$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: LzOxxLtWhQxuEeUfgj+Z3ouGuswsRs5uK33ES3pjmVM= Subject key identifier: 42:96:21:AD:8A:D0:B6:33:E1:8D:69:C0:C2:6D:71:BA:EC:EC:EA:8B Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 7175696C5991AFAA76E7F86ED223FB8AEF726739 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: 61 Signing time: Fri 25 Apr 2025 16:01:29 +0000 Manifest this update: Fri 25 Apr 2025 15:56:29 +0000 Manifest next update: Mon 28 Apr 2025 21:55:29 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: VYWAk8iGSZzF5g6fTa7RhmuP4rGT675f8tCJgCmKW00=) 2: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: j0IL7SfsvdqgfAaux9WrVREhxTtHhUCkls1JT9wWMr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 21:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:75:69:6c:59:91:af:aa:76:e7:f8:6e:d2:23:fb:8a:ef:72:67:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Apr 25 15:56:29 2025 GMT Not After : Apr 28 21:55:29 2025 GMT Subject: CN=429621AD8AD0B633E18D69C0C26D71BAECECEA8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:a6:8c:3b:c8:e5:d1:79:e9:de:b9:25:0e: a0:8d:7f:a4:6a:48:64:f9:93:1a:f4:51:10:ba:ac: cf:69:20:1f:03:58:61:d2:a1:d4:2b:8e:35:5d:13: 38:4a:56:aa:f6:2c:7e:69:76:86:ca:5a:27:43:36: 4f:ea:3f:8d:97:aa:53:fe:e2:d6:62:1b:f4:55:4d: 3d:6e:09:40:53:a3:a6:66:0f:c1:40:ea:b2:6b:e9: ca:25:e4:3d:9d:49:95:91:f4:b0:b0:ae:95:39:5b: 5e:4a:1b:db:44:60:1b:0c:7b:fd:7f:65:ab:c1:d3: 61:6e:ad:35:ca:0e:95:67:78:07:cd:3c:0a:95:be: 3c:70:72:ce:77:fb:c2:49:69:0b:d0:00:76:1b:75: 0e:5e:33:87:6c:ba:61:44:ae:ca:5d:51:2b:e0:41: 37:63:3a:21:88:75:5d:5a:46:be:80:ae:a0:b7:8c: b0:55:37:79:8c:da:1b:08:73:bd:e7:e2:da:72:c0: d1:27:e5:a1:31:97:14:1f:22:6a:86:14:8a:44:75: 32:f0:ba:31:45:63:ca:cb:10:ed:00:0f:b8:13:ee: 6c:5f:b5:16:a1:05:4e:7b:c7:a8:f0:b7:20:ec:68: 7a:63:ca:f0:d6:a6:0b:85:2a:a9:48:b3:fd:96:86: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:96:21:AD:8A:D0:B6:33:E1:8D:69:C0:C2:6D:71:BA:EC:EC:EA:8B X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:44:73:f3:e0:6a:ef:fc:a4:b6:a1:db:98:ac:36:35:c5:0b: b9:53:66:72:d5:e9:f0:91:6c:e2:2c:e9:c4:97:d3:e7:10:8d: 5a:a9:91:c4:6b:5d:9c:41:19:d8:26:d3:52:22:1d:29:93:f2: 6b:1a:4b:3f:be:66:bd:13:4d:c3:7f:ad:60:ad:ae:01:3b:e1: a0:e0:37:38:4f:2a:43:ea:f3:fc:c3:7f:0e:62:1a:37:4d:5d: ef:ae:59:cc:5f:6e:a0:6a:de:93:36:94:7a:e6:4d:23:ed:de: 4f:f8:f3:8a:3e:4c:91:4e:5a:28:96:6f:7e:e8:92:4e:10:91: 0d:f2:eb:77:25:d3:28:f7:ed:bb:39:17:e3:05:b8:b9:84:b7: ac:2d:a2:9b:68:53:95:92:88:30:1f:22:a3:0a:25:c9:52:8f: bf:04:e0:20:8f:d2:87:d0:6b:09:29:02:07:b1:6a:54:43:0b: 38:62:57:d7:19:bf:65:29:ab:ae:b8:8f:fc:ef:ae:99:d8:ee: 40:63:bf:98:26:de:f2:1f:87:0d:aa:0c:db:d6:cc:bd:7a:c4: b5:47:88:eb:5e:77:a8:b5:23:ed:a7:a8:b7:e5:ff:76:55:0a: ab:f7:00:9e:ab:72:dc:2a:8f:66:d8:9f:92:18:47:48:58:5e: 4d:45:f4:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXVpbFmRr6p25/hu0iP7iu9yZzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNTA0MjUxNTU2MjlaFw0yNTA0MjgyMTU1MjlaMDMxMTAvBgNV BAMTKDQyOTYyMUFEOEFEMEI2MzNFMThENjlDMEMyNkQ3MUJBRUNFQ0VBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOqaMO8jl0Xnp3rklDqCNf6Rq SGT5kxr0URC6rM9pIB8DWGHSodQrjjVdEzhKVqr2LH5pdobKWidDNk/qP42XqlP+ 4tZiG/RVTT1uCUBTo6ZmD8FA6rJr6col5D2dSZWR9LCwrpU5W15KG9tEYBsMe/1/ ZavB02FurTXKDpVneAfNPAqVvjxwcs53+8JJaQvQAHYbdQ5eM4dsumFErspdUSvg QTdjOiGIdV1aRr6ArqC3jLBVN3mM2hsIc73n4tpywNEn5aExlxQfImqGFIpEdTLw ujFFY8rLEO0AD7gT7mxftRahBU57x6jwtyDsaHpjyvDWpguFKqlIs/2WhgB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQpYhrYrQtjPhjWnAwm1xuuzs6oswHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZEc/Pgau/8pLah25isNjXFC7lTZnLV6fCR bOIs6cSX0+cQjVqpkcRrXZxBGdgm01IiHSmT8msaSz++Zr0TTcN/rWCtrgE74aDg NzhPKkPq8/zDfw5iGjdNXe+uWcxfbqBq3pM2lHrmTSPt3k/484o+TJFOWiiWb37o kk4QkQ3y63cl0yj37bs5F+MFuLmEt6wtoptoU5WSiDAfIqMKJclSj78E4CCP0ofQ awkpAgexalRDCzhiV9cZv2Upq664j/zvrpnY7kBjv5gm3vIfhw2qDNvWzL16xLVH iOted6i1I+2nqLfl/3ZVCqv3AJ6rctwqj2bYn5IYR0hYXk1F9FI= -----END CERTIFICATE-----Generated at Sun Apr 27 22:21:01 2025 by rpki-client