$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: /VNbQgLOcjfXaB7KdVGaHqXjSuJdYBguQ/l2Pwvr0js= Subject key identifier: 4B:1F:68:C6:52:8A:72:36:0C:9E:F4:A8:5C:5A:F4:11:A8:A0:D7:22 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 0A489F7F78068B690B7ED82FE8489D1D79A5F6A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 0169 Signing time: Wed 06 Aug 2025 07:41:41 +0000 Manifest this update: Wed 06 Aug 2025 07:36:41 +0000 Manifest next update: Sat 09 Aug 2025 13:10:41 +0000 Files and hashes: 1: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: iKFAkWTioso6lIxCFGXeEm9iuZJFCqNnJSKzP4ofJwk=) 2: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) 3: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:48:9f:7f:78:06:8b:69:0b:7e:d8:2f:e8:48:9d:1d:79:a5:f6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Aug 6 07:36:41 2025 GMT Not After : Aug 9 13:10:41 2025 GMT Subject: CN=4B1F68C6528A72360C9EF4A85C5AF411A8A0D722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:d1:72:d3:92:1f:f1:5d:40:30:8d:fc:98: 9a:e2:05:e5:6b:6c:0a:b9:08:45:ea:56:d6:33:dc: ff:69:c6:eb:70:96:1d:e6:33:65:f3:2c:8c:bd:b6: 22:c5:35:4a:f5:01:fb:e4:68:a0:b2:6a:9f:c4:58: 42:27:35:81:a1:ec:c7:c6:c8:61:22:b9:73:fc:45: 47:ab:39:1f:6e:0e:92:fd:33:11:29:82:20:61:90: 5b:67:85:ed:29:5f:28:4e:c2:50:87:66:15:01:c7: 82:5e:9f:66:d5:4f:e5:d1:62:df:e8:bb:ce:0c:27: 4c:2b:be:a3:2b:c8:d8:5e:48:fc:f0:03:f4:89:7f: a4:2d:75:03:7e:1d:7c:8b:0b:97:d2:23:43:18:80: 20:44:8c:f3:8c:c0:92:14:b2:0b:ff:4e:85:9c:ec: 79:aa:cc:e0:f2:c8:11:3e:18:37:ec:75:a7:2a:f7: 63:25:66:a1:ab:a5:19:84:0d:3f:92:4a:1d:7f:35: a2:7b:68:be:91:db:41:26:bc:d6:85:e5:ef:22:e5: ee:d9:5d:f3:65:ec:e8:b2:d3:20:73:d6:ba:39:c6: 09:f3:85:71:c8:dd:cf:92:8b:db:9f:7b:1f:7c:60: 9a:1a:94:ac:37:0b:21:3a:7e:a7:06:2c:76:ab:ce: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1F:68:C6:52:8A:72:36:0C:9E:F4:A8:5C:5A:F4:11:A8:A0:D7:22 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:19:24:41:f9:80:e0:b5:8b:ed:f4:d6:9d:28:ba:83:81:e4: cd:cb:7b:44:44:8a:ba:d6:89:b0:01:35:cb:c5:db:8c:81:b9: ae:c0:8c:fb:bd:cf:1a:0c:3e:2e:e5:9a:dc:26:75:f3:68:16: 63:26:1b:39:17:d1:b6:7c:b5:4f:77:4b:02:35:a1:43:b0:00: ab:b4:77:5d:1e:08:0a:0f:b4:7c:5f:fc:92:32:38:3d:64:db: 54:f6:cc:31:44:24:25:f4:c9:79:46:24:74:ab:ba:c8:0a:ae: d3:07:27:07:82:87:aa:8f:32:7f:a1:a4:db:01:b8:45:8f:b7: bc:f0:d3:cf:cb:14:71:ef:58:61:f0:02:05:72:7d:5a:e9:0a: 16:37:96:f8:ab:61:11:af:5c:e2:18:cd:c6:a0:cc:54:55:9a: a7:52:24:1f:4d:c3:2f:d2:40:fa:cb:49:10:06:6c:11:2d:b7: 6c:10:c2:18:0f:9b:54:c0:df:e1:9f:63:20:2e:8c:b9:bf:3c: 9d:d0:9a:24:2a:53:5c:26:5f:ca:21:4f:22:bc:14:1d:30:b4: 8c:b6:ad:8c:5c:4d:21:cd:dc:84:a9:62:c1:3d:65:fa:dd:23: 1b:28:bc:55:8b:98:29:60:66:9c:90:b3:dd:71:46:f6:05:1d: aa:1e:72:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCkiff3gGi2kLftgv6EidHXml9qYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTA4MDYwNzM2NDFaFw0yNTA4MDkxMzEwNDFaMDMxMTAvBgNV BAMTKDRCMUY2OEM2NTI4QTcyMzYwQzlFRjRBODVDNUFGNDExQThBMEQ3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKNFy05If8V1AMI38mJriBeVr bAq5CEXqVtYz3P9pxutwlh3mM2XzLIy9tiLFNUr1AfvkaKCyap/EWEInNYGh7MfG yGEiuXP8RUerOR9uDpL9MxEpgiBhkFtnhe0pXyhOwlCHZhUBx4Jen2bVT+XRYt/o u84MJ0wrvqMryNheSPzwA/SJf6QtdQN+HXyLC5fSI0MYgCBEjPOMwJIUsgv/ToWc 7HmqzODyyBE+GDfsdacq92MlZqGrpRmEDT+SSh1/NaJ7aL6R20EmvNaF5e8i5e7Z XfNl7Oiy0yBz1ro5xgnzhXHI3c+Si9ufex98YJoalKw3CyE6fqcGLHarzt1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSx9oxlKKcjYMnvSoXFr0Eaig1yIwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkZJEH5gOC1i+301p0ouoOB5M3Le0REirrW ibABNcvF24yBua7AjPu9zxoMPi7lmtwmdfNoFmMmGzkX0bZ8tU93SwI1oUOwAKu0 d10eCAoPtHxf/JIyOD1k21T2zDFEJCX0yXlGJHSrusgKrtMHJweCh6qPMn+hpNsB uEWPt7zw08/LFHHvWGHwAgVyfVrpChY3lvirYRGvXOIYzcagzFRVmqdSJB9Nwy/S QPrLSRAGbBEtt2wQwhgPm1TA3+GfYyAujLm/PJ3QmiQqU1wmX8ohTyK8FB0wtIy2 rYxcTSHN3ISpYsE9ZfrdIxsovFWLmClgZpyQs91xRvYFHaoectc= -----END CERTIFICATE-----Generated at Thu Aug 7 03:28:39 2025 by rpki-client