$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: vK/MetXOiaHa5Y06tjmHm/cCUmn17pcaaUtnzc2ZBpg= Subject key identifier: 70:15:8C:0C:30:19:D5:FF:C6:31:7F:68:79:98:30:88:55:55:58:45 Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 08751074AE5028739B78B7392619A93DE011B920 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 0259 Signing time: Thu 21 Aug 2025 15:31:37 +0000 Manifest this update: Thu 21 Aug 2025 15:26:37 +0000 Manifest next update: Mon 25 Aug 2025 02:22:37 +0000 Files and hashes: 1: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: K4U8d+sUzMLgrI4fy436tf9syDLx6SvZlYhSkGTWcb8=) 2: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: rdDe4MbXYHB0yhsMclxWzL5Vl73d9cakTGDA0/J5KxE=) 3: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=) 4: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:75:10:74:ae:50:28:73:9b:78:b7:39:26:19:a9:3d:e0:11:b9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Aug 21 15:26:37 2025 GMT Not After : Aug 25 02:22:37 2025 GMT Subject: CN=70158C0C3019D5FFC6317F687998308855555845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f4:95:46:61:7a:c6:eb:41:2e:df:90:49:9a: 74:8e:cb:ce:60:5c:04:cb:67:63:2f:f0:36:ac:22: 56:3d:5b:9c:fd:31:f7:26:51:18:e8:be:17:78:e6: 7b:1e:79:eb:d6:73:9e:26:95:d4:20:83:25:d2:3b: be:da:60:1e:e8:72:7e:79:44:70:6d:1d:e9:05:f3: 96:aa:3a:09:d3:1b:11:61:b0:01:36:a1:31:0c:6e: a0:b7:ab:d0:b1:d2:e1:f9:6c:2f:58:6a:9a:93:a9: 8e:2c:2d:3d:89:54:60:b2:50:e3:8b:99:3b:df:dd: 37:19:07:cb:67:3e:5a:6e:ce:b9:90:21:c4:94:31: c7:b9:28:58:cb:1e:ed:11:1f:55:ec:5e:4d:ba:01: ba:bf:d7:63:04:78:e7:99:76:86:4c:f2:64:f8:40: 01:5f:ee:5f:ec:bc:f7:9a:e8:e8:35:65:32:d3:d3: ef:f3:4d:3d:02:79:f7:72:c4:43:60:20:70:14:12: 76:0f:82:66:c1:b9:9c:05:e0:5f:02:66:6e:f7:11: 6d:3b:7b:8b:99:5d:97:a8:67:ec:f2:0e:7f:5a:ae: a6:ef:3b:55:51:98:67:27:f7:04:b8:9e:0f:0f:1f: 4c:db:64:2a:86:2f:d5:a9:3a:ca:ba:14:cf:c9:e0: ae:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:15:8C:0C:30:19:D5:FF:C6:31:7F:68:79:98:30:88:55:55:58:45 X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:62:a7:48:3a:7a:dc:d3:41:1d:e2:ba:83:9c:8a:9d:16:d1: c6:ca:92:f3:5d:e3:0f:31:bd:47:70:0a:de:dd:a9:81:e1:ad: 65:1d:5d:bf:4c:7e:e2:44:07:3a:67:d9:4a:68:d6:7b:92:05: b6:da:7f:4c:64:e0:6c:c4:72:bb:e6:6f:dc:19:d8:e0:ab:91: 8b:a7:0f:18:66:76:18:8c:db:e4:f3:50:22:2b:18:41:ec:57: a3:34:68:13:48:e7:be:3b:4f:94:09:63:f7:4a:b8:c1:7c:ba: c5:54:2b:13:0b:bf:ec:91:3d:a4:e2:3f:ee:12:28:7d:3a:62: 04:fa:78:8e:2d:08:72:54:6f:c4:e8:53:3e:cf:ae:1f:e3:3d: c7:51:39:48:20:53:f9:25:ff:3c:68:9d:e8:37:bc:2a:5a:11: fe:85:00:0c:c3:27:4d:11:df:b5:ab:4f:cb:23:21:b9:d7:39: 3a:5e:30:fb:88:43:00:9b:69:09:07:ae:32:cb:6d:0d:34:56: 08:fe:96:95:6e:5d:59:59:71:00:7a:a6:13:67:03:8c:a8:0e: 4f:34:5f:82:e0:15:de:71:cd:11:e9:81:c9:20:1c:7b:7b:01: 4f:88:de:14:ad:e6:dc:56:1c:0e:59:e6:b9:f7:7f:5f:c0:b6: f6:84:2f:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHUQdK5QKHObeLc5JhmpPeARuSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNTA4MjExNTI2MzdaFw0yNTA4MjUwMjIyMzdaMDMxMTAvBgNV BAMTKDcwMTU4QzBDMzAxOUQ1RkZDNjMxN0Y2ODc5OTgzMDg4NTU1NTU4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh9JVGYXrG60Eu35BJmnSOy85g XATLZ2Mv8DasIlY9W5z9MfcmURjovhd45nseeevWc54mldQggyXSO77aYB7ocn55 RHBtHekF85aqOgnTGxFhsAE2oTEMbqC3q9Cx0uH5bC9YapqTqY4sLT2JVGCyUOOL mTvf3TcZB8tnPlpuzrmQIcSUMce5KFjLHu0RH1XsXk26Abq/12MEeOeZdoZM8mT4 QAFf7l/svPea6Og1ZTLT0+/zTT0CefdyxENgIHAUEnYPgmbBuZwF4F8CZm73EW07 e4uZXZeoZ+zyDn9arqbvO1VRmGcn9wS4ng8PH0zbZCqGL9WpOsq6FM/J4K4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcBWMDDAZ1f/GMX9oeZgwiFVVWEUwHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVip0g6etzTQR3iuoOcip0W0cbKkvNd4w8x vUdwCt7dqYHhrWUdXb9MfuJEBzpn2Upo1nuSBbbaf0xk4GzEcrvmb9wZ2OCrkYun DxhmdhiM2+TzUCIrGEHsV6M0aBNI5747T5QJY/dKuMF8usVUKxMLv+yRPaTiP+4S KH06YgT6eI4tCHJUb8ToUz7Prh/jPcdROUggU/kl/zxoneg3vCpaEf6FAAzDJ00R 37WrT8sjIbnXOTpeMPuIQwCbaQkHrjLLbQ00Vgj+lpVuXVlZcQB6phNnA4yoDk80 X4LgFd5xzRHpgckgHHt7AU+I3hSt5txWHA5Z5rn3f1/AtvaEL98= -----END CERTIFICATE-----Generated at Sat Aug 23 12:51:49 2025 by rpki-client