$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft File: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft (raw, json) Hash identifier: HWUxjQ4y6ldXxR8jYtsJQOqvsyB8n+Q/bTXl6TnQdw4= Subject key identifier: 7D:4C:C8:31:21:FE:35:06:35:80:3C:D1:9E:2F:DD:E8:5F:3B:B8:9A Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 3C42D15457CB34D0DB2D13B707B69856E19AD413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft Manifest number: 01F1 Signing time: Wed 29 Oct 2025 22:01:40 +0000 Manifest this update: Wed 29 Oct 2025 21:56:40 +0000 Manifest next update: Sun 02 Nov 2025 03:17:40 +0000 Files and hashes: 1: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: 0GFIWUiUrqRfAE/w3eKveKOv4M+2LjJoosY6Pp8ypUc=) 2: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl (hash: 059ZU2nX/yRIGWlbKpZ+Rfa6O0mMJwPXoA/lGqmH86o=) 3: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: 7zBTS0bU7PgzGa8PCcebIzMScdeyLBIAzKr1yoDxbbo=) 4: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: aDPjpRT6pfd3T7ltNqLLQRA6RqqiOtEG5C4gW/hEaTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 03:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:42:d1:54:57:cb:34:d0:db:2d:13:b7:07:b6:98:56:e1:9a:d4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Oct 29 21:56:40 2025 GMT Not After : Nov 2 03:17:40 2025 GMT Subject: CN=7D4CC83121FE350635803CD19E2FDDE85F3BB89A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:29:25:61:8e:04:db:1a:30:b0:38:75:0f: f4:bf:b8:be:4e:79:f0:52:c4:1c:a9:c6:44:dd:92: 8c:31:9f:a9:bf:30:f6:ac:f6:34:c5:44:c3:f3:90: d0:72:af:07:17:a9:c3:76:65:0d:a8:24:c9:43:15: ed:74:26:59:9a:a1:c3:52:a7:3f:68:2a:ed:10:79: 5c:a4:98:d9:2b:be:5c:e6:08:20:52:42:7b:20:96: 8f:aa:d8:a9:14:95:d7:02:5b:5d:09:6f:4e:ff:30: ca:d4:3f:fa:e5:e3:cd:c7:6c:90:29:ce:05:5a:ed: 81:99:da:3c:14:10:80:19:62:a2:24:a0:8e:f1:60: 19:56:2a:ca:5b:79:e6:07:7b:be:e1:bf:4c:a6:eb: 43:f8:06:f6:5c:16:bd:60:d2:94:4e:8e:98:b6:2b: 01:00:95:22:ae:14:d0:97:78:9b:3c:06:bf:d9:5a: 2e:36:af:e9:4a:f5:2b:68:d4:cf:42:f2:3e:75:23: 35:b6:45:ac:ae:b7:1d:ad:82:4e:aa:ae:54:8b:c2: a0:0b:13:ca:8c:3b:e1:fa:ee:b5:44:8e:7b:df:a0: 46:a6:fb:ef:d3:ea:cb:e0:0d:19:94:31:e7:1a:29: 9e:91:73:76:bb:29:f6:44:51:d8:00:7e:3b:9c:1a: cb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4C:C8:31:21:FE:35:06:35:80:3C:D1:9E:2F:DD:E8:5F:3B:B8:9A X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ce:34:35:d6:56:58:34:26:db:0e:ef:dc:88:85:06:c0:2f: 0b:85:59:79:c8:34:ec:e5:73:17:b8:ea:b4:22:d1:84:08:e2: 7c:4b:c4:9e:47:bf:91:53:17:15:91:2d:98:b3:1f:9b:1b:8e: 89:c8:6b:ca:57:fd:62:43:15:4e:ab:6f:1e:47:48:19:5c:fc: 81:ef:5c:6d:f6:67:eb:9e:64:8c:23:c0:38:57:5f:f3:2d:d3: 20:85:bd:8e:f3:c4:f6:1e:95:ce:55:84:0a:15:23:85:b7:0e: 51:65:c7:d5:ec:2a:f9:ac:ed:00:24:47:7e:c7:79:f6:cd:a3: 0b:07:fa:a4:bd:12:78:27:36:0f:19:f3:f8:41:2a:e3:9c:1d: d4:88:d0:20:35:e6:01:bf:6f:81:7e:e1:bc:8a:e8:e8:ab:dd: d9:f1:d4:65:0a:2f:ce:a6:21:c4:c8:46:62:48:d5:24:4f:88: d6:d6:69:03:25:85:ad:50:6a:f0:1a:d7:76:bf:50:6a:8c:65: 30:c1:b0:89:64:01:cc:26:f6:32:02:e4:a5:43:69:5d:27:e1: fd:58:19:e3:ed:7b:5e:9b:27:d1:20:78:76:4c:52:7a:5f:69: 00:09:bc:5f:ef:80:73:9d:37:17:25:95:bc:af:ff:1f:25:e0: 94:cf:1c:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPELRVFfLNNDbLRO3B7aYVuGa1BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNTEwMjkyMTU2NDBaFw0yNTExMDIwMzE3NDBaMDMxMTAvBgNV BAMTKDdENENDODMxMjFGRTM1MDYzNTgwM0NEMTlFMkZEREU4NUYzQkI4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkyklYY4E2xowsDh1D/S/uL5O efBSxBypxkTdkowxn6m/MPas9jTFRMPzkNByrwcXqcN2ZQ2oJMlDFe10JlmaocNS pz9oKu0QeVykmNkrvlzmCCBSQnsglo+q2KkUldcCW10Jb07/MMrUP/rl483HbJAp zgVa7YGZ2jwUEIAZYqIkoI7xYBlWKspbeeYHe77hv0ym60P4BvZcFr1g0pROjpi2 KwEAlSKuFNCXeJs8Br/ZWi42r+lK9Sto1M9C8j51IzW2Rayutx2tgk6qrlSLwqAL E8qMO+H67rVEjnvfoEam++/T6svgDRmUMecaKZ6Rc3a7KfZEUdgAfjucGsuHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfUzIMSH+NQY1gDzRni/d6F87uJowHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5 RjM2QzgwREM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfONDXWVlg0JtsO79yIhQbALwuFWXnINOzl cxe46rQi0YQI4nxLxJ5Hv5FTFxWRLZizH5sbjonIa8pX/WJDFU6rbx5HSBlc/IHv XG32Z+ueZIwjwDhXX/Mt0yCFvY7zxPYelc5VhAoVI4W3DlFlx9XsKvms7QAkR37H efbNowsH+qS9EngnNg8Z8/hBKuOcHdSI0CA15gG/b4F+4byK6Oir3dnx1GUKL86m IcTIRmJI1SRPiNbWaQMlha1QavAa13a/UGqMZTDBsIlkAcwm9jIC5KVDaV0n4f1Y GePte16bJ9EgeHZMUnpfaQAJvF/vgHOdNxcllbyv/x8l4JTPHBw= -----END CERTIFICATE-----Generated at Thu Oct 30 15:03:45 2025 by rpki-client