$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft File: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft (raw, json) Hash identifier: 2Zc73jeixlYhF1SUcBWnKUiKV3QcV863SJQQD1rLL2s= Subject key identifier: 15:BF:AA:94:01:8D:D7:D7:BB:56:D3:24:95:A5:C0:6F:80:AF:50:82 Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 71AD7114CF3686ABFF8A750B68A7B87A33D62BF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft Manifest number: 01D9 Signing time: Fri 05 Sep 2025 16:41:39 +0000 Manifest this update: Fri 05 Sep 2025 16:36:39 +0000 Manifest next update: Mon 08 Sep 2025 22:37:39 +0000 Files and hashes: 1: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: 7zBTS0bU7PgzGa8PCcebIzMScdeyLBIAzKr1yoDxbbo=) 2: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: aDPjpRT6pfd3T7ltNqLLQRA6RqqiOtEG5C4gW/hEaTI=) 3: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl (hash: 5FH4kN0eWvMl636jNvvSDaNe7SOXOOaM1LHm+MrOkfc=) 4: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: 0GFIWUiUrqRfAE/w3eKveKOv4M+2LjJoosY6Pp8ypUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 22:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ad:71:14:cf:36:86:ab:ff:8a:75:0b:68:a7:b8:7a:33:d6:2b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Sep 5 16:36:39 2025 GMT Not After : Sep 8 22:37:39 2025 GMT Subject: CN=15BFAA94018DD7D7BB56D32495A5C06F80AF5082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:98:36:1d:8f:ba:f2:f9:c9:ac:02:e8:75:ba: 5b:85:2c:26:fe:5f:a1:73:6f:c6:f4:88:98:d6:67: c3:40:7a:f5:ce:93:55:b2:44:79:ac:69:63:59:7a: 3f:17:7c:61:09:ef:c9:77:ac:e3:db:78:31:2b:b7: f5:20:cf:10:7e:bf:c0:dd:9b:5f:96:18:c0:05:6b: 94:58:5c:9a:f8:b6:8d:09:89:9c:ec:8a:c0:71:67: 8c:10:66:82:f1:55:02:c9:59:63:c5:76:fc:93:2f: 76:03:60:bc:25:ec:5e:68:f9:bd:11:c9:05:d3:c5: dc:e9:e1:3a:63:6c:ae:ad:dc:50:44:a6:5d:17:b6: 2d:71:45:fd:c5:53:ec:72:c7:d4:7f:c3:63:65:d3: 4a:77:79:0c:78:b8:47:77:24:cf:0a:76:84:4b:52: fe:f6:3c:8c:fa:24:4f:51:7f:51:4a:b0:8a:b7:cb: df:2f:e9:83:6f:32:ab:25:57:0b:9c:6a:8d:d2:24: 9f:e9:4e:ec:23:1a:60:20:eb:72:53:fa:b2:64:0b: 35:d0:f4:d7:ba:37:39:98:1e:52:12:02:64:be:44: cc:60:cf:31:ef:17:fd:2c:d3:17:0c:cb:d1:05:27: 25:a8:25:73:81:bd:83:ee:86:76:cf:c0:9b:67:c2: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BF:AA:94:01:8D:D7:D7:BB:56:D3:24:95:A5:C0:6F:80:AF:50:82 X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fc:f8:96:4c:86:32:e4:75:63:61:0f:1a:94:f1:67:41:95: b6:f1:44:33:d4:9c:98:b7:26:b1:ed:5b:5d:cd:d5:78:1f:ff: 6c:61:0a:ef:a9:b5:b1:ff:4f:a9:d1:c4:df:d1:ac:0a:05:a3: 0d:cf:60:67:7e:63:7a:8f:63:dd:cb:da:38:a0:5a:5d:8d:50: ea:8e:84:c1:6f:92:50:1b:11:95:9c:13:ea:ee:4c:a7:f2:95: d4:8b:e0:cf:32:3f:45:94:e9:c7:3d:03:22:f3:e9:a5:ef:82: 1e:06:e0:e3:a8:f3:54:5e:6e:91:e4:4e:9c:fe:95:01:a7:b0: c1:28:9b:1d:a7:67:bd:f9:34:2b:39:07:6e:57:e0:f0:f4:00: 13:c7:25:5f:f0:cb:7a:33:86:f7:c6:2f:a9:55:ff:27:f7:4f: a4:5c:fc:fd:29:99:77:f6:52:8e:bd:5d:cc:c8:95:14:82:2e: b8:4c:38:65:57:dc:bc:cd:a1:dd:3b:cf:a3:f4:ca:11:8d:36: e0:ad:8d:bc:b7:19:12:8f:ee:de:ab:4b:2a:9d:4d:01:f1:b2: 40:c5:8b:70:44:37:b3:e5:4b:a9:47:a3:a5:a8:ec:d3:2c:6f: f4:58:24:d7:4f:28:19:0f:6a:2b:7f:c7:84:95:2b:07:20:3c: d8:b6:9e:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUca1xFM82hqv/inULaKe4ejPWK/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNTA5MDUxNjM2MzlaFw0yNTA5MDgyMjM3MzlaMDMxMTAvBgNV BAMTKDE1QkZBQTk0MDE4REQ3RDdCQjU2RDMyNDk1QTVDMDZGODBBRjUwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrmDYdj7ry+cmsAuh1uluFLCb+ X6Fzb8b0iJjWZ8NAevXOk1WyRHmsaWNZej8XfGEJ78l3rOPbeDErt/UgzxB+v8Dd m1+WGMAFa5RYXJr4to0JiZzsisBxZ4wQZoLxVQLJWWPFdvyTL3YDYLwl7F5o+b0R yQXTxdzp4TpjbK6t3FBEpl0Xti1xRf3FU+xyx9R/w2Nl00p3eQx4uEd3JM8KdoRL Uv72PIz6JE9Rf1FKsIq3y98v6YNvMqslVwucao3SJJ/pTuwjGmAg63JT+rJkCzXQ 9Ne6NzmYHlISAmS+RMxgzzHvF/0s0xcMy9EFJyWoJXOBvYPuhnbPwJtnwvVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFb+qlAGN19e7VtMklaXAb4CvUIIwHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5 RjM2QzgwREM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ78+JZMhjLkdWNhDxqU8WdBlbbxRDPUnJi3 JrHtW13N1Xgf/2xhCu+ptbH/T6nRxN/RrAoFow3PYGd+Y3qPY93L2jigWl2NUOqO hMFvklAbEZWcE+ruTKfyldSL4M8yP0WU6cc9AyLz6aXvgh4G4OOo81RebpHkTpz+ lQGnsMEomx2nZ735NCs5B25X4PD0ABPHJV/wy3ozhvfGL6lV/yf3T6Rc/P0pmXf2 Uo69XczIlRSCLrhMOGVX3LzNod07z6P0yhGNNuCtjby3GRKP7t6rSyqdTQHxskDF i3BEN7PlS6lHo6Wo7NMsb/RYJNdPKBkPait/x4SVKwcgPNi2nsk= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:38 2025 by rpki-client