$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: 13jQAyrJxS7GHbhQVENXSAouaKr1WcG7pW0FbGZGYpA= Subject key identifier: 8D:ED:26:B2:25:FE:FB:38:95:94:B3:9C:4B:4B:73:8F:DB:E0:24:05 Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 2F9972CB342FC26502C756F262C30D6EC26D2720 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 01C5 Signing time: Mon 03 Nov 2025 03:10:02 +0000 Manifest this update: Mon 03 Nov 2025 03:05:02 +0000 Manifest next update: Thu 06 Nov 2025 07:26:02 +0000 Files and hashes: 1: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=) 2: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: DA4E/e4dsMcHFELQEJlTJ1FctfKdoR6bV03s1QzhVzY=) 3: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:99:72:cb:34:2f:c2:65:02:c7:56:f2:62:c3:0d:6e:c2:6d:27:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Nov 3 03:05:02 2025 GMT Not After : Nov 6 07:26:02 2025 GMT Subject: CN=8DED26B225FEFB389594B39C4B4B738FDBE02405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:4e:c6:f4:05:e2:60:90:49:3f:90:1c:d9: 12:63:5d:1e:cf:db:ef:c9:00:73:c5:bd:90:30:1f: fa:56:42:8e:51:7d:06:ac:a8:4c:4d:9f:bb:99:f0: 54:f4:cb:a4:d4:ab:61:7d:f9:2f:84:55:d6:08:da: b3:19:c1:3c:82:88:af:49:42:42:67:b2:2f:de:92: 69:ff:df:b9:28:64:c4:fe:5a:02:bf:44:63:c0:55: 0c:8a:f9:cc:c8:fd:e8:27:49:6c:d4:77:62:de:cf: 6c:28:40:23:49:b9:8f:0a:b7:95:95:25:70:60:4a: 6a:35:26:20:04:a2:92:9d:93:55:49:ab:3c:f2:94: b5:9f:cc:8c:ef:96:5e:da:19:77:5c:ad:9e:89:9f: 2e:c2:2e:52:27:d2:e9:6f:ff:97:83:21:86:dc:37: a1:e1:0b:fd:d6:a4:1f:4a:67:76:7a:b8:20:60:03: ac:7c:30:79:49:46:d5:d8:5f:69:80:34:c3:c2:d1: ac:a2:c0:47:b5:da:19:bb:e9:18:02:d6:2b:40:a7: f7:f5:aa:52:42:52:bd:62:a6:34:ee:13:d5:81:db: ab:82:e8:a2:51:b5:e9:d5:df:9b:df:da:65:ea:dd: 4a:fe:c4:e9:dd:5c:5e:9c:2f:3c:68:09:6b:ab:34: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:ED:26:B2:25:FE:FB:38:95:94:B3:9C:4B:4B:73:8F:DB:E0:24:05 X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1d:97:c9:11:3e:90:cd:fc:1e:e1:90:73:62:37:6c:58:0f: 08:d7:8a:46:16:8f:6d:9c:67:d6:72:6f:a8:3c:73:64:65:57: f1:28:a8:db:10:c7:46:4d:58:76:6a:c4:93:45:44:df:e6:5b: 2b:31:a6:62:5a:d0:54:d2:fe:96:14:93:55:aa:7c:9c:8b:ba: 56:78:85:8f:ac:e4:8f:0c:ab:11:5f:14:5f:a5:c1:be:35:f4: 90:67:16:24:c2:cf:b9:68:39:ff:f2:1e:d6:1a:0c:15:37:32: c4:bf:34:15:41:d1:ed:b5:7f:cb:38:44:9c:62:bc:f9:08:18: 16:34:e1:4b:54:ce:2a:74:a6:ad:1c:e6:89:a0:95:cc:c5:17: 1f:bc:83:65:4c:5d:0d:aa:ac:f9:8b:50:4b:10:66:77:07:25: 40:ec:81:76:02:71:a2:b2:ef:f0:05:e9:f0:9d:2b:ea:0a:73: b5:76:dd:70:ab:1d:ae:fb:68:68:16:39:36:4a:36:8e:68:2e: 4e:14:87:ec:4d:7c:b2:59:bf:33:9a:66:cd:61:26:97:0f:6b: f9:c6:e9:51:ad:c2:02:4e:2d:0d:9e:5d:e2:e2:0e:86:cf:9b: 83:02:c6:1d:bc:97:61:52:da:1f:2f:50:77:e8:0b:a2:88:64: a0:6f:3d:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5lyyzQvwmUCx1byYsMNbsJtJyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTExMDMwMzA1MDJaFw0yNTExMDYwNzI2MDJaMDMxMTAvBgNV BAMTKDhERUQyNkIyMjVGRUZCMzg5NTk0QjM5QzRCNEI3MzhGREJFMDI0MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMT07G9AXiYJBJP5Ac2RJjXR7P 2+/JAHPFvZAwH/pWQo5RfQasqExNn7uZ8FT0y6TUq2F9+S+EVdYI2rMZwTyCiK9J QkJnsi/ekmn/37koZMT+WgK/RGPAVQyK+czI/egnSWzUd2Lez2woQCNJuY8Kt5WV JXBgSmo1JiAEopKdk1VJqzzylLWfzIzvll7aGXdcrZ6Jny7CLlIn0ulv/5eDIYbc N6HhC/3WpB9KZ3Z6uCBgA6x8MHlJRtXYX2mANMPC0ayiwEe12hm76RgC1itAp/f1 qlJCUr1ipjTuE9WB26uC6KJRtenV35vf2mXq3Ur+xOndXF6cLzxoCWurNCbXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUje0msiX++ziVlLOcS0tzj9vgJAUwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4dl8kRPpDN/B7hkHNiN2xYDwjXikYWj22c Z9Zyb6g8c2RlV/EoqNsQx0ZNWHZqxJNFRN/mWysxpmJa0FTS/pYUk1WqfJyLulZ4 hY+s5I8MqxFfFF+lwb419JBnFiTCz7loOf/yHtYaDBU3MsS/NBVB0e21f8s4RJxi vPkIGBY04UtUzip0pq0c5omglczFFx+8g2VMXQ2qrPmLUEsQZncHJUDsgXYCcaKy 7/AF6fCdK+oKc7V23XCrHa77aGgWOTZKNo5oLk4Uh+xNfLJZvzOaZs1hJpcPa/nG 6VGtwgJOLQ2eXeLiDobPm4MCxh28l2FS2h8vUHfoC6KIZKBvPbY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:01:23 2025 by rpki-client