$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: q1grFiZ6ARFqIVb1wgWMYMl7qCAd3yf/Jdw8oSZgJpU= Subject key identifier: A4:3F:AD:E2:4C:02:8C:3A:5B:4C:55:A6:27:84:D3:64:1A:10:47:FE Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 1BEE4784A5FD74E1A91F26B02CDA2B6B7E3D2831 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 0141 Signing time: Wed 07 May 2025 23:11:37 +0000 Manifest this update: Wed 07 May 2025 23:06:37 +0000 Manifest next update: Sun 11 May 2025 10:40:37 +0000 Files and hashes: 1: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 3: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: uTRnDEbLbW3RIdQPTofXcCVsVqAJhWR2QRcq1pgdMPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 10:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ee:47:84:a5:fd:74:e1:a9:1f:26:b0:2c:da:2b:6b:7e:3d:28:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: May 7 23:06:37 2025 GMT Not After : May 11 10:40:37 2025 GMT Subject: CN=A43FADE24C028C3A5B4C55A62784D3641A1047FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:07:4f:f0:cc:48:48:fb:dc:1e:1b:ae:31:06: 9d:57:41:71:24:2d:97:a5:c6:03:63:ee:5c:35:60: 6a:99:a3:0a:91:2d:ba:63:85:e4:c5:fa:95:72:f8: f4:7f:f6:13:ae:aa:f6:24:7c:01:73:49:11:28:ab: ce:c4:8d:73:55:24:cf:65:f4:ca:06:fb:79:b4:6b: e0:4c:e1:c5:c5:f2:3a:fb:ce:8f:d1:3b:30:f9:85: 94:3d:cd:d8:6d:f6:3f:75:d8:23:1e:4d:17:fb:6e: cb:d9:9f:6d:fd:15:de:a5:5f:63:df:4a:11:a6:87: f1:97:76:26:a3:74:d4:c2:d9:75:04:a0:69:6a:1a: 80:3b:ac:fd:72:fa:a7:bc:e9:d7:53:91:ee:19:9d: ee:b1:57:08:be:cf:50:5c:1f:e9:9e:db:80:e8:cb: 71:72:2b:c6:1b:b9:0d:b5:74:e6:95:61:39:51:33: 75:77:1f:14:d0:68:91:b7:99:f7:16:cc:1d:ea:7b: 39:e7:cb:b0:05:12:9c:ae:be:42:5c:5c:36:b3:e3: e2:a8:56:a5:10:a9:67:f7:d7:6f:65:75:dd:77:97: 52:a1:d9:d1:46:37:cc:6e:02:12:94:c4:33:c2:7e: ee:bc:bc:5b:6a:3c:60:b3:2c:5d:4a:27:55:bb:20: dc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3F:AD:E2:4C:02:8C:3A:5B:4C:55:A6:27:84:D3:64:1A:10:47:FE X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:37:1e:ec:0b:ad:e7:9a:c0:c9:a5:7a:62:32:13:96:fa:d6: ed:a7:69:16:04:38:54:30:9e:92:af:53:23:fc:60:26:b4:17: 37:0a:ec:22:fd:21:e1:17:af:82:08:c1:1a:48:84:2f:45:fc: dd:73:b7:26:4d:38:93:be:47:61:f0:0b:31:37:95:78:ae:3a: cb:9c:7b:30:2d:78:7c:a6:77:77:37:41:84:ab:ef:05:c7:37: eb:b0:44:de:fa:70:3f:cb:b9:9b:0a:58:23:9c:a5:e0:1d:63: e4:53:ea:cd:72:3d:02:b1:5f:24:32:c5:03:99:04:5d:58:67: 6c:b5:0b:66:f1:54:b3:24:bb:bc:9a:c0:aa:39:ed:36:16:fb: 1e:15:60:4b:b4:76:5f:53:5c:71:d8:44:e8:52:82:00:75:f1: f7:5a:ac:7c:a4:07:c1:7f:c3:c5:0b:eb:b4:81:81:2a:b8:2f: 36:ff:93:a5:c3:e8:34:80:53:e3:63:a0:1c:12:15:ec:72:ad: 84:bd:ea:6a:56:c8:dc:04:5c:46:85:c5:c7:47:5c:30:05:9f: 03:8a:ac:47:df:cd:e9:0b:92:2a:c2:a1:22:0b:c4:4c:55:9e: 82:82:25:db:46:36:00:48:ae:90:56:d4:c4:d5:e1:4f:44:51: 0c:23:6e:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+5HhKX9dOGpHyawLNora349KDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTA1MDcyMzA2MzdaFw0yNTA1MTExMDQwMzdaMDMxMTAvBgNV BAMTKEE0M0ZBREUyNEMwMjhDM0E1QjRDNTVBNjI3ODREMzY0MUExMDQ3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlB0/wzEhI+9weG64xBp1XQXEk LZelxgNj7lw1YGqZowqRLbpjheTF+pVy+PR/9hOuqvYkfAFzSREoq87EjXNVJM9l 9MoG+3m0a+BM4cXF8jr7zo/ROzD5hZQ9zdht9j912CMeTRf7bsvZn239Fd6lX2Pf ShGmh/GXdiajdNTC2XUEoGlqGoA7rP1y+qe86ddTke4Zne6xVwi+z1BcH+me24Do y3FyK8YbuQ21dOaVYTlRM3V3HxTQaJG3mfcWzB3qeznny7AFEpyuvkJcXDaz4+Ko VqUQqWf3129ldd13l1Kh2dFGN8xuAhKUxDPCfu68vFtqPGCzLF1KJ1W7INwJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpD+t4kwCjDpbTFWmJ4TTZBoQR/4wHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAE3HuwLreeawMmlemIyE5b61u2naRYEOFQw npKvUyP8YCa0FzcK7CL9IeEXr4IIwRpIhC9F/N1ztyZNOJO+R2HwCzE3lXiuOsuc ezAteHymd3c3QYSr7wXHN+uwRN76cD/LuZsKWCOcpeAdY+RT6s1yPQKxXyQyxQOZ BF1YZ2y1C2bxVLMku7yawKo57TYW+x4VYEu0dl9TXHHYROhSggB18fdarHykB8F/ w8UL67SBgSq4Lzb/k6XD6DSAU+NjoBwSFexyrYS96mpWyNwEXEaFxcdHXDAFnwOK rEffzekLkirCoSILxExVnoKCJdtGNgBIrpBW1MTV4U9EUQwjbkA= -----END CERTIFICATE-----Generated at Sat May 10 10:36:14 2025 by rpki-client