$ rpki-client -vvf repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft File: AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft (raw, json) Hash identifier: pxvUYxN8py/hhoh6rOJRRaDU0BiZwUsp2U1CcEASEvs= Subject key identifier: E1:5B:E7:38:0A:C9:B1:7A:0C:70:6B:9E:02:A2:94:E4:79:9F:BE:E8 Authority key identifier: AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 Certificate issuer: /CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Certificate serial: 044D19306617798CD3EB4B3896EDCDBE83E188A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft Manifest number: 019A Signing time: Mon 04 Aug 2025 21:21:12 +0000 Manifest this update: Mon 04 Aug 2025 21:16:12 +0000 Manifest next update: Fri 08 Aug 2025 02:36:12 +0000 Files and hashes: 1: AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl (hash: NRqqYDCkwV5/a/wMHg21ZRO9VqHkMx2MT4EnWEd3fuA=) 2: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: fiuKPWuy7RKi+g0sG/LNMj+SSbhL4KU/yazo65GfTmw=) 3: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: EVf2WcFs3bKP8tYqDIaCEQ9aXkKueuElwWbdJ2ysh6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 02:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:4d:19:30:66:17:79:8c:d3:eb:4b:38:96:ed:cd:be:83:e1:88:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Validity Not Before: Aug 4 21:16:12 2025 GMT Not After : Aug 8 02:36:12 2025 GMT Subject: CN=E15BE7380AC9B17A0C706B9E02A294E4799FBEE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:ba:64:cf:f1:d7:08:9f:24:7a:4e:32:7c: 39:cb:85:8e:50:4b:7a:0d:18:7e:dd:33:b6:6e:ef: be:be:d9:6f:02:7a:1e:5c:06:ac:44:01:94:88:48: 43:8f:ac:c7:1d:83:4d:05:54:4b:76:f6:59:e8:b4: d2:23:67:68:2f:30:89:31:7b:ae:10:9f:b9:c6:f1: f8:65:91:dd:e7:60:12:31:23:90:31:47:7d:c9:6f: 9e:fb:d6:4d:de:84:09:60:cd:f3:f3:6f:09:a2:d4: d3:28:18:b7:41:ec:ff:02:27:3a:eb:0d:13:0f:a8: 34:1c:f3:32:80:95:59:a9:24:2f:c5:95:21:58:de: 02:97:76:e0:ba:4e:f3:b1:1c:05:fe:e2:12:7f:16: 9d:81:3b:06:48:ed:7b:ff:ec:1d:29:7c:30:22:82: be:0e:ee:74:e0:09:7a:4f:ff:df:4d:53:a4:b7:7c: 11:e0:af:be:86:e9:4b:84:28:c3:08:63:fe:b6:a7: 3c:9e:90:43:2a:ec:28:c8:fc:3f:51:15:c9:00:b3: 67:36:4e:ba:01:9f:ee:48:83:2d:ed:59:a8:73:fe: 87:6d:be:e7:a4:de:7e:4e:d9:02:d3:df:18:7a:1c: 8c:63:f0:00:97:2f:3d:8b:cb:38:76:f1:7a:5d:36: 28:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5B:E7:38:0A:C9:B1:7A:0C:70:6B:9E:02:A2:94:E4:79:9F:BE:E8 X509v3 Authority Key Identifier: keyid:AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:69:13:c1:1b:8d:23:6c:ee:e4:ef:32:34:7b:e4:01:90:2a: eb:55:b0:56:8a:dc:8d:d3:6a:0c:d7:26:87:f3:8b:d8:c7:63: 9c:b8:11:c8:bd:58:5d:d3:29:72:fe:ae:81:23:4a:2d:6e:c3: 1a:79:40:72:4f:75:58:6f:04:d5:a2:8f:ff:98:03:44:4c:5f: db:63:20:3f:b7:4a:99:13:39:cb:fc:52:c1:bd:73:3e:de:41: dc:97:d2:64:76:50:d4:30:88:1b:30:24:19:d9:78:ef:73:66: 25:81:a1:65:1c:13:71:dc:c5:2d:7d:43:8f:40:f3:91:c5:9b: 69:3a:42:76:a6:df:c2:52:7b:c4:76:0c:06:6f:b0:ca:c7:30: de:17:97:73:0f:ba:a8:34:bd:ca:fc:a7:c1:b1:32:e1:33:26: 8e:bd:d9:b4:a5:ce:63:ec:dd:85:22:9a:33:f8:94:0b:11:83: 46:7d:62:0c:9c:85:cb:93:51:0a:34:7c:88:8e:9d:0c:df:57: c3:1c:21:90:e5:de:80:e7:04:01:0d:16:3c:d5:89:b5:34:a5: 19:c1:dc:81:d4:be:e7:45:83:30:25:91:b8:97:8a:cf:e9:0d: 4a:f0:08:50:b5:08:07:7c:53:bc:94:69:bb:f5:9d:22:27:5c: 0f:e2:0b:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBE0ZMGYXeYzT60s4lu3NvoPhiKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2 OUZGNUUyMDAeFw0yNTA4MDQyMTE2MTJaFw0yNTA4MDgwMjM2MTJaMDMxMTAvBgNV BAMTKEUxNUJFNzM4MEFDOUIxN0EwQzcwNkI5RTAyQTI5NEU0Nzk5RkJFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/H7pkz/HXCJ8kek4yfDnLhY5Q S3oNGH7dM7Zu776+2W8Ceh5cBqxEAZSISEOPrMcdg00FVEt29lnotNIjZ2gvMIkx e64Qn7nG8fhlkd3nYBIxI5AxR33Jb5771k3ehAlgzfPzbwmi1NMoGLdB7P8CJzrr DRMPqDQc8zKAlVmpJC/FlSFY3gKXduC6TvOxHAX+4hJ/Fp2BOwZI7Xv/7B0pfDAi gr4O7nTgCXpP/99NU6S3fBHgr76G6UuEKMMIY/62pzyekEMq7CjI/D9RFckAs2c2 TroBn+5Igy3tWahz/odtvuek3n5O2QLT3xh6HIxj8ACXLz2Lyzh28XpdNihpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4VvnOArJsXoMcGueAqKU5HmfvugwHwYDVR0j BBgwFoAUrnthqcFnk3hMwlzsApVRbGn/XiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTg5NWNlYi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC9BRTdCNjFBOUMx Njc5Mzc4NENDMjVDRUMwMjk1NTE2QzY5RkY1RTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2OUZG NUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUx NkM2OUZGNUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFpE8EbjSNs7uTvMjR75AGQKutVsFaK3I3T agzXJofzi9jHY5y4Eci9WF3TKXL+roEjSi1uwxp5QHJPdVhvBNWij/+YA0RMX9tj ID+3SpkTOcv8UsG9cz7eQdyX0mR2UNQwiBswJBnZeO9zZiWBoWUcE3HcxS19Q49A 85HFm2k6Qnam38JSe8R2DAZvsMrHMN4Xl3MPuqg0vcr8p8GxMuEzJo692bSlzmPs 3YUimjP4lAsRg0Z9YgychcuTUQo0fIiOnQzfV8McIZDl3oDnBAENFjzVibU0pRnB 3IHUvudFgzAlkbiXis/pDUrwCFC1CAd8U7yUabv1nSInXA/iC94= -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:21 2025 by rpki-client