$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: OF594Xi/viGeMVWDx2Wt0YkQqCzKJFBwVetASuWJZjM= Subject key identifier: 3B:9C:BF:8D:38:C2:EB:36:14:10:53:7A:0C:35:5A:85:FE:6E:2F:0C Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 2203861EFA8CEE9ED07E0512963C7ED136E8523D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: 0148 Signing time: Tue 03 Jun 2025 12:23:51 +0000 Manifest this update: Tue 03 Jun 2025 12:18:51 +0000 Manifest next update: Fri 06 Jun 2025 23:47:51 +0000 Files and hashes: 1: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: 6CQ9AFiS1TrGWdr7nVrkTgyZbYi1OTpSYyKNNhaBNoU=) 2: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: Ss0eIh55eF1+18NBRc56XTthBY2pyra5MKG9X4X5KfE=) 3: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: jZdzzwUnE5NySNtgaEjKcLOBnZGLd0OeUfLgUNjS8h8=) 4: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: HdUQMZ7SOKpAyFz6JesRqd55RtIwIZs1nM/RQd+kRrc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:03:86:1e:fa:8c:ee:9e:d0:7e:05:12:96:3c:7e:d1:36:e8:52:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Jun 3 12:18:51 2025 GMT Not After : Jun 6 23:47:51 2025 GMT Subject: CN=3B9CBF8D38C2EB361410537A0C355A85FE6E2F0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:02:87:9b:22:13:d3:57:b7:93:70:7c:c2: 81:e4:d2:3a:a4:13:e1:50:79:3b:71:b9:84:f7:9e: 4f:81:35:c7:65:be:d6:c7:7b:9c:cd:f6:a0:0e:cb: 35:8c:02:c4:03:b2:75:67:99:4a:7f:f4:ca:81:c2: b6:9b:63:34:9f:c4:3e:6d:0e:07:52:91:6e:2f:f6: e3:af:ed:b9:a1:89:35:4d:65:53:26:b3:d7:ca:60: 24:3a:9e:c1:9d:50:5d:ab:10:2d:be:7c:1e:3c:66: c8:9e:6f:60:29:b0:a1:96:f3:8e:0b:5f:8b:87:ba: dc:c1:8e:32:66:ba:57:40:0f:ac:72:23:48:02:4f: 78:92:c5:52:ec:bf:3d:bc:bd:3c:2a:0d:f2:09:f0: fb:62:63:42:67:34:12:4f:f9:f6:00:7d:fc:2e:0c: d5:55:01:22:52:be:a5:82:ea:f1:6e:91:70:2d:ba: be:89:7e:69:f8:69:9c:f5:d4:dc:cb:77:60:ce:3e: 97:05:60:ce:71:fe:17:59:3a:c9:6c:38:3f:c9:7b: e3:b3:0d:52:0d:f7:67:4b:c7:68:f8:e0:d2:e9:d4: 3d:61:79:61:98:c2:a4:12:03:67:15:b1:d1:af:5d: f3:9b:19:e0:83:40:1e:25:19:d1:13:f4:7d:52:5a: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9C:BF:8D:38:C2:EB:36:14:10:53:7A:0C:35:5A:85:FE:6E:2F:0C X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3f:7d:a5:fc:49:be:aa:6d:9a:ff:35:e5:17:c4:89:a8:d0: d1:d0:66:f8:4c:c8:35:aa:67:b1:9a:4e:03:22:73:ce:fe:ea: 26:9a:15:07:44:af:f9:da:7f:11:af:6a:f1:55:3a:00:4e:79: cf:71:27:5d:12:82:37:3d:ce:78:b1:49:33:a4:a8:d9:8d:8f: 30:44:dd:3b:bc:df:07:71:b5:79:e0:f8:cf:d2:c6:99:83:60: 5d:b3:07:67:0f:d2:f5:43:61:0e:c9:4c:a2:bd:65:da:9f:10: 29:25:82:20:4b:e5:dd:25:49:87:e3:65:5c:0f:62:97:bd:bb: cd:c3:db:02:a4:4a:59:3e:aa:78:a5:e0:8b:76:e8:04:a1:3a: d2:63:7d:75:ac:4e:b6:a2:8b:1f:05:72:23:85:52:8a:7e:ca: ba:c3:b9:7d:bd:c9:30:03:00:49:aa:31:fd:04:40:3c:25:b4: 03:c0:25:c8:7a:d2:d3:98:5c:d8:41:11:62:2d:82:59:20:95: d7:c7:e4:27:9e:e1:fe:8a:80:0d:bc:bb:18:1f:f2:02:c4:be: fc:69:14:04:41:12:06:ae:8a:45:8f:ea:fd:70:c9:82:99:42: 22:8a:15:8b:24:cb:fa:7d:c8:b6:5d:22:02:9c:6a:f4:c0:77: 10:c2:29:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgOGHvqM7p7QfgUSljx+0TboUj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNTA2MDMxMjE4NTFaFw0yNTA2MDYyMzQ3NTFaMDMxMTAvBgNV BAMTKDNCOUNCRjhEMzhDMkVCMzYxNDEwNTM3QTBDMzU1QTg1RkU2RTJGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqAKHmyIT01e3k3B8woHk0jqk E+FQeTtxuYT3nk+BNcdlvtbHe5zN9qAOyzWMAsQDsnVnmUp/9MqBwrabYzSfxD5t DgdSkW4v9uOv7bmhiTVNZVMms9fKYCQ6nsGdUF2rEC2+fB48Zsieb2ApsKGW844L X4uHutzBjjJmuldAD6xyI0gCT3iSxVLsvz28vTwqDfIJ8PtiY0JnNBJP+fYAffwu DNVVASJSvqWC6vFukXAtur6Jfmn4aZz11NzLd2DOPpcFYM5x/hdZOslsOD/Je+Oz DVIN92dLx2j44NLp1D1heWGYwqQSA2cVsdGvXfObGeCDQB4lGdET9H1SWgeJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO5y/jTjC6zYUEFN6DDVahf5uLwwwHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIU/faX8Sb6qbZr/NeUXxImo0NHQZvhMyDWq Z7GaTgMic87+6iaaFQdEr/nafxGvavFVOgBOec9xJ10Sgjc9znixSTOkqNmNjzBE 3Tu83wdxtXng+M/SxpmDYF2zB2cP0vVDYQ7JTKK9ZdqfECklgiBL5d0lSYfjZVwP Ype9u83D2wKkSlk+qnil4It26AShOtJjfXWsTraiix8FciOFUop+yrrDuX29yTAD AEmqMf0EQDwltAPAJch60tOYXNhBEWItglkgldfH5Cee4f6KgA28uxgf8gLEvvxp FARBEgauikWP6v1wyYKZQiKKFYsky/p9yLZdIgKcavTAdxDCKXI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:58 2025 by rpki-client