$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: Kk8sfd+REc9YKSQklVQQhhBJqgm2WHZ/u0PV48CZr/E= Subject key identifier: 98:58:6F:01:CF:1C:28:C4:17:3A:BC:6A:7F:E4:4E:42:D2:34:26:CB Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 15205F977371008FC0FEABD8F862A0F61197D497 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 021F Signing time: Sat 28 Jun 2025 01:40:05 +0000 Manifest this update: Sat 28 Jun 2025 01:35:05 +0000 Manifest next update: Tue 01 Jul 2025 02:09:05 +0000 Files and hashes: 1: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: eIHXQ37b4+3ZAkqYSpDQxLh/htNvzqwA4KMLNOCwDuc=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: mILgNsqQOC7ukAkdxDoanzwIWxBZqUVcAA8Xp+zkfbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 02:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:20:5f:97:73:71:00:8f:c0:fe:ab:d8:f8:62:a0:f6:11:97:d4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Jun 28 01:35:05 2025 GMT Not After : Jul 1 02:09:05 2025 GMT Subject: CN=98586F01CF1C28C4173ABC6A7FE44E42D23426CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:8d:8c:ef:06:c1:49:bc:1e:1b:64:11:55: 6e:f8:b8:1c:b1:82:8a:5a:f0:b0:d6:c2:d4:97:e0: fa:fe:24:55:9b:51:ec:b7:7c:d2:7d:2a:91:ed:c6: e9:56:93:0f:5a:11:df:2c:a7:79:4e:80:b1:69:26: 91:50:9e:de:a7:d7:af:99:d0:d4:d6:01:c4:96:60: 48:0e:ef:f2:45:14:12:6c:bd:d4:8c:dd:f1:af:38: 21:d7:58:7d:69:7f:9c:60:8f:4f:46:6d:fe:eb:a8: e8:00:2b:70:90:90:66:7d:db:a9:a8:c8:9a:7b:89: 97:28:ec:66:9c:00:94:33:0e:8e:8f:a2:4f:06:81: 44:b1:38:dc:78:ff:98:77:a9:82:c4:30:7e:bc:78: 4f:db:b4:bb:62:75:d7:8f:4c:73:47:49:97:84:d0: 2a:d7:cc:25:ca:66:bc:57:e6:68:d0:c4:18:32:bf: 11:63:8a:fb:f5:b6:3d:be:94:8b:34:a3:5a:e8:68: 43:b9:d0:f7:9a:48:2b:be:01:e8:74:23:1b:2e:bf: 3b:62:11:91:8b:91:9b:d5:4e:15:ca:1c:f5:0b:5b: d7:52:ed:2d:c4:4d:4d:2f:c9:8e:a5:85:27:ff:49: 3f:05:26:8e:00:f5:e4:8a:3a:ca:0c:b4:49:2f:e4: 5f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:58:6F:01:CF:1C:28:C4:17:3A:BC:6A:7F:E4:4E:42:D2:34:26:CB X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5c:14:b0:c3:07:29:db:49:3d:f3:ab:b7:df:b7:bf:d5:6d: ac:88:5f:08:24:68:d8:db:b1:70:8c:1a:83:7a:a3:19:0a:05: 1c:31:31:fa:3b:51:7c:66:7e:9a:b2:9c:7c:09:ed:cd:37:ec: 36:c8:b7:0c:26:35:a9:1b:68:0c:50:1b:1c:b0:9f:08:20:ef: f5:4b:bc:78:72:9b:48:a4:12:49:73:5e:46:cf:30:e5:b2:19: 0a:b0:ff:fd:1b:52:4d:59:f3:cb:de:c5:78:de:d1:04:8c:f2: b1:4d:9b:69:54:12:19:3b:4a:f0:39:4f:1e:b2:d6:44:1e:f2: 68:1d:e8:0d:fd:e1:e9:24:19:0c:84:44:3f:a0:ed:5d:69:9b: 6c:2d:09:d5:28:1f:05:f0:1e:32:ef:64:8e:c1:24:10:5b:83: 12:99:ab:19:d8:5f:77:19:73:96:6a:b5:d0:dc:99:55:c8:ef: 80:93:45:02:d0:98:b7:7e:cc:18:fb:96:d0:d9:14:e8:41:2c: b0:5f:01:45:f0:aa:bf:27:50:fd:0d:e5:e2:e4:94:ac:06:33: 0f:b0:97:80:11:ac:06:53:ca:01:d1:d5:a6:5e:73:45:7e:90: 12:1c:05:d2:d5:59:94:7a:6c:6a:91:0d:a6:b9:b5:bb:14:b8: b4:d9:00:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSBfl3NxAI/A/qvY+GKg9hGX1JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNTA2MjgwMTM1MDVaFw0yNTA3MDEwMjA5MDVaMDMxMTAvBgNV BAMTKDk4NTg2RjAxQ0YxQzI4QzQxNzNBQkM2QTdGRTQ0RTQyRDIzNDI2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pI2M7wbBSbweG2QRVW74uByx gopa8LDWwtSX4Pr+JFWbUey3fNJ9KpHtxulWkw9aEd8sp3lOgLFpJpFQnt6n16+Z 0NTWAcSWYEgO7/JFFBJsvdSM3fGvOCHXWH1pf5xgj09Gbf7rqOgAK3CQkGZ926mo yJp7iZco7GacAJQzDo6Pok8GgUSxONx4/5h3qYLEMH68eE/btLtiddePTHNHSZeE 0CrXzCXKZrxX5mjQxBgyvxFjivv1tj2+lIs0o1roaEO50PeaSCu+Aeh0Ixsuvzti EZGLkZvVThXKHPULW9dS7S3ETU0vyY6lhSf/ST8FJo4A9eSKOsoMtEkv5F/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmFhvAc8cKMQXOrxqf+ROQtI0JsswHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZcFLDDBynbST3zq7fft7/VbayIXwgkaNjb sXCMGoN6oxkKBRwxMfo7UXxmfpqynHwJ7c037DbItwwmNakbaAxQGxywnwgg7/VL vHhym0ikEklzXkbPMOWyGQqw//0bUk1Z88vexXje0QSM8rFNm2lUEhk7SvA5Tx6y 1kQe8mgd6A394ekkGQyERD+g7V1pm2wtCdUoHwXwHjLvZI7BJBBbgxKZqxnYX3cZ c5ZqtdDcmVXI74CTRQLQmLd+zBj7ltDZFOhBLLBfAUXwqr8nUP0N5eLklKwGMw+w l4ARrAZTygHR1aZec0V+kBIcBdLVWZR6bGqRDaa5tbsUuLTZAHs= -----END CERTIFICATE-----Generated at Sun Jun 29 18:12:59 2025 by rpki-client