$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: WjGNt6s6Gza8wVChoaoQdoRYXaho8EPpWz6E6mjE7jI= Subject key identifier: 6D:93:13:4B:8C:3B:55:CE:D9:47:A4:E7:8D:BC:DB:75:79:BF:E9:6D Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 1F464BC659A43E64B73F130722FD6E166167627E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 04FD Signing time: Fri 22 Aug 2025 07:30:02 +0000 Manifest this update: Fri 22 Aug 2025 07:25:02 +0000 Manifest next update: Mon 25 Aug 2025 09:36:02 +0000 Files and hashes: 1: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) 2: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: m/R4N38+LpzthbQKoYZ/yR4yRlUmQH9+rq0GqVzpr0o=) 3: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) 4: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:46:4b:c6:59:a4:3e:64:b7:3f:13:07:22:fd:6e:16:61:67:62:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Aug 22 07:25:02 2025 GMT Not After : Aug 25 09:36:02 2025 GMT Subject: CN=6D93134B8C3B55CED947A4E78DBCDB7579BFE96D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8f:f2:3f:cc:2f:18:1e:fa:66:1f:8f:69:80: cb:84:80:c1:a2:72:04:65:d8:24:d8:cb:61:bc:3d: 12:1e:21:a9:bf:6e:7f:c4:91:97:22:87:13:ee:f2: c2:da:b8:1a:54:a5:28:0b:5e:98:d7:fc:ca:24:2b: b2:80:bd:bd:4a:49:bc:ee:32:8a:84:41:35:a4:20: 41:9f:9f:cf:bd:63:76:42:53:4b:ec:dd:9c:27:6a: 05:b0:dc:08:e7:d2:8c:47:13:b3:2c:09:4d:8c:65: 4b:8c:c9:6e:03:cd:5e:2e:2b:74:6f:a9:02:18:9b: 50:e1:2c:77:b7:a7:55:97:1c:d9:9e:6d:aa:c0:dd: fc:c7:08:a8:30:64:e8:92:22:ee:02:61:3f:70:4a: f4:44:ef:53:cb:65:f2:c9:78:4b:40:31:3c:b0:a5: 5e:81:ff:7c:b5:21:a6:72:42:03:7d:36:1b:38:a8: 6a:65:80:bc:2d:b1:07:73:63:ed:13:fe:fd:7d:8a: 9f:6e:cf:24:9d:ed:d7:f6:e4:79:aa:7e:45:74:97: db:b0:01:33:9b:8f:5f:b2:44:f7:cf:e7:d1:f4:12: fb:83:68:97:1e:0c:0c:81:a5:7d:fe:cd:e1:44:15: ab:df:34:bf:b1:5c:be:44:b4:25:0e:d7:50:56:b4: 29:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:93:13:4B:8C:3B:55:CE:D9:47:A4:E7:8D:BC:DB:75:79:BF:E9:6D X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:57:23:26:e9:fb:f5:f5:58:fb:06:d7:21:20:21:dd:ce:37: 27:69:18:93:1b:59:7d:77:f0:a3:95:2f:e0:94:6b:4a:90:47: d5:44:30:5c:a4:be:5c:be:2f:71:62:54:72:7e:5a:3e:f5:f2: 74:8b:a0:64:0f:4c:b2:34:be:93:27:33:a3:ec:9a:30:53:13: fd:5b:93:f7:ea:f2:1a:90:b0:ca:db:96:c7:f9:0f:67:8e:23: c9:d6:f5:e6:a1:5b:a0:46:6b:7f:39:62:37:c1:61:9b:0f:5a: cd:d1:71:5b:04:bc:45:81:8b:d2:c7:92:7c:73:fc:66:80:a0: ec:3d:52:f4:af:67:c1:7f:b1:66:ad:ba:49:08:46:76:bc:f5: 01:38:35:7a:72:93:a8:34:f6:73:8f:43:c9:10:42:f6:5a:0b: a0:32:5e:86:df:14:5a:13:16:88:96:11:82:8d:f9:03:22:27: 4c:5a:a3:37:26:2d:16:86:fa:98:39:5b:9b:51:c6:52:78:16: d9:c6:ba:51:26:e3:6a:92:f9:eb:72:8b:e8:53:08:95:6e:17: 70:22:dc:7d:da:5e:1e:1f:a4:45:2f:50:ea:85:ba:f8:2c:a2: f7:ba:93:d0:c8:6e:f0:02:e9:86:31:fb:eb:1d:c9:ce:bc:72: 83:fa:76:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0ZLxlmkPmS3PxMHIv1uFmFnYn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTA4MjIwNzI1MDJaFw0yNTA4MjUwOTM2MDJaMDMxMTAvBgNV BAMTKDZEOTMxMzRCOEMzQjU1Q0VEOTQ3QTRFNzhEQkNEQjc1NzlCRkU5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDej/I/zC8YHvpmH49pgMuEgMGi cgRl2CTYy2G8PRIeIam/bn/EkZcihxPu8sLauBpUpSgLXpjX/MokK7KAvb1KSbzu MoqEQTWkIEGfn8+9Y3ZCU0vs3ZwnagWw3Ajn0oxHE7MsCU2MZUuMyW4DzV4uK3Rv qQIYm1DhLHe3p1WXHNmebarA3fzHCKgwZOiSIu4CYT9wSvRE71PLZfLJeEtAMTyw pV6B/3y1IaZyQgN9Nhs4qGplgLwtsQdzY+0T/v19ip9uzySd7df25HmqfkV0l9uw ATObj1+yRPfP59H0EvuDaJceDAyBpX3+zeFEFavfNL+xXL5EtCUO11BWtCmFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbZMTS4w7Vc7ZR6TnjbzbdXm/6W0wHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRXIybp+/X1WPsG1yEgId3ONydpGJMbWX13 8KOVL+CUa0qQR9VEMFykvly+L3FiVHJ+Wj718nSLoGQPTLI0vpMnM6PsmjBTE/1b k/fq8hqQsMrblsf5D2eOI8nW9eahW6BGa385YjfBYZsPWs3RcVsEvEWBi9LHknxz /GaAoOw9UvSvZ8F/sWatukkIRna89QE4NXpyk6g09nOPQ8kQQvZaC6AyXobfFFoT FoiWEYKN+QMiJ0xaozcmLRaG+pg5W5tRxlJ4FtnGulEm42qS+etyi+hTCJVuF3Ai 3H3aXh4fpEUvUOqFuvgsove6k9DIbvAC6YYx++sdyc68coP6dqU= -----END CERTIFICATE-----Generated at Sat Aug 23 23:44:43 2025 by rpki-client