$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: U9P06Lr7LDuLK2Kl8QiZpoQ+iLHv0isu1eupK36WyME= Subject key identifier: 2C:A8:6A:82:47:73:F4:FD:18:A2:5B:63:64:B1:7E:C4:F2:2C:D9:94 Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 20C28D638CFD4BB1932A6DB5F560B76EDBCBB601 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 0176 Signing time: Sat 10 May 2025 08:30:02 +0000 Manifest this update: Sat 10 May 2025 08:25:02 +0000 Manifest next update: Tue 13 May 2025 19:29:02 +0000 Files and hashes: 1: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=) 2: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: hcf23nXuEZRAgaoDkRimpy+q0DO7dIA/MSEnTHqFpwg=) 3: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c2:8d:63:8c:fd:4b:b1:93:2a:6d:b5:f5:60:b7:6e:db:cb:b6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: May 10 08:25:02 2025 GMT Not After : May 13 19:29:02 2025 GMT Subject: CN=2CA86A824773F4FD18A25B6364B17EC4F22CD994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:4a:f4:f6:ed:c6:3c:e9:7b:3f:16:a5:5b: bc:b6:e9:4c:bb:95:c3:a9:05:16:b3:c6:55:4a:8e: b2:5f:a1:70:4a:f1:c2:fe:43:5e:f4:b2:42:81:e5: b8:10:46:d0:a3:0d:f0:66:33:b9:0c:8a:93:ed:31: d7:87:9b:20:ab:25:4c:ff:b9:53:b0:55:c6:12:be: 25:21:9e:9a:94:9f:80:12:e6:38:53:cf:bb:e2:41: 81:2a:00:87:94:6d:cb:ab:9d:8c:e9:bb:19:65:3c: a9:10:5e:7d:3b:71:25:b7:d2:92:7e:22:7c:ae:ae: fc:e0:78:4f:a7:ff:16:52:6a:6f:d8:90:6b:8b:e4: b4:d7:1d:8a:ea:8c:45:6c:d4:e5:c1:ac:75:63:ba: 2c:24:bd:c4:15:a0:cf:71:63:90:fb:04:b6:66:4f: 3c:13:7c:e7:51:81:20:83:95:00:bb:db:9d:dc:64: d9:72:27:40:20:e2:f0:a6:bb:bb:92:24:a3:1b:bf: 82:c4:80:ff:d6:d8:7f:e3:7d:6e:74:66:28:24:1b: f7:1e:06:8b:ee:0e:2a:e2:84:ae:06:52:0f:f0:9c: 70:04:4c:ce:34:5a:16:2a:a5:fd:76:40:d7:65:d8: 85:f7:87:a3:e5:00:2e:12:c7:d8:b5:2f:ce:95:9b: d8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A8:6A:82:47:73:F4:FD:18:A2:5B:63:64:B1:7E:C4:F2:2C:D9:94 X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:36:96:4a:ce:f6:42:5d:60:48:d1:5a:db:0d:20:2c:c5:90: 55:cc:85:a4:73:94:8e:51:d5:50:a2:08:44:b4:59:dd:8c:55: 89:cb:92:e6:5f:b0:fb:9f:d6:a6:a3:67:31:f5:88:bb:9c:b5: 9d:3a:ab:25:c6:d9:09:44:fe:01:92:41:f5:75:3c:c8:f0:02: 38:0a:71:75:4b:04:fd:fc:eb:ba:fa:bd:d0:62:67:70:bc:69: ef:46:93:e5:18:6f:44:bd:35:13:92:62:38:6f:de:b8:ee:60: ae:34:bb:b0:11:8b:1a:73:f5:6d:f7:f9:61:8d:81:02:33:07: e3:74:73:87:4d:85:48:7a:b2:58:8c:23:2f:e3:b4:69:98:4f: 58:f3:78:16:63:ec:29:40:73:40:77:e5:3f:a8:88:39:39:20: ac:24:d7:ff:f6:45:2e:8d:d9:c9:6d:a2:12:25:b4:79:01:d9: 47:dc:a1:cd:dd:54:4f:43:b1:82:cb:63:7a:1f:4e:72:5c:f2: af:b6:bd:f9:30:0e:e9:ff:48:1e:29:7c:a3:27:09:64:c6:f4: 03:b3:90:9f:5c:fd:0c:23:3a:62:63:1a:6a:ee:36:da:62:27: 0b:e8:45:34:c1:96:a6:8d:37:00:7b:f9:31:56:c8:62:d3:33: 00:8f:82:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMKNY4z9S7GTKm219WC3btvLtgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTA1MTAwODI1MDJaFw0yNTA1MTMxOTI5MDJaMDMxMTAvBgNV BAMTKDJDQTg2QTgyNDc3M0Y0RkQxOEEyNUI2MzY0QjE3RUM0RjIyQ0Q5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9Er09u3GPOl7PxalW7y26Uy7 lcOpBRazxlVKjrJfoXBK8cL+Q170skKB5bgQRtCjDfBmM7kMipPtMdeHmyCrJUz/ uVOwVcYSviUhnpqUn4AS5jhTz7viQYEqAIeUbcurnYzpuxllPKkQXn07cSW30pJ+ InyurvzgeE+n/xZSam/YkGuL5LTXHYrqjEVs1OXBrHVjuiwkvcQVoM9xY5D7BLZm TzwTfOdRgSCDlQC7253cZNlyJ0Ag4vCmu7uSJKMbv4LEgP/W2H/jfW50ZigkG/ce BovuDirihK4GUg/wnHAETM40WhYqpf12QNdl2IX3h6PlAC4Sx9i1L86Vm9hdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULKhqgkdz9P0YoltjZLF+xPIs2ZQwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALs2lkrO9kJdYEjRWtsNICzFkFXMhaRzlI5R 1VCiCES0Wd2MVYnLkuZfsPuf1qajZzH1iLuctZ06qyXG2QlE/gGSQfV1PMjwAjgK cXVLBP3867r6vdBiZ3C8ae9Gk+UYb0S9NROSYjhv3rjuYK40u7ARixpz9W33+WGN gQIzB+N0c4dNhUh6sliMIy/jtGmYT1jzeBZj7ClAc0B35T+oiDk5IKwk1//2RS6N 2cltohIltHkB2Ufcoc3dVE9DsYLLY3ofTnJc8q+2vfkwDun/SB4pfKMnCWTG9AOz kJ9c/QwjOmJjGmruNtpiJwvoRTTBlqaNNwB7+TFWyGLTMwCPghQ= -----END CERTIFICATE-----Generated at Sat May 10 19:44:22 2025 by rpki-client