$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: 1KbvG7+DGil3XXO1pNFY0xEszl7ObrMQN6+7kLqMDKk= Subject key identifier: 82:E9:13:11:8D:A1:0E:F0:89:FC:97:D0:CB:FF:E2:D6:45:C2:DB:65 Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 443BDD76F666C7099EA57426410F743BA030F96E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 034C Signing time: Sun 04 May 2025 19:41:17 +0000 Manifest this update: Sun 04 May 2025 19:36:17 +0000 Manifest next update: Thu 08 May 2025 01:57:17 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: 7NN25xpp2UcfJ9gsuZji/qymPimRcVlHB2NW9ChDUdM=) 2: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: Ff0LXBrA3peUp+6m9p0ioI+UifH2F5IQ1lDPEfGh9Zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 01:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3b:dd:76:f6:66:c7:09:9e:a5:74:26:41:0f:74:3b:a0:30:f9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: May 4 19:36:17 2025 GMT Not After : May 8 01:57:17 2025 GMT Subject: CN=82E913118DA10EF089FC97D0CBFFE2D645C2DB65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:4c:80:92:ee:a2:11:c4:4d:e0:54:49:12: 61:6c:fd:23:b0:46:7e:95:df:ba:b4:67:91:62:80: a8:ab:5f:23:2f:71:13:c5:cd:42:d0:c3:67:32:7c: fe:22:ab:73:cf:35:e6:40:ec:5c:63:84:c9:c8:c8: 6d:52:b8:71:0f:3f:dd:de:9c:9b:22:9f:a6:95:c0: 58:69:30:50:c6:45:fc:82:c4:95:3f:67:01:60:da: ae:8c:f0:6a:70:8c:8f:49:e4:65:45:db:12:2c:d3: b1:8f:b6:bd:f6:cc:c8:f1:3e:48:44:81:a1:c3:17: fe:3f:ff:89:c2:7b:fa:27:86:75:50:1f:0a:ab:02: db:3e:88:e7:cb:4f:fa:2e:37:01:08:1a:9b:9b:4b: 19:d3:c3:7d:19:c8:c3:b4:ce:46:15:6f:5b:6e:9d: 08:bb:88:2c:af:6c:19:03:26:ec:fc:f1:9a:97:a6: 2c:75:35:9d:04:b6:f5:ca:ea:b3:91:f0:0b:08:af: 9c:05:aa:9c:2f:8b:d0:37:70:8b:4b:03:86:d6:26: 79:e9:4e:46:c8:f2:a2:0e:6c:a0:e2:b4:8f:a7:d3: 6f:59:b7:79:cd:58:62:b9:f9:8e:e5:81:8f:e1:20: e8:ef:83:f8:73:19:56:d9:d4:b1:bb:3e:bf:5f:e6: db:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E9:13:11:8D:A1:0E:F0:89:FC:97:D0:CB:FF:E2:D6:45:C2:DB:65 X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c3:12:71:f2:fe:a2:49:77:e1:ed:70:d0:e5:35:7a:73:20: b8:4f:93:be:fb:55:48:47:da:a7:9f:57:a0:55:dc:92:83:de: 06:60:ac:34:8c:4f:57:a7:22:3a:d1:81:4b:fa:ef:97:b3:2f: f3:32:85:3e:bb:39:3e:f4:bf:d9:b5:22:f6:29:c8:d1:a8:d2: bd:e7:10:66:a7:a1:55:08:d5:76:eb:11:b0:5b:b7:88:f7:48: fc:b7:a5:d2:75:70:da:ad:50:7d:11:15:24:b8:1d:9c:86:13: 53:48:fd:ca:30:ef:e2:6b:92:61:fa:bc:22:f9:ad:77:9a:04: 34:d9:30:29:5e:cc:1c:ef:67:0e:c0:5f:01:80:a9:84:6c:df: 8e:09:47:dc:94:8d:ff:54:66:77:0c:c2:68:1f:54:d6:f3:17: 97:68:f4:78:5e:91:88:60:c8:21:90:b2:e7:4e:1b:38:25:61: c8:24:f8:3e:17:f4:07:49:52:78:e6:27:c0:9e:db:19:26:dd: ba:3f:26:85:61:8e:a9:f4:44:15:fe:0c:9a:ec:53:aa:7a:b4: 63:98:e7:4e:65:b2:40:22:03:ce:0c:f2:b6:10:d2:1e:e1:19: 72:56:50:ed:f3:cd:6a:a6:2c:0d:f2:43:fb:5f:50:1d:f3:ad: 54:49:ef:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDvddvZmxwmepXQmQQ90O6Aw+W4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNTA1MDQxOTM2MTdaFw0yNTA1MDgwMTU3MTdaMDMxMTAvBgNV BAMTKDgyRTkxMzExOERBMTBFRjA4OUZDOTdEMENCRkZFMkQ2NDVDMkRCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/FEyAku6iEcRN4FRJEmFs/SOw Rn6V37q0Z5FigKirXyMvcRPFzULQw2cyfP4iq3PPNeZA7FxjhMnIyG1SuHEPP93e nJsin6aVwFhpMFDGRfyCxJU/ZwFg2q6M8GpwjI9J5GVF2xIs07GPtr32zMjxPkhE gaHDF/4//4nCe/onhnVQHwqrAts+iOfLT/ouNwEIGpubSxnTw30ZyMO0zkYVb1tu nQi7iCyvbBkDJuz88ZqXpix1NZ0EtvXK6rOR8AsIr5wFqpwvi9A3cItLA4bWJnnp TkbI8qIObKDitI+n029Zt3nNWGK5+Y7lgY/hIOjvg/hzGVbZ1LG7Pr9f5ts5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgukTEY2hDvCJ/JfQy//i1kXC22UwHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbDEnHy/qJJd+HtcNDlNXpzILhPk777VUhH 2qefV6BV3JKD3gZgrDSMT1enIjrRgUv675ezL/MyhT67OT70v9m1IvYpyNGo0r3n EGanoVUI1XbrEbBbt4j3SPy3pdJ1cNqtUH0RFSS4HZyGE1NI/cow7+JrkmH6vCL5 rXeaBDTZMClezBzvZw7AXwGAqYRs344JR9yUjf9UZncMwmgfVNbzF5do9HhekYhg yCGQsudOGzglYcgk+D4X9AdJUnjmJ8Ce2xkm3bo/JoVhjqn0RBX+DJrsU6p6tGOY 505lskAiA84M8rYQ0h7hGXJWUO3zzWqmLA3yQ/tfUB3zrVRJ7+U= -----END CERTIFICATE-----Generated at Tue May 6 22:44:02 2025 by rpki-client