$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: C8wxKBMD1OSgogdt5Lx/u+qLchZFrpQcvw2IakZP+V8= Subject key identifier: EB:BD:C3:56:26:C1:92:8A:35:92:33:E6:FF:7E:E3:F4:50:CF:26:05 Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 47870C6C92FED503FD2729DBF17F49A77C764C93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 0170 Signing time: Sat 28 Jun 2025 20:10:52 +0000 Manifest this update: Sat 28 Jun 2025 20:05:52 +0000 Manifest next update: Wed 02 Jul 2025 02:02:52 +0000 Files and hashes: 1: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: /Evh3bq4flfJ0HPJqat0/rECfhS6pFByC5DSXDR/jsg=) 2: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: nXIgwMlbCEiRLhTmQpk3ILcP6WiZR0pqc4IDqdZRoJI=) 3: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:87:0c:6c:92:fe:d5:03:fd:27:29:db:f1:7f:49:a7:7c:76:4c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Jun 28 20:05:52 2025 GMT Not After : Jul 2 02:02:52 2025 GMT Subject: CN=EBBDC35626C1928A359233E6FF7EE3F450CF2605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:f7:fc:1f:36:fc:19:45:6d:fb:a4:49:d1: a7:7d:86:57:61:19:9b:75:ba:52:cd:95:ce:2e:30: 0c:13:c8:9b:16:f7:4f:56:b0:3a:2d:f7:e8:b9:2d: 95:c2:13:f4:e0:b2:fe:45:80:b7:74:73:7d:4b:51: c2:11:30:22:ef:66:04:d4:ef:a1:2d:54:58:70:89: 8b:34:10:f0:5b:76:cd:89:98:c6:1e:6d:a1:08:2c: 3f:42:66:d7:0f:35:bc:9d:81:ea:40:09:ef:bd:6f: 20:86:b7:2c:15:75:00:f7:ca:0b:57:cd:ac:85:c7: 9d:fe:08:d8:0b:16:df:a3:92:1e:31:a2:d7:27:3a: 0e:32:87:e8:da:17:86:c6:93:91:c7:c3:4d:7c:87: 21:3b:ff:48:83:b8:e9:fd:a1:de:1a:d6:47:12:cc: 9b:a6:7d:25:bf:96:0c:17:27:71:e0:8e:b1:ad:40: ea:3c:56:2f:c0:c7:d7:17:9d:5a:f3:16:47:84:71: 39:ef:3f:c2:d8:db:4a:a3:78:7a:7a:1f:92:14:12: 2b:0b:05:a7:18:c3:e0:bb:b5:8d:90:1c:6b:5c:88: ed:9c:26:52:86:8f:9c:9b:c0:7a:30:49:1a:f5:3e: 69:d1:fc:7d:e0:95:a7:b8:12:7e:ca:95:f3:5a:f7: 70:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BD:C3:56:26:C1:92:8A:35:92:33:E6:FF:7E:E3:F4:50:CF:26:05 X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d0:f7:0a:24:64:49:0d:cf:b1:d6:bd:39:98:d4:48:0b:28: 65:4e:9e:0d:6f:de:fb:08:48:b0:82:71:69:da:e8:bc:6a:e1: 1b:4f:0c:ac:9d:07:0e:a9:23:20:ab:39:18:e4:6a:99:1f:41: 4c:0e:f4:bd:01:29:17:5c:8c:4a:b3:74:f4:09:bb:7d:a7:06: cb:14:d3:03:1b:68:40:f5:d5:6a:97:5d:c2:97:3a:8d:9d:de: 6c:dd:d0:54:d3:fc:b0:8f:85:95:a2:30:c5:60:ed:ed:05:65: 83:43:14:cd:9f:0e:11:65:20:68:dd:22:6b:33:7a:28:91:7a: 46:85:ac:7c:6f:fe:f0:42:3a:8c:75:97:b2:5c:e3:70:d8:eb: 1b:b0:53:d3:5b:fa:e1:e1:bd:79:88:28:b1:70:5d:b1:8c:fa: 5f:97:22:79:e3:c4:28:e1:74:13:51:98:a5:9f:8f:8c:3b:37: 4f:12:a9:8d:44:cb:62:05:0f:34:03:cd:7b:d3:1f:9f:79:c7: d8:06:26:75:97:4d:d7:b2:fc:f3:ab:ec:b4:17:c0:6b:c4:22: 86:ae:00:c8:88:84:8a:b7:a5:9f:a6:b9:29:fc:aa:04:e6:19: a1:f3:0c:3c:e8:cf:44:30:42:72:37:2f:f0:b8:f0:40:bb:cc: c5:96:14:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4cMbJL+1QP9Jynb8X9Jp3x2TJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNTA2MjgyMDA1NTJaFw0yNTA3MDIwMjAyNTJaMDMxMTAvBgNV BAMTKEVCQkRDMzU2MjZDMTkyOEEzNTkyMzNFNkZGN0VFM0Y0NTBDRjI2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3Pf8Hzb8GUVt+6RJ0ad9hldh GZt1ulLNlc4uMAwTyJsW909WsDot9+i5LZXCE/Tgsv5FgLd0c31LUcIRMCLvZgTU 76EtVFhwiYs0EPBbds2JmMYebaEILD9CZtcPNbydgepACe+9byCGtywVdQD3ygtX zayFx53+CNgLFt+jkh4xotcnOg4yh+jaF4bGk5HHw018hyE7/0iDuOn9od4a1kcS zJumfSW/lgwXJ3HgjrGtQOo8Vi/Ax9cXnVrzFkeEcTnvP8LY20qjeHp6H5IUEisL BacYw+C7tY2QHGtciO2cJlKGj5ybwHowSRr1PmnR/H3glae4En7KlfNa93BZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU673DVibBkoo1kjPm/37j9FDPJgUwHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfQ9wokZEkNz7HWvTmY1EgLKGVOng1v3vsI SLCCcWna6Lxq4RtPDKydBw6pIyCrORjkapkfQUwO9L0BKRdcjEqzdPQJu32nBssU 0wMbaED11WqXXcKXOo2d3mzd0FTT/LCPhZWiMMVg7e0FZYNDFM2fDhFlIGjdImsz eiiRekaFrHxv/vBCOox1l7Jc43DY6xuwU9Nb+uHhvXmIKLFwXbGM+l+XInnjxCjh dBNRmKWfj4w7N08SqY1Ey2IFDzQDzXvTH595x9gGJnWXTdey/POr7LQXwGvEIoau AMiIhIq3pZ+muSn8qgTmGaHzDDzoz0QwQnI3L/C48EC7zMWWFLY= -----END CERTIFICATE-----Generated at Sun Jun 29 18:15:36 2025 by rpki-client