$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: BrHkQ6reUvnnBj+2B1vAwfag3MyxlpuKMGGpBCiBPf8= Subject key identifier: 5C:D9:F0:17:8B:7F:6A:63:40:94:78:9B:18:8B:46:8A:57:24:60:6C Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 17FE4A68A1E4BD02BDB207DD746FC545E3B6B368 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 0153 Signing time: Fri 09 May 2025 12:11:56 +0000 Manifest this update: Fri 09 May 2025 12:06:56 +0000 Manifest next update: Mon 12 May 2025 18:58:56 +0000 Files and hashes: 1: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) 2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) 3: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: MIFnJhcqjYvqvyOsRpL6VZjl6YxBx+zDEtqT6PtkUcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 18:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:fe:4a:68:a1:e4:bd:02:bd:b2:07:dd:74:6f:c5:45:e3:b6:b3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: May 9 12:06:56 2025 GMT Not After : May 12 18:58:56 2025 GMT Subject: CN=5CD9F0178B7F6A634094789B188B468A5724606C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:86:73:cf:d6:45:b5:75:9e:a0:33:97:ee: e2:39:21:4b:03:91:94:5b:b1:f2:d9:33:e8:3a:c4: 6c:37:7f:0b:82:c9:05:67:06:98:e1:3c:7a:b4:2c: d2:69:51:08:27:9e:2c:67:ca:ac:97:25:10:95:06: 02:2d:3d:85:ae:7c:58:23:1f:15:67:e7:27:f5:6f: 47:7f:e3:19:eb:16:72:88:96:1a:9b:da:7f:f6:82: b8:32:8e:8e:8e:c1:95:c8:ac:6f:e3:27:79:1e:71: da:48:f6:6c:48:5a:93:f7:c3:91:f0:df:a0:3d:a1: 34:aa:ec:5f:ae:f3:2a:8b:06:18:9e:6b:07:88:28: eb:82:54:f7:b2:04:14:3e:aa:88:74:92:6a:02:c6: f5:45:3c:90:2a:21:90:de:e0:72:af:ff:5d:06:b2: 81:5b:de:5c:93:c4:59:f5:73:b8:f0:a0:37:0e:94: a3:9e:f2:19:4d:a1:b9:67:34:dd:81:d7:23:6c:a2: b1:ad:9d:39:d1:0d:dc:30:b8:61:a1:d3:00:97:83: 18:48:b4:6b:ff:73:9b:fe:47:33:89:ab:08:25:31: 4f:ff:64:85:ee:e2:48:28:64:d3:6c:54:68:a7:0c: dd:46:5b:14:b0:f2:88:e2:b3:c9:34:f8:6e:bb:58: 74:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D9:F0:17:8B:7F:6A:63:40:94:78:9B:18:8B:46:8A:57:24:60:6C X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:01:91:86:3f:1a:42:e9:32:86:a4:67:d2:3b:90:75:48:0f: ce:e1:d1:04:72:4d:b3:0d:1b:98:6c:bc:73:fc:6a:e9:49:88: cc:8d:9c:94:01:5a:14:3c:76:b6:d2:9d:1d:b2:c4:53:c8:65: c7:88:b9:30:07:92:b5:1b:8a:3d:dc:2f:fc:80:7f:99:68:31: ef:a4:ba:e2:12:fa:01:d3:d1:db:ba:a1:9a:39:e4:31:fd:b6: 2a:fa:b6:de:14:e2:72:e9:85:48:77:6d:87:82:ab:13:40:7a: 03:af:87:b6:90:ca:9c:e1:b1:e0:b9:cb:56:aa:38:01:0d:9a: 15:ed:ae:09:72:33:f1:e0:95:b3:de:a4:21:bc:e8:16:c0:39: f4:d2:cf:cb:14:f2:46:cd:34:2a:c5:53:c4:f6:f8:62:43:11: 99:a4:b4:d8:fa:ee:4f:95:93:b4:a0:01:d6:5e:82:e1:ec:27: f4:a0:79:f8:ae:ee:47:89:1e:30:c5:9b:9d:aa:ec:05:15:a2: 08:6e:db:c8:42:aa:59:90:23:82:66:87:0e:3c:2d:49:48:ba: f5:47:94:02:ab:48:ae:af:c8:42:62:d8:92:44:20:4a:01:0e: d5:23:cc:0c:e3:62:ce:1d:ca:78:10:39:c0:e5:bb:60:80:d7: 4f:6c:7f:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF/5KaKHkvQK9sgfddG/FReO2s2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTA1MDkxMjA2NTZaFw0yNTA1MTIxODU4NTZaMDMxMTAvBgNV BAMTKDVDRDlGMDE3OEI3RjZBNjM0MDk0Nzg5QjE4OEI0NjhBNTcyNDYwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+H4Zzz9ZFtXWeoDOX7uI5IUsD kZRbsfLZM+g6xGw3fwuCyQVnBpjhPHq0LNJpUQgnnixnyqyXJRCVBgItPYWufFgj HxVn5yf1b0d/4xnrFnKIlhqb2n/2grgyjo6OwZXIrG/jJ3kecdpI9mxIWpP3w5Hw 36A9oTSq7F+u8yqLBhieaweIKOuCVPeyBBQ+qoh0kmoCxvVFPJAqIZDe4HKv/10G soFb3lyTxFn1c7jwoDcOlKOe8hlNoblnNN2B1yNsorGtnTnRDdwwuGGh0wCXgxhI tGv/c5v+RzOJqwglMU//ZIXu4kgoZNNsVGinDN1GWxSw8ojis8k0+G67WHTXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXNnwF4t/amNAlHibGItGilckYGwwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8BkYY/GkLpMoakZ9I7kHVID87h0QRyTbMN G5hsvHP8aulJiMyNnJQBWhQ8drbSnR2yxFPIZceIuTAHkrUbij3cL/yAf5loMe+k uuIS+gHT0du6oZo55DH9tir6tt4U4nLphUh3bYeCqxNAegOvh7aQypzhseC5y1aq OAENmhXtrglyM/HglbPepCG86BbAOfTSz8sU8kbNNCrFU8T2+GJDEZmktNj67k+V k7SgAdZeguHsJ/Sgefiu7keJHjDFm52q7AUVoghu28hCqlmQI4Jmhw48LUlIuvVH lAKrSK6vyEJi2JJEIEoBDtUjzAzjYs4dyngQOcDlu2CA109sf8s= -----END CERTIFICATE-----Generated at Sun May 11 08:20:30 2025 by rpki-client