$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: A3pxpLSkcqKKAo3Be1PfIel4K0VMcXnGJOLblxbnNP8= Subject key identifier: 79:47:A8:D6:46:11:31:BB:B9:56:C4:75:E5:CB:C3:24:B0:AD:36:42 Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 46F39AC757FB4CF58841B90D072597B5E387B6BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: DA Signing time: Wed 06 Aug 2025 02:10:40 +0000 Manifest this update: Wed 06 Aug 2025 02:05:40 +0000 Manifest next update: Sat 09 Aug 2025 07:38:40 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: 0xNm8oziUlCd8HaHAbPuqusSCJo+pX+3ZgcAYFlNl4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f3:9a:c7:57:fb:4c:f5:88:41:b9:0d:07:25:97:b5:e3:87:b6:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: Aug 6 02:05:40 2025 GMT Not After : Aug 9 07:38:40 2025 GMT Subject: CN=7947A8D6461131BBB956C475E5CBC324B0AD3642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bd:20:3e:71:2d:6c:97:8c:8f:30:cb:ce:db: e7:5e:f5:48:6f:07:80:63:48:e7:b7:20:bc:ca:24: f2:5b:79:2e:10:d7:e4:57:21:72:6c:ef:77:b7:20: 6b:5c:e6:b5:04:7f:0f:41:27:dd:72:bb:36:f8:68: c6:83:48:7d:cc:57:bd:3a:fd:45:62:0d:74:f1:61: 5c:57:37:9b:7a:92:1a:74:13:53:8c:1e:b3:5d:0d: 1e:36:a7:d6:3c:d9:91:8a:4b:cb:0f:b0:97:81:8a: 21:17:0b:a4:06:81:2e:a7:d5:a0:da:fc:18:8f:4e: c4:85:43:08:ae:50:32:4a:e1:cd:0a:9d:c9:58:c1: 0e:35:3b:0f:81:04:f9:2a:85:82:ec:9c:63:46:c6: f9:45:b4:99:97:a8:3a:6e:4c:8e:0e:30:4b:59:2d: d7:f1:f7:30:8f:17:07:ae:56:8a:ed:85:81:20:42: 1a:ab:3e:da:c5:6a:32:54:38:25:0a:aa:5b:d5:ca: 82:f1:8f:ec:9e:72:cb:5f:60:cb:28:0f:34:d6:f1: 7f:1d:c5:51:76:90:47:51:5c:3b:04:89:6d:bd:8e: c8:e3:a0:c9:9d:a9:25:47:fc:28:bd:aa:b1:ff:31: f1:b2:b1:ff:d7:99:db:2f:32:0a:3b:60:2e:bd:00: a4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:47:A8:D6:46:11:31:BB:B9:56:C4:75:E5:CB:C3:24:B0:AD:36:42 X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a1:02:c1:23:75:80:0a:54:1e:e8:6a:78:da:2a:e0:13:db: 50:aa:68:03:ac:8c:61:70:d7:b1:24:99:e1:fb:1a:d4:96:ef: ac:42:1c:71:50:dd:70:f5:0b:65:f1:9f:1e:d0:7f:db:34:d5: 4f:0d:cc:7e:93:94:e2:8c:51:44:14:98:16:de:9d:99:e5:d0: ca:65:e0:5f:e1:ae:ed:db:c8:85:02:f8:f4:32:0c:ca:8c:c4: 76:10:5a:37:ce:d6:94:9b:87:ef:0f:4b:ae:e6:a2:09:27:97: 52:04:ee:9c:46:29:83:32:e2:40:d9:fd:cf:b5:42:10:8c:4c: 41:69:04:84:df:9e:b0:e1:8e:c6:fb:9f:29:27:b1:66:12:11: a4:87:0d:67:27:7c:52:3c:8a:9e:8d:88:bc:f2:70:72:03:fa: 0c:66:7e:2e:54:2f:57:8d:d0:32:5d:f1:4c:ed:a2:1c:95:11: cb:1b:fd:ee:7b:de:96:fc:9a:c3:55:90:73:13:b9:b6:7c:d7: e8:cf:a0:68:0d:75:33:5e:2c:52:7a:08:ce:43:f8:63:4b:27: 57:46:49:84:93:6a:dd:09:9c:1d:25:70:7e:0e:78:ac:70:30: fa:55:59:6b:4e:7c:ac:5f:54:97:d6:46:eb:b1:96:04:13:59: 22:63:32:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURvOax1f7TPWIQbkNByWXteOHtr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVC MDQ0ODdGQTAeFw0yNTA4MDYwMjA1NDBaFw0yNTA4MDkwNzM4NDBaMDMxMTAvBgNV BAMTKDc5NDdBOEQ2NDYxMTMxQkJCOTU2QzQ3NUU1Q0JDMzI0QjBBRDM2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivSA+cS1sl4yPMMvO2+de9Uhv B4BjSOe3ILzKJPJbeS4Q1+RXIXJs73e3IGtc5rUEfw9BJ91yuzb4aMaDSH3MV706 /UViDXTxYVxXN5t6khp0E1OMHrNdDR42p9Y82ZGKS8sPsJeBiiEXC6QGgS6n1aDa /BiPTsSFQwiuUDJK4c0KnclYwQ41Ow+BBPkqhYLsnGNGxvlFtJmXqDpuTI4OMEtZ Ldfx9zCPFweuVorthYEgQhqrPtrFajJUOCUKqlvVyoLxj+yecstfYMsoDzTW8X8d xVF2kEdRXDsEiW29jsjjoMmdqSVH/Ci9qrH/MfGysf/XmdsvMgo7YC69AKT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeUeo1kYRMbu5VsR15cvDJLCtNkIwHwYDVR0j BBgwFoAUqpe5WScSkfvhQkkbgQY61bBEh/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3 MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4N0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVCMDQ0 ODdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNB RDVCMDQ0ODdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJehAsEjdYAKVB7oanjaKuAT21CqaAOsjGFw 17EkmeH7GtSW76xCHHFQ3XD1C2Xxnx7Qf9s01U8NzH6TlOKMUUQUmBbenZnl0Mpl 4F/hru3byIUC+PQyDMqMxHYQWjfO1pSbh+8PS67mogknl1IE7pxGKYMy4kDZ/c+1 QhCMTEFpBITfnrDhjsb7nyknsWYSEaSHDWcnfFI8ip6NiLzycHID+gxmfi5UL1eN 0DJd8UztohyVEcsb/e573pb8msNVkHMTubZ81+jPoGgNdTNeLFJ6CM5D+GNLJ1dG SYSTat0JnB0lcH4OeKxwMPpVWWtOfKxfVJfWRuuxlgQTWSJjMnU= -----END CERTIFICATE-----Generated at Wed Aug 6 18:48:35 2025 by rpki-client