$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: Qq1iX/rIer7Uq4yjA8HN4iuqw7jDMOYjUhX+9PpipGY= Subject key identifier: 03:83:F3:CE:AA:C4:33:32:4D:0E:A6:63:E0:08:72:CA:47:C9:E4:43 Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 6CAAA87FBE858AC3738C2BE5301C9E45A0189EBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: 015C Signing time: Sun 20 Jul 2025 15:42:01 +0000 Manifest this update: Sun 20 Jul 2025 15:37:01 +0000 Manifest next update: Wed 23 Jul 2025 16:08:01 +0000 Files and hashes: 1: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: HdUQMZ7SOKpAyFz6JesRqd55RtIwIZs1nM/RQd+kRrc=) 2: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: kU19zUi1t3bxoKecmzs0spDSF79ADOjVlllklkF9q6Y=) 3: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: jZdzzwUnE5NySNtgaEjKcLOBnZGLd0OeUfLgUNjS8h8=) 4: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: Ss0eIh55eF1+18NBRc56XTthBY2pyra5MKG9X4X5KfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:aa:a8:7f:be:85:8a:c3:73:8c:2b:e5:30:1c:9e:45:a0:18:9e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Jul 20 15:37:01 2025 GMT Not After : Jul 23 16:08:01 2025 GMT Subject: CN=0383F3CEAAC433324D0EA663E00872CA47C9E443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:a6:35:19:ce:75:3c:ce:d2:39:ff:49:de: e7:62:b6:94:b3:e8:ea:fb:38:43:1e:6e:e9:7e:81: 4a:4d:d8:7e:6d:19:d0:11:6d:be:f0:a5:18:e4:e3: ce:51:dd:9f:f5:4c:a2:72:88:f8:3d:94:e9:fd:27: 81:f6:dd:f8:cd:01:a5:a4:d5:a1:3f:41:d3:25:66: be:c6:45:fc:b9:7e:d9:10:5e:e4:c2:ee:1c:5c:72: c8:40:9d:97:41:dc:b7:70:25:26:66:6f:73:7d:14: ed:b8:fb:f6:52:6b:74:94:af:fb:7c:33:2c:90:19: 7f:c7:41:60:4a:ce:fd:9a:5a:45:6f:e6:f6:69:b6: 3a:bb:ab:2f:c0:22:68:68:63:48:b8:26:00:42:cf: 94:3d:b6:26:5b:64:cd:1c:19:c2:9b:44:b4:a0:df: ed:29:0e:71:07:08:96:56:6c:9e:f8:c8:6b:f3:fb: b4:bf:4f:0e:1c:b7:1c:2a:6f:bc:fc:68:43:7d:9f: a6:a8:a0:66:79:e0:a6:c2:55:e3:f9:f4:0a:35:07: 77:e6:04:09:23:93:91:ed:42:8d:fa:57:b5:fd:32: 30:50:6b:6b:22:65:91:6c:be:00:bf:51:d4:20:0d: fe:9e:6f:59:d4:c1:8c:6c:ad:a4:d0:94:02:60:4b: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:83:F3:CE:AA:C4:33:32:4D:0E:A6:63:E0:08:72:CA:47:C9:E4:43 X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:20:fe:de:82:f9:5e:e7:2f:b1:d7:79:dc:41:45:ef:fc:ed: ce:a0:ca:4e:44:c1:24:10:99:22:a9:6c:0f:5f:df:64:f5:19: 96:20:3e:41:e2:ed:af:5a:43:e8:ad:4d:d5:40:06:d5:18:66: 34:55:02:b0:46:43:71:33:f4:10:38:85:88:8c:7b:68:d2:d6: d1:f9:da:52:0f:94:38:07:b0:8e:11:9a:ce:d9:b3:a1:ca:03: b0:df:b0:97:91:ec:82:e9:be:cd:43:96:19:c9:75:b6:31:c4: 77:e8:75:7e:f2:49:75:c5:00:bc:23:7b:db:3c:8c:0b:ef:0d: e1:24:bc:a6:7e:a2:15:84:0d:d9:91:a5:ef:b7:ca:58:c4:55: 52:9e:18:eb:b6:12:4c:c0:aa:6b:10:b8:64:f1:af:99:3b:41: ab:2d:84:21:2d:05:62:cb:21:86:c2:19:54:a8:38:8e:44:74: 27:43:c3:d6:0c:2f:51:97:e7:06:f3:a4:20:a5:ff:82:41:77: 61:ae:3f:d1:bf:8f:17:55:ef:2f:8e:e7:53:5e:21:62:2b:da: 96:20:f8:15:44:bc:0e:c7:cc:e7:94:73:13:23:6b:97:ba:2b: 08:30:84:c8:8f:0d:7d:b8:44:2b:72:2b:ef:57:a2:29:e4:23: 22:a0:52:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbKqof76FisNzjCvlMByeRaAYnrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNTA3MjAxNTM3MDFaFw0yNTA3MjMxNjA4MDFaMDMxMTAvBgNV BAMTKDAzODNGM0NFQUFDNDMzMzI0RDBFQTY2M0UwMDg3MkNBNDdDOUU0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98qY1Gc51PM7SOf9J3uditpSz 6Or7OEMebul+gUpN2H5tGdARbb7wpRjk485R3Z/1TKJyiPg9lOn9J4H23fjNAaWk 1aE/QdMlZr7GRfy5ftkQXuTC7hxccshAnZdB3LdwJSZmb3N9FO24+/ZSa3SUr/t8 MyyQGX/HQWBKzv2aWkVv5vZptjq7qy/AImhoY0i4JgBCz5Q9tiZbZM0cGcKbRLSg 3+0pDnEHCJZWbJ74yGvz+7S/Tw4ctxwqb7z8aEN9n6aooGZ54KbCVeP59Ao1B3fm BAkjk5HtQo36V7X9MjBQa2siZZFsvgC/UdQgDf6eb1nUwYxsraTQlAJgS13BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA4PzzqrEMzJNDqZj4AhyykfJ5EMwHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQg/t6C+V7nL7HXedxBRe/87c6gyk5EwSQQ mSKpbA9f32T1GZYgPkHi7a9aQ+itTdVABtUYZjRVArBGQ3Ez9BA4hYiMe2jS1tH5 2lIPlDgHsI4Rms7Zs6HKA7DfsJeR7ILpvs1DlhnJdbYxxHfodX7ySXXFALwje9s8 jAvvDeEkvKZ+ohWEDdmRpe+3yljEVVKeGOu2EkzAqmsQuGTxr5k7QasthCEtBWLL IYbCGVSoOI5EdCdDw9YML1GX5wbzpCCl/4JBd2GuP9G/jxdV7y+O51NeIWIr2pYg +BVEvA7HzOeUcxMja5e6KwgwhMiPDX24RCtyK+9XoinkIyKgUvc= -----END CERTIFICATE-----Generated at Tue Jul 22 06:27:28 2025 by rpki-client