$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: 5jC8ZcyW/Cmyiqg9a+C2eFXsU9iLrbqeMUrIgfW070M= Subject key identifier: 3C:4F:98:97:7F:99:C7:02:34:11:05:2E:22:43:DA:D1:14:5C:68:8F Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 3DADD10FFC80FD88DB8A389F9C79B841C898CC8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 0232 Signing time: Wed 06 Aug 2025 16:50:37 +0000 Manifest this update: Wed 06 Aug 2025 16:45:37 +0000 Manifest next update: Sun 10 Aug 2025 01:52:37 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: TkJGUeKtbCU7XbEz4jhHfTFgx2qkr4IKTJnFdc4uCNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ad:d1:0f:fc:80:fd:88:db:8a:38:9f:9c:79:b8:41:c8:98:cc:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Aug 6 16:45:37 2025 GMT Not After : Aug 10 01:52:37 2025 GMT Subject: CN=3C4F98977F99C7023411052E2243DAD1145C688F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:12:46:cb:0d:b7:66:99:f8:54:f7:09:68:bf: 97:8b:0e:87:6f:e2:02:d3:24:18:81:0e:e9:fb:ac: 21:a7:27:76:93:bd:75:e9:3f:77:3e:74:f0:fb:ba: f2:13:9a:37:42:03:0f:c0:5e:8e:ea:9f:c1:3c:4d: 9c:23:ea:cf:84:93:e3:b1:6b:30:2c:d5:66:62:20: 4b:c3:3d:af:64:15:fa:66:71:ed:c1:93:83:31:68: 7f:7e:e2:8e:15:e3:72:03:5e:66:dd:f5:83:13:d3: 8e:27:47:8a:87:e3:3e:60:1f:e8:31:71:20:38:42: d2:4a:51:9b:d2:d5:be:84:37:65:4a:60:f0:7e:0e: 80:44:d1:f8:63:12:81:37:6c:ad:f8:1f:09:0c:a3: b5:85:d0:0f:e8:24:de:4e:1c:f3:a3:ea:58:4d:0a: 33:73:55:b4:df:09:a7:79:36:18:76:89:c5:b4:76: b7:49:70:5c:76:0b:46:f9:70:00:35:15:1b:f6:aa: 35:50:fc:48:ec:cf:fe:71:38:c0:9a:a9:cc:94:a9: fd:48:3d:86:16:63:f3:ac:a0:ab:0f:10:9c:9b:f8: fd:66:ee:e8:a4:37:f2:7b:fa:8f:5b:6c:4c:a2:54: d2:a5:4a:69:48:9a:02:bc:d1:4a:c7:74:52:a2:22: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4F:98:97:7F:99:C7:02:34:11:05:2E:22:43:DA:D1:14:5C:68:8F X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:83:31:84:fe:6a:54:0b:16:d8:d8:6d:89:6c:2a:6e:eb:74: 79:fd:aa:1f:92:fc:ff:99:c9:95:cc:1a:be:42:38:bd:46:36: fd:68:4c:84:94:17:42:fc:6b:f9:da:d1:f0:e4:5f:1e:c4:b0: 6c:b3:11:de:3a:cc:a0:04:1a:4f:97:f1:7c:0e:18:23:06:6d: 81:a5:cc:b3:ee:f5:b0:af:52:15:7e:56:81:d1:0b:e3:44:bc: 6c:c3:08:60:85:08:a6:89:f3:a1:5b:06:f5:90:9b:bc:b4:93: ee:e8:06:10:a2:d8:f3:15:5d:11:7d:b1:76:22:3b:17:9e:99: 89:8c:d7:8c:e8:39:e5:72:7b:d8:5e:aa:d5:68:be:ee:f0:cb: 72:d2:f9:08:09:7a:a2:62:ed:16:d6:c4:db:62:8e:25:e8:54: 20:a9:2d:28:7b:c9:06:78:88:c1:7f:15:c2:c1:0c:0f:59:0d: e6:b1:0f:5d:38:4a:7f:dd:28:b3:a3:f0:17:62:92:29:48:1d: 2c:bd:b9:74:f8:c3:98:88:65:58:62:a6:36:6b:a2:19:65:24: db:f0:05:cf:e7:c6:e7:db:43:7f:2f:8e:95:72:ac:83:17:6c: ff:af:70:1d:b1:ee:9f:6c:d1:3c:32:05:ba:74:9e:a0:3c:8f: 47:b5:8a:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPa3RD/yA/YjbijifnHm4QciYzI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNTA4MDYxNjQ1MzdaFw0yNTA4MTAwMTUyMzdaMDMxMTAvBgNV BAMTKDNDNEY5ODk3N0Y5OUM3MDIzNDExMDUyRTIyNDNEQUQxMTQ1QzY4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoEkbLDbdmmfhU9wlov5eLDodv 4gLTJBiBDun7rCGnJ3aTvXXpP3c+dPD7uvITmjdCAw/AXo7qn8E8TZwj6s+Ek+Ox azAs1WZiIEvDPa9kFfpmce3Bk4MxaH9+4o4V43IDXmbd9YMT044nR4qH4z5gH+gx cSA4QtJKUZvS1b6EN2VKYPB+DoBE0fhjEoE3bK34HwkMo7WF0A/oJN5OHPOj6lhN CjNzVbTfCad5Nhh2icW0drdJcFx2C0b5cAA1FRv2qjVQ/Ejsz/5xOMCaqcyUqf1I PYYWY/OsoKsPEJyb+P1m7uikN/J7+o9bbEyiVNKlSmlImgK80UrHdFKiIviRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPE+Yl3+ZxwI0EQUuIkPa0RRcaI8wHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiDMYT+alQLFtjYbYlsKm7rdHn9qh+S/P+Z yZXMGr5COL1GNv1oTISUF0L8a/na0fDkXx7EsGyzEd46zKAEGk+X8XwOGCMGbYGl zLPu9bCvUhV+VoHRC+NEvGzDCGCFCKaJ86FbBvWQm7y0k+7oBhCi2PMVXRF9sXYi OxeemYmM14zoOeVye9heqtVovu7wy3LS+QgJeqJi7RbWxNtijiXoVCCpLSh7yQZ4 iMF/FcLBDA9ZDeaxD104Sn/dKLOj8BdikilIHSy9uXT4w5iIZVhipjZrohllJNvw Bc/nxufbQ38vjpVyrIMXbP+vcB2x7p9s0TwyBbp0nqA8j0e1ioI= -----END CERTIFICATE-----Generated at Thu Aug 7 07:16:49 2025 by rpki-client