$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: Og0ZEw03JtTskGv226uiwRdPno5Y1AnvNxkcq8TSDys= Subject key identifier: 66:5D:2C:75:84:41:C2:95:AD:19:20:82:02:1C:CF:01:1B:4C:D0:E9 Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 0B7BE978DB0F6CB2DCC4F2C6A784AB0F3244E35B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 0181 Signing time: Wed 06 Aug 2025 10:10:48 +0000 Manifest this update: Wed 06 Aug 2025 10:05:48 +0000 Manifest next update: Sat 09 Aug 2025 12:12:48 +0000 Files and hashes: 1: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: LtT1/ZdmRafxy7gOAU7l3yAN2B1s1eRVvLODpevQkuI=) 2: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: nXIgwMlbCEiRLhTmQpk3ILcP6WiZR0pqc4IDqdZRoJI=) 3: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 12:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7b:e9:78:db:0f:6c:b2:dc:c4:f2:c6:a7:84:ab:0f:32:44:e3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Aug 6 10:05:48 2025 GMT Not After : Aug 9 12:12:48 2025 GMT Subject: CN=665D2C758441C295AD192082021CCF011B4CD0E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:08:61:60:c1:25:25:47:46:ea:d9:0c:3c: 30:85:de:0d:41:7c:15:49:24:13:32:cb:5a:63:6a: eb:5c:fe:57:a1:a0:76:ee:a4:70:db:65:a7:19:de: 3d:51:10:e8:c5:db:d4:62:20:f4:1b:8b:2b:25:ef: 87:1d:85:a5:fb:55:ac:83:6e:9c:35:c0:3d:67:d8: d9:f1:89:fa:96:a4:76:6b:b3:93:e0:c2:59:38:59: d1:d1:1f:d5:8a:12:f7:c9:60:76:fc:e1:28:5b:34: 62:41:c9:e5:cf:66:37:55:3e:54:b8:73:45:db:35: 9a:a8:79:f4:0f:21:93:21:22:68:1b:1f:94:58:23: 87:4c:b3:61:ac:6d:90:b7:a8:86:7f:5c:d1:ca:c1: ab:74:9a:96:de:6c:cd:17:76:2c:37:9b:04:fe:53: a2:43:47:71:ae:6b:a0:34:dc:64:36:62:2b:fc:7f: 48:50:83:f9:2e:d3:38:a8:35:b4:00:18:74:d2:8d: 8a:60:2e:6e:8a:e4:7e:4a:46:55:37:11:fa:8c:45: ba:e1:19:9e:86:15:38:99:7c:c4:c0:bb:ca:f2:62: b0:78:a9:e4:77:e6:c5:24:87:18:ef:74:33:4f:9b: ae:33:5b:9c:44:a7:73:b7:41:a4:cb:9b:d8:97:e7: 99:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5D:2C:75:84:41:C2:95:AD:19:20:82:02:1C:CF:01:1B:4C:D0:E9 X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:33:88:71:a6:4d:49:95:45:8a:3c:88:c3:0b:1c:3b:79:80: 7d:03:4b:9f:81:1c:cf:8e:67:42:57:13:07:cc:5e:fe:6d:b9: bc:51:59:79:1a:86:9d:fa:72:71:d8:a0:03:a2:98:f6:5f:61: 3e:60:12:2c:14:5c:d9:28:fb:ce:7b:a0:3c:e3:8d:7d:74:5d: de:7c:ef:5b:91:0a:32:7d:1b:9e:a0:78:6f:46:0a:c1:18:64: 11:0c:c9:57:dc:7d:f5:d0:a0:70:75:77:84:05:53:65:bb:2e: c7:db:0c:06:14:46:0b:42:b6:95:2a:ce:66:5a:24:2d:16:c9: 11:5f:95:00:9f:0e:3e:f3:ec:df:66:59:25:20:e6:94:7b:ac: 21:44:35:84:f9:e0:66:5a:78:06:68:ca:69:82:e9:d0:fc:1f: 59:5e:0d:54:f7:3a:e8:37:e0:7e:8b:15:f7:08:12:1e:35:2e: 02:69:af:f1:f5:2b:b3:0a:2e:c8:55:9b:b9:65:a7:3c:6a:f9: 4e:7c:09:05:f4:2a:c9:fc:e9:b4:8a:e2:01:e9:3c:3f:ae:bb: e7:c6:98:2b:5e:2f:c9:64:7b:6a:cb:7f:36:b9:87:e4:de:ef: 5b:47:f8:05:29:7e:20:36:ca:bb:ae:20:3e:bd:f3:d8:80:9b: 8f:83:fe:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3vpeNsPbLLcxPLGp4SrDzJE41swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNTA4MDYxMDA1NDhaFw0yNTA4MDkxMjEyNDhaMDMxMTAvBgNV BAMTKDY2NUQyQzc1ODQ0MUMyOTVBRDE5MjA4MjAyMUNDRjAxMUI0Q0QwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8QhhYMElJUdG6tkMPDCF3g1B fBVJJBMyy1pjautc/lehoHbupHDbZacZ3j1REOjF29RiIPQbiysl74cdhaX7VayD bpw1wD1n2NnxifqWpHZrs5Pgwlk4WdHRH9WKEvfJYHb84ShbNGJByeXPZjdVPlS4 c0XbNZqoefQPIZMhImgbH5RYI4dMs2GsbZC3qIZ/XNHKwat0mpbebM0Xdiw3mwT+ U6JDR3Gua6A03GQ2Yiv8f0hQg/ku0zioNbQAGHTSjYpgLm6K5H5KRlU3EfqMRbrh GZ6GFTiZfMTAu8ryYrB4qeR35sUkhxjvdDNPm64zW5xEp3O3QaTLm9iX55l/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZl0sdYRBwpWtGSCCAhzPARtM0OkwHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAziHGmTUmVRYo8iMMLHDt5gH0DS5+BHM+O Z0JXEwfMXv5tubxRWXkahp36cnHYoAOimPZfYT5gEiwUXNko+857oDzjjX10Xd58 71uRCjJ9G56geG9GCsEYZBEMyVfcffXQoHB1d4QFU2W7LsfbDAYURgtCtpUqzmZa JC0WyRFflQCfDj7z7N9mWSUg5pR7rCFENYT54GZaeAZoymmC6dD8H1leDVT3Oug3 4H6LFfcIEh41LgJpr/H1K7MKLshVm7llpzxq+U58CQX0Ksn86bSK4gHpPD+uu+fG mCteL8lke2rLfza5h+Te71tH+AUpfiA2yruuID6989iAm4+D/pg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:43 2025 by rpki-client