$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: pyO1s30TW6LwO/w+pdbHYGX7cX3BIidOfUvMf1D0cSs= Subject key identifier: 8D:DF:47:4C:B3:5E:C0:94:45:6E:A0:AB:D0:96:C1:3C:1F:4C:E5:7C Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 6B03E768F9FEF4A52F4171F07AF991EC0F3DC6AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 04E4 Signing time: Sun 29 Jun 2025 09:31:11 +0000 Manifest this update: Sun 29 Jun 2025 09:26:11 +0000 Manifest next update: Wed 02 Jul 2025 20:33:11 +0000 Files and hashes: 1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: 4k/Xy9rGP92kTv68G+X85lKOLQt+/rRX85WVnqJKhkE=) 2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:03:e7:68:f9:fe:f4:a5:2f:41:71:f0:7a:f9:91:ec:0f:3d:c6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Jun 29 09:26:11 2025 GMT Not After : Jul 2 20:33:11 2025 GMT Subject: CN=8DDF474CB35EC094456EA0ABD096C13C1F4CE57C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1e:35:66:2c:51:93:88:2e:70:6b:40:f5:94: 16:80:43:87:6e:27:a7:15:c4:ce:21:d4:9b:10:8e: 5f:19:b9:17:fe:a1:3f:1e:9a:93:53:40:e4:15:1b: bc:04:8c:12:83:2d:c2:92:c9:55:5d:80:e2:6e:3c: 72:18:81:2a:4e:34:f1:2b:64:28:57:64:20:93:89: cb:11:ad:8d:6a:1c:a5:41:49:8d:15:ed:38:f8:cc: 23:d2:ec:6a:de:61:b1:89:f7:2c:99:e1:7c:fa:2b: a0:af:7d:33:f2:61:62:39:a9:b4:6b:82:a6:b6:b3: 13:26:53:f7:54:b2:2a:d5:3c:b4:cb:30:db:96:9e: 56:f1:34:d0:b3:90:63:cd:2d:7b:43:96:e7:a7:b9: c0:64:bf:19:54:2e:ef:c9:f6:62:7d:24:f4:b2:d2: 20:d3:4f:9e:a6:5d:cf:af:e8:ab:0d:52:9f:6a:3f: dc:54:d4:8f:37:76:d7:c4:de:4b:e1:9a:6e:aa:b8: f2:59:12:f3:68:80:93:9a:79:03:28:6d:b5:84:d1: 49:fc:50:b2:c8:83:79:26:26:fd:cf:1e:11:3d:ad: f3:32:33:07:7e:a1:f6:f5:58:ae:b6:82:d3:a4:f9: 26:02:b2:4c:d7:4c:e6:2b:f9:10:2a:9c:70:bd:72: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DF:47:4C:B3:5E:C0:94:45:6E:A0:AB:D0:96:C1:3C:1F:4C:E5:7C X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ee:e3:2a:33:b6:ae:00:a8:39:2f:ac:6c:1a:59:bb:3f:63: 15:58:01:49:0b:f6:54:98:9d:7a:05:1b:c0:eb:cb:3e:f2:85: a1:8f:19:e7:48:cf:c8:9a:c1:f0:5f:7a:49:7f:78:e4:19:78: 91:cc:db:79:09:43:39:5a:16:ec:45:1f:a2:72:c3:71:aa:f5: 5f:00:47:cb:96:28:78:c8:59:4a:b1:9c:d7:c4:c8:14:ae:e6: bb:d6:fe:54:4a:77:2b:68:31:7a:df:af:2a:e0:22:ae:1e:82: 58:14:3c:e7:f0:ca:0e:3e:2a:b2:92:e5:7e:cd:49:dd:77:c4: c3:17:e3:0e:99:0d:66:72:4c:9f:87:28:ec:30:2b:10:e5:00: 9a:fb:80:24:d4:22:52:d7:2b:d1:eb:ae:15:75:87:96:0e:1d: bb:a9:51:0b:b5:4e:03:38:88:e3:fd:92:80:9f:c0:48:c8:18: 5b:3a:1f:20:48:08:c7:a0:da:ce:9b:17:77:1e:58:8a:a3:72: af:58:11:70:e4:4f:85:68:df:d0:8e:f0:e1:0d:0b:cb:21:ed: 08:3d:dc:22:d5:9d:8e:d4:95:e1:e1:45:5b:24:2d:9d:cf:c6: b1:90:08:5d:e7:d1:b0:9f:e3:9b:0c:5c:81:9c:56:f5:4f:1f: 1b:41:48:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUawPnaPn+9KUvQXHwevmR7A89xq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNTA2MjkwOTI2MTFaFw0yNTA3MDIyMDMzMTFaMDMxMTAvBgNV BAMTKDhEREY0NzRDQjM1RUMwOTQ0NTZFQTBBQkQwOTZDMTNDMUY0Q0U1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHjVmLFGTiC5wa0D1lBaAQ4du J6cVxM4h1JsQjl8ZuRf+oT8empNTQOQVG7wEjBKDLcKSyVVdgOJuPHIYgSpONPEr ZChXZCCTicsRrY1qHKVBSY0V7Tj4zCPS7GreYbGJ9yyZ4Xz6K6CvfTPyYWI5qbRr gqa2sxMmU/dUsirVPLTLMNuWnlbxNNCzkGPNLXtDluenucBkvxlULu/J9mJ9JPSy 0iDTT56mXc+v6KsNUp9qP9xU1I83dtfE3kvhmm6quPJZEvNogJOaeQMobbWE0Un8 ULLIg3kmJv3PHhE9rfMyMwd+ofb1WK62gtOk+SYCskzXTOYr+RAqnHC9cmanAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjd9HTLNewJRFbqCr0JbBPB9M5XwwHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzu4yoztq4AqDkvrGwaWbs/YxVYAUkL9lSY nXoFG8Dryz7yhaGPGedIz8iawfBfekl/eOQZeJHM23kJQzlaFuxFH6Jyw3Gq9V8A R8uWKHjIWUqxnNfEyBSu5rvW/lRKdytoMXrfryrgIq4eglgUPOfwyg4+KrKS5X7N Sd13xMMX4w6ZDWZyTJ+HKOwwKxDlAJr7gCTUIlLXK9HrrhV1h5YOHbupUQu1TgM4 iOP9koCfwEjIGFs6HyBICMeg2s6bF3ceWIqjcq9YEXDkT4Vo39CO8OENC8sh7Qg9 3CLVnY7UleHhRVskLZ3PxrGQCF3n0bCf45sMXIGcVvVPHxtBSHs= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:30 2025 by rpki-client