$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: /sevR8nbhPW1ndd9L2g5pjHmDDa2YxsMjdr03PQ5TDU= Subject key identifier: 91:35:AF:F2:F4:3D:69:69:C9:04:73:4B:66:E7:9F:E5:72:89:6E:AA Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 4835AED49818C31FFD61868E247005887155131D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 0181 Signing time: Tue 03 Jun 2025 18:20:02 +0000 Manifest this update: Tue 03 Jun 2025 18:15:02 +0000 Manifest next update: Fri 06 Jun 2025 23:48:02 +0000 Files and hashes: 1: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=) 2: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: 15Db7pO4pblY30uv7IsqPL7AlHYQxsM1IPgFzOYY9T4=) 3: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:35:ae:d4:98:18:c3:1f:fd:61:86:8e:24:70:05:88:71:55:13:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Jun 3 18:15:02 2025 GMT Not After : Jun 6 23:48:02 2025 GMT Subject: CN=9135AFF2F43D6969C904734B66E79FE572896EAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:da:af:fe:cd:5e:9a:2a:f9:8e:33:89:6d:b8: dc:d2:9a:d0:ec:a3:ec:52:69:32:a8:1d:3b:a4:87: 14:89:e5:95:8f:68:bd:2d:35:42:d3:8c:c0:25:0f: 6a:0d:01:48:1d:bc:77:eb:c6:ce:a5:93:1b:c5:04: e7:2d:a3:3f:f5:db:78:7a:73:d0:57:3d:ed:10:00: 30:6f:4c:29:1e:83:46:f1:7b:02:8e:18:4f:79:8f: e2:b9:d5:a1:ef:0d:40:c3:2f:b3:8a:03:14:ad:de: bb:0c:21:67:8b:ad:64:c0:91:91:95:b7:85:9f:2f: 9b:95:ef:ed:b5:22:3d:1d:6a:f9:1f:9a:78:06:91: 51:6a:13:68:9d:4e:8e:d8:56:fa:66:1c:82:da:e8: 4b:a5:cc:24:ff:8a:44:71:45:6d:fd:2c:2f:e1:fb: 23:c2:41:13:4f:eb:b4:fc:e6:f8:b3:d8:4f:65:c6: 3b:0a:4e:08:8d:a7:f3:0b:87:d0:25:5e:e5:48:9e: 43:04:54:a8:45:f0:c4:63:94:9e:4a:3d:bd:1a:59: 1c:25:33:25:f7:82:a0:7c:f5:1d:17:24:56:93:9a: 31:f2:e1:00:d5:20:42:17:8c:bb:8b:ba:00:14:b0: e4:c3:45:3e:6e:0b:6f:01:c7:e3:22:e4:9a:7e:7c: 9d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:35:AF:F2:F4:3D:69:69:C9:04:73:4B:66:E7:9F:E5:72:89:6E:AA X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a5:8c:5c:28:ec:8d:08:5a:40:27:ec:f9:0d:70:69:16:50: c6:8b:45:ce:ce:2e:6b:27:5f:fc:94:94:11:a9:59:e1:c9:6a: 03:7f:fb:98:0f:cc:81:dc:e1:af:8e:0e:f3:5e:2e:2d:b6:f9: ac:71:8e:f3:cd:4f:88:47:19:7d:72:48:9d:7e:c0:b9:1a:f1: 74:37:20:51:b4:17:64:5d:97:58:01:1d:1c:9b:1d:41:ca:32: cb:ae:08:d5:71:a2:90:53:9e:84:e8:60:ff:12:84:cc:f3:ed: 6d:07:ab:e2:21:8d:ef:17:5b:44:60:66:ea:3d:24:22:b6:dc: 13:47:93:47:c6:a5:ac:64:bf:9c:24:83:13:bd:79:b7:83:d1: bd:df:bf:e9:b4:2e:2e:9c:9a:ee:45:61:da:68:27:10:b4:22: 2b:c8:14:65:79:1a:9f:9d:72:b0:2e:2b:15:96:36:f3:cb:e5: 9b:b9:7f:27:56:f7:74:72:5c:e9:32:09:47:22:72:11:53:f2: 98:6d:3c:a9:5f:23:91:cf:c6:66:cf:29:01:40:51:11:6a:ac: 6e:52:ac:a9:19:fa:2f:81:80:e8:b6:c2:bd:00:37:55:cd:7d: 3f:68:e0:03:85:01:2a:19:1d:53:d2:81:f3:03:0a:09:60:2c: d1:78:ac:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDWu1JgYwx/9YYaOJHAFiHFVEx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTA2MDMxODE1MDJaFw0yNTA2MDYyMzQ4MDJaMDMxMTAvBgNV BAMTKDkxMzVBRkYyRjQzRDY5NjlDOTA0NzM0QjY2RTc5RkU1NzI4OTZFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2q/+zV6aKvmOM4ltuNzSmtDs o+xSaTKoHTukhxSJ5ZWPaL0tNULTjMAlD2oNAUgdvHfrxs6lkxvFBOctoz/123h6 c9BXPe0QADBvTCkeg0bxewKOGE95j+K51aHvDUDDL7OKAxSt3rsMIWeLrWTAkZGV t4WfL5uV7+21Ij0davkfmngGkVFqE2idTo7YVvpmHILa6EulzCT/ikRxRW39LC/h +yPCQRNP67T85viz2E9lxjsKTgiNp/MLh9AlXuVInkMEVKhF8MRjlJ5KPb0aWRwl MyX3gqB89R0XJFaTmjHy4QDVIEIXjLuLugAUsOTDRT5uC28Bx+Mi5Jp+fJ3TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkTWv8vQ9aWnJBHNLZuef5XKJbqowHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOljFwo7I0IWkAn7PkNcGkWUMaLRc7OLmsn X/yUlBGpWeHJagN/+5gPzIHc4a+ODvNeLi22+axxjvPNT4hHGX1ySJ1+wLka8XQ3 IFG0F2Rdl1gBHRybHUHKMsuuCNVxopBTnoToYP8ShMzz7W0Hq+Ihje8XW0RgZuo9 JCK23BNHk0fGpaxkv5wkgxO9ebeD0b3fv+m0Li6cmu5FYdpoJxC0IivIFGV5Gp+d crAuKxWWNvPL5Zu5fydW93RyXOkyCUcichFT8phtPKlfI5HPxmbPKQFAURFqrG5S rKkZ+i+BgOi2wr0AN1XNfT9o4AOFASoZHVPSgfMDCglgLNF4rOE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:58 2025 by rpki-client