$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: HyITupyxjKlYwSzrcUaLWp6cQqYgs//SS5dCW5U5aRY= Subject key identifier: 2E:24:F9:9B:4B:30:40:A0:B6:B2:32:8B:42:32:DF:DE:64:28:32:43 Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 4FE8CE9870ABBEE95BD00DCD737F3AEF0F6A585E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: 0159 Signing time: Wed 07 May 2025 05:40:57 +0000 Manifest this update: Wed 07 May 2025 05:35:57 +0000 Manifest next update: Sat 10 May 2025 13:11:57 +0000 Files and hashes: 1: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: H/C8JBNaVqOow9m1g+QZ6kwM7JKkj4ce0Cna5R3evE0=) 2: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: vUDtYElJmSufBDZ8dQx2H/xDloiov52ApGpuvBiQ6aM=) 3: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: tbN19feblT3PguVaZeJVSZOFHq52R/v7NXiFpVjRDJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 13:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e8:ce:98:70:ab:be:e9:5b:d0:0d:cd:73:7f:3a:ef:0f:6a:58:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: May 7 05:35:57 2025 GMT Not After : May 10 13:11:57 2025 GMT Subject: CN=2E24F99B4B3040A0B6B2328B4232DFDE64283243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d8:94:3d:43:70:ea:cd:5f:e6:56:9f:9a:df: 3c:8e:89:7c:1c:4a:61:a5:42:e0:44:fd:a0:d9:1a: d4:5c:96:fd:d6:5d:ab:cc:a1:54:bd:28:f9:8e:5b: 84:54:64:6a:bd:a5:3d:b1:f5:c5:46:99:00:55:dc: 2a:7b:54:1f:f6:24:40:eb:2a:24:42:6c:83:38:3f: ae:ef:a0:03:a3:c7:46:10:41:3f:b1:33:34:0b:74: 9a:a8:57:09:8b:ff:b2:0d:34:bc:79:a2:74:cf:80: cd:fa:2e:f8:85:22:82:0b:00:1f:fd:29:f0:0b:c0: 02:26:a9:25:83:b7:ba:17:60:7a:12:9a:46:11:9c: 5a:83:28:bf:07:d2:1f:81:d8:09:05:49:b4:38:d1: f9:4d:b5:30:23:38:a2:7b:cd:10:27:66:14:48:b9: 5a:e3:7a:82:f5:cc:13:7d:cb:ae:27:12:f6:dd:54: ed:ac:8b:9a:8f:74:a5:fb:31:2c:ae:ff:25:4c:b3: 20:23:b2:1c:3e:05:f9:ca:76:49:7e:35:f7:19:6f: 26:c5:77:80:10:f8:cc:04:04:4a:ec:05:51:01:be: 15:bf:e2:7b:59:80:36:19:4f:78:3c:31:67:35:5b: cf:5e:67:e0:46:f0:42:f8:48:fd:12:a1:99:07:64: d9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:24:F9:9B:4B:30:40:A0:B6:B2:32:8B:42:32:DF:DE:64:28:32:43 X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d2:ed:77:3f:fa:d4:a5:a5:ab:a1:db:f0:91:7b:4c:17:8e: 7c:6a:68:d7:98:c3:13:d6:a3:5e:fb:f9:5a:0e:f7:a0:c8:f8: b5:a3:12:1d:fa:91:e1:e1:bb:98:1d:87:60:a6:06:c3:73:b9: c9:01:a9:9e:d7:28:30:e8:db:cb:19:54:3f:49:64:7c:5d:4a: 49:f2:f0:f6:4c:36:a1:c4:81:fe:0a:06:64:b8:97:92:d7:fc: 38:d9:72:5e:34:c6:41:f8:68:f1:c5:3c:25:7f:0d:92:4c:a6: 42:58:50:63:54:4b:53:04:60:1d:0e:b4:cc:ba:69:d9:b1:f5: 36:b5:28:80:d8:dc:89:ef:c7:ee:f1:30:76:6f:9d:ee:a9:ee: 31:d9:e3:9a:26:d9:51:c9:ed:28:c8:db:19:a3:78:44:09:46: 85:7e:78:45:64:c6:2a:91:1b:42:b5:95:95:a9:ad:67:4a:50: fc:1e:d1:d6:78:ab:05:23:00:46:e3:48:96:e4:82:f4:ea:77: 26:21:79:df:e9:8b:89:e9:ee:24:79:d0:32:2d:cf:41:5d:d5: e6:78:1a:93:5f:22:e8:8c:f7:90:3f:af:78:e2:7f:9a:a2:c7: 42:5b:07:3e:a0:e6:48:fa:5a:4f:c8:9d:b8:37:db:e3:c2:a7: 2b:d6:23:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT+jOmHCrvulb0A3Nc3867w9qWF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNTA1MDcwNTM1NTdaFw0yNTA1MTAxMzExNTdaMDMxMTAvBgNV BAMTKDJFMjRGOTlCNEIzMDQwQTBCNkIyMzI4QjQyMzJERkRFNjQyODMyNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD22JQ9Q3DqzV/mVp+a3zyOiXwc SmGlQuBE/aDZGtRclv3WXavMoVS9KPmOW4RUZGq9pT2x9cVGmQBV3Cp7VB/2JEDr KiRCbIM4P67voAOjx0YQQT+xMzQLdJqoVwmL/7INNLx5onTPgM36LviFIoILAB/9 KfALwAImqSWDt7oXYHoSmkYRnFqDKL8H0h+B2AkFSbQ40flNtTAjOKJ7zRAnZhRI uVrjeoL1zBN9y64nEvbdVO2si5qPdKX7MSyu/yVMsyAjshw+BfnKdkl+NfcZbybF d4AQ+MwEBErsBVEBvhW/4ntZgDYZT3g8MWc1W89eZ+BG8EL4SP0SoZkHZNkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULiT5m0swQKC2sjKLQjLf3mQoMkMwHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzS7Xc/+tSlpauh2/CRe0wXjnxqaNeYwxPW o177+VoO96DI+LWjEh36keHhu5gdh2CmBsNzuckBqZ7XKDDo28sZVD9JZHxdSkny 8PZMNqHEgf4KBmS4l5LX/DjZcl40xkH4aPHFPCV/DZJMpkJYUGNUS1MEYB0OtMy6 admx9Ta1KIDY3Invx+7xMHZvne6p7jHZ45om2VHJ7SjI2xmjeEQJRoV+eEVkxiqR G0K1lZWprWdKUPwe0dZ4qwUjAEbjSJbkgvTqdyYhed/pi4np7iR50DItz0Fd1eZ4 GpNfIuiM95A/r3jif5qix0JbBz6g5kj6Wk/Inbg32+PCpyvWI+0= -----END CERTIFICATE-----Generated at Thu May 8 20:43:04 2025 by rpki-client