$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: LbpJnoWnPIOVH0tMm+2G78CguHueYtu8WeFmkvJEDMA= Subject key identifier: 64:50:6E:31:D5:2F:FB:CB:AD:88:CF:AF:B7:CE:3C:97:46:87:78:FB Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 04573BF3EAA65D522233844600CBDC0C9DC354A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: 7D Signing time: Sat 28 Jun 2025 14:41:29 +0000 Manifest this update: Sat 28 Jun 2025 14:36:29 +0000 Manifest next update: Tue 01 Jul 2025 19:35:29 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: VYWAk8iGSZzF5g6fTa7RhmuP4rGT675f8tCJgCmKW00=) 2: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: VJwLg6uSafzBgO+DtVxRNLY0mU8veNvNGmAXohwz+qc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 19:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:57:3b:f3:ea:a6:5d:52:22:33:84:46:00:cb:dc:0c:9d:c3:54:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Jun 28 14:36:29 2025 GMT Not After : Jul 1 19:35:29 2025 GMT Subject: CN=64506E31D52FFBCBAD88CFAFB7CE3C97468778FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:c3:d3:12:7d:de:4e:63:8b:82:15:50:34: 80:e6:2e:a2:49:81:8a:b4:b9:7b:05:3c:1b:fb:0b: 93:7c:17:9a:86:cf:24:36:af:ee:12:b7:a2:e1:fd: bc:e2:34:13:73:b8:cc:df:48:96:7b:ab:5a:0c:e3: 5d:2e:3e:da:30:65:4a:d7:8b:2e:95:ed:e5:6b:58: 1b:1f:8a:d1:48:bb:cd:96:ca:ee:ef:7f:11:8f:2d: 69:03:69:f0:32:c9:45:f2:27:30:bd:be:e7:09:fe: 22:7b:0c:2d:9c:e0:ca:84:d4:19:f6:2d:4a:bd:cb: f4:48:1d:d2:13:b6:d1:75:fe:95:8d:09:82:b9:4d: 2c:61:51:1f:50:83:58:44:ff:1c:e9:b2:b3:fb:3e: 7b:77:d0:7e:ae:a1:db:7b:ab:36:db:3a:fc:63:f3: 06:55:2a:e0:01:b9:a6:f9:ae:14:52:5e:fc:bb:e1: 02:16:ea:21:3b:6f:c1:47:90:ef:9a:d0:6f:8c:b4: c0:3f:05:65:8e:b9:c5:80:85:71:36:8d:c1:6a:1c: 3a:2e:2d:73:4f:bd:76:b2:cb:68:d6:93:9b:d0:85: 50:42:8c:ee:37:f2:e7:e9:08:98:ee:bf:7a:2d:11: 69:22:cb:24:a3:c0:ee:66:b6:38:90:a0:9f:a6:7b: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:50:6E:31:D5:2F:FB:CB:AD:88:CF:AF:B7:CE:3C:97:46:87:78:FB X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:99:07:3a:d5:e2:f7:85:3e:33:1d:19:ba:88:47:46:88:4a: b2:02:6f:c1:81:35:7f:ef:28:c1:c7:bf:e4:bd:7d:f8:fb:3b: db:f0:15:6c:3b:6c:be:7c:b2:20:51:42:6e:ff:05:34:81:a6: 82:b7:6f:f6:10:82:cb:3f:92:c3:10:73:0e:ec:5c:f6:35:8c: 63:fe:c7:58:71:31:ce:de:ee:1c:54:27:3b:3d:20:c9:3e:99: 03:cf:2d:f8:7a:46:d4:3f:c2:fe:4b:62:05:30:47:a3:f4:76: ad:b7:1a:29:ef:25:30:09:25:46:5c:4b:66:2c:fc:a2:7d:4c: 17:9e:71:b0:27:b0:6d:a0:03:fc:7a:34:98:97:11:02:28:da: ff:f3:00:96:bf:ac:f4:84:22:4d:71:8b:0f:c9:4c:ab:6c:2f: e7:39:ae:7f:27:82:7b:45:7c:ec:f5:06:cd:d2:7f:ce:b6:eb: 4d:25:41:76:e2:15:3a:4e:56:d0:e5:6f:38:7b:ab:4f:d7:b7: cb:36:35:60:dd:6b:24:72:6c:53:cc:d1:e3:ce:6c:59:c6:d4: c1:bc:4b:e8:a1:5c:87:79:4b:ab:7e:5d:f4:70:e9:e4:a3:a9: 5e:0b:f3:8c:83:11:20:82:12:90:06:87:4c:fc:47:c1:00:3f: e2:db:16:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFc78+qmXVIiM4RGAMvcDJ3DVKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNTA2MjgxNDM2MjlaFw0yNTA3MDExOTM1MjlaMDMxMTAvBgNV BAMTKDY0NTA2RTMxRDUyRkZCQ0JBRDg4Q0ZBRkI3Q0UzQzk3NDY4Nzc4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qMPTEn3eTmOLghVQNIDmLqJJ gYq0uXsFPBv7C5N8F5qGzyQ2r+4St6Lh/bziNBNzuMzfSJZ7q1oM410uPtowZUrX iy6V7eVrWBsfitFIu82Wyu7vfxGPLWkDafAyyUXyJzC9vucJ/iJ7DC2c4MqE1Bn2 LUq9y/RIHdITttF1/pWNCYK5TSxhUR9Qg1hE/xzpsrP7Pnt30H6uodt7qzbbOvxj 8wZVKuABuab5rhRSXvy74QIW6iE7b8FHkO+a0G+MtMA/BWWOucWAhXE2jcFqHDou LXNPvXayy2jWk5vQhVBCjO438ufpCJjuv3otEWkiyySjwO5mtjiQoJ+me1czAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZFBuMdUv+8utiM+vt848l0aHePswHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuZBzrV4veFPjMdGbqIR0aISrICb8GBNX/v KMHHv+S9ffj7O9vwFWw7bL58siBRQm7/BTSBpoK3b/YQgss/ksMQcw7sXPY1jGP+ x1hxMc7e7hxUJzs9IMk+mQPPLfh6RtQ/wv5LYgUwR6P0dq23GinvJTAJJUZcS2Ys /KJ9TBeecbAnsG2gA/x6NJiXEQIo2v/zAJa/rPSEIk1xiw/JTKtsL+c5rn8ngntF fOz1Bs3Sf862600lQXbiFTpOVtDlbzh7q0/Xt8s2NWDdayRybFPM0ePObFnG1MG8 S+ihXId5S6t+XfRw6eSjqV4L84yDESCCEpAGh0z8R8EAP+LbFsI= -----END CERTIFICATE-----Generated at Mon Jun 30 16:24:48 2025 by rpki-client