$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: Erc4uFZK1eG7BhjXvb7kn8Mydt570iwQSpByELIACg8= Subject key identifier: 13:1C:84:12:94:1F:C1:6C:A7:8E:65:14:D5:AC:4D:07:6C:D9:D4:57 Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 3BD73A655AEB2AA62F9CD39F8E36253376587EDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: CB Signing time: Mon 30 Jun 2025 01:01:24 +0000 Manifest this update: Mon 30 Jun 2025 00:56:24 +0000 Manifest next update: Thu 03 Jul 2025 09:44:24 +0000 Files and hashes: 1: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: JcxcaxwKLkaXPPx4myqNJpdCaATZRCOkTz9pp1mz/yI=) 2: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: 1IakEd1VKe9COL7qNmsbtWfe9fQm+iOoyY9KukpW/Fc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d7:3a:65:5a:eb:2a:a6:2f:9c:d3:9f:8e:36:25:33:76:58:7e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Jun 30 00:56:24 2025 GMT Not After : Jul 3 09:44:24 2025 GMT Subject: CN=131C8412941FC16CA78E6514D5AC4D076CD9D457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b4:1a:de:0f:92:df:14:ef:9f:6c:5f:5e:f4: 5f:54:71:37:58:d8:10:c9:1a:89:9e:7e:59:9b:87: d1:06:be:4f:85:7f:60:12:5f:0a:6c:ba:a3:02:fe: c5:51:a5:eb:22:20:3a:9a:af:e1:02:96:8f:44:aa: c6:d9:0c:b6:ec:00:36:7a:e2:02:96:e5:25:5f:e9: cd:42:6d:83:45:f1:7c:54:ab:b2:bc:68:90:13:b3: fe:63:b7:42:f0:64:89:64:be:7f:f4:c3:f4:f0:d1: 66:f3:8b:ea:cc:dd:24:ee:86:e2:8e:fd:fc:81:92: 0c:72:03:fd:bf:16:7f:7f:0f:9c:59:bf:7f:a0:57: 84:20:ea:46:85:95:8b:98:22:28:bf:6d:7f:2c:fa: 71:2a:bc:f7:12:f5:58:a2:58:1f:9b:b1:2b:78:83: 3e:c9:44:bf:b6:7d:5f:b8:ea:1c:ae:3d:b2:2e:74: 3f:cc:14:b8:02:62:18:f9:67:75:4b:f9:aa:de:30: da:68:4b:a0:7f:7e:7f:8f:43:17:9c:05:2a:bd:d5: 52:5c:dd:5d:73:be:11:b6:1d:8e:ec:29:7a:fc:e0: b0:42:e4:3d:86:c3:ac:33:17:22:0d:e6:aa:df:63: be:86:c0:bf:a4:5e:2d:9f:e8:15:f0:b8:21:50:08: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1C:84:12:94:1F:C1:6C:A7:8E:65:14:D5:AC:4D:07:6C:D9:D4:57 X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:be:bf:13:1a:12:11:fe:01:ef:1c:5a:2a:86:73:25:97:f7: f4:4d:80:35:fe:56:00:0a:a5:3a:ad:b1:a7:66:ce:8a:d6:36: 65:13:a1:5c:c5:07:7e:d6:e4:83:a3:ef:f5:22:84:c0:13:e9: ec:d4:11:90:6e:fd:47:7a:5f:47:9b:b4:b3:8b:90:74:df:33: 19:e8:79:c8:1f:3c:c6:a9:30:5c:da:b0:2a:50:f2:a3:01:41: bc:4e:e4:ab:71:ec:bf:ba:06:63:d3:5f:cb:1e:f0:50:8f:7c: 13:3c:08:66:05:06:c9:cf:b2:1b:b1:f5:a1:51:46:51:52:ae: 35:16:2e:2f:c4:20:b2:26:13:28:71:9d:f2:1f:26:a6:41:10: 6b:8f:7b:9d:a7:31:dd:90:31:b6:6f:90:e0:5a:27:59:6f:e5: 05:51:e9:2b:a5:07:ed:0a:d0:27:f7:9c:4d:e5:57:6a:43:9f: 57:a7:10:93:a7:81:93:e2:b0:81:75:a6:94:3f:84:42:1b:31: 6f:ce:a0:80:7d:5a:b4:20:e0:19:f0:a2:c0:69:c6:04:09:bf: aa:54:b2:52:f5:fe:c1:2a:8d:d9:7b:44:c4:0d:4e:c3:1f:9d: 48:2b:a0:96:75:40:90:9a:f3:04:58:ab:b2:72:d8:be:b3:88: a3:b8:5e:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9c6ZVrrKqYvnNOfjjYlM3ZYftwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNTA2MzAwMDU2MjRaFw0yNTA3MDMwOTQ0MjRaMDMxMTAvBgNV BAMTKDEzMUM4NDEyOTQxRkMxNkNBNzhFNjUxNEQ1QUM0RDA3NkNEOUQ0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltBreD5LfFO+fbF9e9F9UcTdY 2BDJGomeflmbh9EGvk+Ff2ASXwpsuqMC/sVRpesiIDqar+EClo9EqsbZDLbsADZ6 4gKW5SVf6c1CbYNF8XxUq7K8aJATs/5jt0LwZIlkvn/0w/Tw0Wbzi+rM3STuhuKO /fyBkgxyA/2/Fn9/D5xZv3+gV4Qg6kaFlYuYIii/bX8s+nEqvPcS9ViiWB+bsSt4 gz7JRL+2fV+46hyuPbIudD/MFLgCYhj5Z3VL+areMNpoS6B/fn+PQxecBSq91VJc 3V1zvhG2HY7sKXr84LBC5D2Gw6wzFyIN5qrfY76GwL+kXi2f6BXwuCFQCE+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUExyEEpQfwWynjmUU1axNB2zZ1FcwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2+vxMaEhH+Ae8cWiqGcyWX9/RNgDX+VgAK pTqtsadmzorWNmUToVzFB37W5IOj7/UihMAT6ezUEZBu/Ud6X0ebtLOLkHTfMxno ecgfPMapMFzasCpQ8qMBQbxO5Ktx7L+6BmPTX8se8FCPfBM8CGYFBsnPshux9aFR RlFSrjUWLi/EILImEyhxnfIfJqZBEGuPe52nMd2QMbZvkOBaJ1lv5QVR6SulB+0K 0Cf3nE3lV2pDn1enEJOngZPisIF1ppQ/hEIbMW/OoIB9WrQg4BnwosBpxgQJv6pU slL1/sEqjdl7RMQNTsMfnUgroJZ1QJCa8wRYq7Jy2L6ziKO4Xlg= -----END CERTIFICATE-----Generated at Tue Jul 1 02:08:54 2025 by rpki-client