$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: 6otzYvSKNTuPqEpSd5xMTJ24KPrblScJlYuqZ/eh5/M= Subject key identifier: B1:6F:04:DC:D0:79:2B:01:10:05:CA:DB:56:9D:CA:4A:54:DB:DE:5B Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 7602E7EB172EB903AD839E3808C2EB1FF469710F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: 95 Signing time: Thu 21 Aug 2025 08:01:33 +0000 Manifest this update: Thu 21 Aug 2025 07:56:33 +0000 Manifest next update: Sun 24 Aug 2025 18:38:33 +0000 Files and hashes: 1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: VYWAk8iGSZzF5g6fTa7RhmuP4rGT675f8tCJgCmKW00=) 2: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: N9KIW+UNxCZBq8hZfTz2DUolUIUrdjasUZSmvNjBG84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:02:e7:eb:17:2e:b9:03:ad:83:9e:38:08:c2:eb:1f:f4:69:71:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Aug 21 07:56:33 2025 GMT Not After : Aug 24 18:38:33 2025 GMT Subject: CN=B16F04DCD0792B011005CADB569DCA4A54DBDE5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:e9:31:c8:ec:ba:76:51:3b:5e:0b:fe:80: 90:b7:c3:ed:30:f0:2f:4d:c3:a2:ec:c9:d4:ef:20: 7b:dd:da:18:ce:68:e3:96:ff:6d:91:f3:46:4c:a1: e0:01:52:5c:c1:f0:b9:07:7b:72:66:52:39:01:57: 7b:27:f2:7a:12:d9:3b:8e:f6:08:27:66:58:5e:58: ed:df:a3:e3:23:83:58:9a:de:32:58:27:ef:aa:81: f0:f5:a6:cd:a3:d0:4b:e1:e8:53:8d:dc:67:ff:b7: 97:f7:f8:73:7d:2e:b1:92:8a:79:f9:7e:9b:66:ea: 64:98:1b:57:b1:1b:cb:29:de:ba:21:4b:11:91:5b: 3d:58:d9:b3:c8:e6:51:fe:23:87:52:f0:cd:7b:81: fc:c9:94:f1:0a:1b:b4:94:98:1a:3b:fd:d9:ce:41: c9:00:f3:72:6e:59:a7:0f:5e:97:b1:3a:ad:e9:8e: b0:cd:89:90:f9:8a:ad:d3:4e:7c:18:3b:df:ee:a8: c9:87:d6:e2:0f:4d:5d:d7:0e:e3:bc:c1:07:4d:07: e6:eb:fe:75:52:cd:cb:ea:e0:1a:e3:2a:73:ae:78: ee:75:bf:3f:3e:06:d2:b6:9b:f3:43:0d:b4:e3:1d: d0:78:a4:5b:0e:5f:00:04:48:0a:88:6c:e8:81:e7: 66:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6F:04:DC:D0:79:2B:01:10:05:CA:DB:56:9D:CA:4A:54:DB:DE:5B X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7f:fd:5a:59:98:75:91:36:37:e6:b0:4e:6e:a4:fd:66:2b: 18:94:da:87:1c:ab:6b:93:fd:d8:10:0b:4d:31:c1:59:cb:dd: 5f:11:02:e1:52:42:81:25:af:37:58:a5:17:de:2e:78:17:2d: 6f:ab:9f:28:19:79:f1:a8:46:35:8d:ae:51:c8:5c:23:9b:a7: 61:6b:4e:0f:7b:42:4c:04:a7:ed:a4:7d:98:19:0e:f6:e4:8d: a2:4b:14:38:e8:b9:a1:ef:7f:da:eb:39:8e:89:91:64:a2:1a: 5d:79:61:6e:79:c3:cf:67:61:7a:9e:66:39:67:b5:26:f3:a0: e9:8a:85:57:7e:e7:eb:0a:4f:90:1d:80:d7:9c:a5:49:ac:e0: 80:eb:94:25:10:70:b5:55:14:25:3a:b7:5e:7c:49:a6:e2:ed: 43:09:26:8c:dd:f2:8a:33:a5:d3:dd:6e:a4:c4:70:12:25:81: 71:0d:fa:f6:86:5d:c8:2a:37:a7:23:9d:22:c0:c2:4f:ad:64: c0:76:b2:f7:8a:ab:61:a2:78:0b:a4:b8:b4:8d:b5:59:35:bc: 2a:07:18:32:f8:95:f8:a7:13:4e:ba:48:aa:5d:fa:db:8f:c9: 91:ee:14:6e:44:f3:61:8a:54:06:4b:8c:02:0e:48:59:44:1c: c0:be:e9:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgLn6xcuuQOtg544CMLrH/RpcQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNTA4MjEwNzU2MzNaFw0yNTA4MjQxODM4MzNaMDMxMTAvBgNV BAMTKEIxNkYwNERDRDA3OTJCMDExMDA1Q0FEQjU2OURDQTRBNTREQkRFNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDapOkxyOy6dlE7Xgv+gJC3w+0w 8C9Nw6LsydTvIHvd2hjOaOOW/22R80ZMoeABUlzB8LkHe3JmUjkBV3sn8noS2TuO 9ggnZlheWO3fo+Mjg1ia3jJYJ++qgfD1ps2j0Evh6FON3Gf/t5f3+HN9LrGSinn5 fptm6mSYG1exG8sp3rohSxGRWz1Y2bPI5lH+I4dS8M17gfzJlPEKG7SUmBo7/dnO QckA83JuWacPXpexOq3pjrDNiZD5iq3TTnwYO9/uqMmH1uIPTV3XDuO8wQdNB+br /nVSzcvq4BrjKnOueO51vz8+BtK2m/NDDbTjHdB4pFsOXwAESAqIbOiB52YnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsW8E3NB5KwEQBcrbVp3KSlTb3lswHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1//VpZmHWRNjfmsE5upP1mKxiU2occq2uT /dgQC00xwVnL3V8RAuFSQoElrzdYpRfeLngXLW+rnygZefGoRjWNrlHIXCObp2Fr Tg97QkwEp+2kfZgZDvbkjaJLFDjouaHvf9rrOY6JkWSiGl15YW55w89nYXqeZjln tSbzoOmKhVd+5+sKT5AdgNecpUms4IDrlCUQcLVVFCU6t158Sabi7UMJJozd8ooz pdPdbqTEcBIlgXEN+vaGXcgqN6cjnSLAwk+tZMB2sveKq2GieAukuLSNtVk1vCoH GDL4lfinE066SKpd+tuPyZHuFG5E82GKVAZLjAIOSFlEHMC+6Zg= -----END CERTIFICATE-----Generated at Sat Aug 23 19:29:56 2025 by rpki-client