$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: lluNsVwxK5pnBLOJ95goEE11nIdDYrlppaNaLG57hJM= Subject key identifier: 9E:93:C2:65:B5:8E:CD:2C:0E:0D:0F:B0:3A:CF:E3:BD:D8:10:B3:37 Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 23807DC4A3150B86AD137F22EBFCDF45804D0B44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 0267 Signing time: Sat 28 Jun 2025 01:02:04 +0000 Manifest this update: Sat 28 Jun 2025 00:57:04 +0000 Manifest next update: Tue 01 Jul 2025 11:00:04 +0000 Files and hashes: 1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: 8PoVgFfgdv0P+Y4Af6XkrWx9EOtSeERWvAdTwZHIcYM=) 2: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: EsJzAfrZPkVJ6zZpujnht39Qs4oWptETATvrZ7Qekjc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 11:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:80:7d:c4:a3:15:0b:86:ad:13:7f:22:eb:fc:df:45:80:4d:0b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Jun 28 00:57:04 2025 GMT Not After : Jul 1 11:00:04 2025 GMT Subject: CN=9E93C265B58ECD2C0E0D0FB03ACFE3BDD810B337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:a2:2c:8f:96:57:46:b9:a2:fa:4c:f5:3b: 09:e1:f2:0c:21:2b:37:dc:60:ad:aa:91:ae:4b:de: 0b:7e:bb:45:20:d0:24:cf:3f:7a:0e:c8:19:6d:27: c2:e5:25:a4:a8:a1:85:71:95:fc:48:0c:4d:14:af: 4a:d0:e3:99:94:60:14:2f:ec:d8:56:15:7a:99:cd: 1c:b6:a0:27:d6:a0:29:43:dd:ea:dc:6b:27:9d:b0: 2e:18:88:13:38:0e:13:17:53:58:a0:d4:94:8b:8e: b0:15:34:2a:4f:35:ba:8f:7f:fe:1d:40:e2:db:b9: 75:0a:03:45:70:cd:bf:aa:c5:f9:b6:e5:a6:0c:16: d9:3f:2a:78:ee:2c:c1:be:9e:93:72:31:d9:98:55: 0e:2d:f7:e7:fe:3f:aa:34:df:2d:b6:59:07:e8:63: c8:68:26:a6:56:48:18:dd:ec:6b:3a:0d:7f:28:ea: cd:76:70:ae:5b:e5:f5:be:8f:3a:fd:3d:9b:ec:0c: 8b:38:9a:27:4a:97:88:04:18:c9:b6:88:9a:87:28: 3c:8e:8e:26:fc:77:5d:8a:17:89:d5:72:0a:cb:b9: 46:e9:b5:a2:ce:99:b2:d4:ec:52:0b:ee:5f:fd:b7: 36:42:df:64:b4:45:45:a6:0a:be:a7:05:f6:68:d1: b1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:93:C2:65:B5:8E:CD:2C:0E:0D:0F:B0:3A:CF:E3:BD:D8:10:B3:37 X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:70:3f:07:2d:6d:e3:85:8f:39:79:75:28:a0:60:51:6f:29: 99:00:18:74:63:1e:8a:46:58:45:52:c1:eb:4c:f1:22:62:c3: 85:c3:04:24:2b:e2:0b:46:2c:07:67:37:7d:e1:c7:47:5e:02: 18:06:a4:c0:3f:1d:92:b2:5f:b6:cb:de:14:ba:3d:8b:38:15: d2:91:a3:cd:fc:86:ff:fa:56:f7:39:8e:44:50:77:87:96:f7: d6:e5:f1:d5:b4:41:13:2b:99:f7:5c:0b:4a:9f:d6:d4:ad:aa: 5d:c9:52:55:a1:34:e4:78:fb:ac:09:cf:53:72:61:13:94:52: 71:33:23:d7:39:0c:ad:ef:60:65:aa:cc:1f:a9:4e:69:9b:be: a1:ef:21:48:ea:69:71:2b:ed:f1:6e:31:d6:b0:51:71:93:c2: 3f:d4:0e:d4:d0:85:4c:6b:b5:16:96:d7:45:da:aa:9c:21:0f: 73:1b:17:48:90:84:04:9d:8a:86:5b:91:66:ba:43:a4:07:f9: e4:0c:c1:b7:1e:59:e4:93:3b:85:de:88:0a:d3:23:5a:53:91: 20:7c:ea:37:e2:69:b5:8a:d8:a2:04:31:14:f2:a3:85:bd:28: ca:31:bf:c5:40:a0:77:77:d4:d6:e0:e0:15:e8:5b:b0:0f:da: 36:ff:28:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4B9xKMVC4atE38i6/zfRYBNC0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNTA2MjgwMDU3MDRaFw0yNTA3MDExMTAwMDRaMDMxMTAvBgNV BAMTKDlFOTNDMjY1QjU4RUNEMkMwRTBEMEZCMDNBQ0ZFM0JERDgxMEIzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9taIsj5ZXRrmi+kz1Ownh8gwh KzfcYK2qka5L3gt+u0Ug0CTPP3oOyBltJ8LlJaSooYVxlfxIDE0Ur0rQ45mUYBQv 7NhWFXqZzRy2oCfWoClD3ercayedsC4YiBM4DhMXU1ig1JSLjrAVNCpPNbqPf/4d QOLbuXUKA0Vwzb+qxfm25aYMFtk/KnjuLMG+npNyMdmYVQ4t9+f+P6o03y22WQfo Y8hoJqZWSBjd7Gs6DX8o6s12cK5b5fW+jzr9PZvsDIs4midKl4gEGMm2iJqHKDyO jib8d12KF4nVcgrLuUbptaLOmbLU7FIL7l/9tzZC32S0RUWmCr6nBfZo0bETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnpPCZbWOzSwODQ+wOs/jvdgQszcwHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBwPwctbeOFjzl5dSigYFFvKZkAGHRjHopG WEVSwetM8SJiw4XDBCQr4gtGLAdnN33hx0deAhgGpMA/HZKyX7bL3hS6PYs4FdKR o838hv/6Vvc5jkRQd4eW99bl8dW0QRMrmfdcC0qf1tStql3JUlWhNOR4+6wJz1Ny YROUUnEzI9c5DK3vYGWqzB+pTmmbvqHvIUjqaXEr7fFuMdawUXGTwj/UDtTQhUxr tRaW10XaqpwhD3MbF0iQhASdioZbkWa6Q6QH+eQMwbceWeSTO4XeiArTI1pTkSB8 6jfiabWK2KIEMRTyo4W9KMoxv8VAoHd31Nbg4BXoW7AP2jb/KNA= -----END CERTIFICATE-----Generated at Mon Jun 30 00:45:24 2025 by rpki-client