$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: EU3jJvBaT2eyHgYEhzyzGCX5qe58i1w1XPEoApMgN3g= Subject key identifier: 82:38:8A:A3:E9:CA:BA:D7:9B:5B:3A:B1:67:9A:E0:C0:17:11:E2:BB Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 23A4289336221059C61FE085E6FACA472ECE58E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 023E Signing time: Fri 05 Sep 2025 17:30:05 +0000 Manifest this update: Fri 05 Sep 2025 17:25:05 +0000 Manifest next update: Mon 08 Sep 2025 21:05:05 +0000 Files and hashes: 1: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: NP3nBeCKE2k02u3OaOYcHfadPr3H9RRRlNp/HsDDtAg=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: mILgNsqQOC7ukAkdxDoanzwIWxBZqUVcAA8Xp+zkfbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a4:28:93:36:22:10:59:c6:1f:e0:85:e6:fa:ca:47:2e:ce:58:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Sep 5 17:25:05 2025 GMT Not After : Sep 8 21:05:05 2025 GMT Subject: CN=82388AA3E9CABAD79B5B3AB1679AE0C01711E2BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:f8:a4:fd:f1:56:71:14:dd:7b:96:52:7c: 02:8b:b0:60:cd:d1:d8:a7:18:9b:00:1f:16:4c:e0: ab:a7:21:96:5e:2b:cf:8d:36:8e:53:5e:35:7d:4f: cb:7b:c7:b6:c4:70:29:35:12:09:86:49:88:ec:d8: dd:95:18:3a:59:88:9d:bf:96:7b:5d:62:eb:28:b8: c6:15:7c:ec:ad:4d:66:42:aa:6c:24:fd:dc:66:1d: 8e:71:1f:b0:7d:cd:3b:b0:47:71:21:ef:da:50:1e: 34:c9:93:a4:05:fb:c8:44:1d:7d:c0:ab:f4:76:be: 05:35:9e:07:b8:a2:57:9e:68:8e:2b:be:03:37:1b: fa:9e:c5:78:2d:c2:e1:49:0f:83:af:be:33:dc:80: 97:49:c0:fa:b4:05:29:65:51:11:1d:cc:63:81:b0: b2:2e:a8:f7:c1:9e:56:35:a7:37:67:1e:a3:68:ca: 92:99:6d:dc:f1:c5:8b:78:98:ec:b5:46:61:ea:1f: 31:8a:40:18:72:55:52:52:d6:e8:12:e9:33:64:cf: 3c:06:29:55:5b:0f:91:26:05:c1:25:fd:a4:27:f9: 7f:3d:c8:dc:b4:37:e0:2d:55:46:75:0c:93:74:05: 52:a0:f9:40:70:e8:fc:f6:20:a2:5a:58:68:ab:29: 4d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:38:8A:A3:E9:CA:BA:D7:9B:5B:3A:B1:67:9A:E0:C0:17:11:E2:BB X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5a:b3:d3:f9:53:b7:c5:ec:06:8a:b0:36:99:b8:ca:92:65: 17:30:07:f0:d5:fa:b5:e6:a7:b3:37:c6:5a:4c:b1:37:1e:22: 92:60:6e:df:cd:43:38:3f:37:4d:d0:0a:4c:ef:b3:fd:33:f2: d9:8a:d8:c9:c9:fc:81:cb:06:3c:38:4a:6f:64:46:7c:20:aa: c1:82:b4:11:b7:2b:6e:24:db:0d:02:e4:85:7a:f4:b3:98:53: d2:ad:4b:08:a5:e0:c9:8a:d9:89:25:9c:a7:0e:88:e4:8d:e8: e2:8e:3b:c1:6a:c3:6c:22:c0:a9:2f:c3:90:10:63:77:85:77: c8:ad:c3:4e:88:da:1e:c3:1b:a6:d8:37:17:e5:6e:0e:1e:f7: e0:33:44:6e:89:b5:b3:e3:12:48:17:55:02:5c:e7:01:3d:f1: 72:5c:0a:52:bf:0f:de:5a:6e:9e:90:7b:96:7a:a9:b1:6b:62: 33:44:d3:84:bc:f0:71:63:3a:64:0b:3b:09:b8:70:06:a2:21: 29:bb:e7:bd:d7:af:12:6d:e9:d5:77:48:e3:c9:31:ad:b6:30: 7f:a6:3b:ab:72:a1:45:22:de:9d:71:06:3d:01:01:b8:c2:f8: 36:78:a0:4a:2c:4b:46:d2:be:35:c9:c1:1b:2a:59:1a:b8:ae: 18:58:07:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6QokzYiEFnGH+CF5vrKRy7OWOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNTA5MDUxNzI1MDVaFw0yNTA5MDgyMTA1MDVaMDMxMTAvBgNV BAMTKDgyMzg4QUEzRTlDQUJBRDc5QjVCM0FCMTY3OUFFMEMwMTcxMUUyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+fik/fFWcRTde5ZSfAKLsGDN 0dinGJsAHxZM4KunIZZeK8+NNo5TXjV9T8t7x7bEcCk1EgmGSYjs2N2VGDpZiJ2/ lntdYusouMYVfOytTWZCqmwk/dxmHY5xH7B9zTuwR3Eh79pQHjTJk6QF+8hEHX3A q/R2vgU1nge4oleeaI4rvgM3G/qexXgtwuFJD4OvvjPcgJdJwPq0BSllUREdzGOB sLIuqPfBnlY1pzdnHqNoypKZbdzxxYt4mOy1RmHqHzGKQBhyVVJS1ugS6TNkzzwG KVVbD5EmBcEl/aQn+X89yNy0N+AtVUZ1DJN0BVKg+UBw6Pz2IKJaWGirKU13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgjiKo+nKutebWzqxZ5rgwBcR4rswHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5as9P5U7fF7AaKsDaZuMqSZRcwB/DV+rXm p7M3xlpMsTceIpJgbt/NQzg/N03QCkzvs/0z8tmK2MnJ/IHLBjw4Sm9kRnwgqsGC tBG3K24k2w0C5IV69LOYU9KtSwil4MmK2YklnKcOiOSN6OKOO8Fqw2wiwKkvw5AQ Y3eFd8itw06I2h7DG6bYNxflbg4e9+AzRG6JtbPjEkgXVQJc5wE98XJcClK/D95a bp6Qe5Z6qbFrYjNE04S88HFjOmQLOwm4cAaiISm7573XrxJt6dV3SOPJMa22MH+m O6tyoUUi3p1xBj0BAbjC+DZ4oEosS0bSvjXJwRsqWRq4rhhYBzQ= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:41 2025 by rpki-client