$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft File: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft (raw, json) Hash identifier: TME9GUONl88pN3juxu/sgOJnRZoOjV7ljt0cCqTiBCM= Subject key identifier: 55:28:3E:ED:7C:7B:C9:A6:F1:43:C6:D5:0F:05:54:37:8C:52:2B:0B Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 3BBD656ABAAA217BE1212A35AA059A8EEB84B71B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft Manifest number: 019D Signing time: Sat 26 Apr 2025 04:11:38 +0000 Manifest this update: Sat 26 Apr 2025 04:06:38 +0000 Manifest next update: Tue 29 Apr 2025 09:34:38 +0000 Files and hashes: 1: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: hLQPD3MbEwgildQda9wOjE3SYD9HUC8/tR+TH7Mo1TY=) 2: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl (hash: /aeAwoEI/k2ErllKO1tAaYKYbbS1lr0UDDg3wEaJpb4=) 3: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: gwUhQCLpG414frqxV/A3eihir8ysCdrvlyk1yD6ay90=) 4: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: VxDJRyHf4quz1NG42aRPhCKiwsHNdLZ5RbJ8wFW7Nhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:bd:65:6a:ba:aa:21:7b:e1:21:2a:35:aa:05:9a:8e:eb:84:b7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Apr 26 04:06:38 2025 GMT Not After : Apr 29 09:34:38 2025 GMT Subject: CN=55283EED7C7BC9A6F143C6D50F0554378C522B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:7a:21:78:a9:89:16:63:b7:4f:88:1a:d6: 90:51:cd:55:41:f6:d2:27:b4:50:2f:99:4a:29:83: 23:2d:80:2b:b6:bf:1c:77:f6:dd:a4:18:4c:e2:37: 9e:32:7b:e9:f4:57:bc:10:20:3f:73:db:42:25:39: ea:a2:a2:a1:99:05:2f:97:64:14:95:6c:20:4b:0b: 8b:68:36:66:cc:e6:1e:a3:79:59:ee:c3:82:1d:e2: f6:41:79:60:26:9a:40:e8:63:22:02:5c:8d:65:c4: 4f:60:40:73:6e:48:09:65:54:5a:e1:ec:ca:49:82: 55:27:0e:ed:8c:7a:08:0f:00:53:c4:b0:0f:2c:64: 94:ad:67:31:e3:56:af:0c:97:d6:16:df:82:95:2e: f9:bf:9e:40:d7:f5:aa:66:ec:a4:40:f2:2d:31:51: 8f:ed:ff:81:ce:dd:1f:3d:8d:42:47:31:35:b1:44: f0:ba:f5:9a:ad:e9:47:58:a8:26:35:41:47:ad:b9: 78:f2:d6:fa:04:96:98:f0:72:86:71:f6:33:b6:06: ea:53:0f:18:e5:2d:23:de:eb:c4:12:1e:65:8a:ce: ed:f5:95:d1:03:a4:fd:26:dc:25:81:34:8a:95:89: 98:47:a1:bc:48:0a:2d:52:db:7e:cb:74:67:33:64: 9a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:28:3E:ED:7C:7B:C9:A6:F1:43:C6:D5:0F:05:54:37:8C:52:2B:0B X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:12:8a:61:a6:29:42:3f:f9:a3:7e:b3:ae:46:f3:c7:00:0e: 83:09:20:ea:aa:12:7b:c9:03:89:6e:56:a5:76:b2:da:78:16: 17:af:69:81:b9:1e:72:0f:6d:47:01:4b:73:fe:00:21:ff:14: ea:54:01:38:1a:19:00:ca:a4:57:57:2e:a8:20:73:0a:36:b3: 25:3a:fc:76:84:eb:39:24:b9:9a:4d:96:4b:f5:50:46:e0:28: e4:e0:05:fd:34:f2:4b:e0:cd:a9:de:1e:a5:34:65:da:d6:fa: 24:8b:41:11:31:55:fe:4d:ed:3a:ed:3d:c5:08:8b:19:96:ad: 27:bb:6b:81:f6:61:68:bf:e1:9d:22:00:30:bc:47:05:65:e9: 5a:ba:9d:b2:95:21:a3:8f:1f:1b:7d:2b:28:1c:8a:4a:4f:e0: 4b:58:7f:f3:0f:a4:f0:b3:e3:eb:a5:47:70:51:f0:a6:1b:9e: 89:7f:81:3b:98:a6:87:22:75:91:47:52:dd:6e:02:5f:11:3a: db:d8:4d:69:b9:b4:5b:00:eb:88:65:f6:f9:f1:21:57:29:df: 53:91:4f:aa:9e:a3:73:46:98:3e:a1:10:b2:d4:bb:4e:50:36: 55:69:51:cf:80:c4:be:96:bf:4e:af:23:2a:3a:63:3f:fc:f9: ea:06:77:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO71larqqIXvhISo1qgWajuuEtxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNTA0MjYwNDA2MzhaFw0yNTA0MjkwOTM0MzhaMDMxMTAvBgNV BAMTKDU1MjgzRUVEN0M3QkM5QTZGMTQzQzZENTBGMDU1NDM3OEM1MjJCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjXoheKmJFmO3T4ga1pBRzVVB 9tIntFAvmUopgyMtgCu2vxx39t2kGEziN54ye+n0V7wQID9z20IlOeqioqGZBS+X ZBSVbCBLC4toNmbM5h6jeVnuw4Id4vZBeWAmmkDoYyICXI1lxE9gQHNuSAllVFrh 7MpJglUnDu2MeggPAFPEsA8sZJStZzHjVq8Ml9YW34KVLvm/nkDX9apm7KRA8i0x UY/t/4HO3R89jUJHMTWxRPC69Zqt6UdYqCY1QUetuXjy1voElpjwcoZx9jO2BupT DxjlLSPe68QSHmWKzu31ldEDpP0m3CWBNIqViZhHobxICi1S237LdGczZJqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVSg+7Xx7yabxQ8bVDwVUN4xSKwswHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5 RjM2QzgwREM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUSimGmKUI/+aN+s65G88cADoMJIOqqEnvJ A4luVqV2stp4FhevaYG5HnIPbUcBS3P+ACH/FOpUATgaGQDKpFdXLqggcwo2syU6 /HaE6zkkuZpNlkv1UEbgKOTgBf008kvgzaneHqU0ZdrW+iSLQRExVf5N7TrtPcUI ixmWrSe7a4H2YWi/4Z0iADC8RwVl6Vq6nbKVIaOPHxt9KygcikpP4EtYf/MPpPCz 4+ulR3BR8KYbnol/gTuYpocidZFHUt1uAl8ROtvYTWm5tFsA64hl9vnxIVcp31OR T6qeo3NGmD6hELLUu05QNlVpUc+AxL6Wv06vIyo6Yz/8+eoGd+w= -----END CERTIFICATE-----Generated at Sat Apr 26 18:40:07 2025 by rpki-client