$ rpki-client -vvf repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft File: AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft (raw, json) Hash identifier: muleXKIxhw8eEaJ1SzPTJQ1CKkzmufhaZbNAtibqCHQ= Subject key identifier: 1C:87:2A:24:C9:9A:4E:09:6E:2E:F5:7C:6B:B5:13:63:E6:2E:43:67 Authority key identifier: AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 Certificate issuer: /CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Certificate serial: 02DABA61C0B669A87703E9FDA36FCDDD3FDAF1AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft Manifest number: 01C3 Signing time: Mon 03 Nov 2025 20:11:14 +0000 Manifest this update: Mon 03 Nov 2025 20:06:14 +0000 Manifest next update: Thu 06 Nov 2025 21:05:14 +0000 Files and hashes: 1: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: EVf2WcFs3bKP8tYqDIaCEQ9aXkKueuElwWbdJ2ysh6o=) 2: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: fiuKPWuy7RKi+g0sG/LNMj+SSbhL4KU/yazo65GfTmw=) 3: AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl (hash: KYI2vFISJ/CIlAtdGOSTos0h+SzBn/FNGcYMIG2Gr4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:da:ba:61:c0:b6:69:a8:77:03:e9:fd:a3:6f:cd:dd:3f:da:f1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Validity Not Before: Nov 3 20:06:14 2025 GMT Not After : Nov 6 21:05:14 2025 GMT Subject: CN=1C872A24C99A4E096E2EF57C6BB51363E62E4367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:33:bc:37:0f:8b:6b:31:e8:5f:b7:e8:79:3b: fa:6d:b1:43:75:7d:9c:91:f8:65:42:61:03:ee:9d: ec:23:c5:5e:c7:1d:11:a5:e4:2f:84:50:20:a5:00: a0:9f:db:7a:59:79:f1:f4:df:fb:f2:d8:8c:81:ba: ef:79:0c:7e:30:83:fa:d4:9a:46:7a:41:fe:47:29: 2c:ed:bc:b6:3e:f0:96:99:50:5b:66:94:33:54:f5: 4d:3c:62:df:7d:c6:24:85:fc:59:bc:9e:86:50:fd: 41:ec:77:25:4f:7e:79:43:6d:d4:ca:dc:66:ab:ae: cc:c2:4d:37:32:28:b3:80:91:17:82:56:f3:e3:5e: 0c:f8:15:93:6e:e2:5d:3a:99:70:26:4c:7a:2e:ec: ff:5b:52:75:ef:19:ff:2a:4b:4f:ff:e1:ad:05:81: 2c:d2:f6:19:69:7c:b9:74:98:f8:57:93:4c:00:ff: f0:54:5a:d3:d8:6c:04:a6:1e:34:97:cb:4b:28:6a: ec:95:a1:24:b3:44:bc:ea:19:34:d8:60:de:85:3e: 40:62:90:72:74:55:75:ee:f1:82:ec:04:61:c2:98: c5:3d:00:3e:98:a6:76:aa:74:b9:f8:9b:d8:76:6d: 3d:78:0e:08:5c:40:22:8f:9c:94:0b:40:bc:9a:22: da:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:87:2A:24:C9:9A:4E:09:6E:2E:F5:7C:6B:B5:13:63:E6:2E:43:67 X509v3 Authority Key Identifier: keyid:AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f5:de:4f:c9:db:5e:02:8e:87:59:7f:9a:81:d5:71:d4:d4: c0:99:43:e2:d2:29:6f:d5:c3:12:5f:f0:38:6a:a1:06:5e:62: d8:02:91:3f:bc:e8:0b:41:03:dc:e0:3f:6d:3c:3f:fd:19:4b: 15:ce:0c:c9:b3:2b:7d:a1:ca:a8:31:d4:e4:d3:08:d3:b9:79: 41:61:97:6f:86:b9:21:f5:e5:23:d8:75:33:ee:51:8b:45:d9: e5:45:8c:8e:08:6f:b9:66:ef:61:1c:44:30:66:a9:25:59:35: 57:aa:27:38:dc:fa:68:e6:17:7f:7e:e1:1d:86:11:9e:c9:0d: 03:95:6d:c9:b3:f7:cd:44:71:f0:73:6d:2d:76:05:ab:1a:f8: d2:5e:d6:4a:f9:08:30:0a:1e:11:74:ad:97:fe:5a:d1:18:c3: bd:3a:51:67:7d:d9:ad:18:82:28:20:5a:b8:56:ac:80:53:65: 2b:4d:42:e8:c0:3e:44:25:51:2d:80:fa:53:68:08:63:aa:17: 7c:68:e3:da:5d:20:74:b8:5d:79:93:10:b6:2d:56:fe:e2:ad: b5:50:d2:36:e6:88:81:a0:80:4a:49:79:56:21:37:e8:61:7e: bf:cc:6a:d6:cb:6e:97:79:49:47:9d:35:25:b6:5b:7f:54:e2: 8d:a1:a6:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtq6YcC2aah3A+n9o2/N3T/a8a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2 OUZGNUUyMDAeFw0yNTExMDMyMDA2MTRaFw0yNTExMDYyMTA1MTRaMDMxMTAvBgNV BAMTKDFDODcyQTI0Qzk5QTRFMDk2RTJFRjU3QzZCQjUxMzYzRTYyRTQzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbM7w3D4trMehft+h5O/ptsUN1 fZyR+GVCYQPunewjxV7HHRGl5C+EUCClAKCf23pZefH03/vy2IyBuu95DH4wg/rU mkZ6Qf5HKSztvLY+8JaZUFtmlDNU9U08Yt99xiSF/Fm8noZQ/UHsdyVPfnlDbdTK 3GarrszCTTcyKLOAkReCVvPjXgz4FZNu4l06mXAmTHou7P9bUnXvGf8qS0//4a0F gSzS9hlpfLl0mPhXk0wA//BUWtPYbASmHjSXy0soauyVoSSzRLzqGTTYYN6FPkBi kHJ0VXXu8YLsBGHCmMU9AD6YpnaqdLn4m9h2bT14DghcQCKPnJQLQLyaItqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHIcqJMmaTgluLvV8a7UTY+YuQ2cwHwYDVR0j BBgwFoAUrnthqcFnk3hMwlzsApVRbGn/XiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTg5NWNlYi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC9BRTdCNjFBOUMx Njc5Mzc4NENDMjVDRUMwMjk1NTE2QzY5RkY1RTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2OUZG NUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUx NkM2OUZGNUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACr13k/J214CjodZf5qB1XHU1MCZQ+LSKW/V wxJf8DhqoQZeYtgCkT+86AtBA9zgP208P/0ZSxXODMmzK32hyqgx1OTTCNO5eUFh l2+GuSH15SPYdTPuUYtF2eVFjI4Ib7lm72EcRDBmqSVZNVeqJzjc+mjmF39+4R2G EZ7JDQOVbcmz981EcfBzbS12Basa+NJe1kr5CDAKHhF0rZf+WtEYw706UWd92a0Y giggWrhWrIBTZStNQujAPkQlUS2A+lNoCGOqF3xo49pdIHS4XXmTELYtVv7irbVQ 0jbmiIGggEpJeVYhN+hhfr/MatbLbpd5SUedNSW2W39U4o2hpj0= -----END CERTIFICATE-----Generated at Wed Nov 5 02:56:10 2025 by rpki-client