$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: EBTk35ktmaEcrn6/Zfjb/p4kqzeiZcb1d+zsZzcS5WM= Subject key identifier: F1:93:B4:BE:0B:25:04:8B:EB:41:61:CB:3F:7F:2F:F1:9F:E8:CE:AA Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 0F134040629DC0A2D484B41217D07255078693FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 0159 Signing time: Mon 30 Jun 2025 04:51:38 +0000 Manifest this update: Mon 30 Jun 2025 04:46:38 +0000 Manifest next update: Thu 03 Jul 2025 05:21:38 +0000 Files and hashes: 1: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 2: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) 3: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: US/cyCSy34ULQrvL2iGH+LZXCSStM2wMSyPWjBdQHP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 05:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:13:40:40:62:9d:c0:a2:d4:84:b4:12:17:d0:72:55:07:86:93:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Jun 30 04:46:38 2025 GMT Not After : Jul 3 05:21:38 2025 GMT Subject: CN=F193B4BE0B25048BEB4161CB3F7F2FF19FE8CEAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:14:1e:5e:e4:72:75:a4:4e:a3:89:4b:19: f4:a0:12:d8:69:53:36:95:5b:4b:a3:bc:71:c5:fe: 95:c6:49:c5:fd:29:fe:3f:09:a1:cf:64:9a:5d:7c: b2:6e:ff:fc:20:46:c1:1f:a1:1d:92:d4:8c:57:57: b0:1e:42:e3:8d:3c:c4:39:34:92:85:07:b8:45:fd: da:68:e5:d3:ca:32:2a:92:d0:cf:a4:b4:95:25:b7: ff:99:9c:25:29:18:09:0d:dd:88:24:32:67:c4:65: 1d:ba:58:28:c6:14:cd:6e:79:fe:3f:78:c7:89:02: ba:71:06:c1:61:f1:36:6b:77:7b:89:73:63:57:af: a5:77:16:2d:16:e2:e1:40:4f:88:d3:20:1e:99:c1: 16:99:6c:a2:48:08:f1:b1:70:26:c7:ca:75:a8:48: bf:0e:95:25:ec:95:02:85:b2:5a:2e:26:12:ca:a8: 7e:8e:82:19:9a:75:c7:64:3a:ba:31:5c:3d:ce:3b: 06:eb:2c:de:8f:df:a0:54:5d:d8:53:7d:83:93:f1: 25:36:80:46:0f:db:f2:0d:db:ba:c6:47:33:8e:15: a9:ec:f0:93:c7:43:53:50:80:a3:e0:e4:52:dd:96: 2f:4c:e8:c8:e5:db:d9:5f:4d:ba:d7:d7:7f:e8:7e: cc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:93:B4:BE:0B:25:04:8B:EB:41:61:CB:3F:7F:2F:F1:9F:E8:CE:AA X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:68:9a:ba:6b:9a:14:88:82:54:55:01:1d:c8:52:dd:0d:ce: 08:40:a7:d3:45:74:03:db:f8:b4:43:eb:21:c7:a7:b2:f0:7a: 33:64:dd:ab:13:4e:22:a2:b0:7d:49:08:60:38:89:fd:fc:ef: 45:fe:38:68:2e:c5:f7:da:d2:e6:ae:eb:5e:bc:ad:d4:77:c1: 68:1b:a8:03:18:7d:93:60:8b:9d:a1:d9:41:15:c0:45:8d:30: bf:e0:57:eb:2b:9e:35:49:16:6a:71:47:e2:f3:71:9b:f1:84: 28:de:12:06:ca:07:e3:14:25:a4:df:3c:d8:5c:f3:ea:86:77: 19:a9:8f:87:f6:d5:8f:37:c4:10:3d:3f:0e:c6:b5:74:37:15: 64:f7:d1:65:2d:1b:85:cc:43:36:fc:6f:1c:55:a8:2c:86:6b: 5f:5c:2f:4f:fa:e7:be:a3:f2:f6:32:dc:1f:3c:69:21:cc:02: 79:b8:84:5e:a7:70:68:b8:db:b9:ae:63:8b:ef:85:34:22:92: 4a:df:1b:e7:41:11:c0:c3:9d:03:34:37:de:4d:47:df:73:71: ac:87:98:e4:0e:f8:b6:5a:45:83:14:97:03:5d:e6:8f:1e:67: 84:63:4d:cd:63:a1:b2:05:ff:32:a5:ed:31:cb:da:5d:04:41: ed:3f:ac:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDxNAQGKdwKLUhLQSF9ByVQeGk/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTA2MzAwNDQ2MzhaFw0yNTA3MDMwNTIxMzhaMDMxMTAvBgNV BAMTKEYxOTNCNEJFMEIyNTA0OEJFQjQxNjFDQjNGN0YyRkYxOUZFOENFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2BQeXuRydaROo4lLGfSgEthp UzaVW0ujvHHF/pXGScX9Kf4/CaHPZJpdfLJu//wgRsEfoR2S1IxXV7AeQuONPMQ5 NJKFB7hF/dpo5dPKMiqS0M+ktJUlt/+ZnCUpGAkN3YgkMmfEZR26WCjGFM1uef4/ eMeJArpxBsFh8TZrd3uJc2NXr6V3Fi0W4uFAT4jTIB6ZwRaZbKJICPGxcCbHynWo SL8OlSXslQKFslouJhLKqH6OghmadcdkOroxXD3OOwbrLN6P36BUXdhTfYOT8SU2 gEYP2/IN27rGRzOOFans8JPHQ1NQgKPg5FLdli9M6Mjl29lfTbrX13/ofszbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8ZO0vgslBIvrQWHLP38v8Z/ozqowHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRomrprmhSIglRVAR3IUt0NzghAp9NFdAPb +LRD6yHHp7LwejNk3asTTiKisH1JCGA4if3870X+OGguxffa0uau6168rdR3wWgb qAMYfZNgi52h2UEVwEWNML/gV+srnjVJFmpxR+LzcZvxhCjeEgbKB+MUJaTfPNhc 8+qGdxmpj4f21Y83xBA9Pw7GtXQ3FWT30WUtG4XMQzb8bxxVqCyGa19cL0/6576j 8vYy3B88aSHMAnm4hF6ncGi427muY4vvhTQikkrfG+dBEcDDnQM0N95NR99zcayH mOQO+LZaRYMUlwNd5o8eZ4RjTc1jobIF/zKl7THL2l0EQe0/rA0= -----END CERTIFICATE-----Generated at Mon Jun 30 16:12:47 2025 by rpki-client