$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: aBkGX3ePiffd2fBo1SKUnTPDOK45l4Y43i3RrJ9GcZY= Subject key identifier: B1:41:21:C7:F6:B7:78:D8:73:11:87:66:26:0E:AF:E2:F8:F7:7C:F7 Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 3ACE8ED229E15A45E23E7A5899A8D20BF5033464 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: B6 Signing time: Tue 04 Nov 2025 06:01:32 +0000 Manifest this update: Tue 04 Nov 2025 05:56:32 +0000 Manifest next update: Fri 07 Nov 2025 15:11:32 +0000 Files and hashes: 1: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: cowb+1/Jg5VMQBlwxxpVuUdSR7kOutexDe2gJHuYtq4=) 2: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: KBNbxQjOLfhYwGB4Wp4pMpbXxYHR8QezEvyeUuNBjy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ce:8e:d2:29:e1:5a:45:e2:3e:7a:58:99:a8:d2:0b:f5:03:34:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Nov 4 05:56:32 2025 GMT Not After : Nov 7 15:11:32 2025 GMT Subject: CN=B14121C7F6B778D873118766260EAFE2F8F77CF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:7d:39:cc:62:7d:b5:8b:9e:75:c2:a1:48: 8c:ba:24:28:0c:e1:b1:24:f7:ab:71:e3:c2:84:41: 98:9e:6c:97:01:25:38:3a:9e:5e:12:39:0f:67:41: 88:ac:1e:4f:b7:e8:07:73:1f:83:9b:06:b2:1a:d7: 6f:8d:90:bd:af:49:90:5f:67:1b:f8:3b:51:aa:b1: f5:be:c5:69:85:a5:5d:9c:2e:9c:7f:c3:21:7d:b5: 3c:09:df:90:9a:eb:e8:20:f7:d2:5a:b8:4d:6c:f1: 1c:b5:6f:a5:ef:ba:44:a9:f0:39:4d:b6:61:29:a2: 1b:4e:65:3a:a5:eb:83:69:48:b2:26:e6:25:c9:62: 36:e5:d1:73:d9:7e:2f:29:0f:f8:c5:86:5b:1c:1f: 17:ee:63:3c:61:59:80:7d:e6:3b:46:ca:df:df:59: 6d:9d:19:5c:d5:e5:82:51:41:c0:b6:93:c3:6a:72: 4f:fe:6d:a0:b0:38:15:92:22:70:60:5a:df:b5:e6: 0b:c0:9d:d7:91:d1:10:7d:1b:29:eb:8c:1d:61:9c: 17:39:b5:7a:82:77:54:5a:60:a2:cd:f4:0d:cd:81: 2b:27:4e:22:53:8e:85:6e:0e:d9:0d:f3:4b:eb:58: 90:69:4a:ac:14:6d:a7:34:51:1d:52:fc:b2:d6:70: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:41:21:C7:F6:B7:78:D8:73:11:87:66:26:0E:AF:E2:F8:F7:7C:F7 X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c4:de:00:f1:4a:43:18:d5:37:d5:c4:bc:77:67:18:11:38: f4:42:59:4b:15:27:d5:d3:ef:64:78:7d:ba:b6:87:39:70:42: 9b:99:37:a2:ff:0b:5f:99:a6:45:70:f3:04:3c:38:7a:df:57: 87:95:e0:44:64:02:a9:8f:37:ca:70:dc:88:42:f0:f5:85:32: 8e:62:91:74:8f:0e:c4:2c:f3:2c:3d:9d:4a:70:8a:a3:43:25: 2b:34:f0:44:60:c5:e8:36:dd:71:b9:78:85:ef:83:04:af:7e: 1f:48:ca:75:4f:54:c3:58:42:c3:e8:51:95:69:c1:46:11:ce: 41:0a:3a:0e:bf:65:bf:1c:35:e7:4e:62:46:eb:aa:70:5d:8c: d5:25:b6:7d:1b:cb:bc:4b:c6:06:fb:dc:1e:45:7b:49:24:cb: 71:49:24:d6:cb:20:53:0f:0a:5d:c3:06:5b:5f:dd:b0:f8:07: 98:0c:4a:12:cc:4b:5b:b8:f3:f8:f3:58:68:18:19:99:a8:be: 4f:84:37:23:bf:b4:98:3a:12:65:56:2a:7b:86:90:c0:1f:cc: 05:c1:23:5e:70:80:00:a6:a7:c6:0d:43:95:5c:b5:7f:c9:b9: a3:41:4b:29:07:12:34:f8:03:2e:37:c9:9f:00:81:f9:fa:de: 8f:f5:f7:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOs6O0inhWkXiPnpYmajSC/UDNGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNTExMDQwNTU2MzJaFw0yNTExMDcxNTExMzJaMDMxMTAvBgNV BAMTKEIxNDEyMUM3RjZCNzc4RDg3MzExODc2NjI2MEVBRkUyRjhGNzdDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYW305zGJ9tYuedcKhSIy6JCgM 4bEk96tx48KEQZiebJcBJTg6nl4SOQ9nQYisHk+36AdzH4ObBrIa12+NkL2vSZBf Zxv4O1GqsfW+xWmFpV2cLpx/wyF9tTwJ35Ca6+gg99JauE1s8Ry1b6XvukSp8DlN tmEpohtOZTql64NpSLIm5iXJYjbl0XPZfi8pD/jFhlscHxfuYzxhWYB95jtGyt/f WW2dGVzV5YJRQcC2k8Nqck/+baCwOBWSInBgWt+15gvAndeR0RB9GynrjB1hnBc5 tXqCd1RaYKLN9A3NgSsnTiJTjoVuDtkN80vrWJBpSqwUbac0UR1S/LLWcOHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsUEhx/a3eNhzEYdmJg6v4vj3fPcwHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjE3gDxSkMY1TfVxLx3ZxgROPRCWUsVJ9XT 72R4fbq2hzlwQpuZN6L/C1+ZpkVw8wQ8OHrfV4eV4ERkAqmPN8pw3IhC8PWFMo5i kXSPDsQs8yw9nUpwiqNDJSs08ERgxeg23XG5eIXvgwSvfh9IynVPVMNYQsPoUZVp wUYRzkEKOg6/Zb8cNedOYkbrqnBdjNUltn0by7xLxgb73B5Fe0kky3FJJNbLIFMP Cl3DBltf3bD4B5gMShLMS1u48/jzWGgYGZmovk+ENyO/tJg6EmVWKnuGkMAfzAXB I15wgACmp8YNQ5VctX/JuaNBSykHEjT4Ay43yZ8Agfn63o/192k= -----END CERTIFICATE-----Generated at Wed Nov 5 00:37:05 2025 by rpki-client