$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: ZOJudUEcI9eVKot9SeT2soHih8TGqJuin6MQMjJiwxk= Subject key identifier: 28:C1:E3:66:65:3D:A3:BA:2F:D7:1C:A9:C2:10:F9:E5:6C:85:51:42 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 16D6FF5813E0D145ADBAACA902861CD255777A69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 016A Signing time: Mon 30 Jun 2025 00:31:54 +0000 Manifest this update: Mon 30 Jun 2025 00:26:54 +0000 Manifest next update: Thu 03 Jul 2025 09:16:54 +0000 Files and hashes: 1: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) 2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) 3: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: TVvm9f3BY3/RXLFvNnan+0+VpgGIC4MHXfOMYG5yQk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d6:ff:58:13:e0:d1:45:ad:ba:ac:a9:02:86:1c:d2:55:77:7a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Jun 30 00:26:54 2025 GMT Not After : Jul 3 09:16:54 2025 GMT Subject: CN=28C1E366653DA3BA2FD71CA9C210F9E56C855142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1a:aa:72:8d:7c:14:28:42:27:6a:26:a9:43: ef:35:cd:61:c3:0a:ab:43:72:df:1e:76:80:0b:f5: ac:0a:7d:fc:6f:23:5c:01:0a:e2:7a:2c:0e:a9:29: 03:69:9b:fa:c8:d7:c9:e6:98:1c:b0:e7:63:a8:f6: 62:52:a3:26:f2:33:ba:bd:e1:05:19:b6:3c:d1:e2: 16:68:01:d4:a0:cf:a3:b7:64:15:9e:1d:ab:e6:ef: c1:84:91:d2:75:78:2d:81:27:e3:74:02:bd:78:59: 60:44:56:c1:c4:17:a2:d6:80:3a:0b:2b:21:65:f9: b5:0a:a2:3c:5d:37:4f:ea:a1:f6:8d:d9:0c:9d:fb: 71:c7:5e:cd:ca:f1:52:38:5b:d9:1b:5e:04:c0:13: 9c:51:c2:ce:f8:7f:08:37:3c:d1:98:f0:d8:e1:ce: 35:34:35:d7:a5:e2:70:15:90:1b:b7:2e:e9:6f:16: d8:ef:2c:26:d8:f9:e0:ef:c8:e8:76:b9:33:5f:13: 63:a5:f9:cf:ef:c8:40:4b:47:ba:82:31:4f:c2:39: f4:61:09:9b:ed:c0:75:ce:6f:15:99:d6:c7:cc:d7: 68:0b:48:17:88:fb:34:36:e1:d1:0e:74:eb:24:7b: 1b:6b:3b:fa:5c:a7:e5:ef:c5:16:a2:ad:f7:cc:eb: 10:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C1:E3:66:65:3D:A3:BA:2F:D7:1C:A9:C2:10:F9:E5:6C:85:51:42 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:97:e0:1a:ea:a5:0e:ae:2c:82:b0:39:40:92:de:f1:ef:1d: 0b:b7:2a:02:09:0b:24:8d:00:9c:93:ac:3a:92:7d:80:6f:d4: 0d:52:df:50:64:e8:c0:87:bb:30:48:f1:9d:1b:8c:47:6c:53: d0:3d:92:b0:a3:cf:ab:f4:d6:e8:e7:f0:45:12:4b:87:65:11: f0:e6:4d:76:1d:c2:da:70:6b:4a:42:3b:42:2c:23:cc:af:c3: 04:ae:d6:73:74:14:82:31:5a:28:7f:c2:28:78:c0:3f:e4:0d: bd:c8:a4:d5:d9:04:b9:6d:c2:85:0a:4d:c7:51:14:53:3a:27: 6c:7d:30:fe:a3:ae:3d:d9:d6:3b:9e:e0:5c:8a:e3:2c:3d:30: 19:3c:57:ef:97:11:57:60:b6:dc:f4:9b:90:58:0e:f7:63:78: cf:ca:cc:63:d6:a4:d8:d7:e4:07:3b:21:76:f3:40:9e:87:21: dc:fe:d9:f0:8f:2a:91:56:12:33:5c:05:f1:86:43:35:81:fd: 90:26:35:04:de:74:13:5e:4f:ef:94:cf:c2:b0:f4:5d:07:b3: 53:34:08:cf:09:f4:84:5a:7b:b5:3b:14:82:e3:9f:35:69:3d: 18:1e:bf:42:d3:25:06:e0:52:5f:44:21:c8:1b:3c:5f:65:25: 2b:88:9c:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFtb/WBPg0UWtuqypAoYc0lV3emkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTA2MzAwMDI2NTRaFw0yNTA3MDMwOTE2NTRaMDMxMTAvBgNV BAMTKDI4QzFFMzY2NjUzREEzQkEyRkQ3MUNBOUMyMTBGOUU1NkM4NTUxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGqpyjXwUKEInaiapQ+81zWHD CqtDct8edoAL9awKffxvI1wBCuJ6LA6pKQNpm/rI18nmmByw52Oo9mJSoybyM7q9 4QUZtjzR4hZoAdSgz6O3ZBWeHavm78GEkdJ1eC2BJ+N0Ar14WWBEVsHEF6LWgDoL KyFl+bUKojxdN0/qofaN2Qyd+3HHXs3K8VI4W9kbXgTAE5xRws74fwg3PNGY8Njh zjU0Ndel4nAVkBu3LulvFtjvLCbY+eDvyOh2uTNfE2Ol+c/vyEBLR7qCMU/COfRh CZvtwHXObxWZ1sfM12gLSBeI+zQ24dEOdOskextrO/pcp+XvxRairffM6xAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMHjZmU9o7ov1xypwhD55WyFUUIwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOX4BrqpQ6uLIKwOUCS3vHvHQu3KgIJCySN AJyTrDqSfYBv1A1S31Bk6MCHuzBI8Z0bjEdsU9A9krCjz6v01ujn8EUSS4dlEfDm TXYdwtpwa0pCO0IsI8yvwwSu1nN0FIIxWih/wih4wD/kDb3IpNXZBLltwoUKTcdR FFM6J2x9MP6jrj3Z1jue4FyK4yw9MBk8V++XEVdgttz0m5BYDvdjeM/KzGPWpNjX 5Ac7IXbzQJ6HIdz+2fCPKpFWEjNcBfGGQzWB/ZAmNQTedBNeT++Uz8Kw9F0Hs1M0 CM8J9IRae7U7FILjnzVpPRgev0LTJQbgUl9EIcgbPF9lJSuInBo= -----END CERTIFICATE-----Generated at Mon Jun 30 13:43:59 2025 by rpki-client