$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft File: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft (raw, json) Hash identifier: b7NZcnb18/OmterxquNx6boL+0YgQuBu1iJUpl3eQDo= Subject key identifier: CC:49:4F:AB:A5:9B:A6:BF:55:35:AE:B6:6A:E8:A0:57:ED:75:73:43 Authority key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Certificate issuer: /CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Certificate serial: 76940DDFB590C807678127523E805380DAFFC7DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft Manifest number: 02C1 Signing time: Wed 07 May 2025 23:11:44 +0000 Manifest this update: Wed 07 May 2025 23:06:44 +0000 Manifest next update: Sun 11 May 2025 10:46:44 +0000 Files and hashes: 1: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl (hash: J9TwW4nsjVYROUC1JtSfGff2vEp3tFZhhvWjX6hRIK8=) 2: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: kgwSBgAj0NAHhQ0HBlTTWI79Lga9cujB96EsuYLHI+s=) 3: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: rx/9Ra9EYkPirxCc1eoEdcTVbaOxROz98UA6uUBCMD8=) 4: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: KZEaDqHzT8XvAKRz/ZGM0DEnysWuR8pScoWWi0m2YlA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 10:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:94:0d:df:b5:90:c8:07:67:81:27:52:3e:80:53:80:da:ff:c7:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Validity Not Before: May 7 23:06:44 2025 GMT Not After : May 11 10:46:44 2025 GMT Subject: CN=CC494FABA59BA6BF5535AEB66AE8A057ED757343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3e:df:73:20:bf:88:5c:66:44:f5:16:64:cd: 55:ca:8f:b2:99:d1:25:ab:31:e2:39:38:32:d7:f9: 7d:ec:b8:d9:f8:e3:9f:7c:a6:65:62:4f:46:25:dd: b0:9b:40:0f:86:d0:8e:a5:05:16:fb:94:4f:8b:ce: f7:5e:d6:07:e7:d7:33:96:3c:8a:ff:9b:e3:2e:7c: bf:16:50:b3:7b:80:68:53:9d:78:23:8d:35:04:6b: a5:fc:1f:89:2a:f4:43:85:ec:3d:f2:d3:1b:a5:d2: 22:e2:82:66:7b:42:b9:35:7f:e8:cc:83:e0:35:8e: 9f:10:71:3a:20:ac:fa:ea:4d:91:2a:95:ac:0c:e3: ef:3e:40:4b:ba:59:f5:50:3b:f7:ca:e3:3c:20:d8: 1f:60:9d:6a:d8:ba:90:23:1a:01:ac:17:8d:f6:a3: 61:c5:39:c7:30:4b:6b:6d:14:a6:12:57:95:5e:10: a6:7d:7c:e2:c8:df:6a:1e:c6:bf:72:52:f9:6f:3b: 28:b5:e9:36:40:21:58:e4:49:b7:19:c4:2a:1d:56: dd:17:c4:3b:ef:10:6e:bb:82:d5:c3:fe:ef:3c:00: 5f:25:fd:dd:d2:b3:65:6f:59:6e:de:1d:0e:cb:aa: 6e:02:d1:71:7f:a0:12:de:e2:be:7e:18:08:02:88: 1c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:49:4F:AB:A5:9B:A6:BF:55:35:AE:B6:6A:E8:A0:57:ED:75:73:43 X509v3 Authority Key Identifier: keyid:AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:16:4d:a4:ca:8c:43:24:b1:60:62:72:73:bf:cc:e1:2f:78: 65:bb:2a:5a:b2:1a:50:8d:f9:65:10:15:f0:70:ce:96:c8:60: 6a:12:a3:b6:44:68:48:97:d0:2e:77:df:ba:59:0f:bb:d3:8f: 4f:61:ef:ea:6c:ee:68:63:6a:32:e4:49:ca:72:e8:e9:a7:58: f3:86:9f:0f:7e:53:ea:28:a8:4c:7d:f3:e4:ea:3c:a1:a7:97: a0:bd:f6:53:7a:98:9d:a6:95:e5:be:9a:1e:af:7d:b7:ed:45: 6d:c7:3b:45:0e:74:2b:f7:b5:55:21:0b:e3:39:89:ae:13:d0: 96:d6:f6:95:93:32:8a:fc:50:91:9a:83:83:fd:8b:48:3e:bc: eb:a8:6f:2b:a5:3a:5d:fd:f9:a0:2f:02:34:ca:2e:93:74:f8: ad:c3:21:0a:31:f2:a5:bb:a8:43:35:ce:5a:cc:87:3d:56:2c: 2e:31:f6:82:92:8b:38:16:b8:41:c4:57:83:94:e5:38:b2:ff: ba:2b:ec:08:ff:ad:a5:8a:bc:ac:d4:73:e1:38:45:e5:81:3e: 58:dc:eb:6a:43:cf:59:8d:38:69:5d:6e:67:cf:2b:fe:68:70: f1:ea:a5:29:27:85:85:8e:96:d6:a1:27:19:93:5f:26:ae:7c: 0f:04:fe:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdpQN37WQyAdngSdSPoBTgNr/x9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5 MjMxMDUwNDAeFw0yNTA1MDcyMzA2NDRaFw0yNTA1MTExMDQ2NDRaMDMxMTAvBgNV BAMTKENDNDk0RkFCQTU5QkE2QkY1NTM1QUVCNjZBRThBMDU3RUQ3NTczNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPt9zIL+IXGZE9RZkzVXKj7KZ 0SWrMeI5ODLX+X3suNn44598pmViT0Yl3bCbQA+G0I6lBRb7lE+Lzvde1gfn1zOW PIr/m+MufL8WULN7gGhTnXgjjTUEa6X8H4kq9EOF7D3y0xul0iLigmZ7Qrk1f+jM g+A1jp8QcTogrPrqTZEqlawM4+8+QEu6WfVQO/fK4zwg2B9gnWrYupAjGgGsF432 o2HFOccwS2ttFKYSV5VeEKZ9fOLI32oexr9yUvlvOyi16TZAIVjkSbcZxCodVt0X xDvvEG67gtXD/u88AF8l/d3Ss2VvWW7eHQ7Lqm4C0XF/oBLe4r5+GAgCiBydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzElPq6Wbpr9VNa62auigV+11c0MwHwYDVR0j BBgwFoAUrrMv+gAHwKBn+4zp3XfP75IxBQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMC9BRUIzMkZGQTAw MDdDMEEwNjdGQjhDRTlERDc3Q0ZFRjkyMzEwNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5MjMx MDUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk ZDQtMjYzNDcyN2E5ZWQ0LzAvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NG RUY5MjMxMDUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0WTaTKjEMksWBicnO/zOEveGW7KlqyGlCN +WUQFfBwzpbIYGoSo7ZEaEiX0C5337pZD7vTj09h7+ps7mhjajLkScpy6OmnWPOG nw9+U+ooqEx98+TqPKGnl6C99lN6mJ2mleW+mh6vfbftRW3HO0UOdCv3tVUhC+M5 ia4T0JbW9pWTMor8UJGag4P9i0g+vOuobyulOl39+aAvAjTKLpN0+K3DIQox8qW7 qEM1zlrMhz1WLC4x9oKSizgWuEHEV4OU5Tiy/7or7Aj/raWKvKzUc+E4ReWBPljc 62pDz1mNOGldbmfPK/5ocPHqpSknhYWOltahJxmTXyaufA8E/r8= -----END CERTIFICATE-----Generated at Thu May 8 11:48:05 2025 by rpki-client