$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: 2rhHH3xcNTFzjicM8fMQk+gzJG9aX0qQO6RC0Gj0n+w= Subject key identifier: 62:70:69:EB:6E:69:D3:8C:2E:0A:08:08:CC:60:7D:FF:EE:80:AC:93 Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 4A651BC179F2548F4197439E837985759A571150 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 0215 Signing time: Thu 05 Jun 2025 03:40:04 +0000 Manifest this update: Thu 05 Jun 2025 03:35:04 +0000 Manifest next update: Sun 08 Jun 2025 13:44:04 +0000 Files and hashes: 1: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: mILgNsqQOC7ukAkdxDoanzwIWxBZqUVcAA8Xp+zkfbw=) 2: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: Bu412HhFN8vGDVJ+OI09PIJNJCcScR19dhuWI3I1p/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 13:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:65:1b:c1:79:f2:54:8f:41:97:43:9e:83:79:85:75:9a:57:11:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Jun 5 03:35:04 2025 GMT Not After : Jun 8 13:44:04 2025 GMT Subject: CN=627069EB6E69D38C2E0A0808CC607DFFEE80AC93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:14:cf:72:e2:69:bd:eb:a0:c9:11:28:49: 7d:77:96:dd:e0:2f:aa:7a:f7:a5:ba:4e:30:4f:d3: 06:65:6c:85:54:cf:6b:5d:66:48:1e:57:23:41:b3: ee:b8:36:59:bc:f2:be:0d:7b:e1:54:bc:03:0f:bf: 3f:16:7a:1a:27:d0:5f:a1:15:19:16:44:0b:43:91: 95:5b:93:71:bc:43:5f:db:0b:d7:d1:70:9e:6b:77: b2:60:20:e4:9f:f3:d1:7b:c2:c9:d9:5e:f8:a8:d2: 7d:4e:9a:70:10:16:b8:22:75:47:e3:1e:d0:02:75: d0:f3:d6:b4:0c:e8:45:72:24:6e:25:3e:5f:4e:52: 29:fc:bc:db:74:00:2d:e7:49:14:a8:6e:6c:c7:b3: 60:d6:d6:73:90:7b:f3:4f:30:5d:63:64:b4:2f:97: a1:a5:37:d2:78:1b:c0:e1:ff:7d:0a:cd:ba:75:ed: b4:f6:bf:60:d3:e2:a2:f2:cb:7c:2b:3d:2f:95:9f: bc:45:56:e9:ea:10:54:f7:81:26:f8:21:f1:ea:31: d7:18:04:d9:1b:0f:91:d1:55:f3:79:49:57:bd:65: 83:88:97:7e:ba:fa:b4:95:28:bf:f1:ab:29:35:ae: b9:b7:0e:ad:0d:6e:24:60:de:37:c6:24:94:c2:29: 3d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:70:69:EB:6E:69:D3:8C:2E:0A:08:08:CC:60:7D:FF:EE:80:AC:93 X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ee:29:68:4a:2e:b5:bf:d0:98:f2:dc:fa:da:e2:41:20:cd: 62:53:02:9a:12:85:4c:7f:97:7f:a0:01:ef:49:16:85:9c:c4: 92:00:73:4a:4a:3b:09:09:c7:3b:b2:c3:1b:28:f4:6c:10:53: a0:ff:a3:a8:b5:c0:cf:eb:8b:82:20:ba:95:ef:dd:6a:f6:f6: 3b:9c:fc:0e:f9:57:5a:ed:44:7c:77:0d:39:5f:35:6f:06:0a: 8a:27:33:29:2f:07:e5:b8:97:ae:aa:ec:1c:df:f4:b5:75:1f: 80:c8:23:0f:b0:57:fc:5f:4a:b8:05:ec:ad:23:1b:42:4f:5e: 0a:7d:23:00:b2:4a:56:72:e7:7b:99:33:78:3d:9d:33:f1:55: 6c:78:57:07:b0:cc:f4:4a:55:b8:bc:2e:85:e9:c4:bd:6d:d9: 88:5b:39:ad:3e:82:5c:ff:31:c9:1d:99:bb:8a:92:ba:cc:ab: 5e:66:f9:de:1f:0d:69:ee:ba:17:bd:3f:b6:fa:aa:67:4e:a1: e8:8d:c2:6b:14:09:a1:28:b0:88:3b:86:c7:6c:4b:9e:7a:ca: 88:11:4a:e6:0e:2e:c9:90:de:bc:dc:64:12:75:b5:16:f6:c8: 67:92:03:a2:ad:b2:3e:30:30:d4:6c:0c:84:29:83:9d:4a:b9: 9f:3c:a3:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSmUbwXnyVI9Bl0Oeg3mFdZpXEVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNTA2MDUwMzM1MDRaFw0yNTA2MDgxMzQ0MDRaMDMxMTAvBgNV BAMTKDYyNzA2OUVCNkU2OUQzOEMyRTBBMDgwOENDNjA3REZGRUU4MEFDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT4BTPcuJpveugyREoSX13lt3g L6p696W6TjBP0wZlbIVUz2tdZkgeVyNBs+64Nlm88r4Ne+FUvAMPvz8Wehon0F+h FRkWRAtDkZVbk3G8Q1/bC9fRcJ5rd7JgIOSf89F7wsnZXvio0n1OmnAQFrgidUfj HtACddDz1rQM6EVyJG4lPl9OUin8vNt0AC3nSRSobmzHs2DW1nOQe/NPMF1jZLQv l6GlN9J4G8Dh/30Kzbp17bT2v2DT4qLyy3wrPS+Vn7xFVunqEFT3gSb4IfHqMdcY BNkbD5HRVfN5SVe9ZYOIl366+rSVKL/xqyk1rrm3Dq0NbiRg3jfGJJTCKT1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYnBp625p04wuCggIzGB9/+6ArJMwHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbuKWhKLrW/0Jjy3Pra4kEgzWJTApoShUx/ l3+gAe9JFoWcxJIAc0pKOwkJxzuywxso9GwQU6D/o6i1wM/ri4IgupXv3Wr29juc /A75V1rtRHx3DTlfNW8GCoonMykvB+W4l66q7Bzf9LV1H4DIIw+wV/xfSrgF7K0j G0JPXgp9IwCySlZy53uZM3g9nTPxVWx4VwewzPRKVbi8LoXpxL1t2YhbOa0+glz/ MckdmbuKkrrMq15m+d4fDWnuuhe9P7b6qmdOoeiNwmsUCaEosIg7hsdsS556yogR SuYOLsmQ3rzcZBJ1tRb2yGeSA6Ktsj4wMNRsDIQpg51KuZ88o+0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:16 2025 by rpki-client