$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft File: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft (raw, json) Hash identifier: U64O53IAxBLkOe8SiEaF0X2eEg1vSrLxXyBXo1l9jbk= Subject key identifier: 7E:72:99:17:91:EC:BF:5C:C3:FE:F3:A0:3E:5B:96:9B:BD:49:91:C2 Authority key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Certificate issuer: /CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Certificate serial: 662368C662F7E5A553435E193DA3F2A558474B67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft Manifest number: 02E4 Signing time: Tue 22 Jul 2025 08:01:45 +0000 Manifest this update: Tue 22 Jul 2025 07:56:45 +0000 Manifest next update: Fri 25 Jul 2025 18:40:45 +0000 Files and hashes: 1: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl (hash: l6TYBgStbyu1FXuXrSdDRoczjW/hf8VZxFAfdVI7Npo=) 2: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: gOoZfgSIZIk3IBqctpdE6ERoqLaD97A4ApFjnTt/tAE=) 3: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: U53MbJZVdHMZelcGWK9+w7EaXlcDpDpc+jeZ3MbM1Kw=) 4: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: jtOEt7E3nAQ6Fw9cITIUUkvRpfUDsJxH4CxbFv1xpGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:23:68:c6:62:f7:e5:a5:53:43:5e:19:3d:a3:f2:a5:58:47:4b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Validity Not Before: Jul 22 07:56:45 2025 GMT Not After : Jul 25 18:40:45 2025 GMT Subject: CN=7E72991791ECBF5CC3FEF3A03E5B969BBD4991C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:ff:70:d2:51:66:51:bb:28:f5:7b:6a:8f: 7b:7e:14:1c:b3:3e:23:42:01:9c:8c:44:5e:b7:de: 1f:84:8f:59:67:eb:f8:25:ec:d6:6c:53:02:f9:ae: d3:a2:57:3b:0a:f5:db:89:7a:0a:9e:a4:8e:12:43: e5:96:62:0f:b8:48:58:ff:75:06:23:8f:c4:40:15: a5:aa:d7:7b:aa:7a:5f:cc:0d:0d:11:29:1c:22:1a: ea:1c:d1:9d:42:80:f3:ff:2a:69:ea:0a:5b:cb:26: 00:29:71:5f:ed:fe:96:37:6b:35:53:5e:de:00:02: 5f:ac:1d:ac:fe:44:b1:20:59:31:23:9a:ba:23:8f: a8:b5:b3:5a:99:2d:5d:79:c9:0c:6c:7e:6f:6d:03: 98:4a:43:3a:6e:de:45:44:f4:2d:49:a2:87:e8:61: 84:66:74:41:92:5e:45:4d:ff:ef:03:29:35:85:c3: 22:ee:f5:f0:0e:c4:f0:0c:ee:c2:6e:36:d0:23:c2: 41:3c:bf:c0:20:ef:3d:9d:a5:d0:10:8e:a9:e1:f9: f5:f8:02:f9:e8:e8:6c:34:53:ba:bd:f1:b8:5e:d4: 3c:bf:71:dc:67:d2:ba:ae:57:8f:e7:37:c6:19:44: c8:73:0a:a9:67:8b:60:df:8f:91:f2:1f:ec:a4:62: 9f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:72:99:17:91:EC:BF:5C:C3:FE:F3:A0:3E:5B:96:9B:BD:49:91:C2 X509v3 Authority Key Identifier: keyid:AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:47:5d:fa:dd:96:2b:dd:36:9d:df:af:86:21:5e:df:12:82: 94:e6:ac:f7:52:8a:e0:d0:76:6a:fa:38:c7:20:4a:d3:95:3a: bc:51:27:2a:69:3c:2b:d6:21:5f:34:c5:fd:1d:f8:c0:6f:bd: f9:87:e5:a7:1e:1e:86:2a:81:79:88:94:29:87:50:fb:2f:fd: 8a:2c:20:a5:08:ae:2d:b0:e6:64:05:61:df:2f:25:2a:8a:ad: 1e:d5:5b:fd:6a:b4:ec:ce:5f:7a:82:6e:f3:59:ee:1e:0d:cf: 20:0d:d3:f2:99:9c:d7:6f:5c:27:3d:5b:8a:45:fe:ce:52:1c: 55:20:87:ea:68:22:0d:bb:9a:ea:ab:dd:4c:84:03:64:80:5f: e1:e2:53:97:b8:6e:73:da:a6:1f:35:a5:80:4a:be:7c:48:3f: fa:35:50:f5:f6:27:72:01:08:f9:df:55:01:51:f7:e0:97:3b: 0c:62:74:30:e7:c6:8e:d7:4e:61:0e:ad:63:bc:07:05:1b:e0: 50:4e:b6:f8:b7:56:66:c5:e1:eb:cf:da:59:d3:c6:e9:08:df: d5:e3:81:e7:7a:38:fa:3e:f1:37:3e:b4:e7:84:26:56:af:75: 84:99:d3:90:46:3e:ee:c2:3b:48:03:e0:bf:52:d4:5d:23:34: 19:dd:bf:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZiNoxmL35aVTQ14ZPaPypVhHS2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5 MjMxMDUwNDAeFw0yNTA3MjIwNzU2NDVaFw0yNTA3MjUxODQwNDVaMDMxMTAvBgNV BAMTKDdFNzI5OTE3OTFFQ0JGNUNDM0ZFRjNBMDNFNUI5NjlCQkQ0OTkxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3v9w0lFmUbso9Xtqj3t+FByz PiNCAZyMRF633h+Ej1ln6/gl7NZsUwL5rtOiVzsK9duJegqepI4SQ+WWYg+4SFj/ dQYjj8RAFaWq13uqel/MDQ0RKRwiGuoc0Z1CgPP/KmnqClvLJgApcV/t/pY3azVT Xt4AAl+sHaz+RLEgWTEjmrojj6i1s1qZLV15yQxsfm9tA5hKQzpu3kVE9C1Joofo YYRmdEGSXkVN/+8DKTWFwyLu9fAOxPAM7sJuNtAjwkE8v8Ag7z2dpdAQjqnh+fX4 Avno6Gw0U7q98bhe1Dy/cdxn0rquV4/nN8YZRMhzCqlni2Dfj5HyH+ykYp9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfnKZF5Hsv1zD/vOgPluWm71JkcIwHwYDVR0j BBgwFoAUrrMv+gAHwKBn+4zp3XfP75IxBQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMC9BRUIzMkZGQTAw MDdDMEEwNjdGQjhDRTlERDc3Q0ZFRjkyMzEwNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5MjMx MDUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk ZDQtMjYzNDcyN2E5ZWQ0LzAvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NG RUY5MjMxMDUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNHXfrdlivdNp3fr4YhXt8SgpTmrPdSiuDQ dmr6OMcgStOVOrxRJyppPCvWIV80xf0d+MBvvfmH5aceHoYqgXmIlCmHUPsv/Yos IKUIri2w5mQFYd8vJSqKrR7VW/1qtOzOX3qCbvNZ7h4NzyAN0/KZnNdvXCc9W4pF /s5SHFUgh+poIg27muqr3UyEA2SAX+HiU5e4bnPaph81pYBKvnxIP/o1UPX2J3IB CPnfVQFR9+CXOwxidDDnxo7XTmEOrWO8BwUb4FBOtvi3VmbF4evP2lnTxukI39Xj ged6OPo+8Tc+tOeEJlavdYSZ05BGPu7CO0gD4L9S1F0jNBndvyk= -----END CERTIFICATE-----Generated at Wed Jul 23 12:25:46 2025 by rpki-client