$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json) Hash identifier: nyzw0lR1GCCfWH8m3JnaDMfZjod/GK4+wcJIleH9BUo= Subject key identifier: 5F:FE:05:B1:22:36:EE:BD:FB:A3:1D:52:C3:FF:7F:75:98:F1:C8:6E Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 7DFFA054DE0295AC47EA10E953A2313F68CFF393 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft Manifest number: 028F Signing time: Sat 28 Jun 2025 20:41:41 +0000 Manifest this update: Sat 28 Jun 2025 20:36:41 +0000 Manifest next update: Tue 01 Jul 2025 22:29:41 +0000 Files and hashes: 1: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: nbrMCd1FrZtyUDsSqPOwiezNZhmsRsgvcmYK466mrE4=) 2: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: 04ljaiLU9eBc6wCcMAPKuBIBlrGeCR0B76o92ZGeStg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ff:a0:54:de:02:95:ac:47:ea:10:e9:53:a2:31:3f:68:cf:f3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: Jun 28 20:36:41 2025 GMT Not After : Jul 1 22:29:41 2025 GMT Subject: CN=5FFE05B12236EEBDFBA31D52C3FF7F7598F1C86E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ec:80:08:e6:59:58:28:4c:76:c2:52:36:b5: 36:1c:1a:9f:6c:f3:af:5b:fb:6b:6f:ef:6f:88:5a: a6:69:51:5b:7e:43:39:a5:b3:78:ad:9a:21:b3:2a: e1:3d:a5:d4:69:c5:e9:cb:dd:78:f0:57:71:77:04: cf:ce:4f:9d:3a:74:30:7c:5f:82:ba:3b:a2:ff:9d: 36:ee:24:54:d9:63:63:b5:8f:d7:be:a1:f2:ae:3a: e7:04:c6:ff:78:fb:f4:71:30:f6:1b:86:63:6a:16: 23:ba:9b:c7:70:1a:95:4d:7b:70:6e:25:e1:90:55: 44:5c:88:70:bd:ca:6e:ae:8c:99:39:a0:73:0f:70: 5f:a0:8f:92:9a:33:c8:fd:92:81:43:f9:45:53:d8: 97:25:2d:92:db:b8:17:89:19:e5:90:2f:31:4b:95: 11:5f:fe:07:1f:6a:8d:b2:ce:64:50:e4:0e:0d:93: f6:24:92:76:c8:58:80:53:a6:77:e9:07:8e:99:76: a1:80:c8:0c:02:10:fc:b6:90:64:10:72:4e:dd:3d: 72:0f:63:d7:06:f0:91:95:b5:ce:ca:78:61:c0:3b: bf:ec:17:ff:ee:3f:a9:49:87:35:3d:d1:73:86:74: 33:0d:d1:e7:5c:5d:45:e4:bc:80:f5:75:1e:0e:4e: a4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FE:05:B1:22:36:EE:BD:FB:A3:1D:52:C3:FF:7F:75:98:F1:C8:6E X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:7b:a8:5c:53:98:35:68:02:5c:f2:b7:73:48:52:59:01:34: 3f:21:f7:e5:03:4d:d5:19:cd:4c:9c:b0:e6:c0:09:64:b4:f5: 05:1d:82:6c:9b:f4:70:52:fc:e7:72:16:c5:a0:a1:5c:2f:a0: 1a:1e:c5:21:2a:78:3c:05:43:18:08:b9:ba:d9:10:1c:53:4a: 44:4d:7e:43:ae:64:5c:b5:10:13:fc:34:58:5f:c1:79:7f:e7: f5:98:04:e2:47:78:09:da:b3:44:d8:13:a9:ce:67:42:89:7f: 89:d1:67:4e:72:33:37:00:b7:d0:3a:1f:23:30:f5:bd:c2:d5: 4e:f7:b6:2e:d5:81:23:3e:35:45:6a:7c:f4:74:c7:53:85:5d: 71:7a:34:ea:d0:e3:5c:23:ce:01:5e:88:1f:70:15:fd:94:e0: 38:1f:26:0a:66:0b:ee:98:ad:10:b3:99:c9:7f:24:85:90:a2: e8:35:95:42:7f:41:7a:f9:86:0a:57:c0:48:57:36:19:4d:72: 76:ab:da:f1:9e:33:a7:08:5c:61:47:18:1e:6f:c7:c0:8c:a5: b1:8e:5d:08:10:d9:e0:e4:47:2b:a3:d2:0c:99:80:ed:75:d5: 97:61:bf:68:ec:3e:4a:48:6a:75:98:18:05:7d:02:6d:46:05: ff:29:62:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUff+gVN4ClaxH6hDpU6IxP2jP85MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yNTA2MjgyMDM2NDFaFw0yNTA3MDEyMjI5NDFaMDMxMTAvBgNV BAMTKDVGRkUwNUIxMjIzNkVFQkRGQkEzMUQ1MkMzRkY3Rjc1OThGMUM4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb7IAI5llYKEx2wlI2tTYcGp9s 869b+2tv72+IWqZpUVt+Qzmls3itmiGzKuE9pdRpxenL3XjwV3F3BM/OT506dDB8 X4K6O6L/nTbuJFTZY2O1j9e+ofKuOucExv94+/RxMPYbhmNqFiO6m8dwGpVNe3Bu JeGQVURciHC9ym6ujJk5oHMPcF+gj5KaM8j9koFD+UVT2JclLZLbuBeJGeWQLzFL lRFf/gcfao2yzmRQ5A4Nk/YkknbIWIBTpnfpB46ZdqGAyAwCEPy2kGQQck7dPXIP Y9cG8JGVtc7KeGHAO7/sF//uP6lJhzU90XOGdDMN0edcXUXkvID1dR4OTqTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX/4FsSI27r37ox1Sw/9/dZjxyG4wHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV7qFxTmDVoAlzyt3NIUlkBND8h9+UDTdUZ zUycsObACWS09QUdgmyb9HBS/OdyFsWgoVwvoBoexSEqeDwFQxgIubrZEBxTSkRN fkOuZFy1EBP8NFhfwXl/5/WYBOJHeAnas0TYE6nOZ0KJf4nRZ05yMzcAt9A6HyMw 9b3C1U73ti7VgSM+NUVqfPR0x1OFXXF6NOrQ41wjzgFeiB9wFf2U4DgfJgpmC+6Y rRCzmcl/JIWQoug1lUJ/QXr5hgpXwEhXNhlNcnar2vGeM6cIXGFHGB5vx8CMpbGO XQgQ2eDkRyuj0gyZgO111Zdhv2jsPkpIanWYGAV9Am1GBf8pYpY= -----END CERTIFICATE-----Generated at Mon Jun 30 16:55:46 2025 by rpki-client