$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: Mo69iTV6OvgPzPEy3UZJn6t0Ak0JLEQYOncoPsG4tXs= Subject key identifier: 9B:7A:C2:84:ED:4E:7F:BB:AA:F7:4F:D4:2E:61:8F:43:F1:13:FD:B4 Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 566DB740EB9CD63820244E36E4C3F09085AA11FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 0251 Signing time: Fri 09 May 2025 11:42:01 +0000 Manifest this update: Fri 09 May 2025 11:37:01 +0000 Manifest next update: Mon 12 May 2025 14:01:01 +0000 Files and hashes: 1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: 8PoVgFfgdv0P+Y4Af6XkrWx9EOtSeERWvAdTwZHIcYM=) 2: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: tSGgtTXo1mv0n0Uknqn2wjLvVgJ5/lqOEyAXuv0G0u0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6d:b7:40:eb:9c:d6:38:20:24:4e:36:e4:c3:f0:90:85:aa:11:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: May 9 11:37:01 2025 GMT Not After : May 12 14:01:01 2025 GMT Subject: CN=9B7AC284ED4E7FBBAAF74FD42E618F43F113FDB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:0f:03:06:4e:1a:26:99:74:a2:da:b6:c8: 26:3b:b1:c8:91:61:ef:a6:fe:50:5b:04:80:31:7f: 04:54:2c:91:2c:66:6e:73:23:51:df:16:9d:53:26: c5:5a:c7:3a:b1:90:fb:8b:46:5c:56:26:1a:24:79: 4e:03:70:69:b0:5c:05:1b:27:11:5b:eb:61:76:bb: a4:65:e1:de:bd:c9:2b:da:14:0d:b9:f2:34:60:e5: 78:fd:c5:a0:8e:ba:3f:9d:82:b0:0f:cf:b9:ca:8e: 5a:98:9c:5f:d3:68:ea:29:8a:37:c9:ad:8b:5c:08: 58:77:a3:db:17:67:0e:f1:3a:48:08:3c:f2:96:a4: 24:25:40:33:12:14:6b:30:77:f3:4a:2f:ba:7f:0a: 43:82:df:7d:2f:a1:69:a6:9a:26:e5:10:4a:1f:f4: 18:fe:3f:f6:b4:00:fb:20:2e:93:16:8b:75:0e:18: c2:ea:dd:bf:8a:0a:dd:07:86:af:2d:9b:6a:cc:20: 7f:54:0b:2b:ae:c1:6e:2b:05:92:6e:ba:a1:4a:af: e3:5d:30:ff:b5:a8:69:86:a3:c1:ec:24:54:7c:51: 2f:fb:71:4e:bf:73:bc:7d:78:21:ee:47:c7:94:84: 28:92:5d:ec:2d:b9:a3:ef:a7:8e:c4:ab:14:07:50: 97:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7A:C2:84:ED:4E:7F:BB:AA:F7:4F:D4:2E:61:8F:43:F1:13:FD:B4 X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:dc:93:c0:61:e0:ba:51:56:3a:8e:de:29:61:04:0c:5c:03: c9:b6:b1:34:b9:5a:ca:a8:d0:bb:27:bf:ed:66:11:52:c2:20: f4:9b:8b:fc:a1:e3:49:9e:94:5f:e1:54:9f:69:e3:30:71:45: 7f:f2:c9:48:55:9b:b3:92:33:1a:19:7f:83:17:83:97:8b:17: d1:11:b3:34:c9:5b:24:3d:0b:e2:20:ed:21:2b:de:8c:9d:8f: 4b:d2:bc:1c:5c:73:7e:74:bc:cd:e9:f6:54:2d:ea:65:2f:3a: 67:49:34:b6:15:70:af:81:31:45:21:f7:5e:9e:71:4c:b3:ec: 6b:60:4a:71:0e:ef:29:89:a4:e8:57:92:13:69:79:bc:df:38: 67:67:41:d8:4e:d5:81:7b:56:c9:1e:bb:3a:6e:74:9c:1a:70: 14:34:4e:45:de:83:c9:ae:8c:9a:ca:7a:23:a4:27:7c:b1:d5: 1c:db:92:05:10:39:a9:dd:9d:ed:13:7f:6f:c8:02:0e:e7:22: 8e:73:d5:37:21:9c:e7:a0:2e:fd:ac:3e:cf:6a:03:b7:1b:f1: 9b:80:68:f3:29:89:ca:02:b5:e8:f3:2f:13:29:99:00:83:8f: c6:22:ee:f6:31:de:4e:e2:e8:e3:f3:89:97:b0:c2:46:0d:10: 92:3c:71:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVm23QOuc1jggJE425MPwkIWqEf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNTA1MDkxMTM3MDFaFw0yNTA1MTIxNDAxMDFaMDMxMTAvBgNV BAMTKDlCN0FDMjg0RUQ0RTdGQkJBQUY3NEZENDJFNjE4RjQzRjExM0ZEQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGlA8DBk4aJpl0otq2yCY7sciR Ye+m/lBbBIAxfwRULJEsZm5zI1HfFp1TJsVaxzqxkPuLRlxWJhokeU4DcGmwXAUb JxFb62F2u6Rl4d69ySvaFA258jRg5Xj9xaCOuj+dgrAPz7nKjlqYnF/TaOopijfJ rYtcCFh3o9sXZw7xOkgIPPKWpCQlQDMSFGswd/NKL7p/CkOC330voWmmmiblEEof 9Bj+P/a0APsgLpMWi3UOGMLq3b+KCt0Hhq8tm2rMIH9UCyuuwW4rBZJuuqFKr+Nd MP+1qGmGo8HsJFR8US/7cU6/c7x9eCHuR8eUhCiSXewtuaPvp47EqxQHUJdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm3rChO1Of7uq90/ULmGPQ/ET/bQwHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjck8Bh4LpRVjqO3ilhBAxcA8m2sTS5Wsqo 0Lsnv+1mEVLCIPSbi/yh40melF/hVJ9p4zBxRX/yyUhVm7OSMxoZf4MXg5eLF9ER szTJWyQ9C+Ig7SEr3oydj0vSvBxcc350vM3p9lQt6mUvOmdJNLYVcK+BMUUh916e cUyz7GtgSnEO7ymJpOhXkhNpebzfOGdnQdhO1YF7VskeuzpudJwacBQ0TkXeg8mu jJrKeiOkJ3yx1RzbkgUQOandne0Tf2/IAg7nIo5z1TchnOegLv2sPs9qA7cb8ZuA aPMpicoCtejzLxMpmQCDj8Yi7vYx3k7i6OPziZewwkYNEJI8cZc= -----END CERTIFICATE-----Generated at Sat May 10 08:17:10 2025 by rpki-client