$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft File: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft (raw, json) Hash identifier: qAfq1ApnonadGATwqiOK7sj2v43ekjW6R9yGbRNmBIY= Subject key identifier: 43:4B:D4:00:E4:43:2D:DB:39:5D:BE:61:93:54:B6:92:C3:F2:CE:32 Authority key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Certificate issuer: /CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Certificate serial: 223BC3AC8169E08355A9E6433DDD56472C877945 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft Manifest number: 02D9 Signing time: Mon 30 Jun 2025 13:41:43 +0000 Manifest this update: Mon 30 Jun 2025 13:36:43 +0000 Manifest next update: Thu 03 Jul 2025 23:43:43 +0000 Files and hashes: 1: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: KZEaDqHzT8XvAKRz/ZGM0DEnysWuR8pScoWWi0m2YlA=) 2: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: rx/9Ra9EYkPirxCc1eoEdcTVbaOxROz98UA6uUBCMD8=) 3: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: kgwSBgAj0NAHhQ0HBlTTWI79Lga9cujB96EsuYLHI+s=) 4: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl (hash: 9EvhLEgTdUIb5v6hGBe1gCCHbQ99n1Jakbi0P7vMOb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 23:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3b:c3:ac:81:69:e0:83:55:a9:e6:43:3d:dd:56:47:2c:87:79:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Validity Not Before: Jun 30 13:36:43 2025 GMT Not After : Jul 3 23:43:43 2025 GMT Subject: CN=434BD400E4432DDB395DBE619354B692C3F2CE32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:29:54:97:ba:f3:6c:51:de:49:56:da:9b: 33:df:f6:c1:39:c9:8a:12:49:7f:fa:a2:a7:6a:f5: 4e:4d:45:22:87:53:d8:91:54:f9:b2:16:17:d2:64: 9f:b5:e7:73:7c:de:8e:69:0c:a4:e8:9d:85:9d:e1: d7:83:71:5a:b1:1b:63:2f:1c:1a:41:ff:7c:e6:fe: 9a:f4:c4:86:b3:55:8a:d8:7c:7e:9a:e6:3b:f9:9d: 36:00:d2:52:68:86:4a:85:28:ad:29:3b:ca:8d:19: d4:06:4b:f9:6d:b3:5c:0e:37:0c:2d:72:3a:36:cf: 2c:7e:59:7e:a3:cd:e7:85:07:93:d0:bf:4c:a1:ea: 37:46:5d:24:db:fd:83:fa:a9:ca:ec:2c:5b:ce:c5: f0:75:96:47:be:d0:d2:ff:d8:36:99:b0:55:e7:a6: 4f:1e:95:f2:a9:f5:6b:31:bf:b7:04:03:ab:5a:3c: 26:3f:bf:2b:45:7f:48:6c:e2:4a:33:1e:3d:38:07: 60:e1:cf:28:59:6c:ed:bf:b2:18:a8:96:06:5c:f9: 64:27:ab:01:99:44:88:f2:75:ef:ff:b8:60:12:e8: 15:01:d8:de:70:b4:6f:00:46:2b:f9:4c:6c:2a:58: 93:4d:45:30:17:7f:21:3b:05:98:58:d0:d2:21:b9: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4B:D4:00:E4:43:2D:DB:39:5D:BE:61:93:54:B6:92:C3:F2:CE:32 X509v3 Authority Key Identifier: keyid:AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d0:73:19:4c:0e:f0:09:c3:95:01:88:5e:04:a2:1f:02:2c: d0:4d:0a:6c:bd:e3:a6:48:fd:33:fa:12:6b:7b:15:ba:3c:8c: 84:3e:9e:25:50:73:10:a4:ed:d7:67:e5:5c:c4:76:cb:7f:95: 8c:09:4b:90:fe:4d:96:15:15:74:eb:16:a3:82:25:a3:ca:dd: c3:76:41:40:7f:b2:b5:ed:e1:fb:bb:e4:e1:12:af:2a:23:16: 11:7d:7d:5a:33:75:cb:b3:ac:76:c2:0f:a4:6a:1c:bc:b2:88: 25:3e:bd:c1:c6:57:9a:3e:d5:73:42:b7:ec:09:67:b2:a6:3e: 92:ff:7e:aa:86:c2:05:9a:c0:14:56:bd:1c:8f:81:a8:e8:5f: f5:d8:30:9e:4b:03:18:56:f7:ef:04:df:dd:1c:0d:e3:1c:41: 53:79:5c:c2:94:d9:82:ae:62:45:e9:95:1d:d6:9a:28:f1:85: 95:19:b4:83:81:ca:1b:bd:0f:cb:01:2b:50:d6:b2:03:c5:21: 1b:0a:77:9e:2e:17:eb:58:28:1c:34:8a:3e:6d:2f:ab:a6:47: 2e:d1:fc:07:f7:42:00:6f:e5:2e:84:01:33:12:ce:fd:66:a7: 86:a6:43:77:38:94:03:26:06:b0:86:e2:c5:1f:c6:95:bd:f3: fc:d2:db:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjvDrIFp4INVqeZDPd1WRyyHeUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5 MjMxMDUwNDAeFw0yNTA2MzAxMzM2NDNaFw0yNTA3MDMyMzQzNDNaMDMxMTAvBgNV BAMTKDQzNEJENDAwRTQ0MzJEREIzOTVEQkU2MTkzNTRCNjkyQzNGMkNFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7SlUl7rzbFHeSVbamzPf9sE5 yYoSSX/6oqdq9U5NRSKHU9iRVPmyFhfSZJ+153N83o5pDKTonYWd4deDcVqxG2Mv HBpB/3zm/pr0xIazVYrYfH6a5jv5nTYA0lJohkqFKK0pO8qNGdQGS/lts1wONwwt cjo2zyx+WX6jzeeFB5PQv0yh6jdGXSTb/YP6qcrsLFvOxfB1lke+0NL/2DaZsFXn pk8elfKp9Wsxv7cEA6taPCY/vytFf0hs4kozHj04B2DhzyhZbO2/shiolgZc+WQn qwGZRIjyde//uGAS6BUB2N5wtG8ARiv5TGwqWJNNRTAXfyE7BZhY0NIhud0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ0vUAORDLds5Xb5hk1S2ksPyzjIwHwYDVR0j BBgwFoAUrrMv+gAHwKBn+4zp3XfP75IxBQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMC9BRUIzMkZGQTAw MDdDMEEwNjdGQjhDRTlERDc3Q0ZFRjkyMzEwNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5MjMx MDUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk ZDQtMjYzNDcyN2E5ZWQ0LzAvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NG RUY5MjMxMDUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfQcxlMDvAJw5UBiF4Eoh8CLNBNCmy946ZI /TP6Emt7Fbo8jIQ+niVQcxCk7ddn5VzEdst/lYwJS5D+TZYVFXTrFqOCJaPK3cN2 QUB/srXt4fu75OESryojFhF9fVozdcuzrHbCD6RqHLyyiCU+vcHGV5o+1XNCt+wJ Z7KmPpL/fqqGwgWawBRWvRyPgajoX/XYMJ5LAxhW9+8E390cDeMcQVN5XMKU2YKu YkXplR3WmijxhZUZtIOByhu9D8sBK1DWsgPFIRsKd54uF+tYKBw0ij5tL6umRy7R /Af3QgBv5S6EATMSzv1mp4amQ3c4lAMmBrCG4sUfxpW98/zS2xs= -----END CERTIFICATE-----Generated at Tue Jul 1 19:25:04 2025 by rpki-client