$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: rozxcU1x3F12FbelQwaUuVDnTYblaI+/zu1ATPltKMg= Subject key identifier: D1:87:88:9E:2B:6F:1B:DF:84:28:35:6E:D9:82:EF:19:E3:CB:8D:CA Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 4AF79AF1032E77E85B66D3E96B819283F1FFF045 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 04E5 Signing time: Sat 28 Jun 2025 16:10:01 +0000 Manifest this update: Sat 28 Jun 2025 16:05:01 +0000 Manifest next update: Wed 02 Jul 2025 03:27:01 +0000 Files and hashes: 1: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: 8u7JN1MWd69go0pEKkBk3xAxRap8oBjz+nkLIx17lN0=) 2: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) 3: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) 4: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f7:9a:f1:03:2e:77:e8:5b:66:d3:e9:6b:81:92:83:f1:ff:f0:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Jun 28 16:05:01 2025 GMT Not After : Jul 2 03:27:01 2025 GMT Subject: CN=D187889E2B6F1BDF8428356ED982EF19E3CB8DCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:49:97:83:39:c5:3d:de:e7:db:7d:bd:b4:73: ec:54:1e:05:c7:7c:fe:39:82:17:37:aa:99:99:23: cb:85:e4:27:9d:d5:5f:10:a7:fa:5d:dc:ff:e6:15: 0a:1b:bf:3a:cb:76:fe:f6:b2:5d:26:a2:27:df:31: ba:44:26:78:df:4e:85:bc:08:f9:80:c1:a6:4d:2c: ba:19:87:0e:f1:b6:4f:7f:22:a0:90:bb:9d:f0:f2: e5:bb:2d:b1:7f:85:07:c0:f0:f1:2b:dd:8b:ed:13: eb:9b:f9:44:ff:88:b7:03:19:e6:58:3f:c6:ba:e1: 4b:f8:84:88:73:67:49:bb:7e:84:70:da:e9:d3:af: a7:60:c2:cb:b4:a3:bc:dc:3b:5f:9c:b6:64:c7:25: d1:8a:d9:ff:b0:33:05:51:1a:ba:ec:c6:42:82:44: 63:d8:32:24:c3:a4:a2:87:b0:51:33:30:2e:af:27: e6:5b:e4:09:ed:85:d6:b9:5a:54:d4:bd:4c:b0:f3: c9:c3:82:c9:10:c2:3c:a6:4f:9c:af:37:83:8a:1a: d9:33:27:47:11:0f:e2:c5:cc:16:7f:b2:14:f3:19: 99:a1:f2:97:fd:a7:80:6f:5e:93:57:18:10:3c:1d: 49:73:d3:fd:4c:fa:e9:21:6a:a8:85:fe:3f:3a:18: bd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:87:88:9E:2B:6F:1B:DF:84:28:35:6E:D9:82:EF:19:E3:CB:8D:CA X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:66:f8:75:2c:73:20:3d:f3:a1:2f:67:bb:05:07:aa:23:58: a6:17:f2:03:ac:f9:1d:19:67:0b:c7:c3:76:17:4b:1f:84:51: f9:39:57:b6:5f:f1:13:38:e9:8d:22:d7:fe:6f:42:26:0a:b6: 73:16:21:65:9d:1e:1b:ef:ac:2d:fe:46:7d:7a:10:bd:2b:91: 09:f1:41:25:57:ff:ba:33:d1:21:b7:a2:0a:d6:89:48:24:d9: 40:cf:a2:6c:a6:e1:ed:e6:83:d1:d8:60:41:8e:78:a4:be:c6: f5:09:a6:10:02:bd:02:a1:7e:0c:a4:e2:53:bc:7c:f1:53:91: ee:ed:f7:a6:87:54:08:a9:cd:d4:b4:98:65:e3:c2:fc:c5:d6: c8:57:74:86:9a:5b:eb:87:6e:b6:ae:96:70:c4:85:03:09:4b: cb:c1:82:b9:9d:b9:c6:f6:be:09:4d:db:7f:6b:d1:fb:15:6b: 63:fb:03:3f:03:bf:5d:52:17:a5:2a:ff:53:41:c7:7f:d7:99: 19:df:2c:0a:b1:cd:d6:e3:05:5a:ae:71:46:2e:bb:23:f6:fe: 9f:3b:b7:5c:9a:f0:66:5d:df:15:91:bb:d9:bc:ed:0a:35:f2: d7:95:c0:b0:c9:ed:cf:20:41:34:52:9c:12:18:2a:28:c3:ae: ad:83:11:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvea8QMud+hbZtPpa4GSg/H/8EUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTA2MjgxNjA1MDFaFw0yNTA3MDIwMzI3MDFaMDMxMTAvBgNV BAMTKEQxODc4ODlFMkI2RjFCREY4NDI4MzU2RUQ5ODJFRjE5RTNDQjhEQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdSZeDOcU93ufbfb20c+xUHgXH fP45ghc3qpmZI8uF5Ced1V8Qp/pd3P/mFQobvzrLdv72sl0moiffMbpEJnjfToW8 CPmAwaZNLLoZhw7xtk9/IqCQu53w8uW7LbF/hQfA8PEr3YvtE+ub+UT/iLcDGeZY P8a64Uv4hIhzZ0m7foRw2unTr6dgwsu0o7zcO1+ctmTHJdGK2f+wMwVRGrrsxkKC RGPYMiTDpKKHsFEzMC6vJ+Zb5Anthda5WlTUvUyw88nDgskQwjymT5yvN4OKGtkz J0cRD+LFzBZ/shTzGZmh8pf9p4BvXpNXGBA8HUlz0/1M+ukhaqiF/j86GL1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0YeInitvG9+EKDVu2YLvGePLjcowHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBm+HUscyA986EvZ7sFB6ojWKYX8gOs+R0Z ZwvHw3YXSx+EUfk5V7Zf8RM46Y0i1/5vQiYKtnMWIWWdHhvvrC3+Rn16EL0rkQnx QSVX/7oz0SG3ogrWiUgk2UDPomym4e3mg9HYYEGOeKS+xvUJphACvQKhfgyk4lO8 fPFTke7t96aHVAipzdS0mGXjwvzF1shXdIaaW+uHbraulnDEhQMJS8vBgrmducb2 vglN239r0fsVa2P7Az8Dv11SF6Uq/1NBx3/XmRnfLAqxzdbjBVqucUYuuyP2/p87 t1ya8GZd3xWRu9m87Qo18teVwLDJ7c8gQTRSnBIYKijDrq2DEY0= -----END CERTIFICATE-----Generated at Mon Jun 30 07:35:52 2025 by rpki-client