:60:40:f9: da:82:40:90:be:2d:50:ef:c1:73:c9:75:45:e1:94: 3a:b8:e0:1f:17:58:cc:04:99:26:8f:b9:7a:ae:29: 30:f4:02:6a:95:f5:56:4c:56:6c:98:07:10:7f:9b: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DF:45:E8:F9:48:58:49:4A:E7:D3:D9:EE:EA:9B:9C:7F:28:77:6B X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:54:47:76:09:b8:cb:40:5a:47:6e:ed:e1:92:4c:6c:25:8d: 87:db:65:f9:83:66:88:df:cd:b8:a4:bb:67:65:a8:8e:3f:27: 02:aa:a1:de:55:75:c1:cc:83:1e:43:24:31:a3:8b:19:70:36: c4:a4:2c:a5:80:21:92:58:1e:68:8a:31:91:bd:31:3d:4f:e6: dd:e6:49:d6:15:86:a6:49:b8:91:bb:ad:8e:24:47:b2:33:88: 5c:a4:41:d0:cd:af:eb:ef:01:d3:92:6b:68:13:53:b3:04:23: ba:9a:08:60:a2:4b:7c:73:ef:90:ec:2b:01:9f:90:0e:6b:ae: 9a:36:0e:e4:65:f6:a8:5d:9e:e9:34:07:25:3e:ed:33:69:a8: b8:44:a8:83:b9:ce:47:63:54:93:6b:5d:2e:5a:e9:9d:11:27: 35:28:d5:c6:51:44:fc:f2:bc:75:dc:14:56:f7:b8:78:53:46: bd:17:64:55:d1:d9:db:4b:93:d0:f9:fa:2e:14:8c:3d:cf:1b: 60:07:81:de:ec:c8:b1:87:3c:68:ab:a0:17:99:df:ba:85:84: be:43:08:ab:c9:e2:fd:d0:10:eb:c0:bc:1a:9b:b0:47:d0:ad: 77:1b:38:c9:f5:0d:ea:86:ee:d4:7b:71:ea:e4:f6:f4:b6:d3: 5b:25:ab:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOV8Xxvsd1aYXaxy3WGLcrYNkaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNTA1MTAyMzQ2MzVaFw0yNTA1MTQwMTE2MzVaMDMxMTAvBgNV BAMTKDBEREY0NUU4Rjk0ODU4NDk0QUU3RDNEOUVFRUE5QjlDN0YyODc3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVf52q6juPykMNc18eUsU0zWAt 99ClRkMe/Ufo68xD4lNA/tAx24thr5pchSg43M0OQ+vn4zMEJ+nXxXqxPuVoYiO6 ap6PADmDN1WxGvIC4a+Bmi5e+o8LJeXjv+OBx0PdEXcixUh3eHznmHdn/w22gdzR U8j2qRK036jVj0sGJYSptT28mmCtZl9tUxiZD6gwBNqhVf7881bE8MH+PiF2A5vH jCq9OZGtA/4frlarHnFl6bZC40lbbXRSzxYyeFw7IYOrTeKSNGkTZI+JtWBA+dqC QJC+LVDvwXPJdUXhlDq44B8XWMwEmSaPuXquKTD0AmqV9VZMVmyYBxB/myLNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDd9F6PlIWElK59PZ7uqbnH8od2swHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhUR3YJuMtAWkdu7eGSTGwljYfbZfmDZojf zbiku2dlqI4/JwKqod5VdcHMgx5DJDGjixlwNsSkLKWAIZJYHmiKMZG9MT1P5t3m SdYVhqZJuJG7rY4kR7IziFykQdDNr+vvAdOSa2gTU7MEI7qaCGCiS3xz75DsKwGf kA5rrpo2DuRl9qhdnuk0ByU+7TNpqLhEqIO5zkdjVJNrXS5a6Z0RJzUo1cZRRPzy vHXcFFb3uHhTRr0XZFXR2dtLk9D5+i4UjD3PG2AHgd7syLGHPGiroBeZ37qFhL5D CKvJ4v3QEOvAvBqbsEfQrXcbOMn1DeqG7tR7cerk9vS201slqyM= -----END CERTIFICATE-----Generated at Sun May 11 05:17:25 2025 by rpki-client