$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: 3ES3WrhrBr6mY5W+Ckji8WFPV0pUFcAQUWXn+8Ik5ow= Subject key identifier: 3B:50:A7:A1:6D:B6:C5:D7:E3:ED:5D:F2:5D:B6:FC:09:D4:77:9C:BB Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 0BB0FEE595CA23C1D5D9A33AFEC184ECA39A2647 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 013D Signing time: Mon 28 Apr 2025 17:21:37 +0000 Manifest this update: Mon 28 Apr 2025 17:16:37 +0000 Manifest next update: Thu 01 May 2025 20:37:37 +0000 Files and hashes: 1: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: ifwH4fonsvuReYaKHbBXeJYzy05nS9OH1Ppf03rFbbE=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 3: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b0:fe:e5:95:ca:23:c1:d5:d9:a3:3a:fe:c1:84:ec:a3:9a:26:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Apr 28 17:16:37 2025 GMT Not After : May 1 20:37:37 2025 GMT Subject: CN=3B50A7A16DB6C5D7E3ED5DF25DB6FC09D4779CBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:52:fd:d2:1f:47:dc:36:e2:e2:ae:20:47: 38:58:9a:4e:e0:1c:ee:8f:2e:9c:89:bc:01:a7:00: 59:cd:64:72:48:df:bb:25:39:4b:70:98:4d:c0:db: 53:55:05:a4:f6:a6:9c:a7:a1:da:f4:3a:11:75:e9: 43:1c:c5:87:45:67:7d:89:f6:fe:05:44:e8:b4:2c: 5d:d3:ee:2f:55:fb:ca:90:07:64:ce:23:41:14:ad: cc:cd:01:38:3d:f0:b6:6c:09:cc:45:54:8b:79:96: 4b:15:8b:dd:df:94:fd:ba:bd:a9:d0:cf:8d:f2:6e: 94:61:65:77:f4:44:e8:30:5e:0f:be:23:d3:a3:b7: 82:aa:db:64:b7:49:7e:c9:c6:b9:5b:87:e1:f7:cf: ec:21:c3:6c:ae:6e:1d:66:9f:56:07:4d:ff:2e:0c: a7:21:64:ce:f1:f1:9e:84:bf:ea:73:37:c1:ef:3c: 79:ae:bd:2d:c2:7a:a7:0e:bf:a8:a1:9a:19:9f:48: b3:0c:60:04:7a:35:f2:9f:0c:6b:cf:77:f2:93:64: 8e:31:01:4d:51:d9:37:e6:4d:a8:38:f5:e4:94:19: 2c:33:7f:39:1a:80:75:7b:b6:5c:a2:4a:e5:f5:f7: 9f:ee:af:41:f8:64:d0:75:6c:b6:a2:db:ee:47:0b: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:50:A7:A1:6D:B6:C5:D7:E3:ED:5D:F2:5D:B6:FC:09:D4:77:9C:BB X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:9b:25:c5:5d:c5:69:7f:c1:2a:65:a8:81:92:7f:24:57:ba: bf:44:17:e3:c7:41:1a:b3:70:4a:d1:67:89:c9:6c:fb:07:4b: 3b:53:e2:48:8b:cb:07:de:df:d1:51:09:14:93:30:aa:73:72: 1c:c0:f1:2a:e0:ea:08:11:26:59:ef:10:fa:bb:59:7a:3c:85: d3:c9:31:0a:86:3e:e7:36:b4:06:86:5f:ea:50:45:e2:31:92: cf:8a:78:bb:bb:f0:73:7a:36:b7:cb:ce:3a:bc:75:ef:a1:91: c8:0d:9b:c2:55:06:03:12:4b:07:57:8b:9a:19:48:c1:d0:82: d1:1d:71:4e:e8:95:9d:96:0a:26:ad:0a:86:0a:39:90:b8:ca: bf:6d:8a:2d:a0:b8:ba:dc:31:49:d5:8d:48:33:2a:87:3e:a9: 3b:ef:98:e0:a5:de:39:27:25:3f:c2:ad:03:26:45:67:c8:57: 3d:7e:24:f6:4a:97:32:14:b3:23:b4:76:58:cf:da:13:9e:5e: b2:8d:06:5d:a8:da:d0:be:18:49:59:81:a6:0c:81:b4:55:e4: 32:32:bb:5c:f9:d5:b4:25:27:d9:61:fb:37:47:3a:94:cd:f3: 86:f9:52:15:f7:a7:dc:10:66:a7:5f:60:70:c1:5b:a3:01:7d: 28:8c:a9:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7D+5ZXKI8HV2aM6/sGE7KOaJkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTA0MjgxNzE2MzdaFw0yNTA1MDEyMDM3MzdaMDMxMTAvBgNV BAMTKDNCNTBBN0ExNkRCNkM1RDdFM0VENURGMjVEQjZGQzA5RDQ3NzlDQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTVL90h9H3Dbi4q4gRzhYmk7g HO6PLpyJvAGnAFnNZHJI37slOUtwmE3A21NVBaT2ppynodr0OhF16UMcxYdFZ32J 9v4FROi0LF3T7i9V+8qQB2TOI0EUrczNATg98LZsCcxFVIt5lksVi93flP26vanQ z43ybpRhZXf0ROgwXg++I9Ojt4Kq22S3SX7Jxrlbh+H3z+whw2yubh1mn1YHTf8u DKchZM7x8Z6Ev+pzN8HvPHmuvS3CeqcOv6ihmhmfSLMMYAR6NfKfDGvPd/KTZI4x AU1R2TfmTag49eSUGSwzfzkagHV7tlyiSuX195/ur0H4ZNB1bLai2+5HCzvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO1CnoW22xdfj7V3yXbb8CdR3nLswHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKbJcVdxWl/wSplqIGSfyRXur9EF+PHQRqz cErRZ4nJbPsHSztT4kiLywfe39FRCRSTMKpzchzA8Srg6ggRJlnvEPq7WXo8hdPJ MQqGPuc2tAaGX+pQReIxks+KeLu78HN6NrfLzjq8de+hkcgNm8JVBgMSSwdXi5oZ SMHQgtEdcU7olZ2WCiatCoYKOZC4yr9tii2guLrcMUnVjUgzKoc+qTvvmOCl3jkn JT/CrQMmRWfIVz1+JPZKlzIUsyO0dljP2hOeXrKNBl2o2tC+GElZgaYMgbRV5DIy u1z51bQlJ9lh+zdHOpTN84b5UhX3p9wQZqdfYHDBW6MBfSiMqUw= -----END CERTIFICATE-----Generated at Wed Apr 30 09:35:39 2025 by rpki-client