$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: 1pxAtrOYc2jzK5LeNr4wgM7DvBgocCxDsGzoiplEC7U= Subject key identifier: B6:1D:93:08:A4:3F:E9:51:76:EC:CD:8B:0F:8D:8D:77:C0:EB:41:B5 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 03F0B69BE6CA7F1D9E022F755231EF27A1466446 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 0163 Signing time: Wed 23 Jul 2025 00:21:36 +0000 Manifest this update: Wed 23 Jul 2025 00:16:36 +0000 Manifest next update: Sat 26 Jul 2025 12:20:36 +0000 Files and hashes: 1: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: 5rMF5NV2rBp9bXa+mdbommoeVKhjZCXMhR2UCk7Exyw=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 3: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 12:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f0:b6:9b:e6:ca:7f:1d:9e:02:2f:75:52:31:ef:27:a1:46:64:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Jul 23 00:16:36 2025 GMT Not After : Jul 26 12:20:36 2025 GMT Subject: CN=B61D9308A43FE95176ECCD8B0F8D8D77C0EB41B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:21:76:f8:17:a0:90:d1:70:5e:a5:de:00: a2:a1:96:c0:dc:54:69:21:2c:48:3e:3e:50:de:c7: 2c:10:2d:66:46:ed:a6:fe:c4:74:d3:58:11:b9:5f: bd:9e:e3:55:7c:cb:e4:4e:91:29:98:4e:7f:fd:ec: 3a:2c:3e:48:d2:51:fd:58:cd:36:f5:1f:83:57:82: 4a:76:ef:87:f7:ed:88:4c:c5:bd:1e:9a:02:54:73: a9:fb:d9:4f:04:51:eb:8b:b0:0f:27:4e:9b:f6:26: 1a:09:a0:1f:e4:00:bf:38:56:d4:4d:90:de:b7:e0: d8:71:8a:27:86:3f:81:3c:c2:60:48:46:60:0b:a0: 31:7a:e9:2c:40:4a:70:01:93:9d:45:51:c5:a4:05: 63:e9:6e:d7:7d:57:e1:a1:2f:f4:b6:82:88:c0:70: 9e:0d:92:94:fc:fa:6b:f4:12:45:fb:3b:da:de:c1: 8d:d7:d3:f1:90:eb:da:30:bc:fb:3f:a6:5b:dd:48: 15:cc:3c:6f:fd:17:22:98:5e:c1:d0:2d:55:17:10: ac:21:35:c6:85:29:33:aa:e9:ff:a3:79:9c:ef:83: 18:67:a7:16:62:2a:2d:f4:22:fa:6e:6f:a9:03:60: 39:b1:ff:b4:d4:2a:35:65:6b:52:ba:1c:dd:76:71: 86:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1D:93:08:A4:3F:E9:51:76:EC:CD:8B:0F:8D:8D:77:C0:EB:41:B5 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:59:7e:7d:bb:73:1f:4a:0e:12:13:6d:e5:a4:5e:e0:c5:c5: 8d:a0:ee:9b:33:08:11:bc:e9:f5:8b:f6:05:41:8a:8f:0d:3e: 4b:27:55:c0:c0:be:a5:5a:50:2c:71:54:c6:a0:f2:9f:89:02: 47:79:65:19:91:7b:4a:f8:46:00:42:3a:ae:a2:85:12:63:42: cd:07:5a:85:6d:b3:36:a0:04:c5:39:2f:ab:2c:bd:02:56:5e: 48:ce:71:57:8b:56:16:4e:be:d3:b3:2d:f7:a9:18:ea:71:bc: df:a1:45:cb:25:fa:e5:95:ef:4d:f5:62:e5:92:08:9f:87:55: 08:bc:3a:19:1c:d7:de:24:c8:ca:47:cb:8b:70:a1:0e:a1:20: 5e:b4:06:2d:9f:bd:93:a4:31:7f:d0:12:e7:fb:c0:f4:d0:3a: 23:47:10:9d:b0:e6:7f:4f:59:f6:b0:1f:ab:d1:06:13:ab:51: 8f:1f:1c:d1:04:e4:cc:69:40:2d:8b:70:bd:c5:19:99:5e:87: f5:6f:be:b2:ec:88:b2:ef:22:da:a2:96:a5:c0:a9:3c:c4:48: af:48:05:b0:84:6b:41:ac:3c:3c:90:1b:1b:6a:5c:f2:17:24: ec:38:dc:ab:18:c7:c9:e5:dc:b9:d1:6d:57:5e:33:e8:fd:0e: 70:0d:d3:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/C2m+bKfx2eAi91UjHvJ6FGZEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTA3MjMwMDE2MzZaFw0yNTA3MjYxMjIwMzZaMDMxMTAvBgNV BAMTKEI2MUQ5MzA4QTQzRkU5NTE3NkVDQ0Q4QjBGOEQ4RDc3QzBFQjQxQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32yF2+BegkNFwXqXeAKKhlsDc VGkhLEg+PlDexywQLWZG7ab+xHTTWBG5X72e41V8y+ROkSmYTn/97DosPkjSUf1Y zTb1H4NXgkp274f37YhMxb0emgJUc6n72U8EUeuLsA8nTpv2JhoJoB/kAL84VtRN kN634NhxiieGP4E8wmBIRmALoDF66SxASnABk51FUcWkBWPpbtd9V+GhL/S2gojA cJ4NkpT8+mv0EkX7O9rewY3X0/GQ69owvPs/plvdSBXMPG/9FyKYXsHQLVUXEKwh NcaFKTOq6f+jeZzvgxhnpxZiKi30Ivpub6kDYDmx/7TUKjVla1K6HN12cYZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUth2TCKQ/6VF27M2LD42Nd8DrQbUwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdZfn27cx9KDhITbeWkXuDFxY2g7pszCBG8 6fWL9gVBio8NPksnVcDAvqVaUCxxVMag8p+JAkd5ZRmRe0r4RgBCOq6ihRJjQs0H WoVtszagBMU5L6ssvQJWXkjOcVeLVhZOvtOzLfepGOpxvN+hRcsl+uWV7031YuWS CJ+HVQi8Ohkc194kyMpHy4twoQ6hIF60Bi2fvZOkMX/QEuf7wPTQOiNHEJ2w5n9P WfawH6vRBhOrUY8fHNEE5MxpQC2LcL3FGZleh/VvvrLsiLLvItqilqXAqTzESK9I BbCEa0GsPDyQGxtqXPIXJOw43KsYx8nl3LnRbVdeM+j9DnAN0+4= -----END CERTIFICATE-----Generated at Fri Jul 25 04:00:38 2025 by rpki-client