$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: rCEl10novh0BS0peKM4fZEOoUzd9CHm0CBoVKsFhZh0= Subject key identifier: BC:EF:E7:79:5E:7E:58:F5:73:01:64:A4:6A:39:6A:D2:75:B3:76:3E Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 266A8A651CC8678CA37EE7B80AA47D418CA792E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: 72 Signing time: Wed 04 Jun 2025 02:15:53 +0000 Manifest this update: Wed 04 Jun 2025 02:10:53 +0000 Manifest next update: Sat 07 Jun 2025 07:39:53 +0000 Files and hashes: 1: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: hffxHUO6968ExN/POu6RwCPnvoS90Du7eYS4VIgzjnE=) 2: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: VYWAk8iGSZzF5g6fTa7RhmuP4rGT675f8tCJgCmKW00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6a:8a:65:1c:c8:67:8c:a3:7e:e7:b8:0a:a4:7d:41:8c:a7:92:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Jun 4 02:10:53 2025 GMT Not After : Jun 7 07:39:53 2025 GMT Subject: CN=BCEFE7795E7E58F5730164A46A396AD275B3763E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:51:94:c3:24:6d:1b:53:7f:e9:93:af:3f: 11:85:5b:25:c9:c1:2a:18:5f:77:1f:9d:07:c9:15: 27:88:e6:31:0d:31:ab:84:d2:9c:7d:04:16:bb:c0: ce:3c:2e:26:bd:e2:a4:d1:07:b7:7b:e3:d0:79:a9: d3:14:c7:0e:2a:05:b1:49:0a:58:d8:c4:44:1e:5e: a4:7d:94:92:32:0f:a0:cb:ed:bf:67:e9:4c:aa:3e: 26:2d:44:22:1c:78:49:f3:88:b4:42:0f:cc:91:2d: d7:fc:d6:33:e1:99:b5:87:fe:71:c2:2c:72:eb:f9: c6:de:0e:c3:05:79:e4:2f:d5:a3:b9:be:d3:2c:b6: b3:4a:34:51:1c:a6:3f:8d:e3:ad:cd:0a:2d:c8:22: 40:66:9a:85:d5:e0:f1:4c:64:de:f9:a9:c5:79:db: b1:33:f2:8f:ba:d0:97:1c:68:df:ae:57:0c:cf:fa: ca:41:00:8b:e6:ea:54:75:9c:1d:a3:db:95:d1:78: 02:b1:4a:37:36:0a:fe:7e:c9:72:96:1e:af:a6:e2: 5c:77:ff:ce:f8:39:b6:29:38:30:d4:2a:a4:9c:9b: ef:ec:dd:32:d0:54:b9:48:a6:83:af:f8:d8:7b:d7: 70:db:b2:ea:ce:9a:13:14:36:b1:31:8b:44:03:e0: 55:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EF:E7:79:5E:7E:58:F5:73:01:64:A4:6A:39:6A:D2:75:B3:76:3E X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ba:d1:79:e8:8d:c9:37:e9:8f:85:34:75:35:4e:ef:8a:c8: ab:57:af:59:b3:05:06:18:ef:62:16:ec:fb:3b:04:3a:bb:72: 29:30:96:fb:ee:cc:e0:0d:ed:99:4a:a6:e5:ef:29:9e:bf:ce: 93:b3:a6:0f:3a:5f:c3:1b:34:84:cc:e6:00:83:82:a9:d2:9e: 2f:05:5c:51:f9:02:09:d7:75:3f:9a:21:c7:c0:6c:fb:7c:b0: a8:9b:7b:e1:1a:30:64:97:44:41:64:0f:55:70:1e:de:37:e8: 12:0c:ad:44:6d:80:d5:05:34:2a:1f:fb:86:5c:49:13:28:bf: e1:55:2a:31:cf:a5:99:ef:95:b6:9d:53:40:44:7b:78:07:b1: ca:b2:96:75:4c:2e:39:d2:58:e0:a9:6b:cb:1c:a1:aa:7b:f8: 95:b2:a5:8a:13:d1:d8:36:5a:53:b3:11:ac:94:33:07:ca:70: 00:2d:18:37:9d:7d:65:8f:69:47:6a:69:22:d3:fd:dd:ce:e7: 2f:aa:ce:2f:b3:4b:96:00:a7:58:bb:12:87:14:c4:be:90:b9: 5b:1d:3e:c4:11:cc:99:3d:75:bc:4f:c3:01:6b:8a:b8:a0:99: 97:a9:16:e0:8d:3a:b9:6e:92:e5:96:ba:19:0e:c7:58:fd:83: 51:50:88:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmqKZRzIZ4yjfue4CqR9QYynkukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNTA2MDQwMjEwNTNaFw0yNTA2MDcwNzM5NTNaMDMxMTAvBgNV BAMTKEJDRUZFNzc5NUU3RTU4RjU3MzAxNjRBNDZBMzk2QUQyNzVCMzc2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+1GUwyRtG1N/6ZOvPxGFWyXJ wSoYX3cfnQfJFSeI5jENMauE0px9BBa7wM48Lia94qTRB7d749B5qdMUxw4qBbFJ CljYxEQeXqR9lJIyD6DL7b9n6UyqPiYtRCIceEnziLRCD8yRLdf81jPhmbWH/nHC LHLr+cbeDsMFeeQv1aO5vtMstrNKNFEcpj+N463NCi3IIkBmmoXV4PFMZN75qcV5 27Ez8o+60JccaN+uVwzP+spBAIvm6lR1nB2j25XReAKxSjc2Cv5+yXKWHq+m4lx3 /874ObYpODDUKqScm+/s3TLQVLlIpoOv+Nh713DbsurOmhMUNrExi0QD4FUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvO/neV5+WPVzAWSkajlq0nWzdj4wHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACi60Xnojck36Y+FNHU1Tu+KyKtXr1mzBQYY 72IW7Ps7BDq7cikwlvvuzOAN7ZlKpuXvKZ6/zpOzpg86X8MbNITM5gCDgqnSni8F XFH5AgnXdT+aIcfAbPt8sKibe+EaMGSXREFkD1VwHt436BIMrURtgNUFNCof+4Zc SRMov+FVKjHPpZnvlbadU0BEe3gHscqylnVMLjnSWOCpa8scoap7+JWypYoT0dg2 WlOzEayUMwfKcAAtGDedfWWPaUdqaSLT/d3O5y+qzi+zS5YAp1i7EocUxL6QuVsd PsQRzJk9dbxPwwFririgmZepFuCNOrlukuWWuhkOx1j9g1FQiA8= -----END CERTIFICATE-----Generated at Fri Jun 6 04:58:20 2025 by rpki-client