$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft File: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json) Hash identifier: JZYzd3OB0brF9XrAVjrMoTygAQHH0fxdIE9s3FCGGHk= Subject key identifier: 71:EE:2B:B7:45:C5:03:B6:69:F9:EA:2D:BE:99:86:9E:91:A7:24:57 Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB Certificate issuer: /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Certificate serial: 2AD66668AF812AF20E6657430B551B8CE3DE04A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft Manifest number: 037C Signing time: Tue 06 May 2025 14:31:26 +0000 Manifest this update: Tue 06 May 2025 14:26:26 +0000 Manifest next update: Fri 09 May 2025 21:49:26 +0000 Files and hashes: 1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: u4ZqJv1A2BZnFFBxKWjJoVyUC2nAozgNEg/0dxJNkZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 21:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d6:66:68:af:81:2a:f2:0e:66:57:43:0b:55:1b:8c:e3:de:04:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Validity Not Before: May 6 14:26:26 2025 GMT Not After : May 9 21:49:26 2025 GMT Subject: CN=71EE2BB745C503B669F9EA2DBE99869E91A72457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:92:4a:f7:43:7b:e1:60:e0:ea:5e:30:b1:e1: e6:de:6a:a2:07:4c:4c:19:a2:9c:de:a7:48:07:5b: 9c:71:38:8b:fe:16:cc:87:ad:9b:61:1b:01:9d:f7: 5d:c1:96:ac:85:b1:a4:56:1d:af:ba:35:51:29:40: b4:e2:00:86:16:d1:19:37:0f:fe:9a:2b:96:47:f9: 5d:f7:a0:a7:1b:49:5c:f8:6c:2a:92:6e:cd:fe:b0: ce:9d:8a:62:0d:83:a8:15:64:6d:73:d5:38:e9:a1: 6c:ec:f4:7a:d8:a5:64:15:33:06:c2:be:2f:4f:17: ba:ef:a8:6a:54:cc:b7:32:6b:33:41:ef:07:1a:08: 5a:26:0c:1e:a9:89:37:8c:37:46:67:28:10:5e:e4: ac:82:b1:64:ab:1e:fc:87:58:7c:80:f3:b1:1d:3e: 24:40:f3:ac:71:26:7c:4c:56:fc:2b:7c:92:49:c1: 8c:21:6e:b4:75:e8:f5:e3:da:88:0c:c7:b9:ca:14: 92:14:b0:f7:4b:d6:db:14:2d:6b:c5:99:96:81:3d: ea:64:68:c8:a9:b7:d0:8d:fa:f7:1d:76:61:5b:b0: f5:db:94:f4:26:93:14:b6:37:32:dc:c1:78:d3:d9: e5:8c:46:7e:73:cd:01:51:5c:dc:a6:19:56:a1:65: ed:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EE:2B:B7:45:C5:03:B6:69:F9:EA:2D:BE:99:86:9E:91:A7:24:57 X509v3 Authority Key Identifier: keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6a:36:c6:4b:d9:09:14:cc:fc:d2:ba:b6:80:7f:a1:cb:04: 86:76:a8:c7:d9:dc:5f:59:6e:57:51:4f:b0:0f:50:75:94:0d: 52:de:f4:f3:5a:6e:07:19:00:1f:ef:ab:64:38:00:30:6b:c4: 26:4e:31:84:4f:91:eb:a5:91:3a:07:f4:f5:89:dc:dd:34:8c: 7b:a1:b3:aa:a5:b8:25:a1:01:0a:8b:27:6f:94:24:f7:93:5a: 64:2d:aa:10:63:52:13:16:cf:6a:32:f1:17:a5:ff:cb:0c:7a: 6e:04:cc:bd:93:c3:f9:37:47:7d:32:e3:58:c3:f0:69:54:8f: 5f:d1:ce:9e:28:6a:57:1e:36:33:39:96:b3:27:44:c9:5a:11: ff:e4:be:80:bc:6c:71:61:fd:d8:4c:7b:ae:f2:d5:34:01:70: 1c:b6:30:0a:2f:f7:7e:5a:3c:5a:db:b2:8e:65:55:0a:65:fe: 34:50:f1:3f:fd:b9:f4:8a:40:e7:eb:40:75:38:a5:0e:f4:3d: d9:b9:67:cd:29:2d:a1:78:a3:e5:4c:12:43:ab:b8:ea:15:3e: 7f:e9:0f:cc:0c:e2:f2:6d:47:fb:7c:16:fd:72:11:f3:8a:29: 2a:5e:dd:cc:80:b9:7c:d2:29:c4:b6:59:e9:b7:b4:1e:ec:68: 1e:c7:f3:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtZmaK+BKvIOZldDC1UbjOPeBKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIx MjQzQkZGQjAeFw0yNTA1MDYxNDI2MjZaFw0yNTA1MDkyMTQ5MjZaMDMxMTAvBgNV BAMTKDcxRUUyQkI3NDVDNTAzQjY2OUY5RUEyREJFOTk4NjlFOTFBNzI0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkkr3Q3vhYODqXjCx4ebeaqIH TEwZopzep0gHW5xxOIv+FsyHrZthGwGd913BlqyFsaRWHa+6NVEpQLTiAIYW0Rk3 D/6aK5ZH+V33oKcbSVz4bCqSbs3+sM6dimINg6gVZG1z1TjpoWzs9HrYpWQVMwbC vi9PF7rvqGpUzLcyazNB7wcaCFomDB6piTeMN0ZnKBBe5KyCsWSrHvyHWHyA87Ed PiRA86xxJnxMVvwrfJJJwYwhbrR16PXj2ogMx7nKFJIUsPdL1tsULWvFmZaBPepk aMipt9CN+vcddmFbsPXblPQmkxS2NzLcwXjT2eWMRn5zzQFRXNymGVahZe0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUce4rt0XFA7Zp+eotvpmGnpGnJFcwHwYDVR0j BBgwFoAUr9/V0cSzny+qu6W8FSNMKxJDv/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NGZlMTgxMS1jMDNmLTQ5ZDgtOTIxNy0xM2ZmMjJhMzFlYmUvMC9BRkRGRDVEMUM0 QjM5RjJGQUFCQkE1QkMxNTIzNEMyQjEyNDNCRkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIxMjQz QkZGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTRmZTE4MTEtYzAzZi00OWQ4LTky MTctMTNmZjIyYTMxZWJlLzAvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRD MkIxMjQzQkZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlqNsZL2QkUzPzSuraAf6HLBIZ2qMfZ3F9Z bldRT7APUHWUDVLe9PNabgcZAB/vq2Q4ADBrxCZOMYRPkeulkToH9PWJ3N00jHuh s6qluCWhAQqLJ2+UJPeTWmQtqhBjUhMWz2oy8Rel/8sMem4EzL2Tw/k3R30y41jD 8GlUj1/Rzp4oalceNjM5lrMnRMlaEf/kvoC8bHFh/dhMe67y1TQBcBy2MAov935a PFrbso5lVQpl/jRQ8T/9ufSKQOfrQHU4pQ70Pdm5Z80pLaF4o+VMEkOruOoVPn/p D8wM4vJtR/t8Fv1yEfOKKSpe3cyAuXzSKcS2Wem3tB7saB7H89E= -----END CERTIFICATE-----Generated at Thu May 8 08:18:57 2025 by rpki-client