$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft File: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft (raw, json) Hash identifier: d3oUILfjTWfeKWOPMwvBXtAeAgU/zvbPzV/w3NLzSV0= Subject key identifier: 2E:D6:FD:1C:B7:B6:77:AC:40:CB:73:E4:11:E2:D1:1A:49:92:E4:E5 Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 323177FD3C14EDAC33621E1E252D836DF373B72F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft Manifest number: 01F3 Signing time: Mon 03 Nov 2025 07:31:41 +0000 Manifest this update: Mon 03 Nov 2025 07:26:41 +0000 Manifest next update: Thu 06 Nov 2025 11:16:41 +0000 Files and hashes: 1: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: 7zBTS0bU7PgzGa8PCcebIzMScdeyLBIAzKr1yoDxbbo=) 2: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl (hash: j4szTv625o+IaRwhQ0J1pgZPlheadqB5hS0lRYIhBHo=) 3: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: 0GFIWUiUrqRfAE/w3eKveKOv4M+2LjJoosY6Pp8ypUc=) 4: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: aDPjpRT6pfd3T7ltNqLLQRA6RqqiOtEG5C4gW/hEaTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:31:77:fd:3c:14:ed:ac:33:62:1e:1e:25:2d:83:6d:f3:73:b7:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Nov 3 07:26:41 2025 GMT Not After : Nov 6 11:16:41 2025 GMT Subject: CN=2ED6FD1CB7B677AC40CB73E411E2D11A4992E4E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:38:a7:72:2c:b3:ef:50:a6:87:ef:33:73:4c: 23:88:41:21:1a:85:cd:3b:e0:90:1a:80:41:49:a4: 0e:fe:7a:69:f5:49:4e:73:cf:c8:e9:d6:8c:db:5a: d2:fa:50:de:b7:c7:26:c3:1d:af:e1:14:8e:c4:0b: 12:3d:74:5f:3b:b8:16:8b:01:b2:f9:32:87:11:5e: bf:d2:1d:de:5d:2f:e5:53:60:59:84:c4:fb:04:7a: e3:b5:8a:be:2e:a3:45:b5:33:9a:e2:90:ed:0a:dc: e6:77:6a:84:2b:27:cc:b1:09:68:f8:98:aa:a2:85: ad:86:16:ca:d0:88:0a:e6:a5:8d:19:4d:44:83:f1: a7:a5:5b:ab:72:ed:ac:cf:19:88:e4:2c:f9:00:2c: c9:27:f3:cf:58:9f:90:4b:d8:75:28:81:ef:0b:ec: e5:4c:38:5b:27:3c:25:e6:eb:fb:64:61:98:74:20: be:c4:88:15:63:25:db:70:93:6f:a4:54:74:8f:7c: 2b:7c:1f:3c:9c:1d:eb:3f:a2:66:0b:dc:a4:d8:51: d1:72:dd:92:69:2a:49:4c:78:41:29:dd:e7:34:32: e3:7d:f1:79:02:c2:68:89:d8:85:21:ed:2e:1c:63: 6a:0b:ff:39:77:bb:eb:96:1d:3e:07:e6:15:10:9c: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D6:FD:1C:B7:B6:77:AC:40:CB:73:E4:11:E2:D1:1A:49:92:E4:E5 X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:52:eb:81:aa:0a:12:b0:0a:5d:e9:90:f0:d7:5a:fa:f6:9b: 30:84:0f:f6:bd:10:1f:f0:18:be:5f:6f:a2:d2:38:35:0a:a2: 48:60:d3:7f:fc:5f:6a:96:66:e3:95:a3:5f:68:d6:d3:44:b6: cc:85:79:e2:2e:c8:86:76:c2:53:e6:57:5d:57:7b:e5:c6:ff: 84:54:35:e2:89:f1:38:be:a3:81:e6:93:16:f1:bb:0e:e5:b9: e0:87:20:b6:a6:02:4f:c5:33:ae:8e:ae:2f:53:f0:9e:72:76: ee:75:f9:90:c3:67:e0:9d:1f:19:b6:be:71:59:85:a4:c4:0a: c9:0e:bb:b9:3f:5d:84:41:5c:92:bc:20:9d:12:28:64:d3:73: 82:80:e8:2b:6a:86:8f:9c:e3:b0:5e:b8:2d:63:54:8f:f4:a4: f0:7a:26:99:84:2b:1e:7d:c6:fa:0a:c9:d3:91:7c:03:5b:ce: d2:f4:9d:3a:90:22:0a:7a:80:4a:f4:77:92:9f:d1:dd:99:bf: 1f:8f:c4:3e:e6:ef:8d:39:38:b8:3f:f3:a3:74:62:f0:6a:8a: 71:79:7c:09:0b:e2:db:69:39:f4:0e:4b:0c:f5:d4:a3:2a:aa: 68:80:bd:3f:a5:d7:4b:d6:0a:6d:fc:5f:9f:f5:2e:ff:01:e1: 63:b5:1c:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjF3/TwU7awzYh4eJS2DbfNzty8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNTExMDMwNzI2NDFaFw0yNTExMDYxMTE2NDFaMDMxMTAvBgNV BAMTKDJFRDZGRDFDQjdCNjc3QUM0MENCNzNFNDExRTJEMTFBNDk5MkU0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOKdyLLPvUKaH7zNzTCOIQSEa hc074JAagEFJpA7+emn1SU5zz8jp1ozbWtL6UN63xybDHa/hFI7ECxI9dF87uBaL AbL5MocRXr/SHd5dL+VTYFmExPsEeuO1ir4uo0W1M5rikO0K3OZ3aoQrJ8yxCWj4 mKqiha2GFsrQiArmpY0ZTUSD8aelW6ty7azPGYjkLPkALMkn889Yn5BL2HUoge8L 7OVMOFsnPCXm6/tkYZh0IL7EiBVjJdtwk2+kVHSPfCt8HzycHes/omYL3KTYUdFy 3ZJpKklMeEEp3ec0MuN98XkCwmiJ2IUh7S4cY2oL/zl3u+uWHT4H5hUQnIajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULtb9HLe2d6xAy3PkEeLRGkmS5OUwHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5 RjM2QzgwREM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClS64GqChKwCl3pkPDXWvr2mzCED/a9EB/w GL5fb6LSODUKokhg03/8X2qWZuOVo19o1tNEtsyFeeIuyIZ2wlPmV11Xe+XG/4RU NeKJ8Ti+o4Hmkxbxuw7lueCHILamAk/FM66Ori9T8J5ydu51+ZDDZ+CdHxm2vnFZ haTECskOu7k/XYRBXJK8IJ0SKGTTc4KA6Ctqho+c47BeuC1jVI/0pPB6JpmEKx59 xvoKydORfANbztL0nTqQIgp6gEr0d5Kf0d2Zvx+PxD7m7405OLg/86N0YvBqinF5 fAkL4ttpOfQOSwz11KMqqmiAvT+l10vWCm38X5/1Lv8B4WO1HM0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:54:58 2025 by rpki-client