$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: KxAFobIQq1wZoixv3VKdPIs2Q1leVi+CStUo28z7CKs= Subject key identifier: 42:63:B1:8C:B2:10:66:EC:1C:ED:CD:F2:B7:5E:5A:CF:15:7E:A0:73 Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 72FAE4533E978176DF86ADF7D8235F127F1D7E61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 036F Signing time: Sat 19 Jul 2025 17:11:15 +0000 Manifest this update: Sat 19 Jul 2025 17:06:15 +0000 Manifest next update: Tue 22 Jul 2025 21:32:15 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: c8ZBxIkYu4lQhPh7KOJpCZXHyG4WojlA9cssQRO5Q3k=) 2: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: NUBQQTOjXcpYAHtxB0Dx2+rm2XMVWHrZX+KFq5IQedo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fa:e4:53:3e:97:81:76:df:86:ad:f7:d8:23:5f:12:7f:1d:7e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: Jul 19 17:06:15 2025 GMT Not After : Jul 22 21:32:15 2025 GMT Subject: CN=4263B18CB21066EC1CEDCDF2B75E5ACF157EA073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b4:73:fa:5d:a3:a4:1d:a1:a5:f6:84:4e:46: c6:0a:6a:b0:64:f3:c1:9e:bd:5d:48:12:0d:cf:2e: ee:be:f6:88:57:79:f8:88:37:ee:e2:ae:a9:65:3b: 8d:68:be:c7:5d:27:59:14:7c:97:63:41:d2:d2:75: 7a:c0:ad:73:a8:75:13:b9:9a:54:eb:f0:5c:52:b3: f1:da:aa:28:91:fa:96:8e:61:75:43:17:e0:4d:81: ba:31:8f:36:a9:70:38:da:27:97:64:12:65:82:7f: 14:88:be:bf:5f:21:05:48:f7:6e:5a:ae:b3:e2:c9: 82:77:e2:87:df:7b:ac:74:67:b3:b1:a9:86:17:cc: e5:9e:4a:e5:1a:fb:d4:b1:43:b3:96:f1:31:a9:9c: e3:b2:d1:cb:ac:9a:56:a4:99:b8:22:6d:8b:8a:18: 42:74:7f:4c:3a:b9:6e:41:27:dd:d7:d2:79:fe:35: b0:0f:ea:ed:49:b5:b6:95:f0:a5:17:88:83:50:93: e5:3e:19:68:77:b6:a3:a8:b8:aa:6d:d1:16:cb:20: 40:5b:ea:c8:7f:c6:b5:eb:01:51:24:a7:cc:32:1c: 63:26:90:e9:2b:3e:e2:2c:24:85:20:8f:89:4c:57: 5d:38:1e:24:a7:00:3e:78:42:a7:c7:b6:4d:0a:5b: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:63:B1:8C:B2:10:66:EC:1C:ED:CD:F2:B7:5E:5A:CF:15:7E:A0:73 X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ec:cc:76:19:31:49:38:33:3d:57:78:84:2b:f3:66:8a:42: ad:69:f9:7c:79:9c:af:d7:09:eb:54:d6:52:c0:2b:5a:ba:9f: 0a:b9:7e:e6:4b:83:d9:cb:59:17:f8:e0:ed:35:09:2c:8a:ff: ea:b1:f0:94:0e:cd:ae:7e:cd:01:2e:77:03:8e:07:d2:3c:90: 53:4a:a7:dc:5d:a5:01:92:7d:fb:72:ba:4d:43:9c:e2:9f:15: 58:c7:ad:0c:2f:93:22:a4:20:ef:18:88:a2:61:fc:e7:05:a9: 40:aa:35:7b:04:20:21:fa:cf:30:73:cc:a0:1d:62:69:bb:a0: e1:41:92:62:9b:3c:27:f8:44:1c:e8:76:73:36:39:94:6c:14: 58:b7:76:39:82:fe:da:a4:c5:9a:e9:77:bc:2d:53:21:a4:9e: c7:fe:2f:58:ab:aa:63:1a:0c:e3:4c:f4:27:eb:6d:e3:08:da: 7c:db:a5:df:27:64:cb:01:9e:e0:23:d2:d3:60:2f:73:a1:ca: cd:4f:38:1d:65:a5:bf:c3:73:81:f4:b0:83:28:4c:aa:0b:b1: 42:69:25:43:f3:e4:33:8f:a7:06:36:eb:ca:b0:97:b5:6c:79: a8:91:9c:db:ea:0d:b1:d1:9a:fc:a3:7d:18:3f:c0:db:30:53: 9b:d4:1c:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvrkUz6XgXbfhq332CNfEn8dfmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNTA3MTkxNzA2MTVaFw0yNTA3MjIyMTMyMTVaMDMxMTAvBgNV BAMTKDQyNjNCMThDQjIxMDY2RUMxQ0VEQ0RGMkI3NUU1QUNGMTU3RUEwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtHP6XaOkHaGl9oRORsYKarBk 88GevV1IEg3PLu6+9ohXefiIN+7irqllO41ovsddJ1kUfJdjQdLSdXrArXOodRO5 mlTr8FxSs/HaqiiR+paOYXVDF+BNgboxjzapcDjaJ5dkEmWCfxSIvr9fIQVI925a rrPiyYJ34offe6x0Z7OxqYYXzOWeSuUa+9SxQ7OW8TGpnOOy0cusmlakmbgibYuK GEJ0f0w6uW5BJ93X0nn+NbAP6u1JtbaV8KUXiINQk+U+GWh3tqOouKpt0RbLIEBb 6sh/xrXrAVEkp8wyHGMmkOkrPuIsJIUgj4lMV104HiSnAD54QqfHtk0KW5sJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmOxjLIQZuwc7c3yt15azxV+oHMwHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDszHYZMUk4Mz1XeIQr82aKQq1p+Xx5nK/X CetU1lLAK1q6nwq5fuZLg9nLWRf44O01CSyK/+qx8JQOza5+zQEudwOOB9I8kFNK p9xdpQGSfftyuk1DnOKfFVjHrQwvkyKkIO8YiKJh/OcFqUCqNXsEICH6zzBzzKAd Ymm7oOFBkmKbPCf4RBzodnM2OZRsFFi3djmC/tqkxZrpd7wtUyGknsf+L1irqmMa DONM9CfrbeMI2nzbpd8nZMsBnuAj0tNgL3Ohys1POB1lpb/Dc4H0sIMoTKoLsUJp JUPz5DOPpwY268qwl7VseaiRnNvqDbHRmvyjfRg/wNswU5vUHK4= -----END CERTIFICATE-----Generated at Mon Jul 21 01:34:09 2025 by rpki-client