$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: 9TqftJKPr6QBqrFs6QmmHgsFaVA+RgAb/yz/h2Dhiaw= Subject key identifier: 5B:A6:24:C5:0F:3B:17:E8:A7:FE:17:A6:27:96:63:D0:EC:D8:B8:CB Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 5BCCAA8E8CE891C09BCE3C47E3F5A22139C01311 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: E8 Signing time: Sat 06 Sep 2025 15:30:38 +0000 Manifest this update: Sat 06 Sep 2025 15:25:38 +0000 Manifest next update: Tue 09 Sep 2025 20:37:38 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: dYqw8GZeq6dkCXBkGh/id7w5m1RFXefcgKBzRFNdnkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:cc:aa:8e:8c:e8:91:c0:9b:ce:3c:47:e3:f5:a2:21:39:c0:13:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: Sep 6 15:25:38 2025 GMT Not After : Sep 9 20:37:38 2025 GMT Subject: CN=5BA624C50F3B17E8A7FE17A6279663D0ECD8B8CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:e9:73:3e:13:ae:d0:33:7a:53:bd:f5:f1: 95:28:bc:d5:46:19:d5:a3:ca:bc:40:21:93:9e:5f: cd:46:b8:80:66:f4:ae:5b:b8:9e:72:57:3b:9a:1a: 20:c3:e4:11:3e:d9:b7:76:11:21:87:86:9c:32:72: 2d:88:fd:78:68:fd:6a:7b:d7:3e:0f:1e:0a:0e:2d: 16:81:31:40:d9:d8:f7:fb:a1:36:3c:bb:f9:df:ac: cd:ac:4d:bc:dd:b2:df:39:34:df:a5:a3:3f:c5:93: 19:ca:32:a5:ae:b3:9b:67:ec:42:88:7a:d5:6e:c0: 01:6d:b8:37:45:32:e1:12:5a:8c:34:f1:e9:4d:67: 99:aa:c0:4a:27:64:be:41:5e:f9:0e:1f:4a:eb:59: 98:a7:ff:1d:a4:83:0d:05:7b:57:2d:66:19:e8:bb: 04:5e:90:5c:0f:b1:f5:e3:2e:2f:19:68:f6:fc:cb: 5d:f3:3f:fb:52:56:eb:57:29:62:86:0c:a9:2d:e6: b9:e5:7d:64:3a:c7:1d:cd:81:09:f2:2d:e4:27:e6: ac:41:27:b7:7b:c6:61:ec:13:ef:6a:92:85:cb:cf: d6:c1:9b:ee:63:65:4b:a5:65:62:d0:95:b3:c6:6f: 8a:fa:9f:f8:f4:46:ae:45:76:25:ad:9f:0f:aa:4b: 23:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A6:24:C5:0F:3B:17:E8:A7:FE:17:A6:27:96:63:D0:EC:D8:B8:CB X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5d:56:b2:e6:12:60:ab:2b:00:5b:f9:f8:f7:38:51:c2:86: 91:41:bc:79:0c:ee:05:49:a4:8f:e3:f5:99:9b:8d:31:2e:9b: ed:03:1e:50:16:15:8a:84:6c:79:a9:18:18:1a:9d:83:68:63: f2:cb:91:49:5f:9f:65:11:ed:6c:e7:f5:9c:6b:ad:48:33:5f: f1:af:e6:ff:4b:6e:ab:23:08:b3:a5:bb:1f:f9:a0:6e:c4:1f: 7d:19:88:20:71:25:d1:c9:30:c6:35:1a:44:03:d6:47:1c:3c: a6:48:2c:06:88:4f:da:d4:11:45:5b:f2:cb:9b:f9:ee:6d:c6: c6:26:c8:c5:98:ed:3a:a9:f2:bd:ea:74:2c:64:93:8c:63:b0: eb:05:a7:34:27:06:43:2a:65:34:5a:fc:7f:5b:1f:da:9b:3e: 1b:55:00:ce:37:8e:64:6e:fe:8e:e7:85:3e:17:ce:13:43:59: 57:75:43:22:f6:3b:2b:72:92:12:01:85:02:68:db:9c:f8:0b: f0:b8:59:2c:35:27:95:b7:fd:11:df:e3:9c:c4:5c:2e:de:27: ba:2c:74:80:53:f9:15:3b:cf:a3:54:ea:23:48:eb:73:fa:05: 1f:3f:88:68:53:65:0a:99:9d:e9:de:d6:76:32:2b:05:03:12: ba:63:0a:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8yqjozokcCbzjxH4/WiITnAExEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVC MDQ0ODdGQTAeFw0yNTA5MDYxNTI1MzhaFw0yNTA5MDkyMDM3MzhaMDMxMTAvBgNV BAMTKDVCQTYyNEM1MEYzQjE3RThBN0ZFMTdBNjI3OTY2M0QwRUNEOEI4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8elzPhOu0DN6U7318ZUovNVG GdWjyrxAIZOeX81GuIBm9K5buJ5yVzuaGiDD5BE+2bd2ESGHhpwyci2I/Xho/Wp7 1z4PHgoOLRaBMUDZ2Pf7oTY8u/nfrM2sTbzdst85NN+loz/FkxnKMqWus5tn7EKI etVuwAFtuDdFMuESWow08elNZ5mqwEonZL5BXvkOH0rrWZin/x2kgw0Fe1ctZhno uwRekFwPsfXjLi8ZaPb8y13zP/tSVutXKWKGDKkt5rnlfWQ6xx3NgQnyLeQn5qxB J7d7xmHsE+9qkoXLz9bBm+5jZUulZWLQlbPGb4r6n/j0Rq5FdiWtnw+qSyMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW6YkxQ87F+in/hemJ5Zj0OzYuMswHwYDVR0j BBgwFoAUqpe5WScSkfvhQkkbgQY61bBEh/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3 MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4N0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVCMDQ0 ODdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNB RDVCMDQ0ODdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtdVrLmEmCrKwBb+fj3OFHChpFBvHkM7gVJ pI/j9ZmbjTEum+0DHlAWFYqEbHmpGBganYNoY/LLkUlfn2UR7Wzn9ZxrrUgzX/Gv 5v9LbqsjCLOlux/5oG7EH30ZiCBxJdHJMMY1GkQD1kccPKZILAaIT9rUEUVb8sub +e5txsYmyMWY7Tqp8r3qdCxkk4xjsOsFpzQnBkMqZTRa/H9bH9qbPhtVAM43jmRu /o7nhT4XzhNDWVd1QyL2OytykhIBhQJo25z4C/C4WSw1J5W3/RHf45zEXC7eJ7os dIBT+RU7z6NU6iNI63P6BR8/iGhTZQqZnene1nYyKwUDErpjCtQ= -----END CERTIFICATE-----Generated at Mon Sep 8 08:07:02 2025 by rpki-client