$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft File: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft (raw, json) Hash identifier: /xc6FJitrub7D/UbsoU9THGi09OEpy6WtsPtpeXv41g= Subject key identifier: D6:53:53:F7:AB:D7:7D:EF:39:2E:70:37:AC:B4:8A:57:40:6C:3E:44 Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 53BB1CD5E9562E24400E228040DA106DD3A41224 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft Manifest number: 01AE Signing time: Mon 02 Jun 2025 22:51:39 +0000 Manifest this update: Mon 02 Jun 2025 22:46:39 +0000 Manifest next update: Fri 06 Jun 2025 06:47:39 +0000 Files and hashes: 1: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: hLQPD3MbEwgildQda9wOjE3SYD9HUC8/tR+TH7Mo1TY=) 2: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl (hash: erPhIm3nTTyFvB1VNKlvLIlrxdNaxdWqZm2lWM5rggE=) 3: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: VxDJRyHf4quz1NG42aRPhCKiwsHNdLZ5RbJ8wFW7Nhg=) 4: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: gwUhQCLpG414frqxV/A3eihir8ysCdrvlyk1yD6ay90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 06:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:bb:1c:d5:e9:56:2e:24:40:0e:22:80:40:da:10:6d:d3:a4:12:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Jun 2 22:46:39 2025 GMT Not After : Jun 6 06:47:39 2025 GMT Subject: CN=D65353F7ABD77DEF392E7037ACB48A57406C3E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f8:1a:ae:51:28:d9:74:89:24:7e:cf:98:e7: 57:13:35:11:4e:ec:1f:f5:62:65:09:21:91:43:81: 6d:3c:cb:d9:4d:d7:11:b2:16:c8:d0:9f:5f:20:63: ed:0e:19:c9:7b:ad:80:53:cd:f2:97:ac:bd:f1:b2: f7:5e:1c:dc:b4:e3:1e:a0:75:da:9c:fa:b9:85:ce: 56:21:e5:c0:a2:b8:4b:49:01:20:c9:70:8a:4a:81: 73:d2:16:d7:b1:ef:e1:c6:98:07:63:d7:57:1c:60: 9d:fc:3f:59:5f:63:36:a5:7d:3b:73:16:b5:4d:b1: 71:bb:de:0b:ec:ad:d8:eb:cb:9a:bf:01:ee:70:9c: e2:03:ec:64:6f:d1:92:44:63:83:57:87:f5:92:7d: 72:51:b2:06:5e:e0:23:6c:ed:e1:4e:52:41:d8:93: f4:21:5a:84:7b:a9:b3:18:d6:e5:be:27:f6:50:25: 00:81:0a:55:9f:56:24:fd:8c:48:00:cd:6e:d3:6e: 37:41:66:65:26:c0:81:9d:78:dc:57:72:c0:4e:8a: df:c4:33:e0:3c:f7:e8:03:84:8b:29:7e:4f:47:cc: 89:5d:a3:8b:11:9d:16:9a:ee:bd:01:97:27:ae:c5: f5:d5:1c:0f:41:4b:8d:6c:41:86:2f:95:1e:78:2a: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:53:53:F7:AB:D7:7D:EF:39:2E:70:37:AC:B4:8A:57:40:6C:3E:44 X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:56:a2:cd:a8:ed:a4:57:39:2e:77:96:e7:8c:55:46:c9:a4: 51:7a:0b:b7:4a:4c:e2:50:9b:93:06:5f:d3:03:b4:22:95:e1: b8:db:19:02:57:07:c2:6b:c8:e0:ff:b3:f2:d2:ae:c9:da:eb: 9a:f3:ab:7e:c0:4b:64:65:e5:ea:3c:89:69:0f:8a:29:e8:10: 95:52:e4:46:52:1c:72:83:45:b8:83:8a:bc:8f:22:84:18:13: 40:40:76:11:34:fc:6b:75:37:7b:44:64:07:01:26:14:2e:5f: 25:8d:da:ab:db:54:a8:e2:c9:b9:f0:94:a6:ee:a9:bc:67:8d: eb:2e:b4:43:d6:62:8b:2b:a6:0f:25:a9:28:69:5e:03:aa:9d: 8c:08:92:9a:a9:00:f5:73:d4:26:52:d1:73:7f:f0:25:e1:00: 41:be:85:40:dc:aa:62:4f:5a:b7:95:15:6d:8f:b4:f5:0c:a9: fe:cf:13:1f:32:8e:1d:8e:7f:69:f1:55:de:aa:89:8d:bf:54: ed:38:ef:c1:23:5f:4d:c5:5a:b1:f2:2a:ce:01:93:5f:5f:72: a5:21:a8:ae:13:d1:c5:dc:52:cb:9e:a3:9f:b2:7a:58:78:cc: 9d:a9:2c:3a:19:e9:3b:b6:1a:cc:95:3b:fb:ab:74:70:3c:8d: 9b:dd:b3:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7sc1elWLiRADiKAQNoQbdOkEiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNTA2MDIyMjQ2MzlaFw0yNTA2MDYwNjQ3MzlaMDMxMTAvBgNV BAMTKEQ2NTM1M0Y3QUJENzdERUYzOTJFNzAzN0FDQjQ4QTU3NDA2QzNFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd+BquUSjZdIkkfs+Y51cTNRFO 7B/1YmUJIZFDgW08y9lN1xGyFsjQn18gY+0OGcl7rYBTzfKXrL3xsvdeHNy04x6g ddqc+rmFzlYh5cCiuEtJASDJcIpKgXPSFtex7+HGmAdj11ccYJ38P1lfYzalfTtz FrVNsXG73gvsrdjry5q/Ae5wnOID7GRv0ZJEY4NXh/WSfXJRsgZe4CNs7eFOUkHY k/QhWoR7qbMY1uW+J/ZQJQCBClWfViT9jEgAzW7TbjdBZmUmwIGdeNxXcsBOit/E M+A89+gDhIspfk9HzIldo4sRnRaa7r0BlyeuxfXVHA9BS41sQYYvlR54KgLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1lNT96vXfe85LnA3rLSKV0BsPkQwHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5 RjM2QzgwREM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxWos2o7aRXOS53lueMVUbJpFF6C7dKTOJQ m5MGX9MDtCKV4bjbGQJXB8JryOD/s/LSrsna65rzq37AS2Rl5eo8iWkPiinoEJVS 5EZSHHKDRbiDiryPIoQYE0BAdhE0/Gt1N3tEZAcBJhQuXyWN2qvbVKjiybnwlKbu qbxnjesutEPWYosrpg8lqShpXgOqnYwIkpqpAPVz1CZS0XN/8CXhAEG+hUDcqmJP WreVFW2PtPUMqf7PEx8yjh2Of2nxVd6qiY2/VO0478EjX03FWrHyKs4Bk19fcqUh qK4T0cXcUsueo5+yelh4zJ2pLDoZ6Tu2GsyVO/urdHA8jZvdsz8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:51 2025 by rpki-client