$ rpki-client -vvf repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft File: AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft (raw, json) Hash identifier: uMNCp0ZOmTmw44Z74bFI1VsCRa2czAdIvRb6Jcd4Ajw= Subject key identifier: 07:73:2D:B0:DC:78:8F:A3:D3:8B:48:5C:26:10:7F:C5:11:2D:AF:38 Authority key identifier: AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 Certificate issuer: /CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Certificate serial: 78056D340B402B7BB913BD6DFF84DCCDC8FE6ED0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft Manifest number: 01A9 Signing time: Sun 07 Sep 2025 06:11:12 +0000 Manifest this update: Sun 07 Sep 2025 06:06:12 +0000 Manifest next update: Wed 10 Sep 2025 11:20:12 +0000 Files and hashes: 1: AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl (hash: /o8KEXL5d2tN0mPoo7v6y4ozE4hRuIev0yv5VzhT13Y=) 2: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: fiuKPWuy7RKi+g0sG/LNMj+SSbhL4KU/yazo65GfTmw=) 3: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: EVf2WcFs3bKP8tYqDIaCEQ9aXkKueuElwWbdJ2ysh6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:05:6d:34:0b:40:2b:7b:b9:13:bd:6d:ff:84:dc:cd:c8:fe:6e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Validity Not Before: Sep 7 06:06:12 2025 GMT Not After : Sep 10 11:20:12 2025 GMT Subject: CN=07732DB0DC788FA3D38B485C26107FC5112DAF38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:c6:c4:0f:32:09:77:73:7f:03:24:fc:9d: bc:04:49:68:17:70:64:67:c4:ca:ce:7b:ab:f8:4a: 58:b8:f9:3a:bc:08:33:7e:ec:4c:de:09:91:9d:8e: 45:b1:dd:50:48:32:75:b2:dc:ef:dd:e6:b4:92:40: ee:8f:e6:bf:41:89:39:a3:aa:4a:9b:00:fd:94:90: fc:d7:50:78:e1:68:9f:08:67:09:0d:72:76:98:ed: 9a:7e:77:1f:ba:59:cb:71:23:d4:8b:eb:78:62:79: dc:9d:26:4b:06:87:11:c9:f6:81:18:1a:e9:47:64: 3a:e1:0d:d8:f7:48:65:f7:45:66:ff:a4:c6:0a:d3: 5f:fe:48:99:23:60:40:0d:72:58:42:ca:9e:b2:bf: d5:9e:35:48:c8:cb:7d:cb:52:7a:91:f6:22:bc:13: 07:c0:80:4c:c5:2f:a6:cb:2f:a1:98:f1:69:3b:7a: 4a:84:de:7e:f0:76:56:53:07:bf:8e:b2:13:fb:b3: fe:dd:65:90:b4:99:16:fd:15:64:c2:95:3f:fd:ef: ef:fa:f7:8b:e5:95:16:8b:f2:8e:58:51:6b:a8:6e: 6f:ce:67:89:e8:35:27:70:c0:b8:e2:a1:6c:35:eb: 5f:2f:3f:fb:d6:47:84:78:69:11:9a:fc:28:e4:c7: 4e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:73:2D:B0:DC:78:8F:A3:D3:8B:48:5C:26:10:7F:C5:11:2D:AF:38 X509v3 Authority Key Identifier: keyid:AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4f:ca:4e:32:77:95:b1:49:ac:12:10:d0:21:e1:d8:9a:fe: 0c:7b:89:12:ba:2e:84:67:2e:17:85:43:f8:ea:a8:80:0b:35: 66:16:89:4e:b2:68:5e:32:5e:ef:89:d8:ef:25:27:d8:75:15: 58:89:08:b6:d1:6e:47:76:c0:0c:55:a8:4a:ff:fe:03:04:cc: 58:63:38:67:1a:97:39:77:ca:bd:6b:2b:89:5c:88:eb:3d:8e: 48:39:cb:70:40:bd:1a:02:2f:8a:2e:58:16:6e:22:81:ba:11: e2:ca:83:bc:06:11:f1:75:59:32:95:e0:db:ef:41:4a:9c:a7: 33:2d:b0:fd:bc:e3:f5:f0:30:fb:37:eb:78:44:c6:1c:90:92: f7:88:0e:fa:53:e1:8e:27:6a:6a:fa:df:83:a7:c7:a0:1d:22: 87:93:0a:12:25:72:f7:94:d3:52:10:c3:03:f4:29:60:8a:4d: 02:5f:99:32:ce:7d:56:18:8a:ab:1a:fe:7d:51:40:a4:77:37: 29:b3:d0:5e:11:ec:01:c7:73:fc:70:70:0b:96:55:76:4c:e1: b7:ba:f5:ef:84:72:d7:63:fd:3e:24:6c:71:f9:58:30:b3:c9: 80:f5:c3:7d:9d:ba:c8:71:9d:5b:08:ce:e2:d6:b8:12:50:49: ec:e4:97:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeAVtNAtAK3u5E71t/4Tczcj+btAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2 OUZGNUUyMDAeFw0yNTA5MDcwNjA2MTJaFw0yNTA5MTAxMTIwMTJaMDMxMTAvBgNV BAMTKDA3NzMyREIwREM3ODhGQTNEMzhCNDg1QzI2MTA3RkM1MTEyREFGMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1esbEDzIJd3N/AyT8nbwESWgX cGRnxMrOe6v4Sli4+Tq8CDN+7EzeCZGdjkWx3VBIMnWy3O/d5rSSQO6P5r9BiTmj qkqbAP2UkPzXUHjhaJ8IZwkNcnaY7Zp+dx+6WctxI9SL63hiedydJksGhxHJ9oEY GulHZDrhDdj3SGX3RWb/pMYK01/+SJkjYEANclhCyp6yv9WeNUjIy33LUnqR9iK8 EwfAgEzFL6bLL6GY8Wk7ekqE3n7wdlZTB7+OshP7s/7dZZC0mRb9FWTClT/97+/6 94vllRaL8o5YUWuobm/OZ4noNSdwwLjioWw1618vP/vWR4R4aRGa/Cjkx06RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB3MtsNx4j6PTi0hcJhB/xREtrzgwHwYDVR0j BBgwFoAUrnthqcFnk3hMwlzsApVRbGn/XiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTg5NWNlYi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC9BRTdCNjFBOUMx Njc5Mzc4NENDMjVDRUMwMjk1NTE2QzY5RkY1RTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2OUZG NUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUx NkM2OUZGNUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9Pyk4yd5WxSawSENAh4dia/gx7iRK6LoRn LheFQ/jqqIALNWYWiU6yaF4yXu+J2O8lJ9h1FViJCLbRbkd2wAxVqEr//gMEzFhj OGcalzl3yr1rK4lciOs9jkg5y3BAvRoCL4ouWBZuIoG6EeLKg7wGEfF1WTKV4Nvv QUqcpzMtsP284/XwMPs363hExhyQkveIDvpT4Y4namr634Onx6AdIoeTChIlcveU 01IQwwP0KWCKTQJfmTLOfVYYiqsa/n1RQKR3Nymz0F4R7AHHc/xwcAuWVXZM4be6 9e+Ectdj/T4kbHH5WDCzyYD1w32dushxnVsIzuLWuBJQSezkl6A= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:21 2025 by rpki-client