$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: W6qQgcKuj9Qd/F1V+0KU8mhzwcRgin54jwry/D210VY= Subject key identifier: 65:92:A9:CA:7F:C9:52:A5:5F:7A:30:97:FE:B7:12:05:64:A0:27:BF Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 5A572209C4820AAD98C552FD334A8D4A3C8ED939 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 0359 Signing time: Tue 03 Jun 2025 03:33:18 +0000 Manifest this update: Tue 03 Jun 2025 03:28:18 +0000 Manifest next update: Fri 06 Jun 2025 12:33:18 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: 7NN25xpp2UcfJ9gsuZji/qymPimRcVlHB2NW9ChDUdM=) 2: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: mEvbUd2ZGdck6sVx2FU9VQpWT//EfcrBvVREQnldK7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 12:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:57:22:09:c4:82:0a:ad:98:c5:52:fd:33:4a:8d:4a:3c:8e:d9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: Jun 3 03:28:18 2025 GMT Not After : Jun 6 12:33:18 2025 GMT Subject: CN=6592A9CA7FC952A55F7A3097FEB7120564A027BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:0c:f3:1d:42:60:3e:77:b9:68:57:cc:63: 17:c6:0d:02:50:06:1c:5d:7a:7a:58:f7:b7:cb:5f: 2b:e3:5d:ee:ec:05:a4:d1:11:45:0c:53:af:23:07: 0d:06:6b:3e:99:1e:da:65:f5:32:2e:48:96:d1:07: 7d:dd:84:bc:15:e5:06:c1:ef:ef:e7:26:1e:89:25: ed:25:70:6f:b5:13:b0:b5:17:ef:3f:69:1a:27:e6: cb:9a:4c:70:43:93:0e:ef:7f:84:3b:a0:03:87:68: 00:cd:9d:7c:1d:59:96:7b:76:96:1e:de:bd:e5:ea: 13:b1:c2:9b:d0:79:c6:5e:c5:3a:30:96:73:f4:2b: 84:bf:55:76:3e:18:a3:5d:43:42:17:ff:b6:7e:ec: 3b:aa:73:03:0d:59:ac:c2:6b:3c:0a:33:ba:b4:af: 39:be:99:2f:12:cf:f5:a6:7b:e4:ed:8e:15:a7:7f: 42:82:d6:8f:66:e1:ab:10:86:ac:a5:c9:38:8d:a1: 20:3c:81:36:78:4e:78:b7:5e:5f:86:84:4a:8b:c6: 5d:4c:29:ee:71:7f:13:ce:31:41:8f:6c:2c:0c:17: db:ad:c8:5e:4a:82:28:6e:5f:c0:ff:8e:f8:61:b7: b0:6c:96:7b:c3:a8:97:28:50:7a:5e:2b:e6:40:79: 82:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:92:A9:CA:7F:C9:52:A5:5F:7A:30:97:FE:B7:12:05:64:A0:27:BF X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:6d:5b:ef:7d:92:76:32:46:ca:91:55:6e:16:5f:13:48:76: c1:49:b9:37:86:d1:2b:55:b9:80:26:7a:52:03:c3:d5:cf:b4: e0:e9:84:73:47:84:68:c4:e1:18:50:0f:20:c8:83:78:cc:bc: b7:d2:eb:95:a9:36:6f:56:b0:ec:cb:e6:1e:7d:b5:1b:dc:69: a9:14:f3:6c:82:7e:68:10:a5:21:d4:de:dc:bd:67:d7:5f:3f: bf:1b:c4:4c:a8:7b:0a:fe:50:50:29:50:cc:c2:c6:ad:d1:2a: ca:5e:8b:b7:35:6b:b8:c3:03:95:5e:87:16:18:9f:8f:0f:76: 8c:2e:6b:46:8b:a4:81:32:08:18:78:98:07:34:7b:53:43:96: d4:2c:da:6b:88:c6:bb:a8:9f:28:74:52:20:28:22:ab:73:90: ad:6a:18:f2:5c:3b:a9:39:36:dc:10:95:b9:be:a9:2f:38:f8: 6f:e3:70:85:d6:01:57:64:f5:6b:43:c8:68:da:f6:ff:98:41: 23:2c:7a:84:75:81:90:58:df:83:df:4c:1d:8c:d4:4c:02:15: 67:5c:93:1d:4f:a7:e7:13:91:19:3c:6d:92:77:e8:8e:26:97: 2f:ba:20:2b:c3:cb:d3:1a:57:f1:89:db:86:33:b7:95:02:72: f7:77:cc:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlciCcSCCq2YxVL9M0qNSjyO2TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNTA2MDMwMzI4MThaFw0yNTA2MDYxMjMzMThaMDMxMTAvBgNV BAMTKDY1OTJBOUNBN0ZDOTUyQTU1RjdBMzA5N0ZFQjcxMjA1NjRBMDI3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4AzzHUJgPne5aFfMYxfGDQJQ BhxdenpY97fLXyvjXe7sBaTREUUMU68jBw0Gaz6ZHtpl9TIuSJbRB33dhLwV5QbB 7+/nJh6JJe0lcG+1E7C1F+8/aRon5suaTHBDkw7vf4Q7oAOHaADNnXwdWZZ7dpYe 3r3l6hOxwpvQecZexTowlnP0K4S/VXY+GKNdQ0IX/7Z+7DuqcwMNWazCazwKM7q0 rzm+mS8Sz/Wme+TtjhWnf0KC1o9m4asQhqylyTiNoSA8gTZ4Tni3Xl+GhEqLxl1M Ke5xfxPOMUGPbCwMF9utyF5KgihuX8D/jvhht7BslnvDqJcoUHpeK+ZAeYJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZZKpyn/JUqVfejCX/rcSBWSgJ78wHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFtW+99knYyRsqRVW4WXxNIdsFJuTeG0StV uYAmelIDw9XPtODphHNHhGjE4RhQDyDIg3jMvLfS65WpNm9WsOzL5h59tRvcaakU 82yCfmgQpSHU3ty9Z9dfP78bxEyoewr+UFApUMzCxq3RKspei7c1a7jDA5VehxYY n48Pdowua0aLpIEyCBh4mAc0e1NDltQs2muIxruonyh0UiAoIqtzkK1qGPJcO6k5 NtwQlbm+qS84+G/jcIXWAVdk9WtDyGja9v+YQSMseoR1gZBY34PfTB2M1EwCFWdc kx1Pp+cTkRk8bZJ36I4mly+6ICvDy9MaV/GJ24Yzt5UCcvd3zNk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:16:52 2025 by rpki-client