$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft File: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft (raw, json) Hash identifier: kfCMsx5Boo7T6WSUyXiSn3rUjGvfZXtu5N/lNtnuBJA= Subject key identifier: 33:9A:84:56:5D:FD:E9:07:A0:24:CA:E5:94:ED:24:CB:E5:4B:12:4E Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 125C180FBA6D4CBF9FF19D749C6176A0D71558EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft Manifest number: 01B4 Signing time: Mon 16 Jun 2025 09:01:39 +0000 Manifest this update: Mon 16 Jun 2025 08:56:39 +0000 Manifest next update: Thu 19 Jun 2025 17:42:39 +0000 Files and hashes: 1: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: gwUhQCLpG414frqxV/A3eihir8ysCdrvlyk1yD6ay90=) 2: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: VxDJRyHf4quz1NG42aRPhCKiwsHNdLZ5RbJ8wFW7Nhg=) 3: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: hLQPD3MbEwgildQda9wOjE3SYD9HUC8/tR+TH7Mo1TY=) 4: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl (hash: AR9sR60kaCsDYV0szgJ5arvPpTYZTOyIdJxB6gop2Zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5c:18:0f:ba:6d:4c:bf:9f:f1:9d:74:9c:61:76:a0:d7:15:58:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Jun 16 08:56:39 2025 GMT Not After : Jun 19 17:42:39 2025 GMT Subject: CN=339A84565DFDE907A024CAE594ED24CBE54B124E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:72:98:2e:84:2b:b6:2b:f0:3e:fc:30:a2: 33:ee:91:11:68:11:23:29:05:0a:04:30:f2:06:d2: 58:02:0b:5d:04:7b:1b:2c:bb:f1:f5:db:38:d9:d7: a6:6d:9e:a9:a0:d1:5e:c0:2e:d3:0d:5c:c7:50:a6: 68:79:6a:6d:32:1a:f0:58:7c:1d:15:97:7a:51:3f: 0e:16:5b:d5:42:a1:bd:29:51:68:a3:fe:de:2f:d3: c5:b4:85:76:e7:4c:b3:bb:88:e5:3a:30:44:7e:8f: fe:8c:e4:1c:d8:4f:8f:92:44:fb:f1:4f:56:4a:48: 10:21:1f:b5:b6:34:37:b2:15:1a:1a:0f:32:77:54: 12:00:16:74:b9:1e:86:e4:fa:fe:06:65:2f:f8:9d: c5:7b:86:fb:46:6a:8a:c9:7b:2f:7f:d3:d9:59:ee: cd:1d:42:b9:96:5e:0d:d5:c7:60:1b:d6:12:23:9f: 9e:df:01:41:3d:de:8f:a0:d9:48:ec:af:7a:e9:d8: 5c:56:5d:b8:2a:f6:3a:41:fb:d4:66:f0:9e:fb:38: 61:e5:7d:2c:1b:26:cc:59:d3:80:8f:00:53:ee:6c: 7b:7c:c3:44:d3:87:1b:2c:4b:74:d9:37:9f:76:e4: 32:63:96:f7:dc:60:f8:16:5a:ee:cb:d6:d0:8e:b9: 37:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9A:84:56:5D:FD:E9:07:A0:24:CA:E5:94:ED:24:CB:E5:4B:12:4E X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e5:6a:d9:e1:2c:96:19:93:5d:51:a8:38:13:53:fc:cf:fa: c2:df:87:64:81:79:ef:6e:18:ff:00:39:17:96:58:f0:16:2a: 3f:7e:7b:28:eb:1a:59:06:26:d9:17:44:32:cf:80:ab:91:c2: 7e:19:a0:66:73:97:46:37:20:48:c3:70:ef:37:90:42:31:99: 7e:b4:d5:4c:0e:ba:a2:d9:7f:8e:92:fb:fe:5c:6f:2c:df:d5: be:8c:f9:4e:9d:bc:14:32:f1:1b:91:1d:5c:af:8d:25:d0:5d: ed:40:97:54:5c:39:c8:db:b4:12:59:b4:42:93:1e:19:4a:0d: 19:fe:ef:9c:5a:82:34:47:50:3f:1c:1d:27:27:97:cc:e5:85: c9:e1:ca:79:14:7b:b9:6d:57:19:3f:e8:05:80:c6:bf:b2:89: cf:08:0f:f9:4e:79:b1:b0:7d:12:f9:3a:8e:c5:8e:58:b5:bc: 90:a1:75:16:d5:a9:fa:9e:ac:b3:07:a6:5d:68:9f:59:31:29: 6a:80:fa:8c:e9:30:d0:94:f9:e0:07:64:41:31:58:02:45:8c: 5f:10:53:6b:17:aa:82:1d:e6:53:1b:b1:bd:7c:e8:2a:90:98: ba:cd:2f:4e:30:95:43:70:9d:a9:93:33:32:c1:2f:2f:a9:e6: bb:ce:24:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElwYD7ptTL+f8Z10nGF2oNcVWOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNTA2MTYwODU2MzlaFw0yNTA2MTkxNzQyMzlaMDMxMTAvBgNV BAMTKDMzOUE4NDU2NURGREU5MDdBMDI0Q0FFNTk0RUQyNENCRTU0QjEyNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhnKYLoQrtivwPvwwojPukRFo ESMpBQoEMPIG0lgCC10Eexssu/H12zjZ16Ztnqmg0V7ALtMNXMdQpmh5am0yGvBY fB0Vl3pRPw4WW9VCob0pUWij/t4v08W0hXbnTLO7iOU6MER+j/6M5BzYT4+SRPvx T1ZKSBAhH7W2NDeyFRoaDzJ3VBIAFnS5Hobk+v4GZS/4ncV7hvtGaorJey9/09lZ 7s0dQrmWXg3Vx2Ab1hIjn57fAUE93o+g2Ujsr3rp2FxWXbgq9jpB+9Rm8J77OGHl fSwbJsxZ04CPAFPubHt8w0TThxssS3TZN5925DJjlvfcYPgWWu7L1tCOuTc/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM5qEVl396QegJMrllO0ky+VLEk4wHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5 RjM2QzgwREM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLlatnhLJYZk11RqDgTU/zP+sLfh2SBee9u GP8AOReWWPAWKj9+eyjrGlkGJtkXRDLPgKuRwn4ZoGZzl0Y3IEjDcO83kEIxmX60 1UwOuqLZf46S+/5cbyzf1b6M+U6dvBQy8RuRHVyvjSXQXe1Al1RcOcjbtBJZtEKT HhlKDRn+75xagjRHUD8cHScnl8zlhcnhynkUe7ltVxk/6AWAxr+yic8ID/lOebGw fRL5Oo7Fjli1vJChdRbVqfqerLMHpl1on1kxKWqA+ozpMNCU+eAHZEExWAJFjF8Q U2sXqoId5lMbsb186CqQmLrNL04wlUNwnamTMzLBLy+p5rvOJMA= -----END CERTIFICATE-----Generated at Mon Jun 16 12:31:19 2025 by rpki-client