$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: mAEhpAIgE/jhgjsM+2UJTj/0eMJSBpQfjDDBHYgrP6U= Subject key identifier: C4:35:87:DC:9B:E5:79:9F:90:07:8C:9F:1A:26:37:76:62:E0:E8:F0 Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 53A5B01D9EBD75B831FEFBBF74E0972EAD36211A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 0229 Signing time: Sun 20 Jul 2025 03:50:04 +0000 Manifest this update: Sun 20 Jul 2025 03:45:04 +0000 Manifest next update: Wed 23 Jul 2025 11:02:04 +0000 Files and hashes: 1: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: f3V9dP6d3oAMIs+CjjAU6rsMbb7aV6frrbPWOogYr0Q=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: mILgNsqQOC7ukAkdxDoanzwIWxBZqUVcAA8Xp+zkfbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 11:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a5:b0:1d:9e:bd:75:b8:31:fe:fb:bf:74:e0:97:2e:ad:36:21:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Jul 20 03:45:04 2025 GMT Not After : Jul 23 11:02:04 2025 GMT Subject: CN=C43587DC9BE5799F90078C9F1A26377662E0E8F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:ca:00:79:26:90:b1:15:61:35:ae:bd:66: c1:63:9c:bc:1e:13:5b:e8:ad:44:ac:f5:9d:8a:dd: 8f:e6:d1:73:92:77:1f:31:d4:a1:58:54:da:77:42: 54:20:df:8e:75:58:df:16:75:69:4c:ee:a2:d1:0d: 7b:09:0b:36:4f:7a:e5:66:80:45:b3:cb:64:fc:01: ea:56:3a:49:ee:ed:f1:5d:dd:ed:a8:d7:99:99:64: f8:5e:37:70:cd:f9:1e:2f:6f:b2:12:10:f5:8a:1d: d5:9a:97:a8:ef:9b:ff:7a:a5:19:8c:2d:d7:61:b5: da:a6:69:6c:63:76:ab:9c:dc:75:8c:3b:c1:18:4a: a2:ef:27:89:58:df:1a:e0:75:3a:91:a8:63:ed:dd: a9:cf:68:10:f9:a4:63:02:6f:26:dd:8d:dd:ed:26: ed:69:3c:a0:07:c3:1d:0b:5b:1b:7f:0b:71:3e:e7: d8:c2:a9:4e:96:5a:7a:a9:98:89:87:79:01:59:bd: c4:0c:e2:da:02:2f:6c:52:6e:95:5e:15:fe:94:f2: 9b:22:d5:65:85:a3:18:ea:99:c0:f0:73:8b:7f:15: cc:49:f1:05:4e:62:de:b0:a0:74:f5:a5:00:da:b5: 03:17:33:99:16:57:19:91:e0:f8:fb:32:0f:d6:38: 38:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:35:87:DC:9B:E5:79:9F:90:07:8C:9F:1A:26:37:76:62:E0:E8:F0 X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:42:f5:98:88:6f:fd:1f:32:fc:b9:b9:63:9f:c6:69:0b:a7: 39:58:82:a8:99:54:68:5a:31:a6:4d:e8:0c:4e:16:d3:b0:bc: c5:b2:17:d3:ac:31:9a:ac:2e:1e:16:05:2f:6b:2b:24:a6:78: bd:bd:12:14:7d:4d:b7:87:8a:2f:73:43:8d:e9:d6:75:be:4c: 24:97:be:c6:1e:c3:4b:00:70:89:c2:8e:2f:dc:16:72:1a:34: 1c:8d:a5:ad:6d:ab:6f:0c:94:21:4b:92:ec:7b:7a:20:d9:d0: df:97:e6:7c:27:a1:d0:5f:6d:16:3b:9b:8c:d4:de:69:d6:d6: bb:42:de:92:e5:8f:ac:9a:f8:40:02:6a:0b:6d:bd:c2:3b:2d: ac:07:7b:7b:da:b0:94:4b:0b:b3:de:7f:e8:52:08:9b:23:29: 85:8c:48:fb:fc:af:29:c7:14:fd:8e:b3:52:4d:d5:10:13:87: 9f:67:27:99:be:24:44:c5:c7:2e:e2:6a:16:dc:de:a8:5b:b8: 80:3e:8c:37:bb:d1:3d:ec:91:ce:8b:16:2f:26:a1:ea:52:9f: 6e:b5:c4:03:ce:e9:4d:cd:cc:ea:1a:a1:22:93:f1:81:d9:84: 82:b9:74:08:ba:55:f5:21:16:31:4c:a8:f4:e4:3b:46:74:6c: 79:46:d6:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU6WwHZ69dbgx/vu/dOCXLq02IRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNTA3MjAwMzQ1MDRaFw0yNTA3MjMxMTAyMDRaMDMxMTAvBgNV BAMTKEM0MzU4N0RDOUJFNTc5OUY5MDA3OEM5RjFBMjYzNzc2NjJFMEU4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw68oAeSaQsRVhNa69ZsFjnLwe E1vorUSs9Z2K3Y/m0XOSdx8x1KFYVNp3QlQg3451WN8WdWlM7qLRDXsJCzZPeuVm gEWzy2T8AepWOknu7fFd3e2o15mZZPheN3DN+R4vb7ISEPWKHdWal6jvm/96pRmM LddhtdqmaWxjdquc3HWMO8EYSqLvJ4lY3xrgdTqRqGPt3anPaBD5pGMCbybdjd3t Ju1pPKAHwx0LWxt/C3E+59jCqU6WWnqpmImHeQFZvcQM4toCL2xSbpVeFf6U8psi 1WWFoxjqmcDwc4t/FcxJ8QVOYt6woHT1pQDatQMXM5kWVxmR4Pj7Mg/WODj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxDWH3JvleZ+QB4yfGiY3dmLg6PAwHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNC9ZiIb/0fMvy5uWOfxmkLpzlYgqiZVGha MaZN6AxOFtOwvMWyF9OsMZqsLh4WBS9rKySmeL29EhR9TbeHii9zQ43p1nW+TCSX vsYew0sAcInCji/cFnIaNByNpa1tq28MlCFLkux7eiDZ0N+X5nwnodBfbRY7m4zU 3mnW1rtC3pLlj6ya+EACagttvcI7LawHe3vasJRLC7Pef+hSCJsjKYWMSPv8rynH FP2Os1JN1RATh59nJ5m+JETFxy7iahbc3qhbuIA+jDe70T3skc6LFi8moepSn261 xAPO6U3NzOoaoSKT8YHZhIK5dAi6VfUhFjFMqPTkO0Z0bHlG1nc= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:33 2025 by rpki-client