$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: FhoYtQ9nZADjEVJpfjCcPGi+d0FbaF6eu1y++wGKOEk= Subject key identifier: F6:E2:86:62:78:8E:A8:6D:12:CA:5E:EA:EB:CE:33:AA:F9:04:B1:16 Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 5D73F561D46D085878EC3C9F4CF9D304620BF3CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 0166 Signing time: Thu 05 Jun 2025 11:00:46 +0000 Manifest this update: Thu 05 Jun 2025 10:55:46 +0000 Manifest next update: Sun 08 Jun 2025 22:33:46 +0000 Files and hashes: 1: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: nXIgwMlbCEiRLhTmQpk3ILcP6WiZR0pqc4IDqdZRoJI=) 2: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: deFq3P4998I4Jimi+xo1QC6eBkjHi5difoq1ffjUsng=) 3: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:73:f5:61:d4:6d:08:58:78:ec:3c:9f:4c:f9:d3:04:62:0b:f3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Jun 5 10:55:46 2025 GMT Not After : Jun 8 22:33:46 2025 GMT Subject: CN=F6E28662788EA86D12CA5EEAEBCE33AAF904B116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:1e:a1:cb:f7:a5:e2:ce:d2:54:d0:29:61: 45:71:45:ce:cb:27:2c:80:fc:8f:22:97:a8:a2:ec: b8:ae:42:58:c8:e2:b3:47:37:ae:19:d2:a6:d0:f0: 92:7e:a4:24:fc:d9:34:a5:c1:14:d2:45:65:79:72: ef:51:e4:24:78:3d:c5:f2:5f:20:57:b6:24:e3:70: bf:12:38:9f:8b:e1:93:52:81:71:67:ec:0a:df:25: 5c:26:24:b9:36:00:a6:64:09:c6:10:23:53:dc:a8: 49:66:4c:2e:d2:e4:53:0f:b2:d2:47:4a:38:04:a8: 15:1a:88:77:aa:51:94:1a:26:f2:b2:a4:30:7b:9d: b8:79:b4:0f:90:e5:1c:6d:04:64:64:80:29:6e:9d: 3e:87:f3:35:3c:e4:9f:7c:36:51:3e:70:c7:f3:c2: 61:83:b1:91:82:f1:86:92:fb:70:3b:26:ce:1b:3c: b6:01:2e:b7:f2:6c:32:b4:59:47:a8:64:ec:5f:8f: 46:1c:b8:62:b7:61:73:c6:45:3a:59:ef:67:74:78: 34:a8:b8:d8:b9:7a:bf:0b:f9:1c:8b:47:0d:fb:20: fd:07:8f:72:4f:31:3f:c4:b5:82:6e:c8:56:92:35: ef:6e:f1:b4:d1:85:51:63:b5:05:2d:2f:52:24:bb: 73:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E2:86:62:78:8E:A8:6D:12:CA:5E:EA:EB:CE:33:AA:F9:04:B1:16 X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:55:12:5e:a5:82:4a:b3:e4:f1:07:2b:90:3e:cf:62:48:f8: 9e:d2:9d:79:79:6f:2e:4d:2f:ac:29:09:17:ca:4b:14:d6:21: 3d:2e:e5:ca:b6:0b:f0:70:b4:a6:8a:7e:fb:93:3e:02:89:78: 76:91:17:cd:f1:2c:81:51:5d:70:0e:be:5e:cb:13:9b:68:c6: 9c:43:fc:a9:0b:d2:ed:c3:ce:ca:34:5d:80:12:b3:8f:9b:db: 32:2d:00:7a:db:3a:0a:ab:7a:46:52:40:38:88:aa:9b:99:68: c6:da:8e:84:fc:19:82:0a:1f:e1:54:63:c0:83:87:c0:f1:23: 9f:95:2f:56:ed:74:56:18:ef:23:f1:17:ac:fe:02:14:4b:04: 81:58:65:d8:34:c1:4d:d9:f6:f0:e9:f5:2d:5c:bd:ed:5b:a5: 38:8d:8a:9e:c3:d6:b0:e3:5e:a2:4e:32:48:ff:7f:89:a9:3c: de:76:1c:c7:46:53:86:dd:d4:f1:0e:c7:43:9e:df:f1:2e:08: fd:0f:9b:0b:26:ba:0c:f8:27:d7:a3:60:81:27:a2:de:76:12: a1:31:e3:43:bc:d7:1e:8d:5a:d4:2f:b2:d5:4b:87:53:d6:20: f2:19:a3:11:12:bf:61:8c:7b:24:8d:d8:19:66:9a:76:27:ce: 02:52:51:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXXP1YdRtCFh47DyfTPnTBGIL888wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNTA2MDUxMDU1NDZaFw0yNTA2MDgyMjMzNDZaMDMxMTAvBgNV BAMTKEY2RTI4NjYyNzg4RUE4NkQxMkNBNUVFQUVCQ0UzM0FBRjkwNEIxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjZB6hy/el4s7SVNApYUVxRc7L JyyA/I8il6ii7LiuQljI4rNHN64Z0qbQ8JJ+pCT82TSlwRTSRWV5cu9R5CR4PcXy XyBXtiTjcL8SOJ+L4ZNSgXFn7ArfJVwmJLk2AKZkCcYQI1PcqElmTC7S5FMPstJH SjgEqBUaiHeqUZQaJvKypDB7nbh5tA+Q5RxtBGRkgClunT6H8zU85J98NlE+cMfz wmGDsZGC8YaS+3A7Js4bPLYBLrfybDK0WUeoZOxfj0YcuGK3YXPGRTpZ72d0eDSo uNi5er8L+RyLRw37IP0Hj3JPMT/EtYJuyFaSNe9u8bTRhVFjtQUtL1Iku3NHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9uKGYniOqG0Syl7q684zqvkEsRYwHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRVEl6lgkqz5PEHK5A+z2JI+J7SnXl5by5N L6wpCRfKSxTWIT0u5cq2C/BwtKaKfvuTPgKJeHaRF83xLIFRXXAOvl7LE5toxpxD /KkL0u3Dzso0XYASs4+b2zItAHrbOgqrekZSQDiIqpuZaMbajoT8GYIKH+FUY8CD h8DxI5+VL1btdFYY7yPxF6z+AhRLBIFYZdg0wU3Z9vDp9S1cve1bpTiNip7D1rDj XqJOMkj/f4mpPN52HMdGU4bd1PEOx0Oe3/EuCP0Pmwsmugz4J9ejYIEnot52EqEx 40O81x6NWtQvstVLh1PWIPIZoxESv2GMeySN2BlmmnYnzgJSUWg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:54 2025 by rpki-client