$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft File: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft (raw, json) Hash identifier: AySV8/bYQ6z+pJd16h6/U9avgmmH3T2o0SV+T599b00= Subject key identifier: 94:D3:A6:56:B8:18:4E:B0:0A:F3:D9:46:4F:4D:EF:47:46:97:8B:6B Authority key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Certificate issuer: /CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Certificate serial: 392624482F6DC9FA72A6011E1DC7F213477CB483 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft Manifest number: 02EC Signing time: Sat 09 Aug 2025 16:31:48 +0000 Manifest this update: Sat 09 Aug 2025 16:26:48 +0000 Manifest next update: Wed 13 Aug 2025 00:57:48 +0000 Files and hashes: 1: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl (hash: 0v3Yw60SAKiyB6/R4MEi/Ao5EYx0SQhrtGmLZuYvBA8=) 2: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: U53MbJZVdHMZelcGWK9+w7EaXlcDpDpc+jeZ3MbM1Kw=) 3: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: gOoZfgSIZIk3IBqctpdE6ERoqLaD97A4ApFjnTt/tAE=) 4: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: jtOEt7E3nAQ6Fw9cITIUUkvRpfUDsJxH4CxbFv1xpGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 00:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:26:24:48:2f:6d:c9:fa:72:a6:01:1e:1d:c7:f2:13:47:7c:b4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Validity Not Before: Aug 9 16:26:48 2025 GMT Not After : Aug 13 00:57:48 2025 GMT Subject: CN=94D3A656B8184EB00AF3D9464F4DEF4746978B6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6a:b6:f3:fc:97:4b:de:c6:bc:d4:5b:2e:54: ec:95:5b:48:b5:ba:8b:8f:07:e1:6d:a3:51:5a:aa: 9f:6b:ca:3c:75:a7:76:3f:d9:28:53:5c:e5:a0:7f: 3f:bd:9a:7d:92:90:7e:bf:e3:eb:38:ac:1e:ed:c3: b4:9d:9d:ec:44:f8:2f:09:e7:54:5f:7a:f5:79:e7: db:19:cc:c2:81:38:04:ab:19:28:eb:43:1d:0d:19: 8b:e8:a7:c6:12:71:e7:d9:25:f0:17:73:b4:d6:06: 9b:6b:9d:e7:97:e4:38:41:c0:d5:38:87:8b:15:89: 7d:a4:6b:b8:82:c9:9e:49:81:c6:16:36:0f:03:d2: 41:67:ff:e6:ca:cd:8b:5f:d0:c1:2d:75:dd:20:16: 9c:6f:2a:ff:33:f8:f3:21:d2:dd:f6:d2:91:10:dc: 29:7d:2d:56:dc:42:5c:6e:89:18:8d:ee:c7:1a:eb: 03:c0:16:e9:65:21:45:39:be:da:2e:ef:71:25:02: 26:30:d5:92:0a:93:33:63:3b:28:0b:50:82:b2:6e: ad:d3:bb:37:8a:31:bb:0d:dd:ed:80:3f:c0:ff:ca: c9:4b:85:f2:99:d6:1d:62:a3:98:fe:29:46:7b:32: 3f:9e:48:fb:41:7b:b9:f6:cb:aa:39:9e:7f:15:ff: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D3:A6:56:B8:18:4E:B0:0A:F3:D9:46:4F:4D:EF:47:46:97:8B:6B X509v3 Authority Key Identifier: keyid:AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e6:58:1c:5b:43:a1:03:99:c7:69:7f:6c:db:29:04:f3:dc: ad:98:20:89:d5:d7:7a:e1:f4:79:68:05:89:cb:eb:8c:30:c3: d9:6b:0f:a0:7f:93:c0:72:12:42:1e:88:f1:cf:9f:bf:10:65: 87:cc:a2:ad:a3:c3:3c:30:c2:49:74:61:52:d0:9c:d4:79:35: 08:0a:96:49:b7:a2:00:f2:d6:56:46:80:62:3a:55:c6:32:8c: f7:51:89:ca:17:a5:52:90:d6:c7:a8:bb:7d:e5:6e:0d:d8:76: 90:72:08:79:5b:d8:a7:af:c2:cb:c7:64:cd:09:a5:a0:b6:08: 35:b2:62:28:e0:6a:f6:72:5a:91:75:2b:17:40:7d:6f:c0:91: 85:e4:04:67:f9:ea:65:fe:7d:b8:1d:5a:d2:df:1b:0a:4d:63: 87:ae:dc:22:38:78:22:7d:0f:07:bb:18:5b:60:40:aa:b2:57: 27:c8:0c:43:8f:cf:24:a6:13:39:e5:06:f1:ce:c5:da:7d:c2: 7a:76:6e:e7:30:c3:af:bd:fe:48:ad:f1:94:ce:02:39:cf:0f: 8f:85:b2:29:9c:14:03:ca:5b:9b:e2:bc:e5:08:8d:ef:fd:9e: 8d:93:ec:02:85:a3:a9:d4:ed:3f:27:9a:8b:3e:17:9a:2b:d3: 48:dc:64:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSYkSC9tyfpypgEeHcfyE0d8tIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5 MjMxMDUwNDAeFw0yNTA4MDkxNjI2NDhaFw0yNTA4MTMwMDU3NDhaMDMxMTAvBgNV BAMTKDk0RDNBNjU2QjgxODRFQjAwQUYzRDk0NjRGNERFRjQ3NDY5NzhCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfarbz/JdL3sa81FsuVOyVW0i1 uouPB+Fto1Faqp9ryjx1p3Y/2ShTXOWgfz+9mn2SkH6/4+s4rB7tw7SdnexE+C8J 51RfevV559sZzMKBOASrGSjrQx0NGYvop8YScefZJfAXc7TWBptrneeX5DhBwNU4 h4sViX2ka7iCyZ5JgcYWNg8D0kFn/+bKzYtf0MEtdd0gFpxvKv8z+PMh0t320pEQ 3Cl9LVbcQlxuiRiN7sca6wPAFullIUU5vtou73ElAiYw1ZIKkzNjOygLUIKybq3T uzeKMbsN3e2AP8D/yslLhfKZ1h1io5j+KUZ7Mj+eSPtBe7n2y6o5nn8V/+KlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlNOmVrgYTrAK89lGT03vR0aXi2swHwYDVR0j BBgwFoAUrrMv+gAHwKBn+4zp3XfP75IxBQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMC9BRUIzMkZGQTAw MDdDMEEwNjdGQjhDRTlERDc3Q0ZFRjkyMzEwNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5MjMx MDUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk ZDQtMjYzNDcyN2E5ZWQ0LzAvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NG RUY5MjMxMDUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfmWBxbQ6EDmcdpf2zbKQTz3K2YIInV13rh 9HloBYnL64www9lrD6B/k8ByEkIeiPHPn78QZYfMoq2jwzwwwkl0YVLQnNR5NQgK lkm3ogDy1lZGgGI6VcYyjPdRicoXpVKQ1seou33lbg3YdpByCHlb2KevwsvHZM0J paC2CDWyYijgavZyWpF1KxdAfW/AkYXkBGf56mX+fbgdWtLfGwpNY4eu3CI4eCJ9 Dwe7GFtgQKqyVyfIDEOPzySmEznlBvHOxdp9wnp2bucww6+9/kit8ZTOAjnPD4+F simcFAPKW5vivOUIje/9no2T7AKFo6nU7T8nmos+F5or00jcZH4= -----END CERTIFICATE-----Generated at Sat Aug 9 20:34:38 2025 by rpki-client