$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: zpXZPeSpRdCaoyZch1xOFurX6MnJI3pTt02Wk0OFDGA= Subject key identifier: 03:47:2C:34:22:D9:20:A2:E6:15:D5:10:7C:42:BD:9D:29:70:14:2B Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 30BC3249641D8DA92E3B82C1C2FC709F62CF9314 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: C2 Signing time: Sat 14 Jun 2025 03:10:36 +0000 Manifest this update: Sat 14 Jun 2025 03:05:36 +0000 Manifest next update: Tue 17 Jun 2025 03:30:36 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: FY+KHjxi6kb+AKoj0noWrXU84YhufVwiz23VIYvvxx4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 03:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:bc:32:49:64:1d:8d:a9:2e:3b:82:c1:c2:fc:70:9f:62:cf:93:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: Jun 14 03:05:36 2025 GMT Not After : Jun 17 03:30:36 2025 GMT Subject: CN=03472C3422D920A2E615D5107C42BD9D2970142B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:c1:86:68:3d:fb:37:a8:44:35:b1:f9:a0: 72:a2:42:8e:35:23:b5:d8:a0:88:0a:3a:37:6d:97: 92:1e:9c:5c:3d:88:26:07:cb:19:27:17:ed:de:ad: 40:60:90:b0:2e:49:84:4b:0f:10:82:2b:ee:66:67: 73:f9:ac:e3:ce:48:bb:d7:9b:22:0c:bc:4f:7c:d7: 59:ed:28:fc:45:5a:15:1d:65:99:b6:30:8c:30:0a: fd:63:09:9a:24:03:58:e0:68:d5:8e:6f:8a:95:ea: 88:a5:cd:10:27:d3:71:c0:1e:77:fb:15:16:bd:d6: 7b:6f:9a:53:b0:b9:ad:b7:af:54:5b:f9:0b:07:bf: 8a:cb:bb:84:66:d4:02:dc:5a:78:58:f6:22:45:47: 46:60:55:f4:5c:0e:e6:74:ee:0b:dd:41:6f:e8:da: 4f:e3:dc:5c:5b:c2:bb:34:1e:8a:3c:f3:1c:32:f4: 41:37:4c:1d:52:13:5d:a3:7a:e2:c6:56:e3:ac:b0: 43:c2:76:71:26:1b:d9:8e:53:ee:81:54:5d:4d:4e: e6:93:5c:95:d6:3b:e5:9a:87:25:c1:cc:61:8e:4c: 10:da:84:bf:ce:f7:04:7a:25:20:15:2a:83:f9:78: b2:d6:45:04:87:37:3a:9a:06:6a:88:16:f4:a1:2b: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:47:2C:34:22:D9:20:A2:E6:15:D5:10:7C:42:BD:9D:29:70:14:2B X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:50:f7:39:03:d1:17:77:52:99:55:c1:9e:ea:6c:33:10:78: e7:5f:b1:39:24:45:b8:77:8a:ea:4d:43:4e:d9:8e:df:6a:ac: ae:b8:df:48:57:55:af:7e:51:a0:dc:cd:12:94:99:36:f3:12: 96:75:58:6f:e2:c7:fd:52:24:c6:23:73:51:fe:b3:b2:b3:b7: 65:98:59:3d:72:07:fa:9e:8f:16:94:67:9c:84:2b:54:2d:fd: cd:d7:ac:5b:a1:1a:7b:7d:4e:5d:e7:67:b1:0f:dd:69:fa:c3: eb:61:bf:06:91:ad:04:db:e8:e3:ed:1e:9e:50:6b:20:bd:cd: cb:b6:35:be:b3:4b:74:f7:ab:35:eb:f5:74:7a:a3:3f:39:05: 4f:cc:3e:31:c2:fe:78:ea:69:cb:20:33:33:41:40:95:50:84: 7c:2e:6b:7d:c6:42:92:b3:ab:99:db:45:02:c3:ff:3d:cd:30: 82:83:5c:69:1c:69:3e:e7:89:0b:1e:bd:4c:8b:c2:d4:ce:3e: 93:4c:0f:d4:6d:55:b8:0a:32:1d:4d:58:56:b4:48:4b:5e:34: 1f:a8:95:ee:3a:0e:fb:64:d9:d4:fe:5f:b2:64:07:be:d9:a1: 9c:d2:9f:5a:c9:0b:5e:79:b1:85:1c:9a:79:29:d0:7f:27:6d: 23:79:0b:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMLwySWQdjakuO4LBwvxwn2LPkxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVC MDQ0ODdGQTAeFw0yNTA2MTQwMzA1MzZaFw0yNTA2MTcwMzMwMzZaMDMxMTAvBgNV BAMTKDAzNDcyQzM0MjJEOTIwQTJFNjE1RDUxMDdDNDJCRDlEMjk3MDE0MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz9MGGaD37N6hENbH5oHKiQo41 I7XYoIgKOjdtl5IenFw9iCYHyxknF+3erUBgkLAuSYRLDxCCK+5mZ3P5rOPOSLvX myIMvE9811ntKPxFWhUdZZm2MIwwCv1jCZokA1jgaNWOb4qV6oilzRAn03HAHnf7 FRa91ntvmlOwua23r1Rb+QsHv4rLu4Rm1ALcWnhY9iJFR0ZgVfRcDuZ07gvdQW/o 2k/j3Fxbwrs0Hoo88xwy9EE3TB1SE12jeuLGVuOssEPCdnEmG9mOU+6BVF1NTuaT XJXWO+WahyXBzGGOTBDahL/O9wR6JSAVKoP5eLLWRQSHNzqaBmqIFvShK/WxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA0csNCLZIKLmFdUQfEK9nSlwFCswHwYDVR0j BBgwFoAUqpe5WScSkfvhQkkbgQY61bBEh/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3 MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4N0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVCMDQ0 ODdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNB RDVCMDQ0ODdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1Q9zkD0Rd3UplVwZ7qbDMQeOdfsTkkRbh3 iupNQ07Zjt9qrK6430hXVa9+UaDczRKUmTbzEpZ1WG/ix/1SJMYjc1H+s7Kzt2WY WT1yB/qejxaUZ5yEK1Qt/c3XrFuhGnt9Tl3nZ7EP3Wn6w+thvwaRrQTb6OPtHp5Q ayC9zcu2Nb6zS3T3qzXr9XR6oz85BU/MPjHC/njqacsgMzNBQJVQhHwua33GQpKz q5nbRQLD/z3NMIKDXGkcaT7niQsevUyLwtTOPpNMD9RtVbgKMh1NWFa0SEteNB+o le46Dvtk2dT+X7JkB77ZoZzSn1rJC155sYUcmnkp0H8nbSN5Cz0= -----END CERTIFICATE-----Generated at Mon Jun 16 01:59:49 2025 by rpki-client