$ rpki-client -vvf repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft File: AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft (raw, json) Hash identifier: HxtcR1OUjpxTjqa+ea7H8nusKuIYF8CwVnaokN3gUBw= Subject key identifier: 56:9B:A1:01:02:C7:F9:2A:C0:CD:C6:BE:ED:AE:19:B7:2B:AD:5B:06 Authority key identifier: AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 Certificate issuer: /CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Certificate serial: 1093456326B53690DC320AC4F31EF936097C54E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft Manifest number: 0174 Signing time: Sat 10 May 2025 23:51:09 +0000 Manifest this update: Sat 10 May 2025 23:46:09 +0000 Manifest next update: Wed 14 May 2025 01:50:09 +0000 Files and hashes: 1: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: EVf2WcFs3bKP8tYqDIaCEQ9aXkKueuElwWbdJ2ysh6o=) 2: AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl (hash: 9yrIxrEI2AyAXgIf4nFpa5+DxMJisdONmQRy7wk2Vg4=) 3: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: fiuKPWuy7RKi+g0sG/LNMj+SSbhL4KU/yazo65GfTmw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 01:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:93:45:63:26:b5:36:90:dc:32:0a:c4:f3:1e:f9:36:09:7c:54:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Validity Not Before: May 10 23:46:09 2025 GMT Not After : May 14 01:50:09 2025 GMT Subject: CN=569BA10102C7F92AC0CDC6BEEDAE19B72BAD5B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:ef:d9:88:18:f3:0b:cc:2f:b3:7a:ff:49: 32:0f:68:d4:bc:93:08:fa:cb:1d:3c:7e:86:d5:22: 9e:09:5d:13:06:a8:e1:60:5f:9b:24:05:ec:87:c7: 3c:f5:ff:8f:65:94:e6:b1:8d:5c:6e:90:fc:de:46: 2e:6b:d4:97:43:9f:80:57:ca:58:cd:df:fa:5d:b9: 38:9a:c8:af:78:c6:03:98:d2:b0:a2:a2:10:cd:18: e5:54:06:85:fe:b2:89:9a:a7:c9:fc:b7:15:d9:94: 47:eb:24:41:f5:40:6c:03:fb:15:cb:95:86:8f:8e: ec:e4:6a:61:53:d1:82:6c:7a:b8:2f:94:2f:17:0f: e0:65:58:ed:fb:b6:34:cc:a7:62:6d:e2:aa:86:b0: 3a:0d:bb:61:55:a5:6e:bc:bf:01:4a:68:8d:34:a1: ab:0a:21:54:c2:1a:ec:d7:36:05:88:61:32:3e:b2: 5b:a1:8b:6a:b1:41:b6:51:c8:1c:23:7e:fa:f9:53: e4:49:91:8e:72:32:66:5a:d0:30:fa:82:18:05:37: 0e:1c:99:3f:6b:52:19:61:09:07:bc:71:09:8c:b3: ae:2c:c1:c8:d5:71:e5:c1:30:d7:57:1e:92:c5:d4: d9:41:a2:09:5d:f5:de:bc:aa:a8:87:c5:8a:36:e0: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9B:A1:01:02:C7:F9:2A:C0:CD:C6:BE:ED:AE:19:B7:2B:AD:5B:06 X509v3 Authority Key Identifier: keyid:AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:db:7f:87:39:46:0b:11:e4:77:ef:54:64:ea:50:9e:04:fb: c5:bc:af:76:6b:16:57:c8:b6:18:e4:06:17:22:c4:a0:09:81: 81:8b:d4:8e:20:4d:ca:2e:60:b5:6d:2b:b1:ea:a6:52:ff:ea: 8c:45:dd:fa:d4:24:5e:e9:63:61:c7:55:67:36:59:0d:51:70: d6:dc:85:51:71:23:79:9b:2a:4e:48:38:37:39:4a:33:b5:29: f1:96:f8:eb:d5:85:6b:4a:36:d1:32:03:5a:b6:bd:c1:d5:7b: 83:9b:a0:46:32:1c:31:e5:dc:4e:02:60:79:74:04:9c:28:4f: 47:38:7a:7f:54:11:90:bd:1c:97:b5:66:e3:4e:14:d4:d1:b8: 74:c2:b0:f5:fd:3a:69:f9:49:d3:f9:09:c0:29:a8:b9:9d:cc: be:c2:46:0a:82:c4:33:95:5c:7c:d5:fb:50:17:93:f3:6f:b3: a6:cd:1a:b3:80:51:d6:d9:f4:e4:a3:00:04:f7:ca:6d:76:1c: e9:60:5e:48:b2:9a:55:9a:06:b5:8b:bc:f6:78:39:a7:a4:bf: 59:9e:69:3a:7b:cc:5f:25:7c:12:b9:a4:c3:e2:8b:ce:ae:dc: 19:63:20:24:3f:66:c6:c5:b3:d1:83:3b:76:de:0a:ae:16:1d: 18:6f:51:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJNFYya1NpDcMgrE8x75Ngl8VOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2 OUZGNUUyMDAeFw0yNTA1MTAyMzQ2MDlaFw0yNTA1MTQwMTUwMDlaMDMxMTAvBgNV BAMTKDU2OUJBMTAxMDJDN0Y5MkFDMENEQzZCRUVEQUUxOUI3MkJBRDVCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvB+/ZiBjzC8wvs3r/STIPaNS8 kwj6yx08fobVIp4JXRMGqOFgX5skBeyHxzz1/49llOaxjVxukPzeRi5r1JdDn4BX yljN3/pduTiayK94xgOY0rCiohDNGOVUBoX+somap8n8txXZlEfrJEH1QGwD+xXL lYaPjuzkamFT0YJsergvlC8XD+BlWO37tjTMp2Jt4qqGsDoNu2FVpW68vwFKaI00 oasKIVTCGuzXNgWIYTI+sluhi2qxQbZRyBwjfvr5U+RJkY5yMmZa0DD6ghgFNw4c mT9rUhlhCQe8cQmMs64swcjVceXBMNdXHpLF1NlBogld9d68qqiHxYo24LMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVpuhAQLH+SrAzca+7a4ZtyutWwYwHwYDVR0j BBgwFoAUrnthqcFnk3hMwlzsApVRbGn/XiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTg5NWNlYi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC9BRTdCNjFBOUMx Njc5Mzc4NENDMjVDRUMwMjk1NTE2QzY5RkY1RTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2OUZG NUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUx NkM2OUZGNUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTbf4c5RgsR5HfvVGTqUJ4E+8W8r3ZrFlfI thjkBhcixKAJgYGL1I4gTcouYLVtK7HqplL/6oxF3frUJF7pY2HHVWc2WQ1RcNbc hVFxI3mbKk5IODc5SjO1KfGW+OvVhWtKNtEyA1q2vcHVe4OboEYyHDHl3E4CYHl0 BJwoT0c4en9UEZC9HJe1ZuNOFNTRuHTCsPX9Omn5SdP5CcApqLmdzL7CRgqCxDOV XHzV+1AXk/Nvs6bNGrOAUdbZ9OSjAAT3ym12HOlgXkiymlWaBrWLvPZ4Oaekv1me aTp7zF8lfBK5pMPii86u3BljICQ/ZsbFs9GDO3beCq4WHRhvUcM= -----END CERTIFICATE-----Generated at Sun May 11 20:13:30 2025 by rpki-client