$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: CtnIjWSO4D6bW3YL6trWvuu3wa3gHEkMKC+6vnBkw2Y= Subject key identifier: EA:4E:EF:35:09:F1:B6:BE:D7:93:E3:4F:C4:49:17:82:CE:E8:CA:5B Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 5A74F01ABDBABAF01E50756154FE474BA1E03B9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: 82 Signing time: Mon 28 Apr 2025 01:51:59 +0000 Manifest this update: Mon 28 Apr 2025 01:46:59 +0000 Manifest next update: Thu 01 May 2025 03:25:59 +0000 Files and hashes: 1: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: UbbhlYQNDi6JszbpEsabaohj0lI6X/p1NOF16+0hgH0=) 2: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: Yq8Q6JYOVHESjvKiauFlSKUKL9dSlIZbiu5ayrjEea4=) 3: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: hFgCZZmX5UapKKdAuP3q9RRXI73unzQmdOHVVp3kkvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:74:f0:1a:bd:ba:ba:f0:1e:50:75:61:54:fe:47:4b:a1:e0:3b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Apr 28 01:46:59 2025 GMT Not After : May 1 03:25:59 2025 GMT Subject: CN=EA4EEF3509F1B6BED793E34FC4491782CEE8CA5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:2b:98:dc:d1:67:f0:cc:50:c4:38:c9:4b: 3b:5e:80:7a:fb:96:1e:85:3e:0d:0f:ec:96:ad:ce: 10:88:e7:d0:2c:31:a4:2b:fc:77:ab:bd:5c:5e:b6: fe:10:95:83:c5:db:05:cf:a1:dc:13:ae:80:69:dc: 27:0e:4c:6a:49:9c:ae:8b:50:9c:af:78:03:70:f4: 19:b1:bd:39:ca:f5:4e:3a:2f:c1:29:6f:19:8a:a5: db:ee:4a:8c:3c:e9:1d:db:13:ce:b9:77:e1:00:ad: f6:ac:eb:30:5c:03:30:60:ac:a7:26:1c:3e:06:50: 0d:4a:d0:ae:a1:11:e7:92:61:f1:65:f8:d0:7c:67: ee:b0:14:6b:8d:ce:78:64:af:32:ac:5d:36:63:a1: 2b:9d:10:fa:9e:0b:a2:4a:a5:e5:bc:d4:71:d2:b9: 4b:95:f1:cb:79:1d:41:37:e7:5a:16:f1:38:ec:d9: 48:d7:78:f1:79:6b:8a:a6:52:bb:52:bf:e9:93:20: 8c:df:f9:e6:10:af:6f:0b:16:ee:ef:67:eb:9d:15: 25:9d:de:94:b7:d1:4b:c6:b1:c8:0f:4f:24:28:d5: ec:c2:1a:ba:88:26:01:e2:1c:15:2a:29:c2:ad:52: 62:ad:aa:72:3f:71:b2:13:05:c6:7f:1e:de:54:96: e5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4E:EF:35:09:F1:B6:BE:D7:93:E3:4F:C4:49:17:82:CE:E8:CA:5B X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:90:31:bb:90:0a:68:14:03:00:7e:d2:a8:09:f6:06:0e:e6: c2:7e:0f:0e:41:1c:93:fb:96:49:09:73:57:2e:39:e8:cd:0f: b8:dd:c2:1f:67:a3:11:c2:cf:ed:d6:86:8f:bb:34:17:12:06: a0:17:5e:20:fb:16:37:49:45:18:f2:65:32:46:cc:57:72:88: 62:95:67:b6:fb:49:ec:67:ae:19:f7:04:fd:0d:61:69:46:09: 81:ac:76:a7:6f:75:01:45:b8:6f:0e:8a:2d:a8:c6:0c:1e:66: 39:c1:9e:93:8e:e3:0c:ea:a4:dd:a7:10:49:fa:2d:64:ff:6b: 80:09:eb:ef:86:06:32:ce:75:59:89:9f:41:4a:b6:bb:d6:5d: 3c:1e:16:20:8c:65:ea:00:ee:ae:51:e2:10:4c:bc:43:3a:5e: fd:54:e5:d1:a7:1f:6f:e8:df:91:cf:1f:1b:65:2c:b4:eb:80: 25:12:81:69:1c:16:62:d6:22:fa:f3:77:53:35:a2:98:8f:b8: ea:01:98:18:8a:c5:d9:a8:ea:77:a2:09:a7:c5:5f:d0:b8:95: 7b:e3:c0:3f:e5:a1:8f:92:60:7b:3e:5e:1f:e6:24:41:88:24: bb:93:73:c8:81:04:7d:82:46:b6:1d:c9:32:77:c6:3a:e0:1b: 22:35:0f:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWnTwGr26uvAeUHVhVP5HS6HgO5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNTA0MjgwMTQ2NTlaFw0yNTA1MDEwMzI1NTlaMDMxMTAvBgNV BAMTKEVBNEVFRjM1MDlGMUI2QkVENzkzRTM0RkM0NDkxNzgyQ0VFOENBNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpSuY3NFn8MxQxDjJSztegHr7 lh6FPg0P7JatzhCI59AsMaQr/HervVxetv4QlYPF2wXPodwTroBp3CcOTGpJnK6L UJyveANw9BmxvTnK9U46L8EpbxmKpdvuSow86R3bE865d+EArfas6zBcAzBgrKcm HD4GUA1K0K6hEeeSYfFl+NB8Z+6wFGuNznhkrzKsXTZjoSudEPqeC6JKpeW81HHS uUuV8ct5HUE351oW8Tjs2UjXePF5a4qmUrtSv+mTIIzf+eYQr28LFu7vZ+udFSWd 3pS30UvGscgPTyQo1ezCGrqIJgHiHBUqKcKtUmKtqnI/cbITBcZ/Ht5UluWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6k7vNQnxtr7Xk+NPxEkXgs7oylswHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiQMbuQCmgUAwB+0qgJ9gYO5sJ+Dw5BHJP7 lkkJc1cuOejND7jdwh9noxHCz+3Who+7NBcSBqAXXiD7FjdJRRjyZTJGzFdyiGKV Z7b7Sexnrhn3BP0NYWlGCYGsdqdvdQFFuG8Oii2oxgweZjnBnpOO4wzqpN2nEEn6 LWT/a4AJ6++GBjLOdVmJn0FKtrvWXTweFiCMZeoA7q5R4hBMvEM6Xv1U5dGnH2/o 35HPHxtlLLTrgCUSgWkcFmLWIvrzd1M1opiPuOoBmBiKxdmo6neiCafFX9C4lXvj wD/loY+SYHs+Xh/mJEGIJLuTc8iBBH2CRrYdyTJ3xjrgGyI1D/M= -----END CERTIFICATE-----Generated at Tue Apr 29 08:28:16 2025 by rpki-client