$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: Mv6r6gDifjD29Tth42r3Xt4KyLR3IhiPalmvBZHRBxo= Subject key identifier: 02:87:14:BA:B9:E5:99:FC:81:8D:85:E8:86:46:F0:A1:56:2A:64:71 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 6FE12D5D31B061E08BCBC26D6AD8288CC3ACD638 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 014D Signing time: Tue 03 Jun 2025 13:34:52 +0000 Manifest this update: Tue 03 Jun 2025 13:29:52 +0000 Manifest next update: Fri 06 Jun 2025 17:22:52 +0000 Files and hashes: 1: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 2: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) 3: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: hQaJY+HtdMRo04BWU4xug97GmQmGYGLBVq37IPuRz8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e1:2d:5d:31:b0:61:e0:8b:cb:c2:6d:6a:d8:28:8c:c3:ac:d6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Jun 3 13:29:52 2025 GMT Not After : Jun 6 17:22:52 2025 GMT Subject: CN=028714BAB9E599FC818D85E88646F0A1562A6471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8d:23:84:51:bd:d2:d7:f9:0e:a6:0e:2f:14: 38:48:06:60:f8:0d:06:61:8a:12:fd:4c:90:40:a0: 5d:35:10:40:01:0d:da:c0:99:d1:33:22:b8:ec:60: fc:dc:f3:92:81:5a:42:f8:da:da:d4:15:b1:4e:38: 4d:7a:c4:7a:75:5c:d5:c8:d9:2f:ad:f1:01:8c:72: f8:ba:2f:62:f1:7d:34:03:3f:08:64:ea:e1:4f:5d: 3d:41:10:27:ff:5e:06:5d:be:44:28:62:60:c8:b5: 31:a9:f4:da:fb:74:83:c4:75:fc:a1:95:6d:b4:5c: 92:64:6a:5b:45:c9:0b:6e:6c:56:39:fc:2d:7e:ed: 9a:7f:5f:8f:e7:61:43:2b:61:74:c0:3d:75:60:fc: 3c:fc:21:68:26:88:58:7e:45:27:64:60:4f:aa:a6: 5c:b6:a2:3e:d5:98:47:ec:66:e6:20:53:00:0d:d0: 23:0e:bf:f0:65:34:42:96:ce:b6:0f:f0:c6:d9:bd: 6f:b6:49:a7:8a:fe:e9:6b:37:79:0e:31:1d:95:24: c7:15:ab:ff:05:a6:76:25:f7:fd:54:3a:54:2f:6a: 63:a9:9e:81:a7:c4:30:5f:d0:eb:de:7b:87:ec:ae: c8:2e:92:41:28:f0:20:d4:af:3f:8e:8c:df:07:c2: bb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:87:14:BA:B9:E5:99:FC:81:8D:85:E8:86:46:F0:A1:56:2A:64:71 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:62:81:97:a2:95:df:03:01:43:6c:2c:f6:19:27:4f:42:fb: 36:5a:76:76:c1:5c:66:1c:ce:d4:9d:9a:0d:18:bf:c0:85:c4: c9:3e:23:f8:bd:65:cc:2b:65:a8:cd:89:81:b2:23:67:36:c6: 8e:5e:dd:06:23:ff:3f:ad:80:16:f5:d2:da:00:92:fe:a1:c6: 0a:ff:0c:21:44:1f:6a:85:6b:27:0b:8f:6e:44:fb:2a:78:39: f8:3d:01:39:24:84:1d:fc:61:6f:26:1b:cf:62:c0:8b:be:18: eb:19:a2:a9:97:4e:3a:07:de:5a:7b:7f:9c:c1:e5:87:1c:16: 10:8b:c9:23:f8:a2:bf:c4:4f:ca:d3:bc:28:04:a1:17:ca:fc: c7:7f:60:69:6c:64:38:b1:bf:98:fb:bd:cc:c9:fe:a8:4e:16: de:30:87:7d:b7:a2:c4:45:aa:c4:a9:47:29:40:8d:85:44:67: 7c:09:96:fe:ad:62:97:42:97:bf:37:9b:fe:53:45:19:61:1a: 72:63:cd:45:a5:64:dd:84:d4:c8:0f:b4:70:ea:81:47:e4:6c: c3:11:55:f1:c1:20:4a:46:85:4e:37:18:66:1b:c7:d2:cb:1b: e3:4a:03:2d:32:5b:b7:0a:77:9a:f3:bf:98:c8:ab:53:55:fd: 74:49:28:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+EtXTGwYeCLy8JtatgojMOs1jgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTA2MDMxMzI5NTJaFw0yNTA2MDYxNzIyNTJaMDMxMTAvBgNV BAMTKDAyODcxNEJBQjlFNTk5RkM4MThEODVFODg2NDZGMEExNTYyQTY0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjSOEUb3S1/kOpg4vFDhIBmD4 DQZhihL9TJBAoF01EEABDdrAmdEzIrjsYPzc85KBWkL42trUFbFOOE16xHp1XNXI 2S+t8QGMcvi6L2LxfTQDPwhk6uFPXT1BECf/XgZdvkQoYmDItTGp9Nr7dIPEdfyh lW20XJJkaltFyQtubFY5/C1+7Zp/X4/nYUMrYXTAPXVg/Dz8IWgmiFh+RSdkYE+q ply2oj7VmEfsZuYgUwAN0CMOv/BlNEKWzrYP8MbZvW+2SaeK/ulrN3kOMR2VJMcV q/8FpnYl9/1UOlQvamOpnoGnxDBf0Ovee4fsrsgukkEo8CDUrz+OjN8Hwrs1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAocUurnlmfyBjYXohkbwoVYqZHEwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1igZeild8DAUNsLPYZJ09C+zZadnbBXGYc ztSdmg0Yv8CFxMk+I/i9ZcwrZajNiYGyI2c2xo5e3QYj/z+tgBb10toAkv6hxgr/ DCFEH2qFaycLj25E+yp4Ofg9ATkkhB38YW8mG89iwIu+GOsZoqmXTjoH3lp7f5zB 5YccFhCLySP4or/ET8rTvCgEoRfK/Md/YGlsZDixv5j7vczJ/qhOFt4wh323osRF qsSpRylAjYVEZ3wJlv6tYpdCl783m/5TRRlhGnJjzUWlZN2E1MgPtHDqgUfkbMMR VfHBIEpGhU43GGYbx9LLG+NKAy0yW7cKd5rzv5jIq1NV/XRJKNE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:58 2025 by rpki-client