$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: b0oFs5v4TZ8OKpVTabYf71VC9VJQt0z6X9mhQ7F7krE= Subject key identifier: 31:72:18:A4:16:19:FF:D2:FE:3F:42:8B:54:2C:92:BE:C7:82:9B:E5 Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 2DE4A5BDBDCD44BF9304F117595FE1A9B6C25E2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 01AA Signing time: Wed 03 Sep 2025 18:20:02 +0000 Manifest this update: Wed 03 Sep 2025 18:15:02 +0000 Manifest next update: Sun 07 Sep 2025 01:13:02 +0000 Files and hashes: 1: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: 5bqH8noxUiPw0Wtag/9Fjy7rxz93W1BjnQ4ui1QQy3s=) 2: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=) 3: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 01:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e4:a5:bd:bd:cd:44:bf:93:04:f1:17:59:5f:e1:a9:b6:c2:5e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Sep 3 18:15:02 2025 GMT Not After : Sep 7 01:13:02 2025 GMT Subject: CN=317218A41619FFD2FE3F428B542C92BEC7829BE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f2:0c:18:5a:cd:67:f4:4d:d1:0e:f4:96:eb: f2:0d:ac:80:87:16:21:c1:79:f6:6e:b4:ff:e6:13: e1:45:46:ed:fd:3a:c7:45:96:53:07:d2:e8:b5:8c: 33:22:27:ea:8c:a7:8a:85:d8:35:12:a7:21:b8:d5: 34:cd:b5:60:a3:19:0a:5d:c5:b8:eb:e3:d9:a0:28: de:a9:db:49:4d:30:b7:ce:a3:83:5d:25:cb:ed:a8: a9:4d:42:c6:eb:65:31:5a:3d:24:ea:3c:7f:78:58: 53:0b:c2:c3:68:40:38:b6:7c:3c:20:8e:c9:9c:bc: a9:98:c8:89:f6:31:78:06:c7:55:43:82:71:63:66: e6:b3:08:54:46:e0:0b:ed:a5:d1:e6:31:c5:c8:3a: 9d:46:5f:3f:7d:9b:06:b8:24:e8:be:b8:95:a3:5d: f0:0b:80:a5:34:52:16:9d:26:d6:c1:6d:94:b6:6b: f6:8b:65:b4:c0:1a:7a:45:ac:7c:d8:47:9c:59:7d: 39:8a:15:aa:fc:c6:1f:ef:21:88:d6:b8:a1:c8:00: 76:63:5c:4e:08:c7:b0:75:4f:01:b2:35:81:e8:b5: f8:c5:aa:99:6d:7b:7f:d9:b8:b5:95:09:8c:f8:df: 64:35:5d:ff:f4:c8:5c:5d:6b:6d:27:b6:6e:f9:47: 44:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:72:18:A4:16:19:FF:D2:FE:3F:42:8B:54:2C:92:BE:C7:82:9B:E5 X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:63:9e:5f:45:d6:0b:71:22:c0:27:44:3a:10:18:de:c7:1e: 47:79:dd:64:bc:94:25:f4:97:d9:d1:91:53:71:76:f6:11:f0: 75:a7:76:14:a1:39:4d:98:98:3d:68:db:17:93:9d:25:79:25: 24:b9:76:90:4e:cf:3a:b1:8b:08:5f:44:83:4d:1b:1f:20:7d: e3:61:71:d1:9b:9b:40:19:fe:4a:7a:13:49:b6:0b:ad:ba:16: 66:6b:39:e3:b2:fa:52:b2:7c:37:1a:e8:fe:88:e9:2d:ba:71: d2:80:a9:bc:6b:f8:0f:e0:6d:fb:f9:35:8f:e5:b4:64:c0:e1: a9:b7:b9:9f:b4:f5:6c:31:cc:bc:25:ab:2b:29:10:b2:9f:0e: c0:37:19:7e:4c:7a:0f:73:d0:62:ed:08:98:aa:61:e4:33:7b: c8:3b:fd:65:5f:7a:cb:8a:76:51:55:42:6a:57:d8:b0:3f:28: 86:1e:27:53:33:eb:68:9d:e2:51:31:c3:a3:0d:01:01:dd:10: 0e:5b:d0:7a:cf:ad:a1:b5:c4:c8:a9:8d:a4:0a:38:67:d0:3a: f9:94:9e:0e:84:dd:7f:68:7f:d6:e0:70:21:b9:0b:54:00:1c: a3:ab:e6:8e:73:2d:0a:0b:fb:d9:07:7c:16:06:e2:a4:5f:40: 0b:f8:98:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULeSlvb3NRL+TBPEXWV/hqbbCXi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTA5MDMxODE1MDJaFw0yNTA5MDcwMTEzMDJaMDMxMTAvBgNV BAMTKDMxNzIxOEE0MTYxOUZGRDJGRTNGNDI4QjU0MkM5MkJFQzc4MjlCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM8gwYWs1n9E3RDvSW6/INrICH FiHBefZutP/mE+FFRu39OsdFllMH0ui1jDMiJ+qMp4qF2DUSpyG41TTNtWCjGQpd xbjr49mgKN6p20lNMLfOo4NdJcvtqKlNQsbrZTFaPSTqPH94WFMLwsNoQDi2fDwg jsmcvKmYyIn2MXgGx1VDgnFjZuazCFRG4AvtpdHmMcXIOp1GXz99mwa4JOi+uJWj XfALgKU0UhadJtbBbZS2a/aLZbTAGnpFrHzYR5xZfTmKFar8xh/vIYjWuKHIAHZj XE4Ix7B1TwGyNYHotfjFqplte3/ZuLWVCYz432Q1Xf/0yFxda20ntm75R0QTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMXIYpBYZ/9L+P0KLVCySvseCm+UwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFjnl9F1gtxIsAnRDoQGN7HHkd53WS8lCX0 l9nRkVNxdvYR8HWndhShOU2YmD1o2xeTnSV5JSS5dpBOzzqxiwhfRINNGx8gfeNh cdGbm0AZ/kp6E0m2C626FmZrOeOy+lKyfDca6P6I6S26cdKAqbxr+A/gbfv5NY/l tGTA4am3uZ+09WwxzLwlqyspELKfDsA3GX5Meg9z0GLtCJiqYeQze8g7/WVfesuK dlFVQmpX2LA/KIYeJ1Mz62id4lExw6MNAQHdEA5b0HrPraG1xMipjaQKOGfQOvmU ng6E3X9of9bgcCG5C1QAHKOr5o5zLQoL+9kHfBYG4qRfQAv4mN8= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:21 2025 by rpki-client