$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: hUzeIe8+AC27zOHodrNWY3vLZXbWRAK3rLWmiy6a3Ag= Subject key identifier: 7F:7E:39:D7:36:AF:A9:4C:7A:AA:6E:7C:9A:AC:A7:65:0C:CD:F0:2A Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 4D3F3C36E2970E6BB128435E1F746BE01E02B212 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 0170 Signing time: Sat 26 Apr 2025 13:50:02 +0000 Manifest this update: Sat 26 Apr 2025 13:45:02 +0000 Manifest next update: Tue 29 Apr 2025 21:30:02 +0000 Files and hashes: 1: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=) 2: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=) 3: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: s3Ln686FINzlXqMQJ6a1JU9n2evkU6NwitrSYgC6CSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 21:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3f:3c:36:e2:97:0e:6b:b1:28:43:5e:1f:74:6b:e0:1e:02:b2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Apr 26 13:45:02 2025 GMT Not After : Apr 29 21:30:02 2025 GMT Subject: CN=7F7E39D736AFA94C7AAA6E7C9AACA7650CCDF02A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:00:86:99:63:16:c8:fe:b4:39:25:94:fd: 7b:d2:ad:27:58:7e:5e:12:01:b3:09:fa:86:60:c2: 4b:81:3d:4e:c3:35:31:4d:cf:a9:aa:b9:de:0d:f2: 6c:ae:19:70:83:ef:61:61:0f:8f:9a:3b:a1:1a:65: aa:26:e7:67:5a:a1:f1:88:63:df:fd:b4:1b:2e:a3: 4e:14:bd:e8:6f:2b:d9:37:50:06:de:9b:64:6c:91: 4a:9d:70:1e:c7:b4:41:4f:19:19:7b:d0:7a:b8:41: 82:1c:4a:31:d7:68:a6:e5:59:1b:1b:85:ca:5b:76: 81:46:98:ca:bd:4e:27:55:dd:6a:a3:f8:46:7d:0d: de:f4:fc:95:7c:46:3c:7e:02:b9:7e:8c:5d:63:45: ef:d9:00:56:a5:c3:2b:64:3c:77:d8:cb:6d:22:e0: ac:b8:0d:d2:fa:51:f1:5f:8c:a4:58:08:8c:5d:e2: 0f:a1:3f:e8:83:ea:ee:62:79:8c:ba:cc:9e:19:d5: b5:33:6e:06:bc:9e:4d:14:1c:fb:93:0e:98:4a:bf: 69:5e:6e:7e:ff:fc:08:13:30:82:90:c4:06:14:b4: 69:bc:0a:f3:ad:d3:de:97:5d:25:04:97:84:ba:cd: 18:bb:84:18:df:4b:3c:cc:bb:19:77:e2:51:6d:97: 2e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7E:39:D7:36:AF:A9:4C:7A:AA:6E:7C:9A:AC:A7:65:0C:CD:F0:2A X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:34:5e:cc:56:16:ca:ad:8c:79:d2:59:2f:9a:b0:d9:e1:c7: e8:1f:e7:e7:be:c9:ff:7d:ad:61:e9:c6:b8:a8:77:97:d9:38: 22:f0:de:d1:5c:e4:86:33:51:c5:83:fc:d6:cf:9d:18:47:c5: af:3e:3a:38:92:37:7c:0c:be:57:36:f3:6f:3d:7a:1f:ab:b8: b6:86:86:da:f4:c4:b4:18:de:ef:1c:8c:38:07:c8:cb:d5:d8: 9a:9d:56:ef:a7:f7:86:50:cd:11:31:89:f3:79:4b:f9:6e:72: 39:97:9b:b8:ab:33:91:c9:f0:cd:6e:ef:f5:21:75:73:2f:1e: a9:24:31:7d:2a:0c:53:87:0c:57:6f:8b:90:41:21:e2:8b:9c: a3:94:6d:cd:8f:d7:25:41:2d:3a:ae:c8:4d:5c:66:b4:33:ab: ec:8f:da:3d:0c:91:66:9d:bc:53:7e:c6:bd:b3:26:dd:9a:1d: 03:30:60:66:b2:22:69:47:7d:73:ae:a2:47:6c:29:41:97:d2: c1:cf:13:a5:41:c7:b2:d4:20:52:9b:a7:59:f1:c7:af:2c:b9: a8:c9:70:8c:bc:e8:d1:a1:36:b3:41:f2:a1:e5:5f:2b:a8:16: 56:e5:98:87:75:37:1c:f3:b4:30:32:78:45:08:27:dd:bc:7d: e2:b0:80:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTT88NuKXDmuxKENeH3Rr4B4CshIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTA0MjYxMzQ1MDJaFw0yNTA0MjkyMTMwMDJaMDMxMTAvBgNV BAMTKDdGN0UzOUQ3MzZBRkE5NEM3QUFBNkU3QzlBQUNBNzY1MENDREYwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCynACGmWMWyP60OSWU/XvSrSdY fl4SAbMJ+oZgwkuBPU7DNTFNz6mqud4N8myuGXCD72FhD4+aO6EaZaom52daofGI Y9/9tBsuo04UvehvK9k3UAbem2RskUqdcB7HtEFPGRl70Hq4QYIcSjHXaKblWRsb hcpbdoFGmMq9TidV3Wqj+EZ9Dd70/JV8Rjx+Arl+jF1jRe/ZAFalwytkPHfYy20i 4Ky4DdL6UfFfjKRYCIxd4g+hP+iD6u5ieYy6zJ4Z1bUzbga8nk0UHPuTDphKv2le bn7//AgTMIKQxAYUtGm8CvOt096XXSUEl4S6zRi7hBjfSzzMuxl34lFtly7FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf3451zavqUx6qm58mqynZQzN8CowHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ0XsxWFsqtjHnSWS+asNnhx+gf5+e+yf99 rWHpxriod5fZOCLw3tFc5IYzUcWD/NbPnRhHxa8+OjiSN3wMvlc28289eh+ruLaG htr0xLQY3u8cjDgHyMvV2JqdVu+n94ZQzRExifN5S/lucjmXm7irM5HJ8M1u7/Uh dXMvHqkkMX0qDFOHDFdvi5BBIeKLnKOUbc2P1yVBLTquyE1cZrQzq+yP2j0MkWad vFN+xr2zJt2aHQMwYGayImlHfXOuokdsKUGX0sHPE6VBx7LUIFKbp1nxx68suajJ cIy86NGhNrNB8qHlXyuoFlblmId1NxzztDAyeEUIJ928feKwgJE= -----END CERTIFICATE-----Generated at Mon Apr 28 03:00:04 2025 by rpki-client