$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft File: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft (raw, json) Hash identifier: xV2YlZXUHYCiA9qvafWlNT8hz+jTUI6myrGbjtVlAJA= Subject key identifier: 71:E0:98:56:40:62:FB:03:60:B6:45:E3:6B:97:08:32:13:1B:78:01 Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 57E27FF69CC3EC2FCB9A69A690365ACBB8B48AB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft Manifest number: 01CC Signing time: Wed 06 Aug 2025 18:11:40 +0000 Manifest this update: Wed 06 Aug 2025 18:06:40 +0000 Manifest next update: Sun 10 Aug 2025 05:56:40 +0000 Files and hashes: 1: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: 7zBTS0bU7PgzGa8PCcebIzMScdeyLBIAzKr1yoDxbbo=) 2: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl (hash: PDl7YLWyZ5+7L5bBterGPFTnRSi0w+LtbCVn7TDuW3c=) 3: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: aDPjpRT6pfd3T7ltNqLLQRA6RqqiOtEG5C4gW/hEaTI=) 4: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: 0GFIWUiUrqRfAE/w3eKveKOv4M+2LjJoosY6Pp8ypUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e2:7f:f6:9c:c3:ec:2f:cb:9a:69:a6:90:36:5a:cb:b8:b4:8a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Aug 6 18:06:40 2025 GMT Not After : Aug 10 05:56:40 2025 GMT Subject: CN=71E098564062FB0360B645E36B970832131B7801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:0a:45:98:92:e5:bb:4d:b3:cd:af:c0:90: 3d:fa:68:d0:59:a3:a3:a6:2a:09:15:18:98:3e:0a: e5:56:7c:1a:8c:b0:4e:42:d2:09:7e:99:37:54:20: cb:84:32:b0:0c:66:db:ef:80:0e:fb:cc:66:e7:f7: 90:63:a9:66:eb:1a:0d:73:bb:5c:d9:e9:40:d5:fe: 3b:02:7a:8d:3c:10:3d:e0:ea:ab:4a:3d:76:dd:e0: b6:bf:a0:fd:04:0e:7d:50:0d:36:2e:4a:4d:31:61: 18:ba:d6:e0:1f:e1:76:5b:e6:cc:bb:4c:cc:fa:72: 2a:fe:46:59:3b:df:ed:ac:4b:96:82:d7:22:f2:01: 57:70:7f:10:c3:39:da:5e:d5:31:ab:95:1c:c3:28: 18:00:91:8c:54:65:51:d2:6e:ae:23:17:cd:b0:58: 1f:bd:02:e0:7b:12:de:97:d9:c6:5a:d7:b4:5f:8d: 7b:20:67:d7:97:eb:72:0f:e0:65:c1:df:c5:03:93: 31:86:34:d8:d7:24:b9:08:11:4f:64:d3:64:fa:b8: b2:42:20:1f:2c:c6:73:8c:74:35:1f:47:1e:a3:d7: f9:a7:5d:ce:d4:7f:86:4a:e9:a4:0a:d2:f4:2a:ec: 43:c6:6f:15:df:88:71:18:49:de:4c:73:17:67:76: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E0:98:56:40:62:FB:03:60:B6:45:E3:6B:97:08:32:13:1B:78:01 X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:54:d4:53:75:e4:25:a7:5d:b2:c9:4f:1d:f5:83:ac:60:b1: e5:df:b1:24:c7:b7:5f:7f:05:6c:50:2b:07:d0:18:4f:75:e1: 21:f9:1a:52:e9:b9:f9:61:cb:bb:d3:fd:0c:b7:37:67:78:36: 05:96:49:45:0a:68:fe:19:2c:03:5f:8f:60:d2:a3:d7:9f:f2: 92:4f:32:9a:45:be:cc:2c:81:ee:d2:b3:e7:f5:bd:1e:db:ed: a6:5d:92:c7:ac:10:16:d4:1c:13:73:d6:19:96:a4:17:63:92: da:4e:ac:6e:a8:96:e6:1b:0d:12:82:c7:e4:b1:fa:59:0c:64: 4d:e9:25:44:5c:1f:bc:a7:e7:b0:10:87:f0:83:9a:cc:c9:5d: e9:18:48:e2:c8:81:d6:ca:01:68:af:af:61:b2:56:33:84:0a: d2:84:b3:03:83:3b:bb:95:97:8a:ad:91:0b:35:85:fe:fc:06: 63:2e:23:a2:74:cf:55:d3:9e:0f:72:c2:12:ef:a2:16:89:a5: 1d:7f:24:5d:f7:77:b8:dc:a1:cc:63:9a:ff:61:04:2d:0b:c9: f5:7c:3d:ba:61:d0:94:19:26:13:c3:7b:e4:8d:ff:57:ba:97: 52:d5:56:3c:21:24:d6:52:65:cf:7e:ca:84:99:f2:0b:a5:16: fd:82:f5:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+J/9pzD7C/LmmmmkDZay7i0irQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNTA4MDYxODA2NDBaFw0yNTA4MTAwNTU2NDBaMDMxMTAvBgNV BAMTKDcxRTA5ODU2NDA2MkZCMDM2MEI2NDVFMzZCOTcwODMyMTMxQjc4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJQpFmJLlu02zza/AkD36aNBZ o6OmKgkVGJg+CuVWfBqMsE5C0gl+mTdUIMuEMrAMZtvvgA77zGbn95BjqWbrGg1z u1zZ6UDV/jsCeo08ED3g6qtKPXbd4La/oP0EDn1QDTYuSk0xYRi61uAf4XZb5sy7 TMz6cir+Rlk73+2sS5aC1yLyAVdwfxDDOdpe1TGrlRzDKBgAkYxUZVHSbq4jF82w WB+9AuB7Et6X2cZa17RfjXsgZ9eX63IP4GXB38UDkzGGNNjXJLkIEU9k02T6uLJC IB8sxnOMdDUfRx6j1/mnXc7Uf4ZK6aQK0vQq7EPGbxXfiHEYSd5Mcxdndlh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUceCYVkBi+wNgtkXja5cIMhMbeAEwHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5 RjM2QzgwREM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlU1FN15CWnXbLJTx31g6xgseXfsSTHt19/ BWxQKwfQGE914SH5GlLpuflhy7vT/Qy3N2d4NgWWSUUKaP4ZLANfj2DSo9ef8pJP MppFvswsge7Ss+f1vR7b7aZdksesEBbUHBNz1hmWpBdjktpOrG6oluYbDRKCx+Sx +lkMZE3pJURcH7yn57AQh/CDmszJXekYSOLIgdbKAWivr2GyVjOECtKEswODO7uV l4qtkQs1hf78BmMuI6J0z1XTng9ywhLvohaJpR1/JF33d7jcocxjmv9hBC0LyfV8 Pbph0JQZJhPDe+SN/1e6l1LVVjwhJNZSZc9+yoSZ8gulFv2C9dk= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:17 2025 by rpki-client