$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: ad2gfNj7Yw1krutpAjVkllV0FplCfVCqDwhCPG5Tpak= Subject key identifier: A3:53:45:9A:17:7D:07:0E:66:12:34:39:E0:61:3A:9A:7D:0B:4C:A2 Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 3767FBB12D77B2CCD26EE1AFB7D0FC676088C5B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: BE Signing time: Wed 04 Jun 2025 23:50:37 +0000 Manifest this update: Wed 04 Jun 2025 23:45:37 +0000 Manifest next update: Sun 08 Jun 2025 06:50:37 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: uLZ/EPtt94iV36+OvPNuxZ8aJMW8h3pTjqT0Fuwbi/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:67:fb:b1:2d:77:b2:cc:d2:6e:e1:af:b7:d0:fc:67:60:88:c5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: Jun 4 23:45:37 2025 GMT Not After : Jun 8 06:50:37 2025 GMT Subject: CN=A353459A177D070E66123439E0613A9A7D0B4CA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cb:fb:5f:88:31:4b:67:b7:fd:a5:6c:88:0c: 2f:57:ab:7e:6a:9e:e7:c7:ee:f7:97:f3:64:11:af: b7:6f:9a:3e:98:e1:70:5c:82:3e:9e:07:3b:00:24: 5f:45:23:dd:7d:2e:ac:29:e9:28:12:44:54:f0:49: 9a:4f:97:13:0e:ca:b6:ec:36:b9:2d:28:7d:a3:09: bf:7a:3c:ab:19:10:cb:5a:5f:b0:a2:ff:55:fb:71: 16:37:a6:d9:3e:42:51:e3:b5:bc:53:16:32:66:16: b9:8c:85:4a:01:d4:13:01:10:1b:c2:16:8a:2d:ed: 54:ac:87:b8:60:22:f2:6d:13:be:3d:57:6b:de:b5: ad:fe:7e:52:c8:6f:1a:69:99:ce:72:a6:71:4c:a3: f3:71:da:63:a4:f0:a9:91:c1:5b:88:4e:a2:14:c2: d3:89:a9:31:4f:f6:e4:36:48:d0:52:3b:9e:0d:56: d7:9c:7f:cb:71:28:c6:91:d2:bd:fd:26:8d:3c:8d: 58:14:af:e5:40:88:31:25:28:d5:fd:57:e9:39:e4: 59:a9:30:08:89:74:42:db:a6:a5:a0:9d:01:7b:4e: 6e:b4:19:9e:21:aa:6b:96:3c:08:66:b1:c9:4f:63: 5d:9f:f0:bb:bf:2b:31:fe:26:dc:45:2e:f5:97:c2: f9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:53:45:9A:17:7D:07:0E:66:12:34:39:E0:61:3A:9A:7D:0B:4C:A2 X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9f:eb:7f:b1:e5:47:2f:23:57:75:92:a7:02:67:c2:7d:f2: 5b:b1:7d:12:f4:03:6e:d8:83:21:e9:68:af:40:71:f7:dd:a8: a3:8a:6f:d0:38:fe:3a:fb:eb:50:a9:fc:1d:21:87:df:cf:39: aa:9e:35:ee:19:50:73:78:67:7b:9d:a5:43:34:91:dd:14:10: 00:62:21:9d:07:39:ab:40:0e:06:c8:d3:00:6e:d4:55:b4:01: 24:e5:3b:57:69:f6:f0:de:94:2c:f7:9e:94:14:a5:9f:38:80: 1c:91:8d:1b:b6:33:a5:7b:49:73:12:f4:b0:ff:21:af:22:93: 99:59:f2:58:36:3d:f7:a8:9e:b5:2b:5f:1f:bc:8f:40:d3:b0: e1:d3:e9:2b:85:b5:b7:e9:9f:49:6e:95:d3:ab:b7:ec:b3:21: 91:c0:68:df:d9:8e:50:b3:46:fb:0a:d7:14:3d:b8:e8:66:5d: b3:8f:06:35:c2:d9:05:31:34:ff:c0:f7:9a:2f:a8:df:f3:9b: 6d:1b:ad:0e:82:94:92:29:ec:c5:f5:49:0e:1d:b6:25:5c:8f: 48:bf:7e:a9:be:f6:a6:d8:97:1e:f4:4d:2d:7e:7a:c7:b9:a0: 0d:56:41:eb:ee:7e:c5:4a:ea:2c:e4:12:15:65:91:81:2a:26: f1:43:66:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2f7sS13sszSbuGvt9D8Z2CIxbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVC MDQ0ODdGQTAeFw0yNTA2MDQyMzQ1MzdaFw0yNTA2MDgwNjUwMzdaMDMxMTAvBgNV BAMTKEEzNTM0NTlBMTc3RDA3MEU2NjEyMzQzOUUwNjEzQTlBN0QwQjRDQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXy/tfiDFLZ7f9pWyIDC9Xq35q nufH7veX82QRr7dvmj6Y4XBcgj6eBzsAJF9FI919Lqwp6SgSRFTwSZpPlxMOyrbs NrktKH2jCb96PKsZEMtaX7Ci/1X7cRY3ptk+QlHjtbxTFjJmFrmMhUoB1BMBEBvC Foot7VSsh7hgIvJtE749V2veta3+flLIbxppmc5ypnFMo/Nx2mOk8KmRwVuITqIU wtOJqTFP9uQ2SNBSO54NVtecf8txKMaR0r39Jo08jVgUr+VAiDElKNX9V+k55Fmp MAiJdELbpqWgnQF7Tm60GZ4hqmuWPAhmsclPY12f8Lu/KzH+JtxFLvWXwvmPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo1NFmhd9Bw5mEjQ54GE6mn0LTKIwHwYDVR0j BBgwFoAUqpe5WScSkfvhQkkbgQY61bBEh/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3 MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4N0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVCMDQ0 ODdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNB RDVCMDQ0ODdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6f63+x5UcvI1d1kqcCZ8J98luxfRL0A27Y gyHpaK9AcffdqKOKb9A4/jr761Cp/B0hh9/POaqeNe4ZUHN4Z3udpUM0kd0UEABi IZ0HOatADgbI0wBu1FW0ASTlO1dp9vDelCz3npQUpZ84gByRjRu2M6V7SXMS9LD/ Ia8ik5lZ8lg2PfeonrUrXx+8j0DTsOHT6SuFtbfpn0luldOrt+yzIZHAaN/ZjlCz RvsK1xQ9uOhmXbOPBjXC2QUxNP/A95ovqN/zm20brQ6ClJIp7MX1SQ4dtiVcj0i/ fqm+9qbYlx70TS1+ese5oA1WQevufsVK6izkEhVlkYEqJvFDZrg= -----END CERTIFICATE-----Generated at Fri Jun 6 06:20:23 2025 by rpki-client