$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: txQ4X4M0MCJeCP9Zr9VMrzXc0tLmRNRhFmAbAmQ8KCw= Subject key identifier: 73:79:78:C9:0F:DF:D2:BB:F5:12:EF:0D:B6:76:01:94:3A:86:D2:11 Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 2AF6B755C676CF285DDCC61A1641E537AB0D6938 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: 0102 Signing time: Tue 04 Nov 2025 09:00:39 +0000 Manifest this update: Tue 04 Nov 2025 08:55:39 +0000 Manifest next update: Fri 07 Nov 2025 09:35:39 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: XeU6+JHUs3s4jtuW2EtWbpwCOgVi5mWNO/juTiH1CgI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f6:b7:55:c6:76:cf:28:5d:dc:c6:1a:16:41:e5:37:ab:0d:69:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: Nov 4 08:55:39 2025 GMT Not After : Nov 7 09:35:39 2025 GMT Subject: CN=737978C90FDFD2BBF512EF0DB67601943A86D211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:93:56:e6:e7:1a:66:7e:0d:c8:4d:d5:e5: 07:28:23:e6:47:db:fb:23:6b:0b:f8:30:b5:1b:c4: f3:2f:9e:48:1d:04:16:29:cc:df:da:d9:da:aa:49: 90:c8:d7:84:ac:19:52:6f:bb:79:d0:74:5a:72:4f: e0:fb:b8:6b:86:53:2c:7e:1b:b3:b3:87:0e:52:7f: 0f:f4:ac:02:66:60:51:2c:53:de:83:19:03:5c:56: 2d:cf:c4:2b:53:b0:2c:78:f1:c3:ff:0b:3d:4a:08: a6:0e:16:f5:72:cc:1c:be:ac:15:9e:c5:da:da:10: 9f:f4:ac:83:6a:2d:23:37:72:ac:b0:84:28:90:46: 3c:55:07:c1:bd:e8:5e:21:16:58:43:2f:73:ed:1b: f2:68:77:1a:4e:de:96:ea:d7:c5:d9:33:61:ad:16: 9d:00:c8:48:bc:75:04:2c:dc:e4:06:4f:e5:d5:97: f3:f5:ca:0b:9b:38:f2:a6:68:84:64:a2:19:d4:54: ed:7f:56:c0:18:21:ae:85:f5:27:47:19:47:10:1f: 4b:f4:50:19:0c:d0:1e:4b:8d:05:e4:84:a8:5f:42: 1c:26:c3:e2:ab:5b:60:62:15:c3:3a:e9:45:f7:21: 39:1c:94:7f:81:73:9f:1a:57:e2:81:80:c0:d1:7c: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:79:78:C9:0F:DF:D2:BB:F5:12:EF:0D:B6:76:01:94:3A:86:D2:11 X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0e:1d:c1:5b:c1:ec:be:76:90:f1:ed:8b:b9:13:9b:4e:e2: 08:33:31:95:b4:a0:64:1a:61:e5:26:8e:e4:95:9d:e5:6b:05: e5:67:20:0b:71:0e:1e:5b:bf:e3:e8:de:e1:76:e4:6f:11:df: a9:32:c3:83:87:5b:a0:8f:ec:07:10:47:68:dd:ef:bf:b7:22: e4:1f:1d:3a:14:3b:90:56:16:41:85:06:29:ee:7a:f7:13:6c: 92:39:cf:91:91:29:d3:ba:97:54:c6:57:98:54:c3:d5:d4:50: 35:b9:06:cf:0e:04:13:34:0c:03:6f:4f:aa:71:fa:a3:c2:d7: ec:db:4d:d2:85:71:36:0a:8c:fc:db:b4:c6:39:a6:c3:36:ba: c2:8e:df:9b:f9:31:79:77:4b:fd:67:b9:2f:0b:27:9d:95:11: 59:88:e1:d1:47:b7:6a:1a:20:eb:be:07:33:6e:9a:c8:96:56: 39:03:55:33:fc:ce:e4:39:7a:a7:69:9d:56:eb:9c:49:5d:eb: 1b:89:3a:6e:3b:e6:37:c3:43:c0:f1:e9:08:ea:9f:7b:43:bc: 18:82:34:e6:2f:01:0a:86:a6:51:60:7e:7a:84:76:a0:88:c0: d7:31:6a:1a:81:3d:45:31:95:dd:a3:a5:62:7c:31:b4:11:70: 16:d4:80:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKva3VcZ2zyhd3MYaFkHlN6sNaTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVC MDQ0ODdGQTAeFw0yNTExMDQwODU1MzlaFw0yNTExMDcwOTM1MzlaMDMxMTAvBgNV BAMTKDczNzk3OEM5MEZERkQyQkJGNTEyRUYwREI2NzYwMTk0M0E4NkQyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/JNW5ucaZn4NyE3V5QcoI+ZH 2/sjawv4MLUbxPMvnkgdBBYpzN/a2dqqSZDI14SsGVJvu3nQdFpyT+D7uGuGUyx+ G7Ozhw5Sfw/0rAJmYFEsU96DGQNcVi3PxCtTsCx48cP/Cz1KCKYOFvVyzBy+rBWe xdraEJ/0rINqLSM3cqywhCiQRjxVB8G96F4hFlhDL3PtG/JodxpO3pbq18XZM2Gt Fp0AyEi8dQQs3OQGT+XVl/P1ygubOPKmaIRkohnUVO1/VsAYIa6F9SdHGUcQH0v0 UBkM0B5LjQXkhKhfQhwmw+KrW2BiFcM66UX3ITkclH+Bc58aV+KBgMDRfLndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc3l4yQ/f0rv1Eu8NtnYBlDqG0hEwHwYDVR0j BBgwFoAUqpe5WScSkfvhQkkbgQY61bBEh/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3 MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4N0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVCMDQ0 ODdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNB RDVCMDQ0ODdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoOHcFbwey+dpDx7Yu5E5tO4ggzMZW0oGQa YeUmjuSVneVrBeVnIAtxDh5bv+Po3uF25G8R36kyw4OHW6CP7AcQR2jd77+3IuQf HToUO5BWFkGFBinuevcTbJI5z5GRKdO6l1TGV5hUw9XUUDW5Bs8OBBM0DANvT6px +qPC1+zbTdKFcTYKjPzbtMY5psM2usKO35v5MXl3S/1nuS8LJ52VEVmI4dFHt2oa IOu+BzNumsiWVjkDVTP8zuQ5eqdpnVbrnEld6xuJOm475jfDQ8Dx6Qjqn3tDvBiC NOYvAQqGplFgfnqEdqCIwNcxahqBPUUxld2jpWJ8MbQRcBbUgFw= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:28 2025 by rpki-client