$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: naq7KCV4otSMgglV8Z9jnr99hn2L3urrdjkNJdsEQjE= Subject key identifier: 0B:9B:B8:4E:3D:DA:93:3F:09:21:99:CC:EA:14:21:CA:1E:00:4C:01 Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 6606B5D9E5552299085D29379519B71B31A77073 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 0240 Signing time: Sun 07 Sep 2025 06:50:36 +0000 Manifest this update: Sun 07 Sep 2025 06:45:36 +0000 Manifest next update: Wed 10 Sep 2025 17:23:36 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: RZYwnaR4AbNDqJoQguxsDzklTjDXHuQPAmsyLodkXR8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:06:b5:d9:e5:55:22:99:08:5d:29:37:95:19:b7:1b:31:a7:70:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Sep 7 06:45:36 2025 GMT Not After : Sep 10 17:23:36 2025 GMT Subject: CN=0B9BB84E3DDA933F092199CCEA1421CA1E004C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:cc:5d:6c:df:a2:e3:03:58:f7:39:52:26: 9d:46:a1:e5:ec:9e:41:75:c2:9c:a5:a5:fd:24:00: fb:bf:98:fa:1c:d0:9f:bb:8e:b7:ee:df:39:ec:2b: 31:be:c5:59:71:e8:66:87:5a:fb:db:0c:31:00:b7: 8b:47:ac:0a:be:2c:b3:92:bf:e7:ef:08:28:0b:3b: 64:e6:36:ec:34:e8:fc:91:c1:6d:ac:58:ad:19:23: 73:4e:18:5b:85:3c:49:e8:4f:22:63:71:33:0d:97: 68:6a:cc:79:b1:e0:06:53:d9:99:ff:86:81:8b:ce: 37:90:c3:d9:4e:89:6a:df:d9:06:6a:c6:50:52:0c: 6e:7e:3f:64:88:68:bf:d6:b5:3e:e8:c0:31:52:fc: 27:d0:d9:5a:40:ed:91:6e:70:cf:38:cf:42:6b:cb: 1e:d4:af:48:86:91:98:85:fb:71:29:cb:98:8c:3b: 2d:bc:52:d0:ca:e4:98:d7:7c:21:de:56:2a:13:86: 95:ce:10:7e:56:14:ee:61:72:07:30:dc:b4:57:36: a8:19:6b:a7:cb:ea:88:69:68:0f:44:49:53:06:b4: 14:96:1f:b1:4b:cd:6a:d6:d5:e3:d0:3f:40:10:b0: af:5d:a6:e1:a4:84:8a:89:d0:cf:28:62:63:9a:1e: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9B:B8:4E:3D:DA:93:3F:09:21:99:CC:EA:14:21:CA:1E:00:4C:01 X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:96:c4:ba:d6:7a:43:c1:eb:97:73:f6:b8:00:e1:c3:94:aa: 33:f2:38:e9:ad:7b:a2:72:f1:6a:4a:50:fa:5b:59:3b:50:a5: 1b:ee:3e:24:fe:5e:14:f7:07:de:b3:db:75:3d:bb:de:a4:eb: bd:4b:7b:99:3f:fb:5c:44:1e:2e:d7:02:1b:aa:17:01:8b:9e: b0:cb:ec:1b:18:7a:37:c9:d7:37:80:78:d0:66:c9:f2:e3:bd: 1e:2d:74:31:58:c1:46:76:be:bc:67:f8:ad:e0:a3:96:5c:60: 42:29:2d:7c:bb:73:f4:7c:09:30:4e:02:2e:04:6a:6d:f8:c7: 2d:2d:9d:8d:98:72:60:1e:c1:64:58:15:80:c0:73:d4:a7:bc: 2d:72:94:0a:a4:1c:96:b6:fe:45:13:1a:2e:78:ff:7f:86:23: 14:be:c9:24:d7:ee:31:21:d7:66:ac:c8:f1:25:b5:4b:0f:c0: 9a:9f:0a:dc:66:f0:c9:cd:9e:e9:8b:c0:f0:17:bb:a6:1d:d5: 05:f3:1c:c8:81:90:de:39:e2:5d:69:2f:82:42:6c:8c:49:4e: 25:8d:57:bb:36:cb:b5:17:de:4e:6b:25:75:4f:7a:98:c6:70: 54:82:b2:ee:e5:94:0b:ca:53:ab:4d:2d:a2:e3:c7:4c:fd:20: a2:a8:ad:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZga12eVVIpkIXSk3lRm3GzGncHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNTA5MDcwNjQ1MzZaFw0yNTA5MTAxNzIzMzZaMDMxMTAvBgNV BAMTKDBCOUJCODRFM0REQTkzM0YwOTIxOTlDQ0VBMTQyMUNBMUUwMDRDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4L8xdbN+i4wNY9zlSJp1GoeXs nkF1wpylpf0kAPu/mPoc0J+7jrfu3znsKzG+xVlx6GaHWvvbDDEAt4tHrAq+LLOS v+fvCCgLO2TmNuw06PyRwW2sWK0ZI3NOGFuFPEnoTyJjcTMNl2hqzHmx4AZT2Zn/ hoGLzjeQw9lOiWrf2QZqxlBSDG5+P2SIaL/WtT7owDFS/CfQ2VpA7ZFucM84z0Jr yx7Ur0iGkZiF+3Epy5iMOy28UtDK5JjXfCHeVioThpXOEH5WFO5hcgcw3LRXNqgZ a6fL6ohpaA9ESVMGtBSWH7FLzWrW1ePQP0AQsK9dpuGkhIqJ0M8oYmOaHpudAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC5u4Tj3akz8JIZnM6hQhyh4ATAEwHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+WxLrWekPB65dz9rgA4cOUqjPyOOmte6Jy 8WpKUPpbWTtQpRvuPiT+XhT3B96z23U9u96k671Le5k/+1xEHi7XAhuqFwGLnrDL 7BsYejfJ1zeAeNBmyfLjvR4tdDFYwUZ2vrxn+K3go5ZcYEIpLXy7c/R8CTBOAi4E am34xy0tnY2YcmAewWRYFYDAc9SnvC1ylAqkHJa2/kUTGi54/3+GIxS+ySTX7jEh 12asyPEltUsPwJqfCtxm8MnNnumLwPAXu6Yd1QXzHMiBkN454l1pL4JCbIxJTiWN V7s2y7UX3k5rJXVPepjGcFSCsu7llAvKU6tNLaLjx0z9IKKoreA= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:19 2025 by rpki-client