$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft (raw, json) Hash identifier: k34U+T4r0J3kByDXfMxb3uTpapdNw2s92v5YVUODnBg= Subject key identifier: E7:42:94:77:97:CE:BB:18:24:39:58:44:DF:B7:C0:D6:CC:65:3F:85 Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 78014ABC4DB27C89F12ED95706D23CC4D8833397 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft Manifest number: 6D Signing time: Sun 29 Jun 2025 14:20:01 +0000 Manifest this update: Sun 29 Jun 2025 14:15:01 +0000 Manifest next update: Wed 02 Jul 2025 21:03:01 +0000 Files and hashes: 1: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: XF0z782r3sHF+OrwCSt8ZCAVQ0WZ8tu8nYx4HOA7soI=) 2: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl (hash: c4R3uaUiyA0YY7Cm/6aJcSZiQKAC6vK0NZA4dgaRSrk=) 3: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: AjW16B5R157K3hvjOmHF0WbVknW4Cg9BK3NqgeP7LAQ=) 4: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: /DFyNaEsyO2usBnFzIOmfhaGZCRB0eHYovN+KsopEbs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:01:4a:bc:4d:b2:7c:89:f1:2e:d9:57:06:d2:3c:c4:d8:83:33:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Jun 29 14:15:01 2025 GMT Not After : Jul 2 21:03:01 2025 GMT Subject: CN=E742947797CEBB1824395844DFB7C0D6CC653F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ef:3f:f8:41:aa:19:60:5b:e2:1f:58:f7:a2: 08:bb:0a:05:d8:97:ce:65:99:f5:66:68:1a:57:df: 32:f8:6f:77:3d:39:76:6d:a8:13:e1:da:e9:0b:97: 62:12:67:8c:61:be:39:23:ef:f2:19:1b:13:11:8e: 51:a8:e2:96:51:18:39:ea:19:d2:3e:2a:75:7b:85: 03:f0:25:0a:a1:c1:04:3d:f6:7b:37:6b:a3:0a:2a: f2:60:76:dc:bb:05:d6:c9:4b:fe:a9:5b:f8:2c:8b: fc:16:e6:66:60:5b:d8:85:bc:0b:d7:6b:62:66:44: a1:97:ef:1c:1a:b9:c1:f0:54:4d:2a:f4:25:73:5f: 8c:53:34:22:e9:65:52:4c:49:0b:55:b7:95:8d:1e: 1c:d5:1b:c5:a9:bb:4c:27:3e:33:a4:fa:28:6f:cd: 0c:7f:be:94:93:9a:21:1b:e2:5c:5d:8c:07:0a:13: 30:9b:a9:f4:91:5f:df:04:06:9f:7e:af:ab:02:28: 6f:fc:86:cc:fc:c4:37:fc:28:c3:c7:f5:80:99:de: 62:fe:d4:32:a4:40:c9:b3:ff:0e:76:1b:e9:de:54: de:9b:f1:04:fa:83:37:cb:1c:94:d7:48:98:b8:68: 8d:bc:2d:ef:80:a1:7a:6b:60:f3:4d:62:a0:a2:88: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:42:94:77:97:CE:BB:18:24:39:58:44:DF:B7:C0:D6:CC:65:3F:85 X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ab:54:9b:b2:ff:30:ff:d1:66:1f:21:33:8b:ad:dd:cc:9e: ed:86:2d:a4:34:b8:40:50:e6:61:37:00:38:68:98:93:61:60: 35:e1:a1:b1:ff:be:a7:8f:45:f7:97:ad:de:54:d0:1b:ab:06: a9:8a:10:8e:d3:fa:f5:2a:87:49:6b:ff:c4:ed:cb:16:69:29: a3:87:ce:2c:24:5f:6f:74:72:2b:85:8e:06:cd:d1:82:96:08: c0:9c:8f:b3:e0:fb:d5:5b:e8:4a:20:db:8e:aa:df:1e:4d:64: d5:f7:b4:c3:fa:e9:c9:80:a9:90:03:84:47:de:77:93:ca:75: 18:5d:52:1f:d8:99:57:14:a5:48:38:a5:b0:23:65:3e:ce:2d: e0:b1:81:2e:a7:cb:44:84:db:01:6a:1d:85:98:62:f6:8d:69: 73:a9:0c:0f:d5:db:79:cc:01:4b:d3:c3:9a:b4:d2:0e:07:84: da:04:1b:51:70:60:20:ed:1c:a1:31:6c:33:de:01:73:3d:24: 57:6e:b1:b9:62:1f:9d:22:d2:ac:ca:23:33:3a:ca:f1:a3:0f: 12:22:91:6b:4d:78:28:6d:aa:8d:52:f3:c0:12:64:a7:0e:b1: 1d:6f:3d:eb:c2:c3:b6:33:71:32:26:a1:b9:5e:83:eb:6b:ec: 9e:05:5d:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeAFKvE2yfInxLtlXBtI8xNiDM5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNTA2MjkxNDE1MDFaFw0yNTA3MDIyMTAzMDFaMDMxMTAvBgNV BAMTKEU3NDI5NDc3OTdDRUJCMTgyNDM5NTg0NERGQjdDMEQ2Q0M2NTNGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT7z/4QaoZYFviH1j3ogi7CgXY l85lmfVmaBpX3zL4b3c9OXZtqBPh2ukLl2ISZ4xhvjkj7/IZGxMRjlGo4pZRGDnq GdI+KnV7hQPwJQqhwQQ99ns3a6MKKvJgdty7BdbJS/6pW/gsi/wW5mZgW9iFvAvX a2JmRKGX7xwaucHwVE0q9CVzX4xTNCLpZVJMSQtVt5WNHhzVG8Wpu0wnPjOk+ihv zQx/vpSTmiEb4lxdjAcKEzCbqfSRX98EBp9+r6sCKG/8hsz8xDf8KMPH9YCZ3mL+ 1DKkQMmz/w52G+neVN6b8QT6gzfLHJTXSJi4aI28Le+AoXprYPNNYqCiiDeHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU50KUd5fOuxgkOVhE37fA1sxlP4UwHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdmMmMxOTAtMzBmNS00ZjE5LWJm Y2EtMGI5ODdhNTJmZDU1LzAvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1 NkZDRURFQzNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKrVJuy/zD/0WYfITOLrd3Mnu2GLaQ0uEBQ 5mE3ADhomJNhYDXhobH/vqePRfeXrd5U0BurBqmKEI7T+vUqh0lr/8TtyxZpKaOH ziwkX290ciuFjgbN0YKWCMCcj7Pg+9Vb6Eog246q3x5NZNX3tMP66cmAqZADhEfe d5PKdRhdUh/YmVcUpUg4pbAjZT7OLeCxgS6ny0SE2wFqHYWYYvaNaXOpDA/V23nM AUvTw5q00g4HhNoEG1FwYCDtHKExbDPeAXM9JFdusbliH50i0qzKIzM6yvGjDxIi kWtNeChtqo1S88ASZKcOsR1vPevCw7YzcTImobleg+tr7J4FXUA= -----END CERTIFICATE-----Generated at Mon Jun 30 08:44:16 2025 by rpki-client