$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: D85kDrVbL0t/gcKcUQgsyWYVPwjeU0DR9+NAvlxDA5Y= Subject key identifier: 08:ED:FA:62:25:41:61:E9:C0:73:F0:23:57:F3:28:1F:46:56:BF:33 Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 09E3D3315175CFAC00EF787D926A94FD8B4266DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 0335 Signing time: Thu 13 Mar 2025 12:41:14 +0000 Manifest this update: Thu 13 Mar 2025 12:36:14 +0000 Manifest next update: Sun 16 Mar 2025 23:33:14 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: 7NN25xpp2UcfJ9gsuZji/qymPimRcVlHB2NW9ChDUdM=) 2: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: uRHNL92HnecxLSHgVj1HYtx7qQde8Q0UoygUtPNmDaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 22:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e3:d3:31:51:75:cf:ac:00:ef:78:7d:92:6a:94:fd:8b:42:66:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: Mar 13 12:36:14 2025 GMT Not After : Mar 16 23:33:14 2025 GMT Subject: CN=08EDFA62254161E9C073F02357F3281F4656BF33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:4e:56:23:37:a5:93:36:a8:76:a3:51:8c: 91:df:b9:14:d7:a4:fe:f9:b3:88:18:35:ce:b9:e5: 36:5c:09:3a:96:db:a7:08:61:f1:d8:2e:60:12:0e: 4f:21:d8:e9:eb:f5:e4:02:bd:4b:92:f2:50:89:84: eb:dc:b3:44:f9:00:e9:b1:4b:f9:17:e4:5b:8c:cd: e6:0d:56:4d:f5:21:24:de:5b:ca:db:99:80:5b:98: 98:19:5c:8d:7a:77:12:99:84:ec:d3:38:79:ce:09: eb:13:6d:46:36:57:96:d3:dd:49:0a:51:03:23:57: b1:5f:ba:d1:1a:8a:07:ba:6f:77:80:91:60:bc:fe: 14:48:68:ce:60:a0:a8:76:39:82:ff:08:8e:32:1b: 56:8b:c3:83:f8:96:30:00:cd:26:62:26:17:c7:98: 68:c8:6f:a7:70:8a:9c:72:1b:0a:e5:1b:63:0c:76: 91:59:9f:e5:c0:7d:18:78:65:ab:b9:ab:aa:de:80: 15:95:b8:45:af:aa:da:6c:4a:66:c3:bc:10:31:ec: 3b:ef:d7:6e:0e:73:d5:26:f4:09:c7:cc:bb:d6:bc: f4:bd:aa:36:6e:fc:9a:93:3e:d7:20:6f:5c:09:bf: e1:c4:84:00:09:ca:51:75:d6:33:da:77:b4:d4:dc: 57:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:ED:FA:62:25:41:61:E9:C0:73:F0:23:57:F3:28:1F:46:56:BF:33 X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:94:69:98:26:7c:be:92:d5:69:7e:0c:6d:2b:31:c8:63:f1: 3c:09:0e:91:c9:58:b0:10:0c:b0:b4:96:27:10:4a:06:97:65: 92:b1:89:b8:7e:97:8a:48:20:58:fd:26:7a:60:ec:3c:36:f0: b9:a1:43:ed:77:b7:b9:5a:59:32:c4:fc:9d:4f:74:ea:22:3f: dd:01:a9:b0:61:02:b7:d7:f1:44:72:19:98:b6:20:59:ff:57: 9a:ea:bc:ff:7a:9f:71:6a:1c:59:13:b8:f0:85:45:3b:72:a9: 2e:dd:f3:d5:d6:70:18:80:be:52:df:b6:19:63:fd:ee:81:a5: b7:99:4f:86:6f:88:77:36:74:b9:e2:7e:f8:e6:f8:fc:bb:91: ee:1a:87:cc:15:fb:10:a4:05:75:56:47:86:81:ec:dc:84:af: 61:66:d2:0a:fb:c8:ee:ec:a7:a6:a5:1d:7d:41:db:11:73:18: ef:1d:5b:46:41:e2:6f:fb:08:a3:0c:7b:96:86:35:51:17:c7: c1:e7:69:d0:b4:c6:c4:0c:41:b8:de:0f:5c:97:35:92:b2:c2: bd:e2:7b:38:33:66:5e:b5:82:f4:a8:05:ba:71:20:21:7f:4a: 25:dd:a7:44:c8:21:f5:07:ba:22:c4:79:2f:77:9d:59:24:a2: c9:4b:a8:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCePTMVF1z6wA73h9kmqU/YtCZt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNTAzMTMxMjM2MTRaFw0yNTAzMTYyMzMzMTRaMDMxMTAvBgNV BAMTKDA4RURGQTYyMjU0MTYxRTlDMDczRjAyMzU3RjMyODFGNDY1NkJGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFU5WIzelkzaodqNRjJHfuRTX pP75s4gYNc655TZcCTqW26cIYfHYLmASDk8h2Onr9eQCvUuS8lCJhOvcs0T5AOmx S/kX5FuMzeYNVk31ISTeW8rbmYBbmJgZXI16dxKZhOzTOHnOCesTbUY2V5bT3UkK UQMjV7FfutEaige6b3eAkWC8/hRIaM5goKh2OYL/CI4yG1aLw4P4ljAAzSZiJhfH mGjIb6dwipxyGwrlG2MMdpFZn+XAfRh4Zau5q6regBWVuEWvqtpsSmbDvBAx7Dvv 124Oc9Um9AnHzLvWvPS9qjZu/JqTPtcgb1wJv+HEhAAJylF11jPad7TU3FdjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCO36YiVBYenAc/AjV/MoH0ZWvzMwHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmUaZgmfL6S1Wl+DG0rMchj8TwJDpHJWLAQ DLC0licQSgaXZZKxibh+l4pIIFj9Jnpg7Dw28LmhQ+13t7laWTLE/J1PdOoiP90B qbBhArfX8URyGZi2IFn/V5rqvP96n3FqHFkTuPCFRTtyqS7d89XWcBiAvlLfthlj /e6BpbeZT4ZviHc2dLnifvjm+Py7ke4ah8wV+xCkBXVWR4aB7NyEr2Fm0gr7yO7s p6alHX1B2xFzGO8dW0ZB4m/7CKMMe5aGNVEXx8HnadC0xsQMQbjeD1yXNZKywr3i ezgzZl61gvSoBbpxICF/SiXdp0TIIfUHuiLEeS93nVkkoslLqGU= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:39 2025 by rpki-client