$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: K8dvai8UdwHMM/5cEGhircJM/j32C/wFQbGJ6aVvmRQ= Subject key identifier: 26:6B:A2:65:E6:0F:81:64:E5:8A:EB:31:55:D1:49:6B:D1:EE:AE:14 Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 1AFF7EE1DC01BACAC23AF43A01270D427E0796C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: AC Signing time: Fri 25 Apr 2025 17:30:36 +0000 Manifest this update: Fri 25 Apr 2025 17:25:36 +0000 Manifest next update: Mon 28 Apr 2025 19:48:36 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: HAxtVUFeoD0TtbhyNYP6ddhqrX4jx6EWAni19l0FTHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 19:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ff:7e:e1:dc:01:ba:ca:c2:3a:f4:3a:01:27:0d:42:7e:07:96:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: Apr 25 17:25:36 2025 GMT Not After : Apr 28 19:48:36 2025 GMT Subject: CN=266BA265E60F8164E58AEB3155D1496BD1EEAE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a4:b6:4c:67:03:13:52:e2:c5:e0:13:91:cb: 09:88:31:de:19:47:49:8e:e1:75:3c:a1:c5:03:e0: 5a:ff:53:0d:c0:96:3e:42:ca:a4:1a:09:8d:2c:31: 41:ac:c8:82:57:4e:09:c3:97:a4:77:99:a3:2c:30: eb:fb:54:d1:a9:b0:c6:b7:7a:ac:c4:f8:44:45:48: f6:f4:cc:a3:41:5f:7f:22:e0:69:b5:08:62:44:88: 9b:30:9c:eb:5f:ec:a6:fc:a5:5a:5d:c0:fc:60:c9: cf:b0:10:57:78:aa:cf:a2:8c:27:dd:f1:4d:4e:a6: f6:ef:4e:7f:cc:ef:7d:d5:ff:4a:2c:9a:a6:63:91: e7:7e:a8:84:de:27:ce:27:ca:a2:15:f7:c5:0d:cd: 8c:a0:75:59:76:b5:ad:d9:76:ee:8e:cf:ef:4a:4e: fe:f3:e5:25:71:7d:3d:bb:4b:61:95:a1:b8:76:bf: b8:8c:fd:f5:59:36:3b:51:73:04:31:bb:8c:9f:b2: 62:56:5a:6d:fa:f3:9f:8a:7b:b9:0b:9e:c4:22:34: b7:50:d8:cc:90:96:0f:79:09:c8:06:e3:e8:5d:ba: 27:5b:8a:9e:c1:07:6c:c8:73:6b:6c:a9:02:6a:96: d6:9a:2d:04:e5:45:68:c4:53:15:cc:1c:92:8b:06: c1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6B:A2:65:E6:0F:81:64:E5:8A:EB:31:55:D1:49:6B:D1:EE:AE:14 X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:48:86:c1:33:93:d5:06:38:a2:47:5d:23:c7:ce:33:c6:46: 97:61:57:8a:a6:7e:da:81:eb:34:b0:7e:ef:24:17:77:99:90: 81:d6:73:22:21:ea:7a:b8:88:36:c4:48:7a:c6:6f:2d:c4:f0: 10:e3:90:38:14:02:0c:d5:cf:58:9b:c7:f8:d5:ce:71:84:4c: 63:09:14:a5:cb:ca:54:11:61:2e:ba:fa:67:c0:9a:cf:a0:85: d6:94:f7:3b:ee:ea:38:10:83:7f:ca:97:ea:68:f3:01:ad:b9: c2:16:5a:5d:5f:87:44:af:96:5a:04:eb:9a:a0:ce:27:22:d4: e5:5e:40:c4:b3:bc:a6:fe:6c:10:14:e0:88:c5:90:a5:eb:ca: 64:32:83:17:1d:f1:de:68:9c:d9:35:a4:cb:e4:d5:b7:5e:47: aa:e1:8c:48:7c:6f:29:6f:3c:57:c7:3a:68:0d:53:20:0f:3f: 98:c9:2c:b1:5c:53:92:2c:f4:dd:92:9a:28:1b:79:1f:fa:91: b3:47:88:40:a4:1d:78:b1:11:de:9d:4d:d9:22:3e:47:95:5c: 30:ba:25:a3:1a:22:d1:4a:ee:36:e2:a2:ae:05:fd:6c:05:fc: 9c:1b:6a:4f:60:92:44:da:f3:b7:c4:9b:bf:e0:69:e9:c0:d7: b1:fb:f1:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGv9+4dwBusrCOvQ6AScNQn4HlsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVC MDQ0ODdGQTAeFw0yNTA0MjUxNzI1MzZaFw0yNTA0MjgxOTQ4MzZaMDMxMTAvBgNV BAMTKDI2NkJBMjY1RTYwRjgxNjRFNThBRUIzMTU1RDE0OTZCRDFFRUFFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdpLZMZwMTUuLF4BORywmIMd4Z R0mO4XU8ocUD4Fr/Uw3Alj5CyqQaCY0sMUGsyIJXTgnDl6R3maMsMOv7VNGpsMa3 eqzE+ERFSPb0zKNBX38i4Gm1CGJEiJswnOtf7Kb8pVpdwPxgyc+wEFd4qs+ijCfd 8U1OpvbvTn/M733V/0osmqZjked+qITeJ84nyqIV98UNzYygdVl2ta3Zdu6Oz+9K Tv7z5SVxfT27S2GVobh2v7iM/fVZNjtRcwQxu4yfsmJWWm3685+Ke7kLnsQiNLdQ 2MyQlg95CcgG4+hduidbip7BB2zIc2tsqQJqltaaLQTlRWjEUxXMHJKLBsGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJmuiZeYPgWTliusxVdFJa9HurhQwHwYDVR0j BBgwFoAUqpe5WScSkfvhQkkbgQY61bBEh/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3 MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4N0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVCMDQ0 ODdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNB RDVCMDQ0ODdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtIhsEzk9UGOKJHXSPHzjPGRpdhV4qmftqB 6zSwfu8kF3eZkIHWcyIh6nq4iDbESHrGby3E8BDjkDgUAgzVz1ibx/jVznGETGMJ FKXLylQRYS66+mfAms+ghdaU9zvu6jgQg3/Kl+po8wGtucIWWl1fh0SvlloE65qg zici1OVeQMSzvKb+bBAU4IjFkKXrymQygxcd8d5onNk1pMvk1bdeR6rhjEh8bylv PFfHOmgNUyAPP5jJLLFcU5Is9N2SmigbeR/6kbNHiECkHXixEd6dTdkiPkeVXDC6 JaMaItFK7jbioq4F/WwF/Jwbak9gkkTa87fEm7/gaenA17H78Xw= -----END CERTIFICATE-----Generated at Sun Apr 27 17:18:48 2025 by rpki-client