$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: 65e4Ws8cw5ZtDOxUhe+mo3zQLislDQLJNy/raeOfSfI= Subject key identifier: 24:B0:AA:95:75:19:50:FB:C7:63:88:93:68:07:9E:B4:96:DB:5F:EF Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 5A8C137777FA200B72F773E08AB2466B31AB1D4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 0179 Signing time: Sat 19 Jul 2025 10:00:45 +0000 Manifest this update: Sat 19 Jul 2025 09:55:45 +0000 Manifest next update: Tue 22 Jul 2025 19:59:45 +0000 Files and hashes: 1: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: hG4oARBUatfE1LnQ05MffzEg/XQPtPw1yz0YfTAYFXw=) 2: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: nXIgwMlbCEiRLhTmQpk3ILcP6WiZR0pqc4IDqdZRoJI=) 3: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:8c:13:77:77:fa:20:0b:72:f7:73:e0:8a:b2:46:6b:31:ab:1d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Jul 19 09:55:45 2025 GMT Not After : Jul 22 19:59:45 2025 GMT Subject: CN=24B0AA95751950FBC763889368079EB496DB5FEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:d5:2e:ef:4d:a3:ed:9f:90:38:e4:9e:08: 04:f9:52:ec:c9:13:1e:d6:97:97:77:b3:23:18:de: ee:67:a7:23:8e:17:8d:29:79:a4:a4:ff:78:d0:f8: d4:8a:c5:b8:ca:7e:d8:bc:58:0a:36:7f:bb:09:08: 38:9a:dc:37:2e:97:59:21:d1:a0:2f:80:2a:b6:28: af:41:f4:c2:a9:82:4a:3d:36:bc:cd:f4:83:44:de: 3a:c5:44:2a:3f:52:3a:14:e6:d0:52:eb:ab:80:cd: e6:02:5f:23:1a:00:5d:55:06:25:e5:8a:c6:48:97: 7b:07:94:71:10:9e:f7:a9:cd:7b:8d:af:74:86:33: 29:67:9a:77:8b:c2:96:15:39:b0:08:5a:7e:b7:2d: 87:d3:4a:b9:f1:03:b6:39:d8:1a:ed:12:46:b3:3d: 6c:7a:f7:7f:8f:6d:cd:47:79:42:f3:54:7a:55:f8: 0d:06:16:28:d1:d1:c1:ba:f7:0c:c6:2e:fd:04:cd: d6:20:e0:20:31:6e:d6:05:ff:d0:07:85:39:27:c2: 12:dd:8e:45:ba:88:2b:12:1f:ea:df:26:f2:8c:98: 78:b8:dd:d5:6a:c7:77:38:80:8e:71:ee:48:fb:00: dd:bc:cc:84:97:32:60:89:e7:ff:07:ae:dc:12:92: cf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B0:AA:95:75:19:50:FB:C7:63:88:93:68:07:9E:B4:96:DB:5F:EF X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:92:92:79:9f:26:9c:15:1e:c4:d7:8e:fe:ed:b4:46:e9:4f: 0d:b6:62:fb:c4:5c:7b:1c:c1:01:97:81:26:02:3e:fc:ca:1a: ec:00:4b:9b:ac:1b:67:17:0a:b5:72:61:dc:5c:97:75:6b:34: 94:c6:90:b6:85:b0:41:44:cd:a3:ca:d0:2f:da:8e:90:01:2a: 7a:6e:44:95:56:27:4f:dc:30:3b:80:6f:d6:b9:7a:95:b6:59: d2:10:78:4d:59:38:ce:ce:77:15:99:64:bd:b8:f2:83:e3:e1: 36:84:05:fe:c0:ef:b9:97:18:98:0c:e9:2a:c5:b9:c3:fd:12: f4:2a:6b:df:4b:13:8f:4e:e2:04:5f:cf:35:03:7c:fe:ff:74: bf:97:d6:ef:96:6b:00:16:0b:15:b3:5f:e5:27:d5:27:6a:db: 6f:c9:cc:c6:c6:a8:23:73:b0:83:04:87:e1:08:76:ba:d8:53: 4c:e9:b0:d3:aa:12:22:35:e4:4e:e3:8c:e8:45:c8:be:a2:7c: c1:cb:fc:fe:19:8c:c9:f7:bb:ef:66:f3:17:51:81:68:5a:c4: a5:2d:56:44:19:3d:5b:5c:ec:05:ee:8a:e5:cd:89:66:c2:a0: 03:e6:68:57:b9:b6:41:75:19:4b:dd:6d:29:04:86:92:63:16: 45:c2:19:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWowTd3f6IAty93PgirJGazGrHUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNTA3MTkwOTU1NDVaFw0yNTA3MjIxOTU5NDVaMDMxMTAvBgNV BAMTKDI0QjBBQTk1NzUxOTUwRkJDNzYzODg5MzY4MDc5RUI0OTZEQjVGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqY9Uu702j7Z+QOOSeCAT5UuzJ Ex7Wl5d3syMY3u5npyOOF40peaSk/3jQ+NSKxbjKfti8WAo2f7sJCDia3Dcul1kh 0aAvgCq2KK9B9MKpgko9NrzN9INE3jrFRCo/UjoU5tBS66uAzeYCXyMaAF1VBiXl isZIl3sHlHEQnvepzXuNr3SGMylnmneLwpYVObAIWn63LYfTSrnxA7Y52BrtEkaz PWx693+Pbc1HeULzVHpV+A0GFijR0cG69wzGLv0EzdYg4CAxbtYF/9AHhTknwhLd jkW6iCsSH+rfJvKMmHi43dVqx3c4gI5x7kj7AN28zISXMmCJ5/8HrtwSks9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJLCqlXUZUPvHY4iTaAeetJbbX+8wHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWSknmfJpwVHsTXjv7ttEbpTw22YvvEXHsc wQGXgSYCPvzKGuwAS5usG2cXCrVyYdxcl3VrNJTGkLaFsEFEzaPK0C/ajpABKnpu RJVWJ0/cMDuAb9a5epW2WdIQeE1ZOM7OdxWZZL248oPj4TaEBf7A77mXGJgM6SrF ucP9EvQqa99LE49O4gRfzzUDfP7/dL+X1u+WawAWCxWzX+Un1Sdq22/JzMbGqCNz sIMEh+EIdrrYU0zpsNOqEiI15E7jjOhFyL6ifMHL/P4ZjMn3u+9m8xdRgWhaxKUt VkQZPVtc7AXuiuXNiWbCoAPmaFe5tkF1GUvdbSkEhpJjFkXCGdc= -----END CERTIFICATE-----Generated at Mon Jul 21 10:32:37 2025 by rpki-client