$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: WPFrlhZv5pcwYYNDgArJIIJurLUTFpn7o2A4MlB8S8Q= Subject key identifier: A6:46:66:8C:A1:A7:52:F7:D6:92:E9:F2:7A:8F:34:5B:64:1E:AE:CE Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 79D0739E8A4DA283D03ED604E473BEA47BD62A31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 019E Signing time: Thu 07 Aug 2025 13:00:02 +0000 Manifest this update: Thu 07 Aug 2025 12:55:02 +0000 Manifest next update: Sun 10 Aug 2025 17:28:02 +0000 Files and hashes: 1: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=) 2: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=) 3: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: dQlGDVHV3r0M9MkchtWYcjzBRpWastc4QUgB1MCtOz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 17:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d0:73:9e:8a:4d:a2:83:d0:3e:d6:04:e4:73:be:a4:7b:d6:2a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Aug 7 12:55:02 2025 GMT Not After : Aug 10 17:28:02 2025 GMT Subject: CN=A646668CA1A752F7D692E9F27A8F345B641EAECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:a7:6d:9e:11:11:6a:0f:f1:39:33:7c:97: 37:0c:c2:39:8a:31:f8:51:a1:f2:93:d4:ba:7a:ff: 2e:e9:fe:6c:15:d6:3c:cc:b6:a7:14:61:2b:53:12: 35:84:4b:07:df:a8:ca:82:96:b2:90:67:86:60:10: 32:eb:7c:65:e7:f5:85:ba:15:a4:46:ce:01:2f:e2: 3c:36:1c:d2:bf:38:f7:0b:d0:b1:5f:ff:04:1d:fb: f9:51:68:0f:c6:67:55:f3:e0:97:a7:4c:53:5c:75: b4:94:d8:5a:c3:16:33:79:4e:d8:49:6f:e0:a6:a7: 77:25:69:a8:aa:d6:2c:82:2c:e3:87:9b:03:16:0a: 6d:60:fc:d4:8d:40:e8:11:53:68:87:f2:ed:e8:ae: ed:1c:2d:4c:f9:47:dc:83:63:e1:ed:23:42:ea:20: 98:de:b2:02:f7:f5:f7:b2:dd:28:86:7b:f1:e4:65: a3:0c:0d:69:1a:5e:9c:92:c9:1a:9b:84:50:c1:2c: d5:0b:89:e8:8a:b8:50:2c:33:51:73:68:cb:6c:37: 6f:ee:4b:cf:86:aa:e1:22:4d:79:0e:e3:99:ad:b0: f8:44:f3:65:41:19:11:f3:d5:59:27:b5:d1:25:91: 34:15:60:ee:9b:cb:9c:d4:f1:2b:85:2f:82:d4:09: c8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:46:66:8C:A1:A7:52:F7:D6:92:E9:F2:7A:8F:34:5B:64:1E:AE:CE X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:61:49:a6:c7:5d:2d:b6:e5:42:d3:5a:2d:b1:e4:d1:5f:21: 73:a5:b0:c7:9c:5f:8d:6c:0d:be:e9:dc:de:4f:6a:03:be:7c: 38:fc:ec:b5:9f:11:66:37:d6:87:eb:7f:93:06:23:a4:99:22: aa:b5:55:04:af:ff:6e:c8:fe:e0:b3:39:07:4a:58:dc:f0:a1: f1:4f:6e:b9:e9:f1:53:35:a7:81:85:f0:2b:3f:74:eb:93:1c: de:54:2b:f6:db:56:f5:46:bc:01:9b:74:fb:0c:07:3e:43:74: a5:b2:0c:33:86:1f:18:9e:2f:49:8a:a3:fb:77:17:54:91:6a: 9c:b6:67:5d:ce:a4:ed:c9:bc:bc:8f:bf:16:46:c2:f1:8b:34: 06:9e:73:33:13:8d:c3:a4:40:51:36:63:93:5e:26:6e:19:fc: b9:0d:91:de:49:7d:4b:ed:c1:70:e5:10:4e:40:ad:08:61:07: 57:df:83:58:d0:ae:2c:48:e4:cc:30:e4:db:80:f2:aa:f5:14: 1c:1a:45:33:1d:64:42:d9:14:77:85:b7:54:3b:f4:0f:b0:a3: 14:29:eb:0f:a9:ac:fc:65:a3:93:ca:8d:af:d2:66:06:a1:82: 2a:6a:d9:cd:7f:28:1a:de:f2:ff:23:d8:f0:d6:12:7a:5b:00: 08:d3:e1:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUedBznopNooPQPtYE5HO+pHvWKjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTA4MDcxMjU1MDJaFw0yNTA4MTAxNzI4MDJaMDMxMTAvBgNV BAMTKEE2NDY2NjhDQTFBNzUyRjdENjkyRTlGMjdBOEYzNDVCNjQxRUFFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9v6dtnhERag/xOTN8lzcMwjmK MfhRofKT1Lp6/y7p/mwV1jzMtqcUYStTEjWESwffqMqClrKQZ4ZgEDLrfGXn9YW6 FaRGzgEv4jw2HNK/OPcL0LFf/wQd+/lRaA/GZ1Xz4JenTFNcdbSU2FrDFjN5TthJ b+Cmp3claaiq1iyCLOOHmwMWCm1g/NSNQOgRU2iH8u3oru0cLUz5R9yDY+HtI0Lq IJjesgL39fey3SiGe/HkZaMMDWkaXpySyRqbhFDBLNULieiKuFAsM1FzaMtsN2/u S8+GquEiTXkO45mtsPhE82VBGRHz1VkntdElkTQVYO6by5zU8SuFL4LUCchbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkZmjKGnUvfWkunyeo80W2Qers4wHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5hSabHXS225ULTWi2x5NFfIXOlsMecX41s Db7p3N5PagO+fDj87LWfEWY31ofrf5MGI6SZIqq1VQSv/27I/uCzOQdKWNzwofFP brnp8VM1p4GF8Cs/dOuTHN5UK/bbVvVGvAGbdPsMBz5DdKWyDDOGHxieL0mKo/t3 F1SRapy2Z13OpO3JvLyPvxZGwvGLNAaeczMTjcOkQFE2Y5NeJm4Z/LkNkd5JfUvt wXDlEE5ArQhhB1ffg1jQrixI5Mww5NuA8qr1FBwaRTMdZELZFHeFt1Q79A+woxQp 6w+prPxlo5PKja/SZgahgipq2c1/KBre8v8j2PDWEnpbAAjT4Xo= -----END CERTIFICATE-----Generated at Sat Aug 9 01:23:38 2025 by rpki-client