$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: aOjJtY/nJDPeiCK6532Y3Y24Vo8sBLwxLF4HrD1LP7E= Subject key identifier: 04:E8:18:D3:06:FC:A4:4A:6F:CC:EF:0A:37:9A:8E:99:F1:F8:F8:7F Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 6FCBAF3E290CDA1901075AFB46FB88A4684B1952 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 0365 Signing time: Sun 29 Jun 2025 23:11:16 +0000 Manifest this update: Sun 29 Jun 2025 23:06:16 +0000 Manifest next update: Thu 03 Jul 2025 01:32:16 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: 7NN25xpp2UcfJ9gsuZji/qymPimRcVlHB2NW9ChDUdM=) 2: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: 2flBlqmZeidavQHbzMA/c38OX6gk/wIAdaSgVPh121E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cb:af:3e:29:0c:da:19:01:07:5a:fb:46:fb:88:a4:68:4b:19:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: Jun 29 23:06:16 2025 GMT Not After : Jul 3 01:32:16 2025 GMT Subject: CN=04E818D306FCA44A6FCCEF0A379A8E99F1F8F87F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b8:94:1b:ce:5a:59:92:bc:fb:32:c4:83:b4: 9a:19:fe:5f:20:23:f1:27:9c:c9:aa:f1:98:fe:1e: e9:83:74:58:b1:ad:62:4f:c1:32:31:14:d2:21:5e: 4d:ce:e0:a7:0a:1c:ea:63:a9:c3:a0:75:83:32:d9: 1e:41:45:15:b7:ae:96:fd:72:0c:fd:d9:ee:7f:14: 9d:6f:a9:4a:ff:e3:d2:48:71:f1:34:38:e0:bd:c5: 10:5a:3e:21:60:48:4e:0e:76:51:49:47:d3:ea:02: 26:fc:0e:d2:67:a6:b8:4f:6c:04:c4:57:51:e9:35: 2c:cb:9e:ef:8f:b4:e4:b4:57:68:78:12:5c:85:27: dd:63:26:2a:cb:80:9e:6f:dc:c8:a5:a4:f4:9b:16: 2c:ac:08:57:34:6a:17:fc:b7:5e:6e:b6:2f:85:7c: bd:9d:09:f4:f8:c5:c4:99:ce:3b:15:7f:2b:32:15: 50:72:f3:8b:e4:09:8a:a4:6b:4e:47:b3:8c:07:26: 1b:ba:02:1f:e5:e4:5b:f5:1c:1d:dc:48:e8:a4:67: e3:c0:5c:da:73:b4:9b:d3:bb:aa:ca:71:53:31:1c: 01:f9:96:0d:c6:15:9e:34:4c:f7:ac:2c:9f:f9:3f: e2:08:e3:32:1f:0b:f5:01:bc:06:e3:96:64:54:bf: a1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E8:18:D3:06:FC:A4:4A:6F:CC:EF:0A:37:9A:8E:99:F1:F8:F8:7F X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e2:78:4c:4e:d4:b1:67:cb:5b:a8:cf:66:8c:50:28:12:bf: c3:b1:fe:dc:0b:e5:83:67:86:30:2b:73:56:a9:18:5f:73:c7: 78:1a:eb:50:45:25:86:a1:13:ee:05:9c:6a:31:94:71:5d:04: 41:14:4d:b9:3d:82:04:a4:75:68:38:6d:06:e3:45:83:08:c7: ed:78:85:34:11:e3:e3:53:f2:5c:89:60:d7:a2:06:ca:34:d2: 60:ed:3b:df:35:5e:e5:b9:38:a8:86:69:ee:1a:7e:4c:c9:50: d5:3b:fa:50:f7:c3:84:24:16:75:b5:88:75:bc:b1:59:e2:07: 54:27:ac:1f:d2:e5:8f:8a:43:f7:fc:42:92:d6:7e:4d:9e:1a: 46:aa:4d:cf:25:5d:f9:c0:2a:41:4c:44:05:3a:8c:aa:9c:94: 0f:f2:22:16:da:94:54:8b:c8:8f:d3:46:fb:0b:f5:4b:fe:6d: 65:ab:aa:a0:47:26:72:b0:54:5e:ee:8b:16:4e:de:ff:09:56: c9:96:ef:20:18:c3:73:3e:27:f9:9d:2e:68:d8:e3:4e:2b:4b: f1:a9:2a:72:5e:a5:1d:b8:70:8a:63:c8:b8:54:3e:a4:94:b4: c6:41:27:34:88:9d:89:90:cb:89:42:7e:cd:25:59:1d:0e:e3: 52:fc:11:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb8uvPikM2hkBB1r7RvuIpGhLGVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNTA2MjkyMzA2MTZaFw0yNTA3MDMwMTMyMTZaMDMxMTAvBgNV BAMTKDA0RTgxOEQzMDZGQ0E0NEE2RkNDRUYwQTM3OUE4RTk5RjFGOEY4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbuJQbzlpZkrz7MsSDtJoZ/l8g I/EnnMmq8Zj+HumDdFixrWJPwTIxFNIhXk3O4KcKHOpjqcOgdYMy2R5BRRW3rpb9 cgz92e5/FJ1vqUr/49JIcfE0OOC9xRBaPiFgSE4OdlFJR9PqAib8DtJnprhPbATE V1HpNSzLnu+PtOS0V2h4ElyFJ91jJirLgJ5v3MilpPSbFiysCFc0ahf8t15uti+F fL2dCfT4xcSZzjsVfysyFVBy84vkCYqka05Hs4wHJhu6Ah/l5Fv1HB3cSOikZ+PA XNpztJvTu6rKcVMxHAH5lg3GFZ40TPesLJ/5P+II4zIfC/UBvAbjlmRUv6G/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBOgY0wb8pEpvzO8KN5qOmfH4+H8wHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPieExO1LFny1uoz2aMUCgSv8Ox/twL5YNn hjArc1apGF9zx3ga61BFJYahE+4FnGoxlHFdBEEUTbk9ggSkdWg4bQbjRYMIx+14 hTQR4+NT8lyJYNeiBso00mDtO981XuW5OKiGae4afkzJUNU7+lD3w4QkFnW1iHW8 sVniB1QnrB/S5Y+KQ/f8QpLWfk2eGkaqTc8lXfnAKkFMRAU6jKqclA/yIhbalFSL yI/TRvsL9Uv+bWWrqqBHJnKwVF7uixZO3v8JVsmW7yAYw3M+J/mdLmjY404rS/Gp KnJepR24cIpjyLhUPqSUtMZBJzSInYmQy4lCfs0lWR0O41L8EZI= -----END CERTIFICATE-----Generated at Mon Jun 30 01:06:37 2025 by rpki-client