$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: 2NX+cE0XRLeD9i+rbxgx8LjiGGofhJh57cJRvhsd6Ck= Subject key identifier: F0:FE:CA:F8:0B:EF:E4:6F:C8:33:3A:3A:F5:BB:76:41:49:A4:2A:CD Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 386666CC92721A5B7971D351C46393904B181DAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: 87 Signing time: Mon 21 Jul 2025 00:31:34 +0000 Manifest this update: Mon 21 Jul 2025 00:26:34 +0000 Manifest next update: Thu 24 Jul 2025 06:43:34 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: VYWAk8iGSZzF5g6fTa7RhmuP4rGT675f8tCJgCmKW00=) 2: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: 4SF7yY3JKI2QDbiSHom1ERPhojais3j3Ig9FBog3lm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:66:66:cc:92:72:1a:5b:79:71:d3:51:c4:63:93:90:4b:18:1d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Jul 21 00:26:34 2025 GMT Not After : Jul 24 06:43:34 2025 GMT Subject: CN=F0FECAF80BEFE46FC8333A3AF5BB764149A42ACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:de:04:7c:80:c9:85:2a:f7:7c:c3:28:30:ad: c3:89:de:66:4e:d7:53:2f:bb:a0:06:0a:93:26:e5: ad:69:21:d3:b3:5f:9b:30:5a:07:bf:f7:5d:91:49: 78:90:18:b2:18:b5:e5:ab:bf:92:7a:08:fb:87:0b: 81:df:61:59:ca:7e:31:a8:13:5d:8f:bd:32:f9:aa: 5b:68:d6:cd:4b:4e:4d:d6:1b:3f:13:bc:d5:2b:58: c6:6e:f6:ee:7d:17:81:55:c3:ec:f1:27:d2:4a:e1: 3e:63:e8:96:e3:de:b7:94:28:e0:c7:c4:46:df:0c: af:0d:77:fc:40:b3:e5:a2:22:7a:2d:7e:71:19:91: 47:ae:63:55:75:a2:e5:f3:e1:82:14:fd:c3:05:a1: f9:13:16:79:07:6a:f9:1a:47:e3:f5:d0:c8:bc:21: 13:9d:03:1a:4c:fb:f1:d5:3d:cf:09:5f:b7:6d:a7: ad:0c:b0:2e:da:a5:15:21:6b:65:7b:9c:66:35:ef: b4:55:8b:b3:ef:e4:d2:51:15:cb:85:27:93:9f:44: 2a:fe:d1:91:4e:88:23:e3:4f:d8:f7:63:21:aa:ef: da:2f:0a:98:34:84:9e:c5:e3:5f:50:a4:b6:f0:ee: 9b:b0:59:45:19:6b:23:e8:1f:cc:a4:68:a7:6c:25: 9d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FE:CA:F8:0B:EF:E4:6F:C8:33:3A:3A:F5:BB:76:41:49:A4:2A:CD X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0d:2d:82:03:f9:70:2a:27:4d:93:03:95:6d:78:7a:20:bb: c9:2d:a7:d4:b2:f7:44:0c:a5:12:f7:95:be:83:16:92:df:46: 8a:8f:e0:d6:be:8e:d3:ec:62:7b:48:62:df:89:45:3d:c4:e5: d9:8d:5d:03:97:ae:86:76:e0:fd:0a:59:7a:fc:d8:b3:d3:47: 89:db:1d:df:ec:c7:28:a2:d5:24:5f:9e:42:83:31:8c:09:b7: 3d:47:88:01:02:07:31:ad:10:7a:33:9b:e2:4a:38:87:c4:f8: bf:7c:a6:ad:b4:5a:65:06:e1:59:c9:ea:e1:0f:6e:26:80:0d: f8:58:42:3c:3c:62:d5:4e:48:b5:39:52:78:99:cb:53:af:f2: 51:e5:40:ab:86:d8:d3:53:26:cc:1c:f0:1f:28:b0:da:c4:c5: 80:eb:bd:83:cc:01:f3:f4:2e:9c:d0:bf:68:af:f6:09:12:9f: 5c:75:4c:47:d5:74:5d:a7:0b:e0:17:db:42:2d:a0:1d:8e:1b: 62:24:00:38:bb:ee:e1:50:73:6e:09:1e:86:9f:b1:ae:ef:57: d9:a6:c9:fa:25:a4:3b:d5:83:dd:94:94:90:35:24:b0:c5:16: 29:83:82:1b:94:fa:6d:0c:d0:ee:f6:a7:8a:96:4f:a2:12:63: e2:1d:bf:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGZmzJJyGlt5cdNRxGOTkEsYHa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNTA3MjEwMDI2MzRaFw0yNTA3MjQwNjQzMzRaMDMxMTAvBgNV BAMTKEYwRkVDQUY4MEJFRkU0NkZDODMzM0EzQUY1QkI3NjQxNDlBNDJBQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK3gR8gMmFKvd8wygwrcOJ3mZO 11Mvu6AGCpMm5a1pIdOzX5swWge/912RSXiQGLIYteWrv5J6CPuHC4HfYVnKfjGo E12PvTL5qlto1s1LTk3WGz8TvNUrWMZu9u59F4FVw+zxJ9JK4T5j6Jbj3reUKODH xEbfDK8Nd/xAs+WiInotfnEZkUeuY1V1ouXz4YIU/cMFofkTFnkHavkaR+P10Mi8 IROdAxpM+/HVPc8JX7dtp60MsC7apRUha2V7nGY177RVi7Pv5NJRFcuFJ5OfRCr+ 0ZFOiCPjT9j3YyGq79ovCpg0hJ7F419QpLbw7puwWUUZayPoH8ykaKdsJZ3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8P7K+Avv5G/IMzo69bt2QUmkKs0wHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgNLYID+XAqJ02TA5VteHogu8ktp9Sy90QM pRL3lb6DFpLfRoqP4Na+jtPsYntIYt+JRT3E5dmNXQOXroZ24P0KWXr82LPTR4nb Hd/sxyii1SRfnkKDMYwJtz1HiAECBzGtEHozm+JKOIfE+L98pq20WmUG4VnJ6uEP biaADfhYQjw8YtVOSLU5UniZy1Ov8lHlQKuG2NNTJswc8B8osNrExYDrvYPMAfP0 LpzQv2iv9gkSn1x1TEfVdF2nC+AX20ItoB2OG2IkADi77uFQc24JHoafsa7vV9mm yfolpDvVg92UlJA1JLDFFimDghuU+m0M0O72p4qWT6ISY+IdvyM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:03:53 2025 by rpki-client