$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: 8+bhaOfwDGywmh14CNC0Bd3ScPIcQ5j0ZAMcHYlef7g= Subject key identifier: 86:0F:67:23:2E:D8:3D:3B:82:22:B9:6E:6F:D7:09:D0:B7:F6:89:51 Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 689FD28DA797B869B7E5A026D904EC11BCA63E49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: 9D Signing time: Sun 07 Sep 2025 12:01:31 +0000 Manifest this update: Sun 07 Sep 2025 11:56:31 +0000 Manifest next update: Wed 10 Sep 2025 12:41:31 +0000 Files and hashes: 1: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: hslFvXDYmFQJz/skB//cTp4rmPxNwKQO3Oz3z1a3VjE=) 2: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: KBNbxQjOLfhYwGB4Wp4pMpbXxYHR8QezEvyeUuNBjy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 12:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9f:d2:8d:a7:97:b8:69:b7:e5:a0:26:d9:04:ec:11:bc:a6:3e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Sep 7 11:56:31 2025 GMT Not After : Sep 10 12:41:31 2025 GMT Subject: CN=860F67232ED83D3B8222B96E6FD709D0B7F68951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9d:34:e2:79:c0:49:19:55:19:d3:0f:a7:f1: 6e:10:be:79:89:17:d0:2d:1b:c0:a2:aa:c7:bb:e8: 52:5b:07:38:16:6d:a7:b7:39:65:95:78:95:e5:9a: da:00:9b:e5:7e:67:75:de:22:e1:c2:0d:8b:67:59: 21:8e:76:8b:f0:a5:50:60:16:9a:92:6a:40:df:4e: c6:c4:f6:27:76:5a:0d:9e:94:79:cb:36:2a:10:3e: d3:91:f8:97:4b:90:d7:76:84:32:a0:08:aa:b3:84: 2f:2a:b9:93:1d:a9:89:33:39:63:34:90:85:5b:5a: 5d:75:33:99:f7:3b:fe:52:39:fb:5c:65:7c:dc:19: d3:f6:1f:2e:fa:f1:62:0f:46:42:d1:cc:db:0d:c3: bf:c7:08:fc:e4:99:7c:13:4a:be:97:37:db:87:3b: 39:ea:4e:67:6c:d3:a2:09:a9:80:62:5d:1a:92:7a: 90:b0:4a:24:f2:69:0d:21:fe:ee:53:a3:3d:3d:38: c2:57:cc:0f:67:4d:0a:f8:66:3f:40:ed:e0:f1:1b: 36:23:30:bc:89:01:52:cd:13:8d:f3:01:36:48:03: f7:1d:01:45:27:0c:51:88:c9:8a:65:94:5e:f6:10: 39:5f:2c:f1:3d:c0:bc:48:45:68:e6:d5:00:71:5d: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0F:67:23:2E:D8:3D:3B:82:22:B9:6E:6F:D7:09:D0:B7:F6:89:51 X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:64:4e:21:01:75:bf:11:93:51:05:b0:9a:f1:87:dd:35:99: 0f:7d:6c:72:26:5a:7f:a2:18:25:1b:9d:d4:52:2c:19:de:4f: b1:47:a2:3a:b2:40:d9:9f:82:fd:97:0f:18:72:99:10:56:14: 54:3f:26:79:e3:63:e0:73:14:fc:09:cd:e9:aa:55:ab:cc:d2: c6:bf:e5:08:a6:72:af:57:fe:20:10:dc:0c:84:c9:e2:15:55: 7d:42:30:2e:33:0b:9d:47:13:5e:a5:b2:0a:df:f1:40:16:55: c9:9e:01:35:98:b4:78:cd:80:55:0f:40:89:36:2e:39:45:2f: d9:ac:3a:19:04:a6:96:4b:4b:9b:83:f3:ee:9c:ce:fa:05:b8: 3e:f8:9c:19:5d:c1:fe:87:dc:81:74:04:cd:0d:9b:d5:24:6d: 28:52:81:ce:8e:3b:b0:67:7c:2d:37:b7:06:7e:ed:35:6b:d2: 93:97:0d:04:29:0b:78:72:56:3d:d7:68:58:5d:6b:7f:11:5d: 55:5c:9f:02:4c:84:15:1e:37:20:2b:33:76:30:c0:6c:00:23: 71:63:31:17:4d:74:a2:84:e4:c4:53:ff:aa:cc:ac:24:a5:b8: b4:ce:a7:fe:cb:98:a1:bd:15:a4:fb:c2:5c:a3:5a:c6:7e:8a: 27:37:e8:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJ/SjaeXuGm35aAm2QTsEbymPkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNTA5MDcxMTU2MzFaFw0yNTA5MTAxMjQxMzFaMDMxMTAvBgNV BAMTKDg2MEY2NzIzMkVEODNEM0I4MjIyQjk2RTZGRDcwOUQwQjdGNjg5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqnTTiecBJGVUZ0w+n8W4QvnmJ F9AtG8Ciqse76FJbBzgWbae3OWWVeJXlmtoAm+V+Z3XeIuHCDYtnWSGOdovwpVBg FpqSakDfTsbE9id2Wg2elHnLNioQPtOR+JdLkNd2hDKgCKqzhC8quZMdqYkzOWM0 kIVbWl11M5n3O/5SOftcZXzcGdP2Hy768WIPRkLRzNsNw7/HCPzkmXwTSr6XN9uH OznqTmds06IJqYBiXRqSepCwSiTyaQ0h/u5Toz09OMJXzA9nTQr4Zj9A7eDxGzYj MLyJAVLNE43zATZIA/cdAUUnDFGIyYpllF72EDlfLPE9wLxIRWjm1QBxXeVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhg9nIy7YPTuCIrlub9cJ0Lf2iVEwHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxkTiEBdb8Rk1EFsJrxh901mQ99bHImWn+i GCUbndRSLBneT7FHojqyQNmfgv2XDxhymRBWFFQ/JnnjY+BzFPwJzemqVavM0sa/ 5Qimcq9X/iAQ3AyEyeIVVX1CMC4zC51HE16lsgrf8UAWVcmeATWYtHjNgFUPQIk2 LjlFL9msOhkEppZLS5uD8+6czvoFuD74nBldwf6H3IF0BM0Nm9UkbShSgc6OO7Bn fC03twZ+7TVr0pOXDQQpC3hyVj3XaFhda38RXVVcnwJMhBUeNyArM3YwwGwAI3Fj MRdNdKKE5MRT/6rMrCSluLTOp/7LmKG9FaT7wlyjWsZ+iic36BI= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:35 2025 by rpki-client