$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: J6iu8KpWeaL0Ky0BetTVrPn3JVNymPc8eonDfxBcWLg= Subject key identifier: C4:E2:3C:3B:72:22:35:FA:D1:7F:87:B3:F9:D1:7A:0B:42:35:37:04 Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 28778A261988ECA2A3E78C8956BA2AC5338553E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 0209 Signing time: Thu 08 May 2025 09:30:04 +0000 Manifest this update: Thu 08 May 2025 09:25:04 +0000 Manifest next update: Sun 11 May 2025 19:15:04 +0000 Files and hashes: 1: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: mILgNsqQOC7ukAkdxDoanzwIWxBZqUVcAA8Xp+zkfbw=) 2: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: a8Utia5qU9n4+bBlDpN38er1+W4sBeFdjja/ZD1sS3s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:77:8a:26:19:88:ec:a2:a3:e7:8c:89:56:ba:2a:c5:33:85:53:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: May 8 09:25:04 2025 GMT Not After : May 11 19:15:04 2025 GMT Subject: CN=C4E23C3B722235FAD17F87B3F9D17A0B42353704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:8e:bb:79:7e:ed:cc:d9:da:bc:63:5b:db: c8:3d:06:ed:8f:71:80:b0:54:b6:66:55:4f:f5:25: 42:ec:b8:24:a5:83:a4:d6:cb:60:4c:20:39:b6:8e: 24:86:75:ea:05:fe:59:c6:78:6b:06:bc:9a:c5:f7: 2c:fc:1e:48:7a:0a:d8:40:3a:d9:64:75:6b:06:a2: f1:a6:86:60:14:5f:e8:fc:a1:5c:d2:90:c2:19:d4: 6d:40:3d:50:c1:df:c7:da:c5:01:23:bb:18:66:d0: 00:70:a0:92:1d:56:d8:f9:bc:97:14:12:56:54:51: 30:48:d4:f9:ad:41:d7:ed:7e:10:5b:b9:20:2f:05: 91:55:76:b7:d6:2a:dd:03:f5:c9:11:64:b2:c4:9a: 06:9e:96:84:20:75:8b:98:a0:c7:14:53:6a:fc:26: 62:23:11:1b:9b:22:60:59:9f:ab:46:1f:b3:db:26: f1:19:9a:16:80:48:20:a1:8d:6c:ab:a4:58:3b:3f: 6f:4f:ce:a6:2d:ac:15:49:22:0e:bf:b1:2a:f5:79: 9d:2a:5f:cd:24:46:e2:3a:2b:d6:10:11:48:ee:d3: 99:2a:64:f9:d0:e8:4f:55:1f:fb:84:f2:20:32:b9: 39:4b:52:4e:39:d2:30:e7:8c:e4:04:9f:40:13:00: ed:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E2:3C:3B:72:22:35:FA:D1:7F:87:B3:F9:D1:7A:0B:42:35:37:04 X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e3:11:6d:1b:61:4c:bc:97:22:f7:2b:e1:05:5f:6d:a2:e9: bd:c2:c7:d4:3e:94:46:d0:3d:7a:92:1d:d6:67:77:b0:1b:24: b4:00:68:b8:fe:f4:b8:d5:7e:dc:e3:b3:5d:58:72:e7:bc:8e: 04:2f:8a:af:60:c8:c2:cc:1c:21:73:c4:44:d9:ea:02:48:de: 7c:6f:13:03:b1:2d:a4:60:e6:e7:b9:fe:b7:f5:fc:83:fc:18: 44:b7:e5:e1:71:7c:48:9b:f7:03:e7:b5:fb:b4:e9:54:29:7c: 05:32:2d:74:91:52:b7:1a:c2:76:2e:1b:3a:96:c1:01:15:77: 0f:0e:bb:49:e0:a2:8e:2c:91:c8:b9:9c:e1:3e:f9:82:53:41: c9:89:27:50:20:fd:43:bd:2f:cf:8d:75:a7:c6:96:4e:ea:b8: f1:94:57:7a:87:38:f7:1e:4f:55:e4:83:3a:99:64:c9:cf:7e: f0:c8:85:1f:fa:70:de:8e:4b:3a:5b:be:58:b9:76:0e:eb:bf: 2d:38:4d:30:f5:69:dd:25:49:44:34:42:bf:70:48:59:39:1f: e4:4f:75:c4:6b:ce:22:94:f9:0d:be:ff:83:86:22:16:2e:66: 04:11:7f:28:56:3b:1e:19:cc:f9:d3:d5:d1:fe:ba:0a:b9:c8: 7e:ce:fe:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHeKJhmI7KKj54yJVroqxTOFU+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNTA1MDgwOTI1MDRaFw0yNTA1MTExOTE1MDRaMDMxMTAvBgNV BAMTKEM0RTIzQzNCNzIyMjM1RkFEMTdGODdCM0Y5RDE3QTBCNDIzNTM3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Wo67eX7tzNnavGNb28g9Bu2P cYCwVLZmVU/1JULsuCSlg6TWy2BMIDm2jiSGdeoF/lnGeGsGvJrF9yz8Hkh6CthA OtlkdWsGovGmhmAUX+j8oVzSkMIZ1G1APVDB38faxQEjuxhm0ABwoJIdVtj5vJcU ElZUUTBI1PmtQdftfhBbuSAvBZFVdrfWKt0D9ckRZLLEmgaeloQgdYuYoMcUU2r8 JmIjERubImBZn6tGH7PbJvEZmhaASCChjWyrpFg7P29PzqYtrBVJIg6/sSr1eZ0q X80kRuI6K9YQEUju05kqZPnQ6E9VH/uE8iAyuTlLUk450jDnjOQEn0ATAO2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxOI8O3IiNfrRf4ez+dF6C0I1NwQwHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjjEW0bYUy8lyL3K+EFX22i6b3Cx9Q+lEbQ PXqSHdZnd7AbJLQAaLj+9LjVftzjs11Ycue8jgQviq9gyMLMHCFzxETZ6gJI3nxv EwOxLaRg5ue5/rf1/IP8GES35eFxfEib9wPntfu06VQpfAUyLXSRUrcawnYuGzqW wQEVdw8Ou0ngoo4skci5nOE++YJTQcmJJ1Ag/UO9L8+NdafGlk7quPGUV3qHOPce T1XkgzqZZMnPfvDIhR/6cN6OSzpbvli5dg7rvy04TTD1ad0lSUQ0Qr9wSFk5H+RP dcRrziKU+Q2+/4OGIhYuZgQRfyhWOx4ZzPnT1dH+ugq5yH7O/pw= -----END CERTIFICATE-----Generated at Fri May 9 11:16:31 2025 by rpki-client