$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json) Hash identifier: jf4qiFp21wKF4dEOzeBMFEJ8f5cPbc6TAz+0ksS7x10= Subject key identifier: BD:8D:61:5A:C2:F7:8B:20:85:A9:F6:8E:9F:FA:E6:5B:91:02:BE:1F Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 020732E385AFF74D77FA5F5A92282F10BA4FE4F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft Manifest number: 0278 Signing time: Thu 08 May 2025 10:21:57 +0000 Manifest this update: Thu 08 May 2025 10:16:57 +0000 Manifest next update: Sun 11 May 2025 20:06:57 +0000 Files and hashes: 1: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: nbrMCd1FrZtyUDsSqPOwiezNZhmsRsgvcmYK466mrE4=) 2: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: sXyv6BQOnnI0pRvPYq+5SN5whYm8/6Gf8URRgczlch0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:07:32:e3:85:af:f7:4d:77:fa:5f:5a:92:28:2f:10:ba:4f:e4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: May 8 10:16:57 2025 GMT Not After : May 11 20:06:57 2025 GMT Subject: CN=BD8D615AC2F78B2085A9F68E9FFAE65B9102BE1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4f:24:d7:70:60:ff:5d:61:44:81:0e:98:74: 44:80:8a:1e:b1:94:d4:28:3b:c3:b9:c5:82:01:7f: 71:ac:f3:68:09:0f:5e:32:3d:07:d5:ee:6e:db:12: 1a:21:a1:26:54:be:1e:9a:97:0e:e1:7c:c8:7f:a5: 50:06:3e:88:d1:d3:06:3b:e9:96:35:40:62:a6:06: 08:6d:eb:fa:d4:11:a4:2e:26:d8:84:f1:0c:eb:d8: da:84:4e:14:bc:05:49:c8:f4:4e:aa:8e:00:26:6f: e9:99:79:e6:be:e7:11:77:67:a5:6c:4d:23:c5:30: 02:a8:85:04:51:26:39:7a:31:c8:d6:95:44:ac:61: 28:9c:4f:d4:06:c5:75:7f:52:10:92:05:23:4b:3c: 9c:73:df:53:08:87:a8:90:bf:ab:62:4b:5b:01:c9: 90:6e:21:71:e4:86:6e:6a:3f:d6:f9:d8:56:17:28: 5f:e5:a5:0b:3d:4c:55:b0:da:70:9e:82:7b:c6:b1: 5a:5a:34:58:84:d0:6d:41:67:af:23:8b:b7:48:17: aa:f2:83:18:d7:f2:c9:e8:ca:07:05:54:1a:58:72: 43:c7:66:af:94:9f:b8:06:39:e4:b0:49:ee:c1:62: 93:be:86:e6:e1:1c:02:bb:e9:24:7b:4e:8b:69:26: 81:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8D:61:5A:C2:F7:8B:20:85:A9:F6:8E:9F:FA:E6:5B:91:02:BE:1F X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e4:00:86:79:8e:08:eb:c5:80:6a:5e:ab:ca:1f:c1:3b:89: f5:a5:f8:42:94:4d:1f:39:e5:0c:da:47:cd:ae:f7:c1:25:54: c9:51:45:cc:04:54:d2:79:fb:0b:c1:30:f6:e3:8d:3a:f9:ae: 81:00:51:06:12:0f:91:f9:ad:ab:f9:c3:01:57:dc:ac:fb:bb: 2c:3a:c9:34:8f:0b:c4:65:1b:c2:70:43:cd:90:12:a6:fc:7e: 6b:89:ef:72:95:55:ce:9e:f4:eb:b1:38:8e:5c:1f:a0:68:af: 09:9c:84:a3:39:a1:4a:35:3d:fa:79:f1:57:07:3e:56:28:a3: 36:5d:4a:c5:23:48:4a:88:2e:a2:fd:7f:3b:a3:b1:5d:28:72: 34:c3:5a:95:b4:b1:f9:ae:00:f0:2d:d0:c7:73:4e:9a:18:35: 51:92:15:6f:5f:3a:bc:1f:71:0f:8a:6d:c8:8b:12:da:e4:99: d8:ff:f4:cb:54:12:0d:ab:61:2f:3b:49:24:7c:54:76:86:13: e7:b4:9a:ed:e9:fc:b4:02:d5:b6:07:d4:f4:4d:99:01:05:43: 69:75:45:02:88:4c:af:48:e9:5f:9f:8e:af:8a:09:e9:a7:66: 1a:1a:39:15:8a:ea:63:4e:a1:d2:94:b1:c8:9b:00:e5:8c:f2: a3:fa:66:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAgcy44Wv9013+l9akigvELpP5PYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yNTA1MDgxMDE2NTdaFw0yNTA1MTEyMDA2NTdaMDMxMTAvBgNV BAMTKEJEOEQ2MTVBQzJGNzhCMjA4NUE5RjY4RTlGRkFFNjVCOTEwMkJFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbTyTXcGD/XWFEgQ6YdESAih6x lNQoO8O5xYIBf3Gs82gJD14yPQfV7m7bEhohoSZUvh6alw7hfMh/pVAGPojR0wY7 6ZY1QGKmBght6/rUEaQuJtiE8Qzr2NqEThS8BUnI9E6qjgAmb+mZeea+5xF3Z6Vs TSPFMAKohQRRJjl6McjWlUSsYSicT9QGxXV/UhCSBSNLPJxz31MIh6iQv6tiS1sB yZBuIXHkhm5qP9b52FYXKF/lpQs9TFWw2nCegnvGsVpaNFiE0G1BZ68ji7dIF6ry gxjX8snoygcFVBpYckPHZq+Un7gGOeSwSe7BYpO+hubhHAK76SR7TotpJoEnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvY1hWsL3iyCFqfaOn/rmW5ECvh8wHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjkAIZ5jgjrxYBqXqvKH8E7ifWl+EKUTR85 5QzaR82u98ElVMlRRcwEVNJ5+wvBMPbjjTr5roEAUQYSD5H5rav5wwFX3Kz7uyw6 yTSPC8RlG8JwQ82QEqb8fmuJ73KVVc6e9OuxOI5cH6BorwmchKM5oUo1Pfp58VcH PlYoozZdSsUjSEqILqL9fzujsV0ocjTDWpW0sfmuAPAt0MdzTpoYNVGSFW9fOrwf cQ+KbciLEtrkmdj/9MtUEg2rYS87SSR8VHaGE+e0mu3p/LQC1bYH1PRNmQEFQ2l1 RQKITK9I6V+fjq+KCemnZhoaORWK6mNOodKUscibAOWM8qP6ZiM= -----END CERTIFICATE-----Generated at Fri May 9 06:40:54 2025 by rpki-client