$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: m+bkZppvzJRrO4EEJ0fAip46LCyhimLeXW+bV4ok4MY= Subject key identifier: B9:8F:DF:8E:ED:2C:E8:D2:6C:82:50:AC:05:C0:0A:8D:A7:D5:8A:8B Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 22C7796418DDCA748D51A91448597909A2130E30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 01D8 Signing time: Wed 07 May 2025 10:21:20 +0000 Manifest this update: Wed 07 May 2025 10:16:20 +0000 Manifest next update: Sat 10 May 2025 18:27:20 +0000 Files and hashes: 1: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: 7vBIIUx8rMfnp0HYukI09DeMGHFSKumSs+GMojhGUmk=) 2: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 18:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c7:79:64:18:dd:ca:74:8d:51:a9:14:48:59:79:09:a2:13:0e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: May 7 10:16:20 2025 GMT Not After : May 10 18:27:20 2025 GMT Subject: CN=B98FDF8EED2CE8D26C8250AC05C00A8DA7D58A8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:95:8f:79:4f:5d:ca:7c:2a:08:1c:de:a3:8e: de:68:60:53:54:44:50:9f:02:33:13:14:a7:ac:e9: 7c:f7:3c:88:a0:42:bf:88:e6:6f:82:7b:ea:a6:6f: ca:e2:cf:19:72:9e:99:4d:12:93:ab:f6:f3:48:8e: 71:3f:e0:2f:ad:86:0f:ff:a6:73:6f:ed:03:f4:b5: 6a:84:12:86:cd:de:f4:b0:88:be:a5:97:73:00:7e: d8:8c:9c:f6:2e:2f:a2:19:e7:3d:1b:d8:72:8a:0d: 6b:78:56:de:23:41:1f:d1:95:f6:2d:60:f1:72:4f: 43:7f:50:52:2f:fb:c7:88:1e:84:d0:5f:0d:31:02: 3c:91:c8:2f:82:41:04:2b:7c:f8:81:6d:45:75:16: e1:a2:f8:fa:bf:69:72:0f:50:22:05:a9:dc:95:92: 87:b8:d6:f9:2e:c0:d7:c3:7e:5b:fe:be:89:7d:26: e2:10:f9:b7:3e:10:45:2d:38:0e:c7:e2:8d:e8:46: e2:6b:42:aa:48:68:05:4f:4f:7d:64:12:9b:87:86: fd:d8:94:1b:38:37:18:98:f3:ae:b2:e4:9f:2a:9c: 4a:2d:0b:9f:84:d6:66:18:da:6b:00:57:e2:89:47: 2f:67:03:73:8e:82:c7:4f:66:ce:20:89:e4:8b:2a: ff:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8F:DF:8E:ED:2C:E8:D2:6C:82:50:AC:05:C0:0A:8D:A7:D5:8A:8B X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ca:da:4c:29:fa:33:bf:9a:e7:2a:10:e8:80:d0:3d:56:cf: c4:76:f1:3b:9d:41:8f:6c:56:d5:5a:29:1c:21:33:83:d9:6e: c6:90:07:6e:ec:53:2e:4b:70:f5:63:d8:98:cf:a9:68:1e:ae: d1:b7:47:4b:1f:87:01:02:59:19:a4:fb:7a:f4:d2:55:bb:2c: b5:f5:7a:b6:ab:d0:55:70:0d:03:a3:29:fa:dc:ad:3b:c3:5a: 4b:53:19:33:38:97:2f:fd:17:b0:00:e7:ad:4f:6b:13:2c:6c: 8c:d5:84:a8:63:bf:d6:0d:15:68:c4:cf:7d:b0:59:eb:14:e9: f3:9a:f1:41:a2:75:d1:a2:25:d1:49:f2:3e:54:c4:4b:fc:74: 3d:9b:33:5f:dd:7c:9b:77:f9:38:c9:03:a3:3b:b3:f1:1d:21: 82:11:1f:05:a5:fc:40:0f:d4:84:2b:de:e2:e8:74:d3:83:5f: fc:ee:68:ca:85:ff:8a:8b:db:46:f0:de:67:66:d5:09:45:38: 35:b4:50:d7:5c:04:10:27:7f:a0:c1:e7:b6:d7:e3:73:49:45: ab:f4:8c:34:84:06:3f:25:7b:3a:b7:33:99:57:52:70:14:e8: 2b:2c:0a:43:b9:e6:73:83:9f:03:4b:5b:e8:5e:dd:63:e7:3e: 0d:66:55:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIsd5ZBjdynSNUakUSFl5CaITDjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNTA1MDcxMDE2MjBaFw0yNTA1MTAxODI3MjBaMDMxMTAvBgNV BAMTKEI5OEZERjhFRUQyQ0U4RDI2QzgyNTBBQzA1QzAwQThEQTdENThBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlY95T13KfCoIHN6jjt5oYFNU RFCfAjMTFKes6Xz3PIigQr+I5m+Ce+qmb8rizxlynplNEpOr9vNIjnE/4C+thg// pnNv7QP0tWqEEobN3vSwiL6ll3MAftiMnPYuL6IZ5z0b2HKKDWt4Vt4jQR/RlfYt YPFyT0N/UFIv+8eIHoTQXw0xAjyRyC+CQQQrfPiBbUV1FuGi+Pq/aXIPUCIFqdyV koe41vkuwNfDflv+vol9JuIQ+bc+EEUtOA7H4o3oRuJrQqpIaAVPT31kEpuHhv3Y lBs4NxiY866y5J8qnEotC5+E1mYY2msAV+KJRy9nA3OOgsdPZs4gieSLKv9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuY/fju0s6NJsglCsBcAKjafVioswHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjK2kwp+jO/mucqEOiA0D1Wz8R28TudQY9s VtVaKRwhM4PZbsaQB27sUy5LcPVj2JjPqWgertG3R0sfhwECWRmk+3r00lW7LLX1 erar0FVwDQOjKfrcrTvDWktTGTM4ly/9F7AA561PaxMsbIzVhKhjv9YNFWjEz32w WesU6fOa8UGiddGiJdFJ8j5UxEv8dD2bM1/dfJt3+TjJA6M7s/EdIYIRHwWl/EAP 1IQr3uLodNODX/zuaMqF/4qL20bw3mdm1QlFODW0UNdcBBAnf6DB57bX43NJRav0 jDSEBj8lezq3M5lXUnAU6CssCkO55nODnwNLW+he3WPnPg1mVe4= -----END CERTIFICATE-----Generated at Fri May 9 03:50:32 2025 by rpki-client