$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: ebQ0VYvakDPqzxqx4eldFyo96hENuUVuZ0DoKka0S/I= Subject key identifier: 3C:26:9A:57:D9:39:D9:E4:8F:C2:CB:98:34:2A:B3:32:71:1F:B8:A6 Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 040CDAF1EE870E81C18DAD7D25C02221062B008C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: 0170 Signing time: Sat 28 Jun 2025 11:00:58 +0000 Manifest this update: Sat 28 Jun 2025 10:55:58 +0000 Manifest next update: Tue 01 Jul 2025 11:07:58 +0000 Files and hashes: 1: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: H/C8JBNaVqOow9m1g+QZ6kwM7JKkj4ce0Cna5R3evE0=) 2: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: tbN19feblT3PguVaZeJVSZOFHq52R/v7NXiFpVjRDJ4=) 3: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: P+6BIWrkXl/c3qQGxk8mgLtwB72l9NG2cj7DMZcB11A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 11:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0c:da:f1:ee:87:0e:81:c1:8d:ad:7d:25:c0:22:21:06:2b:00:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: Jun 28 10:55:58 2025 GMT Not After : Jul 1 11:07:58 2025 GMT Subject: CN=3C269A57D939D9E48FC2CB98342AB332711FB8A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:79:76:0e:14:39:59:54:59:f6:d8:bc:0f: af:fe:cc:da:c0:c7:5d:b1:ed:9c:75:01:d0:21:11: ff:2f:36:a2:7a:e4:5a:e9:21:cd:75:98:dd:df:fa: f6:1b:51:57:f7:b5:32:d5:18:ee:3e:73:ac:ef:46: e5:5d:a4:10:8a:9f:7e:3d:c1:32:9a:dd:1e:f3:6a: 23:62:44:9f:6c:69:53:ab:30:e1:ea:21:d1:ee:18: 22:e8:23:ee:87:f7:81:3d:5c:29:70:6f:0e:5a:fd: a4:76:ee:6d:3f:0e:30:5e:d3:9c:c6:48:1c:af:75: 50:77:2a:11:13:7a:d3:52:53:30:d5:d1:63:28:8a: af:94:33:2d:38:cb:0a:19:d8:b1:0f:cb:54:82:4e: 1b:ca:60:e5:b2:6b:a3:fc:68:f2:e7:f0:a5:0b:84: 78:a4:8c:52:d8:ac:b8:df:16:1d:6e:e6:3b:73:b1: 39:78:ef:22:bc:e0:30:f8:38:85:58:1b:db:37:7b: 3d:5a:5e:b8:2e:7b:bf:4f:58:db:b8:f4:f3:94:40: 1c:b6:0b:c0:fa:57:9a:61:78:c8:d7:56:67:c5:4a: 20:ed:e4:6f:22:e6:f1:18:1d:61:b9:c9:d6:fe:83: 69:95:07:69:88:9d:11:d6:c9:f2:83:27:27:e0:9a: 11:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:26:9A:57:D9:39:D9:E4:8F:C2:CB:98:34:2A:B3:32:71:1F:B8:A6 X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ca:13:14:da:0f:ed:fc:b8:af:b2:cd:28:c8:5f:98:5b:38: 90:98:7f:24:d9:6e:24:61:9a:eb:b0:23:b4:b2:6e:ac:1d:1e: fb:c4:48:c7:a2:65:1e:06:b9:44:01:5d:e8:0f:2d:b6:6f:9a: 15:d0:0f:86:6f:84:67:89:f5:d3:0d:5c:c6:f8:39:89:cd:6c: 37:3b:ef:65:bc:fa:6b:5c:de:5c:1d:a8:a2:a6:a1:bf:bd:3b: 05:3d:f1:0c:66:4f:02:ce:28:c4:b3:51:e0:09:1c:80:50:58: 36:f0:ea:88:36:00:75:fc:7b:4a:08:ca:b9:ea:9f:4d:57:bc: 30:a3:b4:98:65:1d:03:29:49:a0:7d:81:01:9d:e8:c3:aa:78: c2:62:13:3f:e0:2e:95:a8:88:c9:4b:9e:68:71:17:ba:c9:be: 34:b9:69:75:68:a2:d7:7b:77:c8:71:36:c5:b7:4f:c7:1c:0a: 12:dc:16:19:8f:70:c3:2f:6d:ac:de:71:67:ae:dd:ac:36:1f: c5:f8:de:5a:7a:0f:85:f2:53:cd:28:b2:9f:da:e0:c8:65:a2: 16:6a:c4:ae:a9:92:4e:22:8f:9b:1b:ac:52:10:3e:29:91:9c: 90:95:f9:56:91:bc:d7:cd:64:77:65:13:12:95:61:2c:3a:bc: 8c:6d:a4:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBAza8e6HDoHBja19JcAiIQYrAIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNTA2MjgxMDU1NThaFw0yNTA3MDExMTA3NThaMDMxMTAvBgNV BAMTKDNDMjY5QTU3RDkzOUQ5RTQ4RkMyQ0I5ODM0MkFCMzMyNzExRkI4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mHl2DhQ5WVRZ9ti8D6/+zNrA x12x7Zx1AdAhEf8vNqJ65FrpIc11mN3f+vYbUVf3tTLVGO4+c6zvRuVdpBCKn349 wTKa3R7zaiNiRJ9saVOrMOHqIdHuGCLoI+6H94E9XClwbw5a/aR27m0/DjBe05zG SByvdVB3KhETetNSUzDV0WMoiq+UMy04ywoZ2LEPy1SCThvKYOWya6P8aPLn8KUL hHikjFLYrLjfFh1u5jtzsTl47yK84DD4OIVYG9s3ez1aXrgue79PWNu49POUQBy2 C8D6V5pheMjXVmfFSiDt5G8i5vEYHWG5ydb+g2mVB2mInRHWyfKDJyfgmhEfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPCaaV9k52eSPwsuYNCqzMnEfuKYwHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbKExTaD+38uK+yzSjIX5hbOJCYfyTZbiRh muuwI7SybqwdHvvESMeiZR4GuUQBXegPLbZvmhXQD4ZvhGeJ9dMNXMb4OYnNbDc7 72W8+mtc3lwdqKKmob+9OwU98QxmTwLOKMSzUeAJHIBQWDbw6og2AHX8e0oIyrnq n01XvDCjtJhlHQMpSaB9gQGd6MOqeMJiEz/gLpWoiMlLnmhxF7rJvjS5aXVootd7 d8hxNsW3T8ccChLcFhmPcMMvbazecWeu3aw2H8X43lp6D4XyU80osp/a4MhlohZq xK6pkk4ij5sbrFIQPimRnJCV+VaRvNfNZHdlExKVYSw6vIxtpLY= -----END CERTIFICATE-----Generated at Sun Jun 29 19:14:13 2025 by rpki-client