$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: 63w1Rl7zTGndKIDc6YN3+ylQsL0SUUQnaTs/TTFIGJ8= Subject key identifier: F4:09:B0:53:3B:CD:0E:15:37:1C:53:4F:E4:BB:BB:85:0E:EA:03:51 Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 4B0526452C52A293EA48BF31CEA234AD94D624A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: 67 Signing time: Fri 09 May 2025 12:01:29 +0000 Manifest this update: Fri 09 May 2025 11:56:29 +0000 Manifest next update: Mon 12 May 2025 22:40:29 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: VYWAk8iGSZzF5g6fTa7RhmuP4rGT675f8tCJgCmKW00=) 2: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: DcyT7FKYJeNI4mvW6sOgPd1gj/wejAau98FGVmYEpUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:05:26:45:2c:52:a2:93:ea:48:bf:31:ce:a2:34:ad:94:d6:24:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: May 9 11:56:29 2025 GMT Not After : May 12 22:40:29 2025 GMT Subject: CN=F409B0533BCD0E15371C534FE4BBBB850EEA0351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:42:b1:62:c0:60:c3:5c:e8:c2:43:e0:a8: d3:54:f9:3e:68:5f:fe:06:8b:0f:5b:20:07:b8:b5: d0:df:97:3e:17:b3:88:50:20:ff:c3:f6:7c:1f:42: 79:44:a1:8f:da:05:b7:81:c4:60:b8:05:b2:88:41: 00:5f:5e:3c:9a:16:da:93:00:d7:da:00:c1:9a:02: 70:47:7b:d1:d6:73:2b:80:63:ad:ba:29:ce:f9:b1: c9:0d:e1:7e:fd:39:01:ef:8b:ae:ed:70:c6:4e:7e: 02:3e:09:67:0c:72:f7:62:ac:8b:77:7b:85:91:34: 10:62:41:0a:b7:c7:83:d5:9a:e7:97:76:c3:2e:d5: ac:4f:52:03:7d:a9:61:69:fe:87:3a:67:1a:79:0e: 14:2a:5e:d4:b9:5b:51:28:bb:4e:c4:f9:0e:eb:cb: 10:9d:aa:a5:c0:93:6e:07:7c:23:e2:a2:fb:53:dc: 29:9e:a6:c1:b2:b1:47:a8:1d:0b:15:ce:95:97:6e: 5d:a5:d1:20:a1:14:29:06:c6:1a:03:b8:21:26:49: be:63:a9:24:16:82:ab:40:cf:63:db:ad:15:13:e5: c4:32:0e:47:be:92:8c:2c:4f:13:da:c3:1e:45:32: 2f:ea:41:9a:84:e1:9a:3a:66:73:98:ce:74:be:0b: ae:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:09:B0:53:3B:CD:0E:15:37:1C:53:4F:E4:BB:BB:85:0E:EA:03:51 X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e9:b2:e2:9c:4e:45:f5:50:40:6a:0f:c0:16:cd:97:82:85: 60:3a:d7:fd:6b:ba:13:e6:3e:cd:c0:46:f5:01:bf:15:38:4f: 80:ae:df:e1:23:6e:22:ad:0a:2d:96:6d:d7:94:93:44:e0:df: 36:8d:c4:e8:04:4e:38:cd:6a:2b:d1:16:b5:97:2b:64:90:0f: 7d:57:35:b4:51:dd:f6:26:43:e1:01:e8:5e:e2:ce:35:29:bb: 2e:f8:fb:a3:be:44:7a:c3:5d:d0:9f:7a:d2:9b:05:20:b1:b8: 94:18:65:a0:be:07:d9:69:fe:3f:2c:d9:57:b4:2a:77:50:ea: e6:4e:6f:81:3e:c8:96:57:a4:9d:4a:25:ee:31:f4:27:bd:9a: 46:e6:8b:96:e4:1b:85:65:e4:4a:a6:2c:3b:37:0b:f2:48:76: 0e:a6:d2:aa:0e:09:14:52:7e:52:7c:4a:15:ac:d4:7b:ce:a6: f7:ee:e9:7b:1d:85:ca:d8:aa:e5:3c:45:78:e8:be:c7:4d:dd: f5:f9:e6:29:3b:f8:14:82:80:80:b9:16:53:43:c4:56:87:e4: 6d:19:4a:bc:b1:66:dd:84:98:b0:a5:c1:cc:c6:f7:dd:52:a0: ef:f4:5c:14:16:2c:7a:7f:b3:54:f7:3d:4a:95:84:d7:34:0c: 7a:8e:1d:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwUmRSxSopPqSL8xzqI0rZTWJKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNTA1MDkxMTU2MjlaFw0yNTA1MTIyMjQwMjlaMDMxMTAvBgNV BAMTKEY0MDlCMDUzM0JDRDBFMTUzNzFDNTM0RkU0QkJCQjg1MEVFQTAzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuI0KxYsBgw1zowkPgqNNU+T5o X/4Giw9bIAe4tdDflz4Xs4hQIP/D9nwfQnlEoY/aBbeBxGC4BbKIQQBfXjyaFtqT ANfaAMGaAnBHe9HWcyuAY626Kc75sckN4X79OQHvi67tcMZOfgI+CWcMcvdirIt3 e4WRNBBiQQq3x4PVmueXdsMu1axPUgN9qWFp/oc6Zxp5DhQqXtS5W1Eou07E+Q7r yxCdqqXAk24HfCPiovtT3CmepsGysUeoHQsVzpWXbl2l0SChFCkGxhoDuCEmSb5j qSQWgqtAz2PbrRUT5cQyDke+kowsTxPawx5FMi/qQZqE4Zo6ZnOYznS+C67JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9AmwUzvNDhU3HFNP5Lu7hQ7qA1EwHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3psuKcTkX1UEBqD8AWzZeChWA61/1ruhPm Ps3ARvUBvxU4T4Cu3+EjbiKtCi2WbdeUk0Tg3zaNxOgETjjNaivRFrWXK2SQD31X NbRR3fYmQ+EB6F7izjUpuy74+6O+RHrDXdCfetKbBSCxuJQYZaC+B9lp/j8s2Ve0 KndQ6uZOb4E+yJZXpJ1KJe4x9Ce9mkbmi5bkG4Vl5EqmLDs3C/JIdg6m0qoOCRRS flJ8ShWs1HvOpvfu6XsdhcrYquU8RXjovsdN3fX55ik7+BSCgIC5FlNDxFaH5G0Z SryxZt2EmLClwczG991SoO/0XBQWLHp/s1T3PUqVhNc0DHqOHWA= -----END CERTIFICATE-----Generated at Sun May 11 02:25:08 2025 by rpki-client