$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: jH0Q0W1RzA5NusSMrBcK9utnn+qRuMNS8yz/GSGACMk= Subject key identifier: 82:26:A9:29:54:BE:6E:71:E7:C3:14:B5:85:B9:51:5E:97:BA:27:EF Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 5B79CBE3AC746EB2E044E47BA49FC10FF6811EAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 0259 Signing time: Sun 02 Nov 2025 11:40:37 +0000 Manifest this update: Sun 02 Nov 2025 11:35:37 +0000 Manifest next update: Wed 05 Nov 2025 17:58:37 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: xBn8+uAcoXdIEGPg6Eu5tIlSZ1eVX+zJqGG8AQ3uHYw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 17:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:79:cb:e3:ac:74:6e:b2:e0:44:e4:7b:a4:9f:c1:0f:f6:81:1e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Nov 2 11:35:37 2025 GMT Not After : Nov 5 17:58:37 2025 GMT Subject: CN=8226A92954BE6E71E7C314B585B9515E97BA27EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cb:f5:d2:6a:e7:1e:42:22:0e:a5:47:66:49: 11:5b:97:64:8b:f3:be:d8:1a:23:da:d4:9e:ec:ed: b8:37:de:ff:a1:0c:58:68:9a:ef:13:31:d5:d6:82: b9:01:38:7b:58:82:33:4d:15:da:18:19:f0:68:19: 85:8f:f0:ef:23:27:0f:0f:bb:c0:da:d5:42:10:81: 45:18:40:5f:66:fe:e8:aa:06:d6:b5:38:7c:2c:20: 46:e5:c8:e2:44:8d:99:81:d7:18:d7:ca:c1:4c:87: 32:82:ed:ab:b1:39:73:2a:66:21:48:e5:07:da:d5: 2e:5d:9e:de:55:ef:78:c9:86:b9:50:9c:2c:f8:4b: d8:28:14:08:5f:bc:5b:f6:56:15:fb:f2:57:b9:19: 64:99:32:70:31:ea:20:79:3f:bd:60:46:ab:09:85: 62:92:96:20:83:60:7b:95:8d:4a:4b:09:f9:bc:cc: 82:ae:11:d7:71:da:78:ba:f3:7e:23:b4:4d:91:f4: 8f:0f:19:ed:8c:83:ce:b5:5a:61:10:4a:4f:fd:63: ff:61:f7:9d:9c:48:16:8c:d0:e7:e8:c6:1b:07:76: 08:1b:ad:8e:a8:83:03:9f:86:f6:0c:06:e2:ec:2b: 59:0e:71:c0:ca:97:b3:0c:fe:63:a5:32:ed:d6:70: 94:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:26:A9:29:54:BE:6E:71:E7:C3:14:B5:85:B9:51:5E:97:BA:27:EF X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:8d:76:e9:e4:ca:2d:68:e3:e7:8f:4c:a8:a3:2b:d2:b4:7b: ca:87:9d:93:8e:bb:70:16:b2:50:8f:a3:06:9f:dc:92:a8:cd: 0b:34:26:d9:44:77:bb:86:ce:86:0e:9e:87:a6:a4:4b:52:10: 86:49:28:3c:33:f4:43:1e:48:38:64:c0:be:e9:08:84:55:5b: a9:4b:e8:1b:44:8e:25:63:75:a9:80:2e:1c:8f:ce:d3:2d:75: 07:53:97:40:c0:61:ce:63:d5:d1:27:18:a6:26:14:9d:3c:0f: 0a:b8:6c:a2:38:6b:00:66:bd:b5:72:c0:26:14:fd:ac:c4:49: 26:bc:b9:e1:54:d8:95:79:96:d5:d6:a8:04:58:db:a1:ec:4e: 93:07:1f:a0:5e:46:70:8e:34:a8:2d:9a:3b:ce:92:c3:e5:99: e5:3f:4c:ad:e1:50:7f:d0:b6:5c:ec:c9:1f:7f:0a:f1:59:22: dc:16:f4:6f:7f:a3:a8:86:8b:7b:ac:bf:a3:ad:d5:d7:db:2e: b5:e3:f9:a6:0b:fd:0c:27:4b:68:99:4b:19:ab:a0:5b:a7:3b: fc:ea:3d:af:b9:1c:d0:4a:29:31:f8:7f:f4:7a:e6:c0:26:82: ac:da:3c:e9:2b:d0:d5:f5:51:1e:66:cf:f2:a5:ea:a0:8b:9d: 66:c5:05:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW3nL46x0brLgROR7pJ/BD/aBHqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNTExMDIxMTM1MzdaFw0yNTExMDUxNzU4MzdaMDMxMTAvBgNV BAMTKDgyMjZBOTI5NTRCRTZFNzFFN0MzMTRCNTg1Qjk1MTVFOTdCQTI3RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMy/XSauceQiIOpUdmSRFbl2SL 877YGiPa1J7s7bg33v+hDFhomu8TMdXWgrkBOHtYgjNNFdoYGfBoGYWP8O8jJw8P u8Da1UIQgUUYQF9m/uiqBta1OHwsIEblyOJEjZmB1xjXysFMhzKC7auxOXMqZiFI 5Qfa1S5dnt5V73jJhrlQnCz4S9goFAhfvFv2VhX78le5GWSZMnAx6iB5P71gRqsJ hWKSliCDYHuVjUpLCfm8zIKuEddx2ni6834jtE2R9I8PGe2Mg861WmEQSk/9Y/9h 952cSBaM0OfoxhsHdggbrY6ogwOfhvYMBuLsK1kOccDKl7MM/mOlMu3WcJRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgiapKVS+bnHnwxS1hblRXpe6J+8wHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGNdunkyi1o4+ePTKijK9K0e8qHnZOOu3AW slCPowaf3JKozQs0JtlEd7uGzoYOnoempEtSEIZJKDwz9EMeSDhkwL7pCIRVW6lL 6BtEjiVjdamALhyPztMtdQdTl0DAYc5j1dEnGKYmFJ08Dwq4bKI4awBmvbVywCYU /azESSa8ueFU2JV5ltXWqARY26HsTpMHH6BeRnCONKgtmjvOksPlmeU/TK3hUH/Q tlzsyR9/CvFZItwW9G9/o6iGi3usv6Ot1dfbLrXj+aYL/QwnS2iZSxmroFunO/zq Pa+5HNBKKTH4f/R65sAmgqzaPOkr0NX1UR5mz/Kl6qCLnWbFBTU= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:37 2025 by rpki-client