$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: 89rpWmfQlJ3siWJVxdt+D13DaX+yq0786B8t9I+TmVc= Subject key identifier: 80:51:09:CD:2F:BA:54:99:88:1C:AF:5B:9B:27:56:49:8A:0F:CC:13 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 4839C00439F5E6D983F03BDC1671F3BAE03E9364 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 0162 Signing time: Sun 20 Jul 2025 14:01:37 +0000 Manifest this update: Sun 20 Jul 2025 13:56:37 +0000 Manifest next update: Thu 24 Jul 2025 00:18:37 +0000 Files and hashes: 1: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 3: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: jljSwPGW7llR6a1h9P0Bzwd9lIu0Ac8xqAfy2sb8XbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:39:c0:04:39:f5:e6:d9:83:f0:3b:dc:16:71:f3:ba:e0:3e:93:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Jul 20 13:56:37 2025 GMT Not After : Jul 24 00:18:37 2025 GMT Subject: CN=805109CD2FBA5499881CAF5B9B2756498A0FCC13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:aa:1f:ce:0e:8c:a4:f6:36:e2:8a:04:7a:94: fa:cb:1d:1a:f8:13:05:b2:ab:36:5f:ed:9b:ec:1c: 07:a7:97:98:e1:ad:ac:d3:d7:af:58:4b:12:4e:f3: 63:07:1e:d4:96:d0:ce:59:bc:b7:e9:02:1e:b9:c9: d7:3c:17:12:37:9e:21:fa:b9:62:7c:68:e7:cd:d3: 82:25:3d:b0:94:f1:d1:7a:84:80:b5:f2:91:8d:24: a7:10:6c:60:86:be:b8:7c:ed:5d:cd:52:3a:52:1f: e8:c9:c3:b7:41:e4:52:7f:c0:f8:58:03:9c:f8:e0: ad:ce:32:49:20:85:c6:5a:cd:4e:da:aa:92:69:74: eb:52:00:6e:01:25:b1:d5:af:33:75:00:1b:0b:7c: 21:17:50:aa:31:2a:2c:e2:6c:8e:5f:77:43:75:82: e4:87:31:8b:70:78:ae:ea:83:64:93:80:02:a0:cb: 53:66:b3:d6:bf:74:77:f2:f7:bc:26:43:81:f0:e7: 7d:6b:ae:b1:fe:af:81:a0:ea:d9:2a:7c:77:1e:4c: 70:44:fa:13:44:85:f7:2a:35:7a:73:ca:82:d3:e3: c8:2e:79:46:ae:87:65:dc:4b:6d:0c:07:0e:04:c4: 4d:81:e3:91:6a:76:59:4e:c1:5b:6d:92:e2:b1:83: 02:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:51:09:CD:2F:BA:54:99:88:1C:AF:5B:9B:27:56:49:8A:0F:CC:13 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c4:12:41:b3:88:b4:75:c0:91:a6:31:79:18:c7:d9:9e:77: da:0e:dd:12:f3:75:96:69:df:01:2d:35:ac:98:41:4d:c8:09: ab:f7:fe:37:8e:ef:dc:ee:f7:d7:96:c1:62:b8:48:fd:23:a6: a9:17:ee:cd:a3:9f:ae:73:6c:27:f3:f1:88:8e:33:51:76:85: 73:b3:ef:03:52:e0:88:2a:88:0a:e1:28:66:25:b4:13:0c:07: ca:ef:53:d6:9d:33:d3:59:f7:cb:00:47:88:be:8a:e2:5f:14: e0:93:c4:ba:31:14:b7:90:9a:fc:c7:ca:23:9e:ed:c3:9c:70: ed:27:6a:ca:9b:84:87:28:d4:fd:81:e3:dc:53:3b:b4:e5:89: 3e:b4:db:18:6e:17:b4:c9:bc:0b:80:f9:21:fe:16:33:3c:7d: 00:2d:36:d0:e5:ce:78:76:52:f0:cb:07:24:5f:74:97:6f:bd: ee:93:e5:77:e2:c6:83:45:4e:db:a8:95:e0:07:90:a2:a2:f5: 0a:38:fb:35:4c:ad:22:95:16:c6:69:1e:fb:24:8c:6f:95:2d: 54:ba:67:ee:16:8e:b8:01:8d:d9:91:90:2f:cd:78:a9:be:92: db:d3:5f:1b:fa:df:3a:18:b3:51:ae:04:58:0d:a8:21:45:2a: 73:5e:d8:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDnABDn15tmD8DvcFnHzuuA+k2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTA3MjAxMzU2MzdaFw0yNTA3MjQwMDE4MzdaMDMxMTAvBgNV BAMTKDgwNTEwOUNEMkZCQTU0OTk4ODFDQUY1QjlCMjc1NjQ5OEEwRkNDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqh/ODoyk9jbiigR6lPrLHRr4 EwWyqzZf7ZvsHAenl5jhrazT169YSxJO82MHHtSW0M5ZvLfpAh65ydc8FxI3niH6 uWJ8aOfN04IlPbCU8dF6hIC18pGNJKcQbGCGvrh87V3NUjpSH+jJw7dB5FJ/wPhY A5z44K3OMkkghcZazU7aqpJpdOtSAG4BJbHVrzN1ABsLfCEXUKoxKizibI5fd0N1 guSHMYtweK7qg2STgAKgy1Nms9a/dHfy97wmQ4Hw531rrrH+r4Gg6tkqfHceTHBE +hNEhfcqNXpzyoLT48gueUauh2XcS20MBw4ExE2B45FqdllOwVttkuKxgwJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgFEJzS+6VJmIHK9bmydWSYoPzBMwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTEEkGziLR1wJGmMXkYx9med9oO3RLzdZZp 3wEtNayYQU3ICav3/jeO79zu99eWwWK4SP0jpqkX7s2jn65zbCfz8YiOM1F2hXOz 7wNS4IgqiArhKGYltBMMB8rvU9adM9NZ98sAR4i+iuJfFOCTxLoxFLeQmvzHyiOe 7cOccO0nasqbhIco1P2B49xTO7TliT602xhuF7TJvAuA+SH+FjM8fQAtNtDlznh2 UvDLByRfdJdvve6T5XfixoNFTtuoleAHkKKi9Qo4+zVMrSKVFsZpHvskjG+VLVS6 Z+4WjrgBjdmRkC/NeKm+ktvTXxv63zoYs1GuBFgNqCFFKnNe2JA= -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:07 2025 by rpki-client