$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: 8qy2Hk722ZhLUpmenEcbqAf5H+zpUWwHNIjnZIaJCNk= Subject key identifier: 51:59:45:C6:ED:E2:F0:5C:6F:47:B0:2B:30:A5:00:5F:CB:1A:D8:12 Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 5180CB651C1AC5FAABAEB575A734FEF56E48E08F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 016B Signing time: Tue 17 Jun 2025 08:40:46 +0000 Manifest this update: Tue 17 Jun 2025 08:35:46 +0000 Manifest next update: Fri 20 Jun 2025 17:09:46 +0000 Files and hashes: 1: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=) 2: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: nXIgwMlbCEiRLhTmQpk3ILcP6WiZR0pqc4IDqdZRoJI=) 3: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: HykMdk2AL7C5R2oPue1Yg/vmNVoH2exlL1RXwSmIfj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 17:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:80:cb:65:1c:1a:c5:fa:ab:ae:b5:75:a7:34:fe:f5:6e:48:e0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Jun 17 08:35:46 2025 GMT Not After : Jun 20 17:09:46 2025 GMT Subject: CN=515945C6EDE2F05C6F47B02B30A5005FCB1AD812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ad:9a:19:7a:7a:93:da:14:80:4f:e5:37:ac: 57:22:d5:80:76:58:e1:9c:2e:15:44:5e:81:3b:de: b7:88:fd:ca:c2:36:7e:5c:e3:dc:e4:ee:19:36:47: c8:c1:54:90:7d:f0:12:84:6b:0b:b4:40:6f:70:8d: b7:9b:0a:f4:0d:6a:f1:e2:f1:e8:4c:0a:c1:c0:81: 00:03:23:be:2c:9e:2f:df:43:79:25:50:ed:fa:74: 79:86:37:39:99:7a:bf:e3:ad:87:0a:b0:3f:c1:4f: 06:1b:21:c3:30:ba:08:78:25:0c:d3:d7:94:46:2c: 48:8c:3d:cf:bb:ac:94:53:df:3e:58:48:9f:75:fd: 5b:21:a6:3b:04:ac:b1:30:9f:ef:1f:31:cf:fc:0b: c5:25:f6:2d:03:89:6b:3d:29:d7:f9:bb:c5:f7:bc: 8e:50:d4:2f:6c:a3:73:8f:c6:9f:ba:85:d6:87:54: 1e:37:3b:f4:6b:25:31:71:e7:90:80:8d:78:0f:ac: 9a:d9:1a:ea:0c:c3:e0:cf:0f:31:c8:73:4f:85:b1: 11:2f:7c:63:66:79:fa:99:d9:55:fb:43:26:bb:ca: 28:dd:c2:35:9b:64:9a:57:13:8b:bf:56:2d:06:17: 21:cd:c6:d0:fd:7d:18:5c:d1:fb:6e:e3:82:90:a6: 44:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:59:45:C6:ED:E2:F0:5C:6F:47:B0:2B:30:A5:00:5F:CB:1A:D8:12 X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d2:5d:83:0f:1f:b8:40:f0:26:18:05:a6:81:c6:57:5f:a4: 3e:e9:11:9c:5f:a4:73:27:a4:10:41:21:11:c7:d5:5a:ed:c8: 6a:bb:84:87:43:aa:7b:6e:5a:82:31:9d:95:09:ad:23:6d:9d: ef:0a:92:b2:f9:15:f6:cb:94:ac:9c:0e:84:d1:ae:aa:d8:d5: c6:b3:93:b5:92:a7:89:d8:38:42:1b:f5:98:a3:ed:30:45:ba: e4:b2:13:59:5c:71:00:6e:bf:04:24:55:0d:63:98:a7:4a:cf: 89:78:f5:ae:33:6a:a6:55:f8:4c:39:a9:2a:93:1f:2a:48:ee: 0d:a9:72:d6:37:cc:eb:1d:3a:bd:7c:7c:be:79:be:02:85:35: 5c:89:a0:a7:d9:ee:f0:a5:bc:9d:4e:c9:5b:de:1d:a0:a8:41: 5e:06:50:8b:39:66:2e:48:9a:60:f3:1f:a0:24:99:9e:09:19: 2f:c3:a2:37:ee:0b:c6:a6:c0:af:6c:1a:43:d8:ec:7e:bb:73: 97:5e:78:ef:dd:25:4c:96:f1:62:9a:2c:6d:2a:b4:d3:50:c9: 01:74:da:0d:c1:90:df:76:85:75:6f:16:4c:a1:f6:11:3e:0d: a3:c0:8a:66:1a:02:f4:50:f2:36:5d:1e:c7:17:92:d0:c8:be: 81:79:76:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYDLZRwaxfqrrrV1pzT+9W5I4I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNTA2MTcwODM1NDZaFw0yNTA2MjAxNzA5NDZaMDMxMTAvBgNV BAMTKDUxNTk0NUM2RURFMkYwNUM2RjQ3QjAyQjMwQTUwMDVGQ0IxQUQ4MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1rZoZenqT2hSAT+U3rFci1YB2 WOGcLhVEXoE73reI/crCNn5c49zk7hk2R8jBVJB98BKEawu0QG9wjbebCvQNavHi 8ehMCsHAgQADI74sni/fQ3klUO36dHmGNzmZer/jrYcKsD/BTwYbIcMwugh4JQzT 15RGLEiMPc+7rJRT3z5YSJ91/VshpjsErLEwn+8fMc/8C8Ul9i0DiWs9Kdf5u8X3 vI5Q1C9so3OPxp+6hdaHVB43O/RrJTFx55CAjXgPrJrZGuoMw+DPDzHIc0+FsREv fGNmefqZ2VX7Qya7yijdwjWbZJpXE4u/Vi0GFyHNxtD9fRhc0ftu44KQpkTTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUVlFxu3i8FxvR7ArMKUAX8sa2BIwHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/SXYMPH7hA8CYYBaaBxldfpD7pEZxfpHMn pBBBIRHH1VrtyGq7hIdDqntuWoIxnZUJrSNtne8KkrL5FfbLlKycDoTRrqrY1caz k7WSp4nYOEIb9Zij7TBFuuSyE1lccQBuvwQkVQ1jmKdKz4l49a4zaqZV+Ew5qSqT HypI7g2pctY3zOsdOr18fL55vgKFNVyJoKfZ7vClvJ1OyVveHaCoQV4GUIs5Zi5I mmDzH6AkmZ4JGS/DojfuC8amwK9sGkPY7H67c5deeO/dJUyW8WKaLG0qtNNQyQF0 2g3BkN92hXVvFkyh9hE+DaPAimYaAvRQ8jZdHscXktDIvoF5dt8= -----END CERTIFICATE-----Generated at Wed Jun 18 01:50:37 2025 by rpki-client