$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: wW2Wl05m6XMqpT3lI6j32Q59HKKmaloSDXnA37Hb8es= Subject key identifier: 32:01:55:5D:36:4A:B6:9F:EF:64:93:7B:57:F2:B6:15:C5:43:83:54 Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 67E3BF2CA155A950964FF6DA363F251128C0DFC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: 018F Signing time: Sat 06 Sep 2025 05:00:58 +0000 Manifest this update: Sat 06 Sep 2025 04:55:58 +0000 Manifest next update: Tue 09 Sep 2025 15:59:58 +0000 Files and hashes: 1: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: H/C8JBNaVqOow9m1g+QZ6kwM7JKkj4ce0Cna5R3evE0=) 2: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: pIcN+kh3RG7+1QesUNL5n+vyWtcQVZBH0O2t/SAyZFw=) 3: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: tbN19feblT3PguVaZeJVSZOFHq52R/v7NXiFpVjRDJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e3:bf:2c:a1:55:a9:50:96:4f:f6:da:36:3f:25:11:28:c0:df:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: Sep 6 04:55:58 2025 GMT Not After : Sep 9 15:59:58 2025 GMT Subject: CN=3201555D364AB69FEF64937B57F2B615C5438354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:ec:4c:cb:63:95:e8:34:9c:af:d0:73:98: 8a:d8:14:10:1c:79:97:11:19:0f:22:c4:10:4f:6f: c8:14:cd:59:87:78:0e:1b:0c:8e:fc:7b:7d:59:10: 7c:c8:0d:de:0f:91:a5:b8:51:e0:e0:d1:6b:3e:b2: 7f:a0:29:2e:5b:12:a7:39:c3:53:c5:24:64:e0:fb: 83:36:58:b4:f8:c0:4b:49:27:4b:d8:ed:8b:dc:c3: 5b:89:28:76:19:09:e1:ac:dc:e3:c6:18:de:77:bb: 13:1c:12:b2:05:94:9d:01:0e:e9:d0:ee:10:51:14: 8c:75:1e:5a:0e:9c:fe:da:e8:5e:19:d9:ff:36:89: f1:88:25:06:6f:ab:61:b9:bb:f5:aa:90:34:77:fc: 83:cc:26:15:34:2d:00:75:33:46:48:44:0e:78:d6: 64:7e:3f:e4:c1:e9:83:d4:5b:09:bc:2d:68:4b:55: 7e:0c:cd:81:17:dc:47:05:4d:07:f7:ca:ed:b1:02: e5:3d:81:9c:c9:80:62:be:a5:ac:92:8c:31:58:17: 11:c7:51:10:50:94:9c:be:17:6d:bd:18:cc:16:c1: 42:2d:8a:1c:ba:54:d4:ab:53:39:14:23:0e:43:61: af:5d:64:0c:4d:67:2c:08:c4:96:86:75:0c:c9:5e: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:01:55:5D:36:4A:B6:9F:EF:64:93:7B:57:F2:B6:15:C5:43:83:54 X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:66:09:bf:f6:0a:50:ff:f5:0d:84:e1:2a:61:e7:56:d6:38: a3:31:47:65:72:c8:b3:91:93:16:00:8c:63:a2:72:66:f7:dd: dc:96:31:4d:e0:b1:94:59:c3:3a:5b:e1:ff:21:5c:01:d6:49: 49:b1:23:d0:23:04:2f:d1:a1:fe:f3:0b:e5:d7:7c:57:2f:88: 66:2e:31:19:c7:b4:f6:39:e1:ac:24:1a:39:f5:9e:27:e6:a8: 9e:ff:9b:96:ee:f9:7f:bd:5c:78:8c:15:d5:75:4f:55:ad:c8: df:8d:42:60:e4:12:e3:07:e1:2b:5e:12:6e:6f:c6:5d:7a:f1: c4:f7:44:a8:66:73:ee:d8:20:2a:10:c4:24:50:0d:35:1f:3d: cb:e4:d0:8e:37:17:cd:ca:5f:fd:30:94:3f:b1:0c:fe:a7:40: bf:40:df:78:2a:84:10:92:28:b4:05:8f:cf:ba:c1:21:6b:61: f0:4b:18:88:89:67:d2:10:f1:a2:27:c7:7d:a2:ad:4d:00:3d: 93:92:6a:26:97:5f:2a:3e:9d:6d:2d:df:3d:dc:c4:85:7a:67: 35:c4:7d:59:e2:95:6b:55:04:2a:54:6d:78:5e:f7:5c:ec:d4: 36:58:1d:85:5d:c2:26:42:35:47:a6:5f:05:88:3a:67:15:05: 82:3f:de:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+O/LKFVqVCWT/baNj8lESjA38kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNTA5MDYwNDU1NThaFw0yNTA5MDkxNTU5NThaMDMxMTAvBgNV BAMTKDMyMDE1NTVEMzY0QUI2OUZFRjY0OTM3QjU3RjJCNjE1QzU0MzgzNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCedexMy2OV6DScr9BzmIrYFBAc eZcRGQ8ixBBPb8gUzVmHeA4bDI78e31ZEHzIDd4PkaW4UeDg0Ws+sn+gKS5bEqc5 w1PFJGTg+4M2WLT4wEtJJ0vY7Yvcw1uJKHYZCeGs3OPGGN53uxMcErIFlJ0BDunQ 7hBRFIx1HloOnP7a6F4Z2f82ifGIJQZvq2G5u/WqkDR3/IPMJhU0LQB1M0ZIRA54 1mR+P+TB6YPUWwm8LWhLVX4MzYEX3EcFTQf3yu2xAuU9gZzJgGK+paySjDFYFxHH URBQlJy+F229GMwWwUItihy6VNSrUzkUIw5DYa9dZAxNZywIxJaGdQzJXrcpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMgFVXTZKtp/vZJN7V/K2FcVDg1QwHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhmCb/2ClD/9Q2E4Sph51bWOKMxR2VyyLOR kxYAjGOicmb33dyWMU3gsZRZwzpb4f8hXAHWSUmxI9AjBC/Rof7zC+XXfFcviGYu MRnHtPY54awkGjn1nifmqJ7/m5bu+X+9XHiMFdV1T1WtyN+NQmDkEuMH4SteEm5v xl168cT3RKhmc+7YICoQxCRQDTUfPcvk0I43F83KX/0wlD+xDP6nQL9A33gqhBCS KLQFj8+6wSFrYfBLGIiJZ9IQ8aInx32irU0APZOSaiaXXyo+nW0t3z3cxIV6ZzXE fVnilWtVBCpUbXhe91zs1DZYHYVdwiZCNUemXwWIOmcVBYI/3pI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:45 2025 by rpki-client