$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: JW6G/5YKzUeDj8L6uf1xYcg1fSjTV7g3Lw/V0Iv354w= Subject key identifier: 2B:94:8A:BA:F6:80:56:4A:B5:EC:CA:CE:D3:4D:04:86:94:AB:D1:41 Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 4A505164F6D34AB4046CD732396AA20E90927651 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 0241 Signing time: Fri 27 Jun 2025 23:41:36 +0000 Manifest this update: Fri 27 Jun 2025 23:36:36 +0000 Manifest next update: Tue 01 Jul 2025 03:04:36 +0000 Files and hashes: 1: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo=) 2: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=) 3: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: QRFh/AvH4GISSfiYnCavG3kexw1K1IVBp04eL8aOCXI=) 4: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: K4U8d+sUzMLgrI4fy436tf9syDLx6SvZlYhSkGTWcb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 03:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:50:51:64:f6:d3:4a:b4:04:6c:d7:32:39:6a:a2:0e:90:92:76:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Jun 27 23:36:36 2025 GMT Not After : Jul 1 03:04:36 2025 GMT Subject: CN=2B948ABAF680564AB5ECCACED34D048694ABD141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e4:0b:04:b5:36:b5:75:4e:8c:95:43:e8:df: 04:f8:60:dc:21:9a:8b:4a:b5:11:d0:73:1c:6c:32: 0d:6e:e9:d4:ff:0a:e3:49:3a:51:9d:e2:90:44:21: b3:6e:27:42:1f:d6:91:2a:d2:f5:7b:66:03:8b:d0: 02:e2:0e:5b:cc:5c:f1:94:99:a1:36:8b:1e:c8:00: de:83:24:db:22:b4:0d:21:6c:0b:4a:52:ac:b5:5f: 49:8c:73:38:50:b4:49:de:1f:d5:98:4f:6e:8d:b4: e2:ee:70:c4:a2:25:d7:17:f8:74:90:b8:e1:67:4d: 8a:bf:93:a8:f8:70:74:7d:5c:62:3d:61:25:10:73: e6:15:32:9c:f1:4a:61:33:62:66:cd:c5:d7:d1:e7: a4:38:09:f2:a0:68:8a:4b:be:b7:b9:62:9d:ba:b4: 93:7b:4a:26:b1:cb:c8:ba:64:3d:6a:c8:4f:35:63: ca:29:2c:c8:d3:5d:6f:bc:e1:9b:e7:26:ff:9a:e9: 7a:18:54:9b:b4:8e:48:b4:98:76:58:d2:9f:12:89: 7a:29:2c:2e:d2:00:7c:c2:bd:2c:d0:51:1a:f8:b5: 5c:b1:ab:73:18:1e:95:27:1f:eb:1d:31:ef:8f:1a: 27:14:7f:04:c1:e7:5c:f1:33:f3:d3:60:f2:d4:b2: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:94:8A:BA:F6:80:56:4A:B5:EC:CA:CE:D3:4D:04:86:94:AB:D1:41 X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:82:cb:90:16:ae:ca:5d:75:5b:84:c9:8c:06:d1:4c:a5:29: e3:bb:73:bc:70:b9:d4:83:a5:14:49:98:7b:a5:84:5b:54:cc: 84:65:64:b8:d4:6a:61:bb:94:c2:f0:d2:3d:49:02:cf:ea:26: c2:cf:ba:83:0f:ca:90:8a:4e:ef:f3:d7:57:57:2b:82:b0:ac: 97:fc:1e:0c:fa:19:41:21:21:77:9f:67:d7:5f:fb:e7:cd:cb: 65:07:3e:d1:5a:ec:60:53:a9:21:fe:89:09:37:e7:73:ad:d1: 40:a1:c8:5a:95:a2:c2:8c:94:06:e9:dc:8f:ec:70:7d:2a:0e: 00:8c:aa:6b:ef:c1:a3:4c:dc:6c:37:21:c4:51:cf:5a:44:e1: c6:98:9f:fa:97:d6:09:55:13:ae:47:51:dd:30:42:27:9d:09: 95:49:12:02:ea:f9:13:b4:9d:8a:8e:fc:56:4b:50:c2:8f:fa: ab:8e:c0:b8:e3:33:47:98:e6:4c:2e:d8:c7:4b:6d:97:56:ee: c2:2d:b2:48:4e:a3:39:56:83:48:bb:c7:4f:23:ed:0a:65:30: d0:d6:03:18:9e:69:3c:0d:b7:ab:08:4b:8d:ea:f2:86:07:81: 73:34:30:6a:09:17:29:e4:8f:a6:11:b3:db:da:a0:49:1f:29: 66:0e:b5:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlBRZPbTSrQEbNcyOWqiDpCSdlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNTA2MjcyMzM2MzZaFw0yNTA3MDEwMzA0MzZaMDMxMTAvBgNV BAMTKDJCOTQ4QUJBRjY4MDU2NEFCNUVDQ0FDRUQzNEQwNDg2OTRBQkQxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh5AsEtTa1dU6MlUPo3wT4YNwh motKtRHQcxxsMg1u6dT/CuNJOlGd4pBEIbNuJ0If1pEq0vV7ZgOL0ALiDlvMXPGU maE2ix7IAN6DJNsitA0hbAtKUqy1X0mMczhQtEneH9WYT26NtOLucMSiJdcX+HSQ uOFnTYq/k6j4cHR9XGI9YSUQc+YVMpzxSmEzYmbNxdfR56Q4CfKgaIpLvre5Yp26 tJN7Siaxy8i6ZD1qyE81Y8opLMjTXW+84ZvnJv+a6XoYVJu0jki0mHZY0p8SiXop LC7SAHzCvSzQURr4tVyxq3MYHpUnH+sdMe+PGicUfwTB51zxM/PTYPLUsr0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK5SKuvaAVkq17MrO000EhpSr0UEwHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWCy5AWrspddVuEyYwG0UylKeO7c7xwudSD pRRJmHulhFtUzIRlZLjUamG7lMLw0j1JAs/qJsLPuoMPypCKTu/z11dXK4KwrJf8 Hgz6GUEhIXefZ9df++fNy2UHPtFa7GBTqSH+iQk353Ot0UChyFqVosKMlAbp3I/s cH0qDgCMqmvvwaNM3Gw3IcRRz1pE4caYn/qX1glVE65HUd0wQiedCZVJEgLq+RO0 nYqO/FZLUMKP+quOwLjjM0eY5kwu2MdLbZdW7sItskhOozlWg0i7x08j7QplMNDW AxieaTwNt6sIS43q8oYHgXM0MGoJFynkj6YRs9vaoEkfKWYOtao= -----END CERTIFICATE-----Generated at Sun Jun 29 21:41:13 2025 by rpki-client