$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft File: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft (raw, json) Hash identifier: dPX84APAWKOy6eeF3ckBCBD0VY5U5J0n7k+tVJGIdgY= Subject key identifier: E6:61:71:D5:E8:6F:89:46:2A:45:CD:75:DD:24:EB:2F:55:A4:C7:7C Authority key identifier: 2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 Certificate issuer: /CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Certificate serial: 72B492137C1C3AEC5C2F06FF8694C90BFBEDB62E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft Manifest number: 0164 Signing time: Thu 05 Jun 2025 11:20:40 +0000 Manifest this update: Thu 05 Jun 2025 11:15:40 +0000 Manifest next update: Sun 08 Jun 2025 20:22:40 +0000 Files and hashes: 1: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl (hash: QTqhsVjV+pyK46B5JHahj/NYVcmuv4vDoSNH2hVpTfM=) 2: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: geET9/YOwUtWNeEIEWu0ZCElrUfY/yNFJvOG/4u0aBI=) 3: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: fU1tQ4gaeWNhq2F1RA67XHvI+/xcbSrzocYJJCxhg9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 20:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b4:92:13:7c:1c:3a:ec:5c:2f:06:ff:86:94:c9:0b:fb:ed:b6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Validity Not Before: Jun 5 11:15:40 2025 GMT Not After : Jun 8 20:22:40 2025 GMT Subject: CN=E66171D5E86F89462A45CD75DD24EB2F55A4C77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:77:61:86:f6:08:a9:ba:52:94:2c:c3:ba: 10:96:8d:cb:3a:36:12:14:d8:9b:cc:8d:73:72:34: 59:b8:6e:dd:d1:ab:8a:46:cb:7c:66:08:5b:f0:07: 85:c8:45:2b:13:2f:3c:c9:27:9f:e8:b5:c9:05:ea: 89:57:62:33:3f:04:99:9e:0d:46:da:cd:82:e9:f3: f8:15:fa:2e:04:f8:e1:b1:8b:c5:9c:c9:36:e0:de: bc:e6:6d:1e:2d:2e:92:bb:27:ab:8d:b5:74:ed:11: 0b:fb:0a:be:8a:33:80:60:ff:6d:b9:ed:be:d7:2f: 9f:58:55:b8:c0:34:97:7f:24:03:d1:7e:56:8d:93: db:a9:6d:47:6b:d9:d2:9c:c9:4a:2c:93:b5:1e:38: e3:44:7e:f9:4b:7b:b5:12:bd:d9:bf:24:1e:c5:94: fe:fd:e0:ce:1b:e0:c2:82:36:2e:b0:28:f3:46:a4: ac:a2:20:93:3a:87:c1:ef:e8:58:3e:f2:bc:46:b6: 88:d8:6f:54:57:d6:26:f3:53:72:47:f1:fb:2f:da: 1d:3f:3e:c0:d9:18:52:25:ac:0a:b4:3b:d5:fa:9a: 2a:97:61:0b:23:6b:f0:f4:5d:58:1c:0f:fc:4f:6d: d1:ae:57:14:9b:d5:f4:86:ce:e2:cc:e9:33:f4:8b: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:61:71:D5:E8:6F:89:46:2A:45:CD:75:DD:24:EB:2F:55:A4:C7:7C X509v3 Authority Key Identifier: keyid:2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f0:5e:5a:c2:c8:9d:7a:dd:51:b8:a0:0d:25:b4:9e:70:d1: ab:70:44:75:04:e1:7f:7b:10:9d:d3:c7:f8:a4:7f:ef:83:6b: 68:10:7b:af:2d:b3:69:3b:be:f5:f1:5e:06:11:fa:3f:25:a0: 54:a8:78:af:24:45:22:2d:72:94:7b:4a:11:b4:55:45:ab:4f: 4d:9d:29:a5:83:7e:8a:cf:51:51:d2:fc:cb:0a:87:36:40:2c: da:63:3e:44:dc:72:b5:9a:f3:fc:ba:bd:8e:3c:6a:d6:19:6a: 8a:95:c0:b8:a6:76:4f:b3:ca:24:39:6c:57:25:f1:9d:23:4f: 55:59:f4:e6:74:80:80:1f:b4:68:b2:38:62:7f:a4:d1:91:b5: a7:90:b4:5f:84:b2:7b:cc:c4:38:98:e1:2b:b7:e2:8a:62:91: 7d:81:a9:97:6a:8f:bc:00:8c:47:9c:10:a0:b2:84:e1:b9:73: 1a:85:50:c2:ec:94:00:f3:f8:71:d0:8c:59:06:41:b9:97:7e: 39:dc:ba:b2:cd:ac:65:df:c4:73:fe:73:4e:74:f2:97:10:4f: 73:1d:f1:2e:db:c0:3f:b0:9e:3d:c7:79:37:9a:81:a3:3b:b0: 8a:dc:bc:95:78:fb:d3:9c:92:1a:05:94:ee:55:b1:a0:ee:2c: 5b:8a:05:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrSSE3wcOuxcLwb/hpTJC/vtti4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2Nzcz RjNFNkYxNjAeFw0yNTA2MDUxMTE1NDBaFw0yNTA2MDgyMDIyNDBaMDMxMTAvBgNV BAMTKEU2NjE3MUQ1RTg2Rjg5NDYyQTQ1Q0Q3NUREMjRFQjJGNTVBNEM3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNndhhvYIqbpSlCzDuhCWjcs6 NhIU2JvMjXNyNFm4bt3Rq4pGy3xmCFvwB4XIRSsTLzzJJ5/otckF6olXYjM/BJme DUbazYLp8/gV+i4E+OGxi8WcyTbg3rzmbR4tLpK7J6uNtXTtEQv7Cr6KM4Bg/225 7b7XL59YVbjANJd/JAPRflaNk9upbUdr2dKcyUosk7UeOONEfvlLe7USvdm/JB7F lP794M4b4MKCNi6wKPNGpKyiIJM6h8Hv6Fg+8rxGtojYb1RX1ibzU3JH8fsv2h0/ PsDZGFIlrAq0O9X6miqXYQsja/D0XVgcD/xPbdGuVxSb1fSGzuLM6TP0i6YPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5mFx1ehviUYqRc113STrL1Wkx3wwHwYDVR0j BBgwFoAUKq+oFBTtyxAyI18iQP4Gdz8+bxYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWI4ZTYwZi1mOTkzLTQ1MzQtOWRhMC1mMjg1YTg2MDNmNjkvMC8yQUFGQTgxNDE0 RURDQjEwMzIyMzVGMjI0MEZFMDY3NzNGM0U2RjE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2NzczRjNF NkYxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2 NzczRjNFNkYxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjwXlrCyJ163VG4oA0ltJ5w0atwRHUE4X97 EJ3Tx/ikf++Da2gQe68ts2k7vvXxXgYR+j8loFSoeK8kRSItcpR7ShG0VUWrT02d KaWDforPUVHS/MsKhzZALNpjPkTccrWa8/y6vY48atYZaoqVwLimdk+zyiQ5bFcl 8Z0jT1VZ9OZ0gIAftGiyOGJ/pNGRtaeQtF+EsnvMxDiY4Su34opikX2BqZdqj7wA jEecEKCyhOG5cxqFUMLslADz+HHQjFkGQbmXfjncurLNrGXfxHP+c0508pcQT3Md 8S7bwD+wnj3HeTeagaM7sIrcvJV4+9OckhoFlO5VsaDuLFuKBes= -----END CERTIFICATE-----Generated at Thu Jun 5 18:28:37 2025 by rpki-client