$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: 6riK81KxzRVd+o0OQ/nLQXvBRlXLBQiJCiAsA2CYRww= Subject key identifier: 42:01:C5:DF:92:7E:60:53:CB:7A:81:C0:3D:88:DA:7F:62:3E:CE:00 Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 08A53F8DB666C1281E3A501BA1A802680D3DFC43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 0186 Signing time: Sat 14 Jun 2025 21:50:02 +0000 Manifest this update: Sat 14 Jun 2025 21:45:02 +0000 Manifest next update: Wed 18 Jun 2025 01:15:02 +0000 Files and hashes: 1: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=) 2: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: 7iMKjhj3S1+dJsUxHpmJeTCfItWUD6/97YmPzaV3Qw0=) 3: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a5:3f:8d:b6:66:c1:28:1e:3a:50:1b:a1:a8:02:68:0d:3d:fc:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Jun 14 21:45:02 2025 GMT Not After : Jun 18 01:15:02 2025 GMT Subject: CN=4201C5DF927E6053CB7A81C03D88DA7F623ECE00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:22:3b:39:59:87:e3:a8:d7:e2:dd:7c:a4: 6b:0d:0f:2b:bc:5b:0a:aa:41:2e:9a:2c:2a:38:36: 37:b3:e6:f6:03:6c:bf:9d:7a:59:ff:4f:1e:cb:0c: 1f:38:db:ca:dc:e8:b3:9d:33:c4:0a:4b:28:ec:c8: 87:f7:6c:0a:cd:43:6a:11:90:ed:3c:4c:98:20:36: 2f:84:41:1e:64:c7:71:3c:25:33:60:d2:3d:bb:87: 1f:35:e9:b0:b9:08:c6:bf:b5:62:07:da:3f:80:d4: 51:03:cd:6b:ed:7f:9a:2b:3f:5c:2f:11:2b:c5:62: 10:5a:41:9d:6c:0a:a7:32:95:a3:bf:2b:6e:a7:40: 80:77:7a:6a:77:e6:d0:57:f9:04:99:10:56:28:c1: 47:25:30:d6:99:fe:c8:9c:61:c2:14:dd:da:0e:ac: c3:d9:ad:0e:2c:39:e0:a5:cf:83:c0:75:b7:6b:fc: da:52:2f:9a:b0:b9:c4:23:83:fd:dd:37:4b:60:b1: 4d:fa:ee:25:63:64:28:fa:45:e0:4a:ce:94:a2:38: f0:17:c0:35:cd:ea:ab:4f:2a:ca:4e:96:c3:40:a2: 80:26:58:2b:4a:bd:bd:77:58:77:1f:23:19:3e:41: 5c:da:12:23:29:5a:a7:13:6a:14:ba:82:88:1c:13: fc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:01:C5:DF:92:7E:60:53:CB:7A:81:C0:3D:88:DA:7F:62:3E:CE:00 X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a5:e0:e5:73:52:37:7c:60:d7:d6:60:cf:1f:98:85:5a:99: cc:59:06:53:cf:18:d5:18:0b:89:6c:dd:b2:7f:40:e0:f7:09: a7:e0:56:31:4b:89:44:91:8a:28:13:1d:7e:64:fe:97:ed:8c: 98:54:f0:fa:ef:ea:89:54:79:a6:bf:42:70:c2:ed:bd:75:17: ef:55:70:be:09:6c:30:94:6b:d4:30:83:6f:bb:88:6d:9a:c8: b1:7a:63:cc:7b:bf:02:cc:8f:e6:35:3b:8c:0e:0d:82:ea:24: 1c:48:a4:c7:3d:04:bb:2c:46:47:30:2f:56:b3:28:d0:54:c9: 25:29:ad:75:58:9a:65:98:a7:4c:ce:79:df:2b:b1:d0:0c:b0: 12:93:e9:a6:ae:87:d5:51:bc:e9:65:cb:48:48:6e:c4:13:4b: 15:5a:90:b5:66:c0:43:78:41:7d:c9:05:07:57:71:0c:e3:c5: 97:84:f6:12:f0:66:f2:7e:2d:7f:76:fc:60:cf:83:7d:f3:52: 1c:49:bd:14:e1:3d:09:9e:9a:a7:0a:f5:e4:42:8b:26:d8:d6: 1c:69:56:fb:63:b4:a6:d2:c8:c9:3f:a7:b5:3d:7d:28:6d:af: 08:0a:f2:2a:1f:62:5f:7f:6b:f4:79:44:fb:bc:0f:c7:a4:df: c5:9d:ae:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKU/jbZmwSgeOlAboagCaA09/EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTA2MTQyMTQ1MDJaFw0yNTA2MTgwMTE1MDJaMDMxMTAvBgNV BAMTKDQyMDFDNURGOTI3RTYwNTNDQjdBODFDMDNEODhEQTdGNjIzRUNFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLiI7OVmH46jX4t18pGsNDyu8 WwqqQS6aLCo4Njez5vYDbL+deln/Tx7LDB8428rc6LOdM8QKSyjsyIf3bArNQ2oR kO08TJggNi+EQR5kx3E8JTNg0j27hx816bC5CMa/tWIH2j+A1FEDzWvtf5orP1wv ESvFYhBaQZ1sCqcylaO/K26nQIB3emp35tBX+QSZEFYowUclMNaZ/sicYcIU3doO rMPZrQ4sOeClz4PAdbdr/NpSL5qwucQjg/3dN0tgsU367iVjZCj6ReBKzpSiOPAX wDXN6qtPKspOlsNAooAmWCtKvb13WHcfIxk+QVzaEiMpWqcTahS6gogcE/zvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQgHF35J+YFPLeoHAPYjaf2I+zgAwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKl4OVzUjd8YNfWYM8fmIVamcxZBlPPGNUY C4ls3bJ/QOD3CafgVjFLiUSRiigTHX5k/pftjJhU8Prv6olUeaa/QnDC7b11F+9V cL4JbDCUa9Qwg2+7iG2ayLF6Y8x7vwLMj+Y1O4wODYLqJBxIpMc9BLssRkcwL1az KNBUySUprXVYmmWYp0zOed8rsdAMsBKT6aauh9VRvOlly0hIbsQTSxVakLVmwEN4 QX3JBQdXcQzjxZeE9hLwZvJ+LX92/GDPg33zUhxJvRThPQmemqcK9eRCiybY1hxp VvtjtKbSyMk/p7U9fShtrwgK8iofYl9/a/R5RPu8D8ek38WdrnA= -----END CERTIFICATE-----Generated at Mon Jun 16 19:45:11 2025 by rpki-client