$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: upz/FcJkaBdfSLY5XDRKVDlIZoFuC1+asQAaYz1aBqo= Subject key identifier: 4E:16:BA:5F:59:E8:A6:75:87:7D:C8:14:B3:70:9C:AD:8C:7A:70:73 Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 1F68000945155003C093FAA9A8D43C5A838E4B90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 0196 Signing time: Sun 20 Jul 2025 12:10:02 +0000 Manifest this update: Sun 20 Jul 2025 12:05:02 +0000 Manifest next update: Wed 23 Jul 2025 17:02:02 +0000 Files and hashes: 1: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: n3Xp17eBGSF8Y3VTNWb/MhNyAYzIsoMU61dvxsxhvuU=) 2: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=) 3: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:68:00:09:45:15:50:03:c0:93:fa:a9:a8:d4:3c:5a:83:8e:4b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Jul 20 12:05:02 2025 GMT Not After : Jul 23 17:02:02 2025 GMT Subject: CN=4E16BA5F59E8A675877DC814B3709CAD8C7A7073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:c9:69:32:de:b9:af:65:5e:f5:ba:cc:d1: c3:05:da:57:27:49:28:52:cc:ff:e2:3a:4c:95:89: c0:52:73:4b:8b:1a:3f:b9:91:0c:06:2d:5d:38:9b: 57:58:bb:d8:a5:94:9e:0e:f0:3e:bf:9c:a6:e3:75: 38:26:46:f2:fb:54:02:08:b1:19:25:a4:de:f8:79: 92:a6:51:52:88:c5:e2:7e:3b:d7:71:ec:88:4b:75: 39:4d:06:59:6a:9a:83:17:ed:f1:8a:3f:0b:bd:e0: 93:46:4d:7b:03:be:62:67:b5:99:f5:82:87:f0:8c: 17:d5:df:59:77:91:cb:37:81:d9:11:a7:41:d2:11: 83:d7:0b:e4:ed:02:c6:a8:d5:a4:c0:46:90:f2:85: ea:2b:b5:98:9b:95:eb:2f:69:f9:60:93:24:16:8c: 35:56:41:dd:0c:a7:b4:43:0c:da:71:69:f0:24:55: d5:fb:43:34:2e:e1:c7:92:de:fb:a0:45:21:50:45: c9:58:e7:ce:c5:5c:d9:f4:c6:f7:0f:aa:f8:d4:86: 79:62:65:88:4d:01:ec:4e:d3:4e:8a:4a:7d:df:0a: d6:d7:26:63:d5:4d:84:1b:47:12:c1:f6:ab:cd:44: 91:ca:32:84:6d:5c:f2:40:8c:56:12:2f:46:83:fe: 5f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:16:BA:5F:59:E8:A6:75:87:7D:C8:14:B3:70:9C:AD:8C:7A:70:73 X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d2:60:2c:1a:6b:a7:37:54:35:28:b8:9c:73:b6:2c:bf:b8: 82:a3:eb:e7:36:28:77:24:de:fa:da:72:49:cc:96:75:40:56: 33:54:db:7d:56:cf:9c:6d:68:e9:8f:4e:d6:8f:6a:17:d8:01: 79:6f:ef:a5:ef:25:db:25:79:80:07:9f:ca:e1:65:48:63:64: 43:23:2f:e7:54:24:3f:99:72:cb:83:27:83:87:47:18:cf:52: 03:ba:44:53:53:20:c2:14:19:8b:91:97:cb:5e:50:ad:c2:0b: 7c:0a:96:66:36:f3:e1:ad:5f:13:4f:92:52:36:26:ce:0d:b8: 08:df:41:ef:ee:57:7f:d1:36:ba:5d:03:86:dd:e5:d1:30:f5: 07:d4:4f:42:98:81:bc:36:20:b1:f9:21:5e:a3:a8:99:e0:4e: e9:2a:09:53:ad:ec:6e:84:01:31:7d:28:81:2c:c8:58:c8:18: b7:3f:a3:4c:53:ce:e6:6b:83:de:37:50:55:b7:db:99:77:9c: f3:8b:02:5a:e5:e8:24:e4:5b:f4:98:02:45:05:d6:e0:0b:73: 2f:9a:53:e2:46:f3:82:ce:ed:58:5d:02:1c:2a:a8:2a:ff:e0: 73:8e:6e:48:ce:ad:7b:6a:ac:d9:c6:f2:1e:74:73:f5:b7:56: 50:5a:72:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2gACUUVUAPAk/qpqNQ8WoOOS5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTA3MjAxMjA1MDJaFw0yNTA3MjMxNzAyMDJaMDMxMTAvBgNV BAMTKDRFMTZCQTVGNTlFOEE2NzU4NzdEQzgxNEIzNzA5Q0FEOEM3QTcwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+u8lpMt65r2Ve9brM0cMF2lcn SShSzP/iOkyVicBSc0uLGj+5kQwGLV04m1dYu9illJ4O8D6/nKbjdTgmRvL7VAII sRklpN74eZKmUVKIxeJ+O9dx7IhLdTlNBllqmoMX7fGKPwu94JNGTXsDvmJntZn1 gofwjBfV31l3kcs3gdkRp0HSEYPXC+TtAsao1aTARpDyheortZiblesvaflgkyQW jDVWQd0Mp7RDDNpxafAkVdX7QzQu4ceS3vugRSFQRclY587FXNn0xvcPqvjUhnli ZYhNAexO006KSn3fCtbXJmPVTYQbRxLB9qvNRJHKMoRtXPJAjFYSL0aD/l+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTha6X1nopnWHfcgUs3CcrYx6cHMwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzSYCwaa6c3VDUouJxztiy/uIKj6+c2KHck 3vracknMlnVAVjNU231Wz5xtaOmPTtaPahfYAXlv76XvJdsleYAHn8rhZUhjZEMj L+dUJD+ZcsuDJ4OHRxjPUgO6RFNTIMIUGYuRl8teUK3CC3wKlmY28+GtXxNPklI2 Js4NuAjfQe/uV3/RNrpdA4bd5dEw9QfUT0KYgbw2ILH5IV6jqJngTukqCVOt7G6E ATF9KIEsyFjIGLc/o0xTzuZrg943UFW325l3nPOLAlrl6CTkW/SYAkUF1uALcy+a U+JG84LO7VhdAhwqqCr/4HOObkjOrXtqrNnG8h50c/W3VlBacqQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:05 2025 by rpki-client