$ rpki-client -vvf repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft File: AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft (raw, json) Hash identifier: jgozqVDvCJGADtWG42Ro5EyVal02Qeo4kDGJEUiM+Nw= Subject key identifier: 86:7D:57:43:00:75:B7:E7:70:BC:1E:36:F7:41:04:19:14:96:8C:36 Authority key identifier: AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 Certificate issuer: /CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Certificate serial: 4BFC1F2F92C3F2386443BDF2A497E1DBD1759AEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft Manifest number: 0180 Signing time: Fri 06 Jun 2025 21:11:11 +0000 Manifest this update: Fri 06 Jun 2025 21:06:11 +0000 Manifest next update: Tue 10 Jun 2025 01:11:11 +0000 Files and hashes: 1: AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl (hash: pFSHbuVo6wxP2a7BmPxhOH8jCaiGsaY/Sceo1k04x0Y=) 2: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: fiuKPWuy7RKi+g0sG/LNMj+SSbhL4KU/yazo65GfTmw=) 3: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: EVf2WcFs3bKP8tYqDIaCEQ9aXkKueuElwWbdJ2ysh6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 01:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fc:1f:2f:92:c3:f2:38:64:43:bd:f2:a4:97:e1:db:d1:75:9a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Validity Not Before: Jun 6 21:06:11 2025 GMT Not After : Jun 10 01:11:11 2025 GMT Subject: CN=867D57430075B7E770BC1E36F741041914968C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2a:1c:ac:d6:92:4e:57:dc:be:8e:3e:7b:5a: da:3a:61:8f:65:72:fa:89:78:79:b4:5c:c1:cb:eb: 8c:36:16:2b:36:55:a1:31:58:05:52:e9:0d:11:c3: 79:7b:5b:d5:88:e7:80:eb:e7:b1:26:50:d0:28:c6: 02:ed:e3:24:1e:ed:1c:4d:9c:43:be:81:72:03:f2: f4:59:ba:6d:d5:0c:bd:ca:0e:8b:5c:27:1d:f6:3f: d8:2f:df:35:36:2b:a5:e1:cd:f1:7e:e4:95:3f:54: 70:c1:31:53:eb:11:01:60:0b:7e:e1:f0:cf:ce:fb: 36:37:13:10:38:f4:5b:b2:a3:0d:81:03:86:30:3c: 77:dd:d6:8a:19:e2:0b:67:99:c1:86:1a:ec:52:99: ed:4e:a5:13:96:a5:39:7d:db:45:42:e4:ef:ac:07: 2a:a1:d6:ea:d4:37:a7:1d:5d:fe:3a:c5:bf:61:7a: 8d:ff:d9:5b:33:a8:2b:38:4c:4e:5a:34:8f:28:63: 0c:19:9a:33:40:14:ad:74:4b:f6:42:15:fa:20:10: 60:63:76:d7:6e:bf:a9:cc:fb:30:63:4f:d3:cc:59: 44:85:f9:b9:c9:e7:80:d4:e4:18:96:72:30:79:e9: aa:f9:23:02:9e:91:33:cd:1a:ad:17:36:50:4e:aa: 20:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7D:57:43:00:75:B7:E7:70:BC:1E:36:F7:41:04:19:14:96:8C:36 X509v3 Authority Key Identifier: keyid:AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:15:47:54:9b:9c:2f:d3:f4:f3:59:cc:30:d6:07:3c:d8:f1: 08:02:92:3e:6f:f4:ad:35:23:60:19:63:b7:cd:93:04:65:c9: e1:0f:7f:be:a8:76:fb:27:d4:d5:51:5f:6b:ef:97:09:0f:7b: 35:a4:f3:18:fe:a4:af:42:4d:48:0a:36:5f:d6:a2:25:02:d1: f2:96:66:ab:54:00:bf:91:fe:9e:cd:2b:97:ef:f2:41:d8:7a: 8a:2e:6c:63:83:6b:fa:1b:bb:f2:1c:06:50:bb:e5:15:85:e1: 6c:d7:56:8b:e2:34:78:61:29:21:bd:99:3e:bd:14:8a:54:07: 51:e9:1e:5b:88:52:7a:1d:e4:ce:64:6e:21:10:d9:7e:b2:f2: d0:70:80:c7:2b:d1:47:2a:fc:bb:32:95:ec:18:02:c7:76:ca: 1a:78:c5:60:a5:85:1c:7f:bc:8f:2b:c1:ce:3f:01:b2:d0:bd: 30:ba:39:58:4d:ec:83:f5:d9:93:7f:42:85:39:75:5b:79:47: c7:72:b1:bb:3f:ad:e6:1f:0f:f3:83:13:c8:ff:bb:9b:0c:8f: 3a:d3:40:3a:78:04:62:17:6a:7f:af:2b:26:6e:eb:b1:eb:8c: ac:56:05:28:6d:e8:3b:b8:01:5b:8e:56:3d:86:11:43:95:b1: 58:fc:3d:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/wfL5LD8jhkQ73ypJfh29F1mu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2 OUZGNUUyMDAeFw0yNTA2MDYyMTA2MTFaFw0yNTA2MTAwMTExMTFaMDMxMTAvBgNV BAMTKDg2N0Q1NzQzMDA3NUI3RTc3MEJDMUUzNkY3NDEwNDE5MTQ5NjhDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwKhys1pJOV9y+jj57Wto6YY9l cvqJeHm0XMHL64w2Fis2VaExWAVS6Q0Rw3l7W9WI54Dr57EmUNAoxgLt4yQe7RxN nEO+gXID8vRZum3VDL3KDotcJx32P9gv3zU2K6XhzfF+5JU/VHDBMVPrEQFgC37h 8M/O+zY3ExA49Fuyow2BA4YwPHfd1ooZ4gtnmcGGGuxSme1OpROWpTl920VC5O+s Byqh1urUN6cdXf46xb9heo3/2VszqCs4TE5aNI8oYwwZmjNAFK10S/ZCFfogEGBj dtduv6nM+zBjT9PMWUSF+bnJ54DU5BiWcjB56ar5IwKekTPNGq0XNlBOqiApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhn1XQwB1t+dwvB4290EEGRSWjDYwHwYDVR0j BBgwFoAUrnthqcFnk3hMwlzsApVRbGn/XiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTg5NWNlYi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC9BRTdCNjFBOUMx Njc5Mzc4NENDMjVDRUMwMjk1NTE2QzY5RkY1RTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2OUZG NUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUx NkM2OUZGNUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8VR1SbnC/T9PNZzDDWBzzY8QgCkj5v9K01 I2AZY7fNkwRlyeEPf76odvsn1NVRX2vvlwkPezWk8xj+pK9CTUgKNl/WoiUC0fKW ZqtUAL+R/p7NK5fv8kHYeooubGODa/obu/IcBlC75RWF4WzXVoviNHhhKSG9mT69 FIpUB1HpHluIUnod5M5kbiEQ2X6y8tBwgMcr0Ucq/LsylewYAsd2yhp4xWClhRx/ vI8rwc4/AbLQvTC6OVhN7IP12ZN/QoU5dVt5R8dysbs/reYfD/ODE8j/u5sMjzrT QDp4BGIXan+vKyZu67HrjKxWBSht6Du4AVuOVj2GEUOVsVj8PXc= -----END CERTIFICATE-----Generated at Sat Jun 7 16:31:44 2025 by rpki-client