$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft File: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json) Hash identifier: Qm/TgqyXNSyqRTwwrOeb8ZncNkO8mziOxJl/b5FjvUA= Subject key identifier: EF:14:E0:18:C3:5C:E2:12:78:05:79:C6:FA:83:C8:16:35:86:F4:B7 Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB Certificate issuer: /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Certificate serial: 6FB08F1A69DB925295619027CA13A2EA39182A8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft Manifest number: 0394 Signing time: Sat 28 Jun 2025 18:01:29 +0000 Manifest this update: Sat 28 Jun 2025 17:56:29 +0000 Manifest next update: Tue 01 Jul 2025 22:24:29 +0000 Files and hashes: 1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: osJlPhvUTFuJtXv7EBg2zHQbi+N5g8tEl6we7ge/jvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b0:8f:1a:69:db:92:52:95:61:90:27:ca:13:a2:ea:39:18:2a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Validity Not Before: Jun 28 17:56:29 2025 GMT Not After : Jul 1 22:24:29 2025 GMT Subject: CN=EF14E018C35CE212780579C6FA83C8163586F4B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b6:6d:cc:47:cd:af:01:2f:62:91:42:82:38: ba:9a:b9:f4:29:f8:99:b5:ff:86:e9:6f:ee:e6:18: 5d:a3:3d:88:1f:d7:8a:9d:43:5c:d6:1e:e3:fc:02: 8f:f3:16:b9:4c:3e:89:d7:28:b1:cc:e8:8d:b6:58: d9:2e:73:38:19:56:36:88:bb:e0:2d:45:86:92:4f: 05:30:11:76:c9:1b:43:22:3e:ea:48:ae:99:cc:43: ae:b5:20:9e:1c:6d:b1:cd:b9:88:a5:be:ae:95:23: 6b:56:f0:0a:18:7d:97:06:23:d8:f0:21:60:17:23: b8:cb:4c:2f:bc:bb:f8:d1:d7:da:f8:50:a1:45:38: f8:31:4d:e0:ad:b2:b8:64:ce:6b:ea:81:b6:a3:15: ab:e4:da:04:99:0c:9c:73:7a:11:fe:72:46:04:16: 31:7e:ce:02:88:90:59:0b:bb:38:d0:3d:3e:3f:5e: 0b:9c:fd:ab:84:06:a4:e5:c9:7f:94:24:12:93:98: dc:80:b7:de:8c:ea:03:7d:2a:77:dc:e5:fd:ce:54: 6f:4b:e7:de:72:df:3b:96:75:2f:80:3f:60:7d:2c: fc:3a:d4:ce:8c:bb:0c:22:f8:a4:55:1e:cc:c5:cb: 21:f8:51:6b:bc:ac:ec:73:00:ff:21:a8:56:36:f5: 86:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:14:E0:18:C3:5C:E2:12:78:05:79:C6:FA:83:C8:16:35:86:F4:B7 X509v3 Authority Key Identifier: keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:20:be:cd:b7:8e:c7:5b:ad:5e:ae:71:f9:c9:73:73:f0:11: 3c:0e:ba:63:8d:ba:c3:7d:bb:a9:52:c5:57:fc:a4:b0:37:7c: 4c:4d:5d:d7:7a:3e:c1:7b:f8:81:40:e2:5a:9a:9a:fa:7c:4b: fb:35:35:40:5a:16:a1:51:aa:63:e2:b4:5f:7a:65:91:a2:7c: bd:da:cb:7f:09:9a:00:ca:f3:77:72:8c:c0:7e:56:8a:94:71: b6:72:3d:c8:a2:c0:c9:42:c0:8c:21:54:ba:ad:ed:29:d0:c4: 81:6a:dc:4f:bb:e6:fa:b3:a7:77:3a:37:f3:00:78:0f:37:b0: ff:42:d9:d3:2f:7f:25:9d:4c:d3:6c:75:55:4e:cc:f2:96:7c: e5:97:c2:98:10:f7:ee:fc:e5:fa:f6:d1:68:20:14:b6:fc:d2: 33:f3:2d:2c:b2:d6:52:8f:55:b0:f2:92:70:67:61:9a:2c:45: ce:8b:2a:f5:eb:3f:b4:85:c1:bb:ea:cf:2c:b1:25:c5:6c:09: 9e:56:a1:74:b9:37:39:51:2f:af:53:4a:e9:56:2a:98:de:51: 10:c2:21:fc:a8:be:7b:53:67:bc:55:75:8c:e5:d6:4d:a3:8d: 2e:47:dc:7a:c1:00:90:c0:6e:5f:1b:da:37:40:8a:19:7c:4d: e6:6b:b9:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb7CPGmnbklKVYZAnyhOi6jkYKo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIx MjQzQkZGQjAeFw0yNTA2MjgxNzU2MjlaFw0yNTA3MDEyMjI0MjlaMDMxMTAvBgNV BAMTKEVGMTRFMDE4QzM1Q0UyMTI3ODA1NzlDNkZBODNDODE2MzU4NkY0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtm3MR82vAS9ikUKCOLqaufQp +Jm1/4bpb+7mGF2jPYgf14qdQ1zWHuP8Ao/zFrlMPonXKLHM6I22WNkuczgZVjaI u+AtRYaSTwUwEXbJG0MiPupIrpnMQ661IJ4cbbHNuYilvq6VI2tW8AoYfZcGI9jw IWAXI7jLTC+8u/jR19r4UKFFOPgxTeCtsrhkzmvqgbajFavk2gSZDJxzehH+ckYE FjF+zgKIkFkLuzjQPT4/Xguc/auEBqTlyX+UJBKTmNyAt96M6gN9Knfc5f3OVG9L 595y3zuWdS+AP2B9LPw61M6Muwwi+KRVHszFyyH4UWu8rOxzAP8hqFY29Yb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7xTgGMNc4hJ4BXnG+oPIFjWG9LcwHwYDVR0j BBgwFoAUr9/V0cSzny+qu6W8FSNMKxJDv/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NGZlMTgxMS1jMDNmLTQ5ZDgtOTIxNy0xM2ZmMjJhMzFlYmUvMC9BRkRGRDVEMUM0 QjM5RjJGQUFCQkE1QkMxNTIzNEMyQjEyNDNCRkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIxMjQz QkZGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTRmZTE4MTEtYzAzZi00OWQ4LTky MTctMTNmZjIyYTMxZWJlLzAvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRD MkIxMjQzQkZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQgvs23jsdbrV6ucfnJc3PwETwOumONusN9 u6lSxVf8pLA3fExNXdd6PsF7+IFA4lqamvp8S/s1NUBaFqFRqmPitF96ZZGifL3a y38JmgDK83dyjMB+VoqUcbZyPciiwMlCwIwhVLqt7SnQxIFq3E+75vqzp3c6N/MA eA83sP9C2dMvfyWdTNNsdVVOzPKWfOWXwpgQ9+785fr20WggFLb80jPzLSyy1lKP VbDyknBnYZosRc6LKvXrP7SFwbvqzyyxJcVsCZ5WoXS5NzlRL69TSulWKpjeURDC IfyovntTZ7xVdYzl1k2jjS5H3HrBAJDAbl8b2jdAihl8TeZruSw= -----END CERTIFICATE-----Generated at Sun Jun 29 21:38:55 2025 by rpki-client