$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: ZoNhkmg5HpOatPDSWCOoASVbGhpXFGcyygA1Ja9kBmA= Subject key identifier: E8:66:50:BD:A9:5F:02:62:62:39:7A:29:3E:7C:35:B4:10:B3:10:25 Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 37DF35EE6841B67BE7644EBAB482DE65A04D9BA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: 015E Signing time: Fri 25 Jul 2025 00:53:21 +0000 Manifest this update: Fri 25 Jul 2025 00:48:21 +0000 Manifest next update: Mon 28 Jul 2025 12:31:21 +0000 Files and hashes: 1: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: HdUQMZ7SOKpAyFz6JesRqd55RtIwIZs1nM/RQd+kRrc=) 2: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: Ss0eIh55eF1+18NBRc56XTthBY2pyra5MKG9X4X5KfE=) 3: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: jZdzzwUnE5NySNtgaEjKcLOBnZGLd0OeUfLgUNjS8h8=) 4: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: ps+1yqOnEOhuyzE+7BWl8eTKgg5rS9glR45WIhMzClE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 11:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:df:35:ee:68:41:b6:7b:e7:64:4e:ba:b4:82:de:65:a0:4d:9b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Jul 25 00:48:21 2025 GMT Not After : Jul 28 12:31:21 2025 GMT Subject: CN=E86650BDA95F026262397A293E7C35B410B31025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c3:3c:5b:72:e9:75:dd:63:23:3a:d6:bb:ee: 04:e6:d3:d0:94:a0:ce:db:b5:e0:cf:fa:0f:3c:a4: db:59:f1:ed:50:d2:19:fb:59:12:cf:13:85:3c:ad: ca:57:3a:a9:d2:6f:48:e2:7a:76:dd:4a:b4:36:f2: 91:c4:f8:93:5b:80:d5:2d:72:6e:bc:a9:ea:38:05: 06:9c:75:a8:13:c8:72:e5:4b:cc:82:81:1c:8f:64: e3:7f:6a:44:71:ad:b5:ce:2d:b6:dd:14:64:70:b4: 6c:a3:21:16:7c:ca:fd:97:89:40:07:ac:d1:e1:d4: a6:27:c3:6a:b8:e0:95:2d:6c:60:d4:df:c6:02:a5: b3:19:59:24:79:42:4b:f7:a7:b3:e6:0b:30:45:a0: ab:c5:27:ce:55:a1:18:b3:3c:6f:f9:4f:35:ea:0a: 36:33:f2:a5:8e:2b:a3:50:4e:99:30:6f:c9:ee:ab: 68:5a:28:85:67:53:f4:64:39:3d:e6:87:57:99:fc: 21:c2:ca:69:ee:9a:2a:09:ba:e0:35:44:58:ca:de: 57:9d:31:f2:9e:89:cb:42:89:32:9e:3c:24:9a:75: 2d:00:4f:40:95:7d:38:c1:29:4e:5c:3d:6c:0e:a8: 84:b6:63:9e:de:70:85:6b:3a:89:b5:5f:41:ca:b7: 77:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:66:50:BD:A9:5F:02:62:62:39:7A:29:3E:7C:35:B4:10:B3:10:25 X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b9:a6:a9:20:4e:5a:ec:78:de:76:a6:2f:e1:94:4c:e3:16: db:38:d9:a6:f2:11:1e:da:6b:92:2e:c2:51:97:75:96:59:24: 39:a5:92:38:87:22:56:48:3a:35:83:dc:64:bd:a4:98:a4:74: e2:c8:1b:7c:4d:b2:36:a6:99:e6:3f:b0:36:58:cf:52:ce:66: b9:fc:a8:b8:48:5b:1f:74:34:17:df:e2:78:2b:ab:ef:b5:ed: 50:1e:3e:1b:40:ca:60:63:21:e4:67:dd:2d:2e:6b:bf:c3:7e: fa:49:48:81:55:dd:72:9e:e1:fa:ad:44:16:32:a8:22:3b:c2: a5:5d:67:fa:ac:90:66:72:b1:53:70:53:31:7c:38:52:00:92: c7:e4:30:6f:07:fe:e8:bc:19:0f:b5:8e:ae:86:3b:7d:13:e2: ff:ca:a4:d0:85:18:c3:89:fa:bf:b3:63:c6:60:18:fb:7f:5f: ce:78:64:43:ec:9d:1a:61:33:d7:2f:55:40:7c:44:ca:49:27: 00:c1:96:9a:d1:8a:17:6c:92:1a:9a:85:b2:7a:47:f8:f5:d3: bc:e0:a2:62:3c:fa:f0:5a:11:c2:c5:d9:a4:62:93:41:fd:e5: 92:88:5d:35:2f:b1:71:83:8f:3d:c1:1f:45:7b:55:97:52:cb: ae:47:6f:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9817mhBtnvnZE66tILeZaBNm6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNTA3MjUwMDQ4MjFaFw0yNTA3MjgxMjMxMjFaMDMxMTAvBgNV BAMTKEU4NjY1MEJEQTk1RjAyNjI2MjM5N0EyOTNFN0MzNUI0MTBCMzEwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7wzxbcul13WMjOta77gTm09CU oM7bteDP+g88pNtZ8e1Q0hn7WRLPE4U8rcpXOqnSb0jienbdSrQ28pHE+JNbgNUt cm68qeo4BQacdagTyHLlS8yCgRyPZON/akRxrbXOLbbdFGRwtGyjIRZ8yv2XiUAH rNHh1KYnw2q44JUtbGDU38YCpbMZWSR5Qkv3p7PmCzBFoKvFJ85VoRizPG/5TzXq CjYz8qWOK6NQTpkwb8nuq2haKIVnU/RkOT3mh1eZ/CHCymnumioJuuA1RFjK3led MfKeictCiTKePCSadS0AT0CVfTjBKU5cPWwOqIS2Y57ecIVrOom1X0HKt3d7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6GZQvalfAmJiOXopPnw1tBCzECUwHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIm5pqkgTlrseN52pi/hlEzjFts42abyER7a a5IuwlGXdZZZJDmlkjiHIlZIOjWD3GS9pJikdOLIG3xNsjammeY/sDZYz1LOZrn8 qLhIWx90NBff4ngrq++17VAePhtAymBjIeRn3S0ua7/DfvpJSIFV3XKe4fqtRBYy qCI7wqVdZ/qskGZysVNwUzF8OFIAksfkMG8H/ui8GQ+1jq6GO30T4v/KpNCFGMOJ +r+zY8ZgGPt/X854ZEPsnRphM9cvVUB8RMpJJwDBlprRihdskhqahbJ6R/j107zg omI8+vBaEcLF2aRik0H95ZKIXTUvsXGDjz3BH0V7VZdSy65Hb/A= -----END CERTIFICATE-----Generated at Fri Jul 25 04:01:26 2025 by rpki-client