$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: CHpiLa35K70KpGrau5n/BOb4jpTzK9Maq6/BfzUbz14= Subject key identifier: 29:0A:16:AC:43:2E:E1:0D:D4:B1:74:77:73:7B:B7:DF:5C:17:B1:30 Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 0F645C4923351AA944CA8159B74283900034D6FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 022A Signing time: Sun 20 Jul 2025 03:10:35 +0000 Manifest this update: Sun 20 Jul 2025 03:05:35 +0000 Manifest next update: Wed 23 Jul 2025 11:53:35 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: GZUDzXGqvu3hSOzwDiJ5Hb6T38ykg5iQBi37+lFWE3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 11:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:64:5c:49:23:35:1a:a9:44:ca:81:59:b7:42:83:90:00:34:d6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Jul 20 03:05:35 2025 GMT Not After : Jul 23 11:53:35 2025 GMT Subject: CN=290A16AC432EE10DD4B17477737BB7DF5C17B130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:0c:44:34:19:34:e0:0c:60:24:bc:d5:81: fb:f0:b4:7f:6f:0e:01:6c:ce:44:11:5c:37:1f:57: b0:f1:e5:8d:c4:d7:50:a8:ae:35:ff:f8:2a:83:71: 23:55:74:94:90:ae:98:58:e0:43:20:91:5b:13:9e: 5b:af:e7:97:37:fd:cd:43:76:fe:6b:84:65:77:a7: 42:0f:4b:f5:83:5b:e9:eb:65:95:9f:fc:2e:25:8f: c8:7b:d6:0a:9e:c2:8b:7b:44:82:46:61:bf:a6:a7: 2a:ec:7b:41:80:68:22:73:3a:1f:ed:4e:15:54:d6: 65:5e:a9:c2:ff:9a:7e:3d:55:0f:47:8c:dc:48:84: 6f:b4:3a:b6:b8:aa:df:53:83:79:79:11:16:3d:3f: c5:65:f5:28:26:34:17:be:a5:a1:bd:35:ef:b0:2b: ab:11:6c:6d:ce:a9:aa:67:1c:ee:b7:47:58:93:88: d7:3a:9d:c4:49:a4:16:db:3b:d5:40:41:26:b5:7d: 6f:05:a3:8e:d4:0b:91:76:f7:6e:2e:7e:ba:e3:f9: 27:90:96:51:2e:41:b5:1e:d2:f3:84:8e:5b:02:87: be:e0:65:03:d4:ef:1d:04:16:d9:a2:0b:42:00:80: 73:bd:05:73:43:5a:1d:02:47:61:9d:2b:f8:ce:86: c3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0A:16:AC:43:2E:E1:0D:D4:B1:74:77:73:7B:B7:DF:5C:17:B1:30 X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:94:3e:0d:4b:1a:38:d9:0c:a8:38:ec:40:33:40:03:a7:d0: f2:f8:0d:f1:40:55:67:dd:58:a8:00:1d:2e:27:8c:37:34:35: 01:43:38:f8:33:f5:89:fb:74:16:7d:95:2f:21:8e:cb:37:8a: 61:19:eb:d2:46:c8:48:1b:bf:89:d9:05:b4:6f:d4:e4:65:05: 8b:49:d4:bb:cb:5e:bd:5e:97:30:7a:da:17:bb:22:96:ab:0a: 81:33:2e:f1:5f:a1:b8:35:22:2b:c0:6b:e7:be:cd:68:7d:e3: be:49:fe:d0:24:62:57:1d:ff:96:e2:c5:ba:8e:3d:ec:c2:3e: f3:59:67:2e:92:1a:34:b2:55:e2:d7:21:a1:2d:a9:fc:35:01: 00:af:ca:fa:94:67:55:9b:aa:fe:1b:e2:f6:b3:93:3e:e2:43: 0d:09:d8:73:fc:6f:0e:9a:3e:61:1f:bf:b9:6f:5d:c1:32:17: 23:d1:88:10:e9:8b:97:ec:d0:7f:bf:a0:24:e7:8a:30:fa:43: 3d:a5:5f:ce:03:33:88:55:60:f7:d7:fc:e7:5d:ee:c6:e7:bd: b8:7b:23:9f:eb:fc:23:d7:52:6a:7b:d5:0c:ef:cb:33:bf:22: 30:40:c2:6e:2c:03:02:dd:06:17:47:52:5f:ca:a0:8d:35:60: b4:a2:9d:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD2RcSSM1GqlEyoFZt0KDkAA01v4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNTA3MjAwMzA1MzVaFw0yNTA3MjMxMTUzMzVaMDMxMTAvBgNV BAMTKDI5MEExNkFDNDMyRUUxMERENEIxNzQ3NzczN0JCN0RGNUMxN0IxMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxgxENBk04AxgJLzVgfvwtH9v DgFszkQRXDcfV7Dx5Y3E11CorjX/+CqDcSNVdJSQrphY4EMgkVsTnluv55c3/c1D dv5rhGV3p0IPS/WDW+nrZZWf/C4lj8h71gqewot7RIJGYb+mpyrse0GAaCJzOh/t ThVU1mVeqcL/mn49VQ9HjNxIhG+0Ora4qt9Tg3l5ERY9P8Vl9SgmNBe+paG9Ne+w K6sRbG3OqapnHO63R1iTiNc6ncRJpBbbO9VAQSa1fW8Fo47UC5F2924ufrrj+SeQ llEuQbUe0vOEjlsCh77gZQPU7x0EFtmiC0IAgHO9BXNDWh0CR2GdK/jOhsPJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQoWrEMu4Q3UsXR3c3u331wXsTAwHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+UPg1LGjjZDKg47EAzQAOn0PL4DfFAVWfd WKgAHS4njDc0NQFDOPgz9Yn7dBZ9lS8hjss3imEZ69JGyEgbv4nZBbRv1ORlBYtJ 1LvLXr1elzB62he7IparCoEzLvFfobg1IivAa+e+zWh9475J/tAkYlcd/5bixbqO PezCPvNZZy6SGjSyVeLXIaEtqfw1AQCvyvqUZ1Wbqv4b4vazkz7iQw0J2HP8bw6a PmEfv7lvXcEyFyPRiBDpi5fs0H+/oCTnijD6Qz2lX84DM4hVYPfX/Odd7sbnvbh7 I5/r/CPXUmp71QzvyzO/IjBAwm4sAwLdBhdHUl/KoI01YLSindM= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:35 2025 by rpki-client