$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: uYxIjffuwCV61I482AcayGIJgr61BUaqs+ThDfb5WIE= Subject key identifier: C2:19:26:92:5E:ED:76:F0:C7:D9:D5:CD:09:B9:53:86:2E:9A:25:35 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 21AA4E7FB2B3A7C323C7E0B97988C4F361BBCFF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 0177 Signing time: Sun 07 Sep 2025 01:21:37 +0000 Manifest this update: Sun 07 Sep 2025 01:16:37 +0000 Manifest next update: Wed 10 Sep 2025 01:24:37 +0000 Files and hashes: 1: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 3: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: P5FYqok59BO9iqHhm24ChHWS0ajhSPYTlVuLoUK6eD8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:aa:4e:7f:b2:b3:a7:c3:23:c7:e0:b9:79:88:c4:f3:61:bb:cf:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Sep 7 01:16:37 2025 GMT Not After : Sep 10 01:24:37 2025 GMT Subject: CN=C21926925EED76F0C7D9D5CD09B953862E9A2535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:d4:7f:3a:8e:34:0f:71:d6:eb:3b:03:fe: 9b:bf:8c:65:13:64:f4:b1:69:5d:24:1e:f0:d1:f5: 38:29:ef:de:0c:53:23:55:68:dc:3a:d3:d7:3f:29: c7:0c:a8:39:64:4c:2f:6a:2d:ef:a0:46:a1:a5:a3: a8:d8:75:f3:e3:81:97:75:b0:d0:ec:b6:dd:e8:26: d6:ae:57:6b:39:43:0f:49:ee:79:7f:45:8f:97:7f: f3:bc:88:0e:a6:25:07:fb:05:72:b4:f6:76:cd:8d: 65:11:58:59:b6:ce:0b:d8:2e:27:be:20:c6:44:24: d8:9e:ce:00:56:60:33:84:c7:3d:69:43:5a:6f:17: 25:e2:8b:68:b8:c5:87:16:c7:25:8f:cc:47:d2:6c: de:87:d2:e0:4d:01:0c:9f:9b:5f:ec:a3:83:38:e2: 4a:c3:5a:23:b7:b9:b1:8b:18:d2:6f:94:3c:af:d1: 1b:c0:5c:fa:24:28:ca:a0:32:d9:82:91:48:c5:cb: de:50:05:f1:2b:a9:3c:23:e4:44:67:36:52:c5:76: e7:bf:27:06:6f:d1:3d:80:d3:aa:00:91:0e:35:5b: 45:5b:30:d3:6f:d5:2c:e4:fa:8e:64:32:a6:7e:ce: 37:f1:38:06:72:0b:86:11:69:d8:9d:44:c3:5e:b9: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:19:26:92:5E:ED:76:F0:C7:D9:D5:CD:09:B9:53:86:2E:9A:25:35 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cf:a1:59:a2:e9:6b:97:98:1a:11:9a:75:39:2a:69:37:b4: 43:15:27:84:b6:07:5f:c9:e0:0c:80:eb:f6:3f:d5:ae:7c:bf: 16:19:fd:0a:7c:64:94:d7:86:2a:c7:6e:19:22:e6:b4:ad:30: 20:df:15:e1:f9:47:4e:d8:2e:fa:ee:ef:5a:81:18:0a:9c:1f: b3:b1:95:fa:0d:a5:d5:e4:e6:e9:6d:b7:cc:17:83:c3:2e:1f: ce:98:a0:66:55:d1:fa:60:b6:49:a3:aa:85:79:44:5c:3f:28: 86:0e:58:07:bb:44:cf:05:e2:2f:06:76:16:b9:40:1e:a6:ae: f5:88:07:7e:55:78:a5:5b:9e:cb:1a:fe:9b:1e:98:3c:57:4b: 7f:aa:e6:fd:86:63:7e:64:7a:94:50:78:ac:e7:96:34:c6:9a: 2d:db:10:96:96:9b:cd:0f:68:cb:f5:d6:25:65:7d:44:4e:f7: ba:de:a9:ef:bb:72:ad:12:0a:d2:ba:98:9c:ee:31:b7:95:7b: 42:51:b1:ed:59:f9:e5:d6:8a:97:62:26:0a:15:05:0f:d9:8b: 11:18:e7:be:2a:06:da:bb:ad:82:33:26:2b:ca:6e:0e:47:fa: 98:cb:c6:0a:09:cc:8d:c6:58:61:fa:9f:1b:08:52:07:9a:9e: 8c:06:d4:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIapOf7Kzp8Mjx+C5eYjE82G7z/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTA5MDcwMTE2MzdaFw0yNTA5MTAwMTI0MzdaMDMxMTAvBgNV BAMTKEMyMTkyNjkyNUVFRDc2RjBDN0Q5RDVDRDA5Qjk1Mzg2MkU5QTI1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwCtR/Oo40D3HW6zsD/pu/jGUT ZPSxaV0kHvDR9Tgp794MUyNVaNw609c/KccMqDlkTC9qLe+gRqGlo6jYdfPjgZd1 sNDstt3oJtauV2s5Qw9J7nl/RY+Xf/O8iA6mJQf7BXK09nbNjWURWFm2zgvYLie+ IMZEJNiezgBWYDOExz1pQ1pvFyXii2i4xYcWxyWPzEfSbN6H0uBNAQyfm1/so4M4 4krDWiO3ubGLGNJvlDyv0RvAXPokKMqgMtmCkUjFy95QBfErqTwj5ERnNlLFdue/ JwZv0T2A06oAkQ41W0VbMNNv1Szk+o5kMqZ+zjfxOAZyC4YRadidRMNeuY67AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwhkmkl7tdvDH2dXNCblThi6aJTUwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPPoVmi6WuXmBoRmnU5Kmk3tEMVJ4S2B1/J 4AyA6/Y/1a58vxYZ/Qp8ZJTXhirHbhki5rStMCDfFeH5R07YLvru71qBGAqcH7Ox lfoNpdXk5ultt8wXg8MuH86YoGZV0fpgtkmjqoV5RFw/KIYOWAe7RM8F4i8Gdha5 QB6mrvWIB35VeKVbnssa/psemDxXS3+q5v2GY35kepRQeKznljTGmi3bEJaWm80P aMv11iVlfURO97reqe+7cq0SCtK6mJzuMbeVe0JRse1Z+eXWipdiJgoVBQ/ZixEY 574qBtq7rYIzJivKbg5H+pjLxgoJzI3GWGH6nxsIUgeanowG1AM= -----END CERTIFICATE-----Generated at Tue Sep 9 02:29:57 2025 by rpki-client