$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft File: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft (raw, json) Hash identifier: R3N/UClRPeSIeNqSfJGVRW3HF6IP/jSdePLme8HQVLc= Subject key identifier: C3:7F:DA:F8:49:C0:72:A9:08:C2:38:C0:7C:EF:82:C7:37:DE:38:AC Authority key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Certificate issuer: /CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Certificate serial: 7BBA4D8D055DFBC5D0B7B28F726F689AF6996053 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft Manifest number: 030A Signing time: Fri 17 Oct 2025 07:51:47 +0000 Manifest this update: Fri 17 Oct 2025 07:46:47 +0000 Manifest next update: Mon 20 Oct 2025 18:57:47 +0000 Files and hashes: 1: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: gOoZfgSIZIk3IBqctpdE6ERoqLaD97A4ApFjnTt/tAE=) 2: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: U53MbJZVdHMZelcGWK9+w7EaXlcDpDpc+jeZ3MbM1Kw=) 3: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl (hash: iLNti74Wp7QtwsEdvkMH+9PcdmnURC1lebrumh/RZ4o=) 4: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: jtOEt7E3nAQ6Fw9cITIUUkvRpfUDsJxH4CxbFv1xpGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ba:4d:8d:05:5d:fb:c5:d0:b7:b2:8f:72:6f:68:9a:f6:99:60:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Validity Not Before: Oct 17 07:46:47 2025 GMT Not After : Oct 20 18:57:47 2025 GMT Subject: CN=C37FDAF849C072A908C238C07CEF82C737DE38AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e7:90:da:87:20:59:2c:08:f3:05:77:a4:41: 80:02:82:db:c9:00:87:e0:25:d6:82:17:d9:e1:d1: 27:be:0f:92:41:3b:7f:6f:2c:3d:d0:0f:07:60:25: c2:fc:3f:89:7a:ba:41:4e:1c:f7:b2:33:b2:db:fe: aa:b2:e5:63:ff:81:13:09:19:a9:a3:08:5d:73:b4: a2:42:a3:eb:1e:84:cc:7a:e5:fb:36:60:6b:a6:97: e4:65:6c:05:c7:fa:a5:7c:90:35:29:13:88:a4:d3: 80:fa:b8:7c:9d:31:be:0d:4f:8e:74:5a:4f:6d:50: 65:7c:c4:f3:88:2a:a1:df:b0:0f:e9:05:bb:e7:21: 92:74:c3:09:bd:9c:e1:31:4b:b4:29:2f:ce:49:70: 72:c8:22:cb:53:e6:20:6e:eb:75:ec:11:b5:79:21: 44:b2:ca:f1:bb:33:9d:c2:aa:05:9d:e0:5b:d3:88: e7:c4:c0:af:2f:37:84:4b:e1:26:3a:c4:d7:09:61: 37:e9:45:48:1e:bb:cf:63:10:2d:b8:cb:99:22:9d: 13:11:4c:41:7c:d5:da:25:af:0d:c2:29:6a:fb:fa: 59:89:de:ae:e6:dc:6d:fe:62:f3:cf:a3:a2:bb:26: eb:71:53:f4:f8:d0:54:96:1d:02:32:17:06:f3:8e: 37:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7F:DA:F8:49:C0:72:A9:08:C2:38:C0:7C:EF:82:C7:37:DE:38:AC X509v3 Authority Key Identifier: keyid:AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9f:d7:94:00:5a:6d:aa:ad:d5:c5:22:eb:8e:aa:49:c5:48: 27:de:a0:8a:17:1d:a6:f5:8b:f7:a1:8e:7a:45:e3:8c:19:a2: af:a6:21:1d:5a:c3:ce:5a:49:f3:be:c1:d7:41:0f:b0:3f:52: 2e:5c:43:09:02:17:7c:77:3a:e1:d8:5e:00:73:74:ad:33:4c: 70:8a:56:19:64:27:87:50:70:42:a2:fb:0e:3e:63:3c:c5:cb: 0c:21:45:5d:22:70:64:a4:01:57:af:f3:64:73:8b:b9:b5:59: f7:9b:fd:63:ac:a7:64:2a:b8:ba:c9:42:14:d9:ef:3b:ac:2c: 43:f4:c2:35:5b:52:e7:7f:24:76:1c:31:fc:ab:2c:b8:96:e4: c0:65:74:50:ba:57:08:1f:2f:3a:a7:e3:b3:6c:6a:1c:ac:09: 9c:c7:3e:b8:24:40:e7:b2:3a:76:0c:5a:60:42:11:ac:d8:42: 8a:7c:00:47:af:5d:30:bf:87:ad:5d:73:02:ef:00:a4:ce:73: cc:d8:8a:86:fe:8c:11:93:25:50:9c:fb:0b:2d:22:4d:5c:83: 1e:ee:5a:a6:0a:5f:a6:e2:05:2b:8a:6e:26:51:73:dd:31:56: 43:45:23:aa:c4:3b:ac:3e:f3:c1:4f:32:72:00:46:76:d3:a2: 9b:2b:67:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7pNjQVd+8XQt7KPcm9omvaZYFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5 MjMxMDUwNDAeFw0yNTEwMTcwNzQ2NDdaFw0yNTEwMjAxODU3NDdaMDMxMTAvBgNV BAMTKEMzN0ZEQUY4NDlDMDcyQTkwOEMyMzhDMDdDRUY4MkM3MzdERTM4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt55DahyBZLAjzBXekQYACgtvJ AIfgJdaCF9nh0Se+D5JBO39vLD3QDwdgJcL8P4l6ukFOHPeyM7Lb/qqy5WP/gRMJ GamjCF1ztKJCo+sehMx65fs2YGuml+RlbAXH+qV8kDUpE4ik04D6uHydMb4NT450 Wk9tUGV8xPOIKqHfsA/pBbvnIZJ0wwm9nOExS7QpL85JcHLIIstT5iBu63XsEbV5 IUSyyvG7M53CqgWd4FvTiOfEwK8vN4RL4SY6xNcJYTfpRUgeu89jEC24y5kinRMR TEF81dolrw3CKWr7+lmJ3q7m3G3+YvPPo6K7JutxU/T40FSWHQIyFwbzjjcDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw3/a+EnAcqkIwjjAfO+CxzfeOKwwHwYDVR0j BBgwFoAUrrMv+gAHwKBn+4zp3XfP75IxBQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMC9BRUIzMkZGQTAw MDdDMEEwNjdGQjhDRTlERDc3Q0ZFRjkyMzEwNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5MjMx MDUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk ZDQtMjYzNDcyN2E5ZWQ0LzAvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NG RUY5MjMxMDUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAef15QAWm2qrdXFIuuOqknFSCfeoIoXHab1 i/ehjnpF44wZoq+mIR1aw85aSfO+wddBD7A/Ui5cQwkCF3x3OuHYXgBzdK0zTHCK VhlkJ4dQcEKi+w4+YzzFywwhRV0icGSkAVev82Rzi7m1Wfeb/WOsp2QquLrJQhTZ 7zusLEP0wjVbUud/JHYcMfyrLLiW5MBldFC6VwgfLzqn47NsahysCZzHPrgkQOey OnYMWmBCEazYQop8AEevXTC/h61dcwLvAKTOc8zYiob+jBGTJVCc+wstIk1cgx7u WqYKX6biBSuKbiZRc90xVkNFI6rEO6w+88FPMnIARnbTopsrZ0c= -----END CERTIFICATE-----Generated at Sun Oct 19 17:58:08 2025 by rpki-client