$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: Ld+UDtmotoS/J3lhDjapQMHaMwYtTmhcNJVmmLEvZig= Subject key identifier: 5E:B1:C1:AE:11:35:0B:23:C0:4F:9A:3C:4B:4C:AC:F8:52:9D:11:89 Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 73B6EAA25EAB449891F25AD1469DB469E53CE1BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: AF Signing time: Sun 19 Oct 2025 04:31:31 +0000 Manifest this update: Sun 19 Oct 2025 04:26:31 +0000 Manifest next update: Wed 22 Oct 2025 07:45:31 +0000 Files and hashes: 1: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: EvGwz6ByZAN7HiI9dFcxjhUj3B7YYeUfM1PJsndPEwU=) 2: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: KBNbxQjOLfhYwGB4Wp4pMpbXxYHR8QezEvyeUuNBjy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b6:ea:a2:5e:ab:44:98:91:f2:5a:d1:46:9d:b4:69:e5:3c:e1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Oct 19 04:26:31 2025 GMT Not After : Oct 22 07:45:31 2025 GMT Subject: CN=5EB1C1AE11350B23C04F9A3C4B4CACF8529D1189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:6d:e4:32:d9:bb:51:c7:7f:c7:f6:49:70: fd:3a:7f:bd:96:40:75:f6:64:c5:1a:68:5b:58:2e: 40:c9:a9:a5:5a:cc:94:37:29:93:95:ca:f1:d3:4f: 38:ca:60:fc:2e:98:e9:ef:f8:ac:15:b3:80:56:49: 63:f4:cb:d5:80:ce:12:8c:63:93:53:4e:87:36:11: 12:96:30:d5:ae:4b:fc:7b:54:17:06:28:8e:ab:95: 90:7f:65:a7:ed:3f:23:cf:84:14:87:bd:d3:ef:8b: 9c:a0:22:7e:40:33:3a:35:51:6a:64:5d:10:6b:82: e4:02:33:b3:c2:51:b9:71:a0:68:0e:cf:21:12:7d: b8:32:42:d0:80:d8:97:e4:f5:51:55:5e:ae:09:19: d5:e0:cf:ba:8c:0f:0c:6a:8d:b3:88:7d:f8:b2:7e: 2c:5b:2a:08:ac:1f:77:d5:cd:f2:77:ff:87:ec:c0: 3b:63:80:1d:81:d8:c7:e8:d6:5b:ca:ac:ea:ed:96: 74:8b:0c:9e:e2:b0:d7:ea:7e:66:f0:cd:0a:02:5a: a1:e9:2c:e8:84:38:00:4d:8c:19:e1:fa:90:20:33: 9f:9e:36:06:34:99:f3:bb:9d:e9:45:a7:a9:15:41: 62:a0:1c:c2:6b:79:5d:af:15:e7:12:99:37:f1:77: 6e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B1:C1:AE:11:35:0B:23:C0:4F:9A:3C:4B:4C:AC:F8:52:9D:11:89 X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c2:6a:e7:d0:4e:df:d8:ca:ae:ec:c0:af:ef:f0:e7:f3:49: ed:af:c4:2b:e2:6f:31:9d:0e:5f:48:61:c1:f7:6b:d0:01:5f: 65:fb:f4:f1:b5:9f:6c:12:d8:3c:45:2b:14:bb:4f:fc:57:08: 64:33:df:1e:54:62:40:e7:40:b9:2c:79:cf:23:76:95:89:1b: 3b:a7:29:5f:8e:6b:f9:70:d2:97:af:bd:65:51:30:d9:fa:31: bc:02:74:dc:47:b0:1d:1b:3a:05:cb:83:c0:78:0d:1d:61:7a: 33:e1:2b:d6:c7:da:e0:d1:a4:8b:8d:d4:4e:4e:a9:b2:b9:a1: 88:ad:9c:43:94:ee:cc:c8:d0:5e:0d:3d:e3:f8:87:1c:d2:7e: 03:a6:3f:58:ed:f5:32:87:1a:35:ce:98:fa:3d:c7:f9:ef:38: c7:38:7c:ee:16:bc:52:45:16:5f:a0:29:50:9f:5e:cd:d5:af: 01:b7:d7:e7:31:ee:27:93:de:09:0c:ba:d3:be:d4:46:58:b1: 8a:15:0f:73:9d:fa:aa:3c:84:00:d4:fb:6c:78:5b:be:89:a4: a1:76:c3:a2:57:a7:c4:b8:53:67:57:c3:2c:a1:9d:cc:4f:7b: 91:e6:e5:3e:33:51:0b:b0:6a:d8:68:02:62:0b:b7:83:6d:02: 79:1b:ae:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7bqol6rRJiR8lrRRp20aeU84bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNTEwMTkwNDI2MzFaFw0yNTEwMjIwNzQ1MzFaMDMxMTAvBgNV BAMTKDVFQjFDMUFFMTEzNTBCMjNDMDRGOUEzQzRCNENBQ0Y4NTI5RDExODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/p23kMtm7Ucd/x/ZJcP06f72W QHX2ZMUaaFtYLkDJqaVazJQ3KZOVyvHTTzjKYPwumOnv+KwVs4BWSWP0y9WAzhKM Y5NTToc2ERKWMNWuS/x7VBcGKI6rlZB/ZaftPyPPhBSHvdPvi5ygIn5AMzo1UWpk XRBrguQCM7PCUblxoGgOzyESfbgyQtCA2Jfk9VFVXq4JGdXgz7qMDwxqjbOIffiy fixbKgisH3fVzfJ3/4fswDtjgB2B2Mfo1lvKrOrtlnSLDJ7isNfqfmbwzQoCWqHp LOiEOABNjBnh+pAgM5+eNgY0mfO7nelFp6kVQWKgHMJreV2vFecSmTfxd25xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXrHBrhE1CyPAT5o8S0ys+FKdEYkwHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDCaufQTt/Yyq7swK/v8OfzSe2vxCvibzGd Dl9IYcH3a9ABX2X79PG1n2wS2DxFKxS7T/xXCGQz3x5UYkDnQLksec8jdpWJGzun KV+Oa/lw0pevvWVRMNn6MbwCdNxHsB0bOgXLg8B4DR1hejPhK9bH2uDRpIuN1E5O qbK5oYitnEOU7szI0F4NPeP4hxzSfgOmP1jt9TKHGjXOmPo9x/nvOMc4fO4WvFJF Fl+gKVCfXs3VrwG31+cx7ieT3gkMutO+1EZYsYoVD3Od+qo8hADU+2x4W76JpKF2 w6JXp8S4U2dXwyyhncxPe5Hm5T4zUQuwathoAmILt4NtAnkbrlI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:40 2025 by rpki-client