$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: 72sJBiAqyIJ9kTSyEmXHj/ttLFviO1K4kc+NU1qbsH8= Subject key identifier: A4:75:34:4F:62:1B:0A:39:9D:49:AB:65:9A:CE:E7:92:E9:50:1B:4D Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 433A4BAEB75CD4A127DABAC6F1DAED51E74A8E0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 0230 Signing time: Mon 04 Aug 2025 18:50:04 +0000 Manifest this update: Mon 04 Aug 2025 18:45:04 +0000 Manifest next update: Fri 08 Aug 2025 00:44:04 +0000 Files and hashes: 1: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: mILgNsqQOC7ukAkdxDoanzwIWxBZqUVcAA8Xp+zkfbw=) 2: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: lcUIJAwUk5gaeqEf7PICGNNsMFcAGcPpPkkivl98S50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3a:4b:ae:b7:5c:d4:a1:27:da:ba:c6:f1:da:ed:51:e7:4a:8e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Aug 4 18:45:04 2025 GMT Not After : Aug 8 00:44:04 2025 GMT Subject: CN=A475344F621B0A399D49AB659ACEE792E9501B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cc:7e:7b:70:6b:b5:1f:d6:23:4a:8b:af:df: c5:9e:41:bb:8c:b7:5f:8d:e6:9f:c5:b4:06:ac:14: da:07:86:62:35:5c:27:ac:c3:42:ee:ea:33:83:d6: ef:89:68:7e:77:6e:08:23:c0:f5:4a:a0:84:9c:dd: 12:75:9c:92:98:9a:f2:dd:91:99:97:4c:97:d6:4a: d3:ad:67:60:b5:a6:8e:9f:70:bd:f5:b5:46:d8:bd: 59:a5:e1:18:ae:d2:ab:6c:70:04:01:53:85:dc:dc: 4c:d6:50:8a:3a:dd:be:a3:15:ee:b5:85:b7:45:a6: e7:27:36:3d:1b:16:fa:91:10:97:e9:61:1b:ca:2d: 3b:12:3b:ca:35:99:f6:a1:42:7b:f9:29:a0:1a:60: f1:96:32:9d:cc:a4:bd:3e:95:c9:17:dc:12:6a:8c: 96:e2:30:af:1d:77:22:6d:c6:6e:83:7a:39:95:56: bf:9d:cd:3b:98:c2:8b:47:a7:db:4b:b9:bd:5a:2d: 37:c2:32:2d:3d:09:0a:ff:e6:45:8c:27:fd:24:fc: fd:fb:15:99:4f:a5:9c:c0:25:4c:af:51:b9:7d:2b: ca:55:2d:d3:7f:73:09:27:3f:d8:de:47:01:f9:a5: 1a:33:27:57:92:46:84:76:d4:2e:1b:a3:93:28:02: 20:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:75:34:4F:62:1B:0A:39:9D:49:AB:65:9A:CE:E7:92:E9:50:1B:4D X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b4:c7:0b:5f:66:82:ac:ea:5d:32:2e:14:87:83:2c:6b:76: b4:7f:16:de:8b:ab:0b:a7:f0:f2:43:c7:e0:aa:83:80:55:45: af:6e:d3:d9:5d:55:ce:e2:2c:e9:fa:ce:43:12:3d:a8:45:e7: 1a:81:f4:87:25:dd:65:0a:fe:97:7a:7d:23:f0:c9:7b:e0:c6: 0d:8d:75:49:97:6b:d4:36:65:5e:7c:ac:56:7a:02:43:f4:19: b2:21:36:c6:0b:6b:0f:fc:01:46:48:0c:75:7f:4e:41:f7:7e: 72:e6:b7:72:d3:96:1e:6f:9c:9f:28:1f:14:02:aa:a6:af:53: e5:33:cf:91:94:3b:f1:9d:83:7b:f4:85:11:a9:b6:43:17:12: e1:92:21:2e:fc:e4:08:32:89:7f:f2:78:b3:a5:64:54:c0:cf: 44:78:92:68:88:77:5e:c4:df:fc:37:96:35:b5:c5:14:75:57: 99:62:fd:9e:5e:92:15:1d:98:16:1f:b6:29:28:0b:61:9d:99: 7a:ba:91:67:89:ea:9a:b0:07:01:6c:07:b1:b6:c3:49:41:66: 7d:02:34:c6:2a:6c:f3:4b:c4:76:4c:06:d8:6b:6a:a9:85:3f: bf:74:f1:43:8b:c2:1b:7a:56:ed:8e:c2:bd:05:d5:09:a0:b2: e2:24:65:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzpLrrdc1KEn2rrG8drtUedKjg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNTA4MDQxODQ1MDRaFw0yNTA4MDgwMDQ0MDRaMDMxMTAvBgNV BAMTKEE0NzUzNDRGNjIxQjBBMzk5RDQ5QUI2NTlBQ0VFNzkyRTk1MDFCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzH57cGu1H9YjSouv38WeQbuM t1+N5p/FtAasFNoHhmI1XCesw0Lu6jOD1u+JaH53bggjwPVKoISc3RJ1nJKYmvLd kZmXTJfWStOtZ2C1po6fcL31tUbYvVml4Riu0qtscAQBU4Xc3EzWUIo63b6jFe61 hbdFpucnNj0bFvqREJfpYRvKLTsSO8o1mfahQnv5KaAaYPGWMp3MpL0+lckX3BJq jJbiMK8ddyJtxm6DejmVVr+dzTuYwotHp9tLub1aLTfCMi09CQr/5kWMJ/0k/P37 FZlPpZzAJUyvUbl9K8pVLdN/cwknP9jeRwH5pRozJ1eSRoR21C4bo5MoAiC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHU0T2IbCjmdSatlms7nkulQG00wHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK0xwtfZoKs6l0yLhSHgyxrdrR/Ft6Lqwun 8PJDx+Cqg4BVRa9u09ldVc7iLOn6zkMSPahF5xqB9Icl3WUK/pd6fSPwyXvgxg2N dUmXa9Q2ZV58rFZ6AkP0GbIhNsYLaw/8AUZIDHV/TkH3fnLmt3LTlh5vnJ8oHxQC qqavU+Uzz5GUO/Gdg3v0hRGptkMXEuGSIS785AgyiX/yeLOlZFTAz0R4kmiId17E 3/w3ljW1xRR1V5li/Z5ekhUdmBYftikoC2GdmXq6kWeJ6pqwBwFsB7G2w0lBZn0C NMYqbPNLxHZMBthraqmFP7908UOLwht6Vu2Owr0F1QmgsuIkZRo= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:54 2025 by rpki-client