$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: rirjSGHLy2kmGOMwTZzV95sa0K4lzNslO4zQUT4e8fc= Subject key identifier: E0:33:FB:F7:FB:85:76:FA:A9:D3:B8:1B:38:A8:EF:11:A8:19:2D:AE Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 77A91D7EDB46E546951AC3CC20A2B09040BCD645 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 04CC Signing time: Tue 06 May 2025 10:41:10 +0000 Manifest this update: Tue 06 May 2025 10:36:10 +0000 Manifest next update: Fri 09 May 2025 13:00:10 +0000 Files and hashes: 1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: TkLr6QuWivNBUzYy+C8/M7HtsuKKZRHDrlIs8Q+LXcA=) 2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: PHUFI70Yd8/eQH1IB5Bqra7jl3oU7toK/ScFCZQ9jng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 13:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a9:1d:7e:db:46:e5:46:95:1a:c3:cc:20:a2:b0:90:40:bc:d6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: May 6 10:36:10 2025 GMT Not After : May 9 13:00:10 2025 GMT Subject: CN=E033FBF7FB8576FAA9D3B81B38A8EF11A8192DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:52:c7:28:27:ea:a5:6b:6d:b7:6d:2d:e6: 28:a5:70:7e:44:6c:c7:20:d7:b6:bb:e3:67:82:b8: d5:3f:22:5e:bd:a9:4c:1c:03:a3:d8:28:09:a7:51: ca:0a:13:8a:fe:2d:39:af:63:e8:ff:e7:d5:15:6d: 73:ee:fd:ed:15:33:38:fa:b1:11:d3:3d:9e:e2:f6: 63:6b:b0:11:fe:82:40:38:69:ca:4b:03:e9:f9:02: ea:fd:7d:8f:28:ed:f0:38:e4:31:46:18:09:23:36: 3f:ee:09:21:3e:7b:7d:6a:a5:ca:f2:30:7f:9e:8e: 36:b5:e8:48:3f:09:05:7a:5f:93:33:e0:59:e8:f1: e4:27:db:23:5a:58:f5:82:32:d7:49:16:02:d6:fc: e1:51:f2:ac:b5:5c:c1:00:37:fe:b4:fa:11:3a:3d: 86:1d:8c:d4:1e:2e:0c:4a:0c:8f:3b:11:83:83:6e: 4f:cd:cb:5a:17:0c:ee:49:af:32:fc:46:e9:46:45: 9b:66:82:16:a8:83:fa:11:69:c6:20:fc:32:60:37: fb:1f:c9:02:a0:32:a2:6e:1e:90:46:27:42:7e:7b: 0d:ad:57:02:63:4f:ce:0f:35:17:43:31:f4:95:88: 59:a7:83:79:36:8f:bc:f1:28:cb:96:86:f1:f0:0d: 9a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:33:FB:F7:FB:85:76:FA:A9:D3:B8:1B:38:A8:EF:11:A8:19:2D:AE X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:29:ae:82:6d:f3:32:a4:70:48:cc:37:26:70:37:6a:da:ab: 09:ee:a6:b7:5a:d2:bd:77:de:71:22:91:c4:9a:77:d5:b2:4d: c6:02:26:c8:9a:75:72:16:ca:69:8b:05:b4:bd:f4:54:fb:d8: 3c:eb:af:e3:f4:df:d9:da:93:ee:7b:ad:81:0f:f3:d9:8d:e2: 64:3d:33:86:51:c7:e6:14:92:8c:7e:47:41:8e:52:c0:81:9d: 8a:f0:80:62:63:81:30:4c:69:8c:f1:e4:e1:b3:da:28:5c:87: 4b:94:9a:0b:c4:eb:ed:04:e7:37:65:d3:b2:ca:a2:26:56:a2: 9a:f2:b2:78:1e:7a:77:da:21:d8:3c:7e:2f:eb:ad:55:f3:be: fd:55:40:89:dc:ad:a1:1b:b5:66:16:d8:32:59:77:d8:94:e5: aa:99:13:f9:51:fa:e4:0d:28:22:85:b5:83:75:4c:6f:40:fc: a6:bd:09:c5:83:93:93:ef:2c:f0:d8:64:78:46:7b:db:bc:30: d0:fd:ea:71:12:10:fc:71:c9:46:60:7e:b0:ab:4f:3c:6e:3e: 01:ea:f6:23:bb:5b:01:c1:7f:ea:ae:1d:d6:74:a5:18:7a:a2: 32:10:3c:f3:0b:6c:e4:37:f8:62:66:c9:33:7b:b2:8d:c1:84: 4d:1c:d1:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd6kdfttG5UaVGsPMIKKwkEC81kUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNTA1MDYxMDM2MTBaFw0yNTA1MDkxMzAwMTBaMDMxMTAvBgNV BAMTKEUwMzNGQkY3RkI4NTc2RkFBOUQzQjgxQjM4QThFRjExQTgxOTJEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRDVLHKCfqpWttt20t5iilcH5E bMcg17a742eCuNU/Il69qUwcA6PYKAmnUcoKE4r+LTmvY+j/59UVbXPu/e0VMzj6 sRHTPZ7i9mNrsBH+gkA4acpLA+n5Aur9fY8o7fA45DFGGAkjNj/uCSE+e31qpcry MH+ejja16Eg/CQV6X5Mz4Fno8eQn2yNaWPWCMtdJFgLW/OFR8qy1XMEAN/60+hE6 PYYdjNQeLgxKDI87EYODbk/Ny1oXDO5JrzL8RulGRZtmghaog/oRacYg/DJgN/sf yQKgMqJuHpBGJ0J+ew2tVwJjT84PNRdDMfSViFmng3k2j7zxKMuWhvHwDZrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4DP79/uFdvqp07gbOKjvEagZLa4wHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYproJt8zKkcEjMNyZwN2raqwnuprda0r13 3nEikcSad9WyTcYCJsiadXIWymmLBbS99FT72Dzrr+P039nak+57rYEP89mN4mQ9 M4ZRx+YUkox+R0GOUsCBnYrwgGJjgTBMaYzx5OGz2ihch0uUmgvE6+0E5zdl07LK oiZWoprysngeenfaIdg8fi/rrVXzvv1VQIncraEbtWYW2DJZd9iU5aqZE/lR+uQN KCKFtYN1TG9A/Ka9CcWDk5PvLPDYZHhGe9u8MND96nESEPxxyUZgfrCrTzxuPgHq 9iO7WwHBf+quHdZ0pRh6ojIQPPMLbOQ3+GJmyTN7so3BhE0c0Rw= -----END CERTIFICATE-----Generated at Wed May 7 23:12:06 2025 by rpki-client