$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: /xXsAhVM0Gp7L3m4Dq6PDFLaHjl1o0GLLQt7JrvbCeg= Subject key identifier: 19:A3:15:AE:AC:E4:E1:62:D7:2B:74:64:3E:82:01:ED:83:70:90:87 Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 5561AB260D0856DB2F54679C34D1DC8520EBE93F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: 59 Signing time: Tue 08 Apr 2025 00:21:28 +0000 Manifest this update: Tue 08 Apr 2025 00:16:28 +0000 Manifest next update: Fri 11 Apr 2025 04:39:28 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: VYWAk8iGSZzF5g6fTa7RhmuP4rGT675f8tCJgCmKW00=) 2: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: KfzHS2zBZOKRoa8B0MpqzEpFnj5ME1x/opxwmJRzlNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 04:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:61:ab:26:0d:08:56:db:2f:54:67:9c:34:d1:dc:85:20:eb:e9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Apr 8 00:16:28 2025 GMT Not After : Apr 11 04:39:28 2025 GMT Subject: CN=19A315AEACE4E162D72B74643E8201ED83709087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:40:b4:c9:94:f8:69:f5:17:b7:84:26:ca: 95:12:7d:45:e8:7d:95:88:71:24:61:33:b6:ed:e5: 4d:f9:a5:e6:3f:fa:4a:a9:d2:a3:ef:78:b0:ce:57: 37:57:ac:b0:3d:70:60:43:be:ae:d5:2d:4f:b3:91: de:79:1e:2c:f7:4b:e2:71:28:d4:b7:98:e3:c3:67: cb:77:81:00:2a:2e:af:d9:bc:43:dc:57:f0:48:91: 12:4a:0d:71:68:34:d6:80:21:22:41:6e:79:32:00: 6b:fe:40:e6:38:70:93:c7:38:b6:b6:db:e5:e2:6b: 80:aa:fc:dd:c9:4f:6f:96:ca:0d:bb:48:81:d9:c3: f5:9e:66:ed:10:d2:ae:96:75:37:a8:6e:4c:39:3e: 4a:c7:f2:1f:a3:c1:90:d5:05:6b:53:de:aa:0d:f3: 9b:a7:53:48:02:e8:6b:b3:34:2f:45:7e:79:65:73: e6:5a:f6:20:ba:d8:d4:01:e7:84:23:0a:11:18:0c: f4:77:dd:9e:27:e2:6b:c2:1d:a2:e8:c4:a4:e0:09: 21:d5:e4:61:46:cc:89:15:99:2d:92:cb:fa:a8:78: fc:4b:34:90:a9:23:75:56:f0:98:54:67:51:89:f6: 46:b7:b1:34:69:6e:ea:23:c1:ed:a5:37:26:26:df: 75:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A3:15:AE:AC:E4:E1:62:D7:2B:74:64:3E:82:01:ED:83:70:90:87 X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:9c:10:d2:49:6a:fe:85:91:1f:97:c8:f8:79:40:41:55:36: 22:7e:de:da:4d:c5:19:44:f4:1d:88:e6:b9:90:74:1c:82:16: 05:76:4b:2c:c8:ae:28:f4:49:e7:42:a7:5f:2b:b6:e3:3c:b6: d4:c4:d5:67:2f:ae:b0:bb:d5:31:d0:79:87:de:ba:60:2f:68: 1c:14:dc:42:ea:d8:8b:41:54:f5:8d:f1:0e:bd:86:af:44:1a: b1:a9:21:a3:11:83:32:0b:78:11:7c:91:d3:46:16:4d:f5:c5: 4e:83:de:17:d9:ec:6c:f5:91:4e:c6:82:64:47:82:32:d9:88: c5:0c:d0:23:28:a8:68:ae:33:c3:5d:1e:6a:57:1c:41:5a:d6: 1c:f2:be:d3:56:41:19:fd:91:38:55:b0:04:c2:bc:c5:db:f0: fd:f2:7a:af:06:fb:c3:61:bc:6f:0b:b8:9f:79:6c:a9:70:37: 56:67:29:37:9c:6d:23:c3:85:14:83:29:03:10:f8:06:bd:f4: bb:23:7b:3c:b4:1f:9c:d3:fe:1a:12:ac:34:a7:f4:86:f0:da: 60:a2:0d:97:fd:da:36:76:89:90:1e:68:63:e0:23:27:9a:bd: 01:98:55:99:6b:cc:e9:8e:fd:f2:c5:c8:fa:a7:37:e2:70:a7: 95:25:32:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWGrJg0IVtsvVGecNNHchSDr6T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNTA0MDgwMDE2MjhaFw0yNTA0MTEwNDM5MjhaMDMxMTAvBgNV BAMTKDE5QTMxNUFFQUNFNEUxNjJENzJCNzQ2NDNFODIwMUVEODM3MDkwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHUC0yZT4afUXt4QmypUSfUXo fZWIcSRhM7bt5U35peY/+kqp0qPveLDOVzdXrLA9cGBDvq7VLU+zkd55Hiz3S+Jx KNS3mOPDZ8t3gQAqLq/ZvEPcV/BIkRJKDXFoNNaAISJBbnkyAGv+QOY4cJPHOLa2 2+Xia4Cq/N3JT2+Wyg27SIHZw/WeZu0Q0q6WdTeobkw5PkrH8h+jwZDVBWtT3qoN 85unU0gC6GuzNC9Ffnllc+Za9iC62NQB54QjChEYDPR33Z4n4mvCHaLoxKTgCSHV 5GFGzIkVmS2Sy/qoePxLNJCpI3VW8JhUZ1GJ9ka3sTRpbuojwe2lNyYm33X1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGaMVrqzk4WLXK3RkPoIB7YNwkIcwHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACycENJJav6FkR+XyPh5QEFVNiJ+3tpNxRlE 9B2I5rmQdByCFgV2SyzIrij0SedCp18rtuM8ttTE1WcvrrC71THQeYfeumAvaBwU 3ELq2ItBVPWN8Q69hq9EGrGpIaMRgzILeBF8kdNGFk31xU6D3hfZ7Gz1kU7GgmRH gjLZiMUM0CMoqGiuM8NdHmpXHEFa1hzyvtNWQRn9kThVsATCvMXb8P3yeq8G+8Nh vG8LuJ95bKlwN1ZnKTecbSPDhRSDKQMQ+Aa99Lsjezy0H5zT/hoSrDSn9Ibw2mCi DZf92jZ2iZAeaGPgIyeavQGYVZlrzOmO/fLFyPqnN+Jwp5UlMhs= -----END CERTIFICATE-----Generated at Wed Apr 9 16:43:35 2025 by rpki-client