$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: ORLAWyizQtCp5T5JL6vHVhQ7dH4qaFAjxTpa2XGY8jM= Subject key identifier: 1D:D1:B8:0F:CE:08:67:F4:61:78:3D:D7:A6:BF:58:6E:0F:55:25:7D Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 0F7C6DD539D8DBADF8AE7CF888D6936BE4D79F0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 04FC Signing time: Thu 21 Aug 2025 20:51:12 +0000 Manifest this update: Thu 21 Aug 2025 20:46:12 +0000 Manifest next update: Mon 25 Aug 2025 07:28:12 +0000 Files and hashes: 1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: nwLOHEMqdaAsG2DU8j02IAOlVrkU4Dk5uSFkKh452Ok=) 2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:7c:6d:d5:39:d8:db:ad:f8:ae:7c:f8:88:d6:93:6b:e4:d7:9f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Aug 21 20:46:12 2025 GMT Not After : Aug 25 07:28:12 2025 GMT Subject: CN=1DD1B80FCE0867F461783DD7A6BF586E0F55257D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:70:74:4a:38:eb:7b:9f:b2:be:60:f5:69: a0:b0:60:f5:3e:83:da:7a:58:ef:a4:64:2c:da:80: 05:86:e3:49:73:e2:96:5a:72:58:0f:aa:f2:d2:43: 58:d8:52:13:47:0f:e8:b9:fc:48:97:ee:0d:2f:ba: c7:a1:70:d1:6f:b3:f0:69:8f:96:d0:7e:f3:f8:0b: 66:25:75:d8:fb:25:41:c4:82:b0:d5:22:11:78:5e: 49:c4:1d:19:c4:da:f0:32:20:7a:35:b7:c5:32:b4: f3:f1:f6:01:1a:62:e7:44:5c:88:9d:cb:e1:da:b2: ec:47:c6:df:f7:e7:e3:96:69:f7:32:69:3c:33:d8: f1:27:ed:e2:b3:21:a5:3e:73:a8:bc:45:ae:85:b1: 85:c3:19:a9:d2:e2:9d:a3:77:16:c4:63:78:2a:5e: 40:d5:5f:58:d1:4b:e8:29:6c:89:9d:c9:5b:b4:c2: bc:51:69:b7:5f:fa:75:09:64:79:d0:e3:e2:c3:8d: f4:96:4c:42:a4:7d:16:ea:84:b3:f2:77:3a:d8:54: c0:00:40:ce:75:62:95:de:68:72:75:7b:37:89:ca: 63:bc:cb:b3:51:20:f6:92:8a:f3:c6:e7:7d:86:e3: 0d:3e:e4:a5:f6:50:ef:db:fd:86:d6:87:e0:17:70: af:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D1:B8:0F:CE:08:67:F4:61:78:3D:D7:A6:BF:58:6E:0F:55:25:7D X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:dd:22:c1:d2:6d:76:83:dd:bd:04:85:77:65:c7:ab:1a:70: 18:f5:9f:73:75:38:41:70:39:1e:e1:02:f4:53:56:48:7e:a1: 87:d8:3c:77:a6:f3:dc:ce:fe:ef:a5:7a:95:2a:b9:27:e4:8e: b5:a7:2d:cc:a5:98:ac:54:61:ba:b9:aa:42:3b:87:9e:0d:ac: ca:2a:18:0c:91:0a:0c:0d:a8:15:3a:a2:eb:0b:ba:f6:3a:04: 33:dc:7c:f1:95:f0:ce:c8:ef:ff:49:f5:2b:a1:4e:74:c4:42: 27:2e:99:05:ec:e8:6a:8d:71:3d:3d:d5:29:1b:86:c4:a1:f0: ec:5e:04:7c:de:a9:3e:30:5b:50:9e:ea:37:30:99:81:42:0c: 82:6b:b5:bd:3c:05:4e:23:ea:40:61:2e:b2:bc:7a:23:7b:44: 5d:3d:b6:12:a6:81:ce:d9:bf:37:aa:36:f6:8b:df:64:1f:06: 45:c3:20:20:5c:36:90:0e:e8:4b:e1:25:00:a8:29:f0:51:75: 90:78:ca:c9:26:d9:a4:4d:e6:84:be:a9:63:36:1e:c5:5a:08: db:ca:99:3c:ec:3d:68:cd:42:41:77:c7:6b:7e:e3:73:50:bd: 61:bf:62:8f:b5:bd:c9:c3:e9:15:64:b9:a1:2b:02:d6:2d:48: d3:cb:f5:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3xt1TnY2634rnz4iNaTa+TXnw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNTA4MjEyMDQ2MTJaFw0yNTA4MjUwNzI4MTJaMDMxMTAvBgNV BAMTKDFERDFCODBGQ0UwODY3RjQ2MTc4M0REN0E2QkY1ODZFMEY1NTI1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4XB0Sjjre5+yvmD1aaCwYPU+ g9p6WO+kZCzagAWG40lz4pZaclgPqvLSQ1jYUhNHD+i5/EiX7g0vusehcNFvs/Bp j5bQfvP4C2Ylddj7JUHEgrDVIhF4XknEHRnE2vAyIHo1t8UytPPx9gEaYudEXIid y+HasuxHxt/35+OWafcyaTwz2PEn7eKzIaU+c6i8Ra6FsYXDGanS4p2jdxbEY3gq XkDVX1jRS+gpbImdyVu0wrxRabdf+nUJZHnQ4+LDjfSWTEKkfRbqhLPydzrYVMAA QM51YpXeaHJ1ezeJymO8y7NRIPaSivPG532G4w0+5KX2UO/b/YbWh+AXcK+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHdG4D84IZ/RheD3Xpr9Ybg9VJX0wHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXdIsHSbXaD3b0EhXdlx6sacBj1n3N1OEFw OR7hAvRTVkh+oYfYPHem89zO/u+lepUquSfkjrWnLcylmKxUYbq5qkI7h54NrMoq GAyRCgwNqBU6ousLuvY6BDPcfPGV8M7I7/9J9SuhTnTEQicumQXs6GqNcT091Skb hsSh8OxeBHzeqT4wW1Ce6jcwmYFCDIJrtb08BU4j6kBhLrK8eiN7RF09thKmgc7Z vzeqNvaL32QfBkXDICBcNpAO6EvhJQCoKfBRdZB4yskm2aRN5oS+qWM2HsVaCNvK mTzsPWjNQkF3x2t+43NQvWG/Yo+1vcnD6RVkuaErAtYtSNPL9es= -----END CERTIFICATE-----Generated at Sat Aug 23 21:51:17 2025 by rpki-client