$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: 7J12WMzh9sNCL9uMtFcJgZd7S5CG6mBTyRh1PGfJgks= Subject key identifier: 68:16:9A:BA:6E:F8:C8:41:64:C3:E8:32:AC:80:D7:29:02:1E:A1:85 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 501C7C19FC60C0A2D220E2FE199713DFC88D5A34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 0170 Signing time: Fri 22 Aug 2025 01:21:38 +0000 Manifest this update: Fri 22 Aug 2025 01:16:38 +0000 Manifest next update: Mon 25 Aug 2025 03:25:38 +0000 Files and hashes: 1: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 3: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: D5gq4Jsqz+gHWyNPmNKT/dfLmeaJ8al5X/VZLHluyf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1c:7c:19:fc:60:c0:a2:d2:20:e2:fe:19:97:13:df:c8:8d:5a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Aug 22 01:16:38 2025 GMT Not After : Aug 25 03:25:38 2025 GMT Subject: CN=68169ABA6EF8C84164C3E832AC80D729021EA185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:66:8a:40:d1:af:03:05:49:f3:e5:cf:b8:4a: 62:82:8e:b0:8e:6e:af:b7:7e:7d:3b:9d:94:dc:69: 83:45:c8:91:1d:f2:dc:fa:a5:af:ab:73:80:af:d5: 41:b4:cd:e3:98:c2:6b:54:1e:db:67:f2:ba:00:04: f2:2d:9f:dd:79:a1:01:e1:3b:5b:01:73:6b:a4:c0: 7d:cb:05:ab:f7:16:6f:b5:37:8f:4e:09:15:7a:ee: ab:69:db:21:4f:34:71:53:24:7c:25:66:9d:57:eb: 63:5d:84:61:39:1f:3d:7c:7e:e4:5a:9f:e0:fe:e0: 75:b2:88:84:14:8a:a9:c6:4b:c4:73:b5:10:b4:3e: 30:e7:2a:20:ca:97:04:4f:99:74:e1:89:ce:4b:8e: d6:d5:43:b1:66:db:7d:e6:11:b9:c9:3a:e2:4c:ea: 0c:ee:81:6e:e5:42:34:b5:2d:2e:14:46:0d:a4:af: e2:77:ad:b0:24:ff:a4:51:66:72:2e:e4:e9:2c:ed: 1f:d1:30:b7:12:89:cf:ae:7c:a9:a5:0f:d3:04:dc: a5:2a:d2:d7:66:57:ca:bb:93:3b:a6:10:52:1d:56: 31:b3:09:be:f4:61:6a:82:21:63:0e:5a:78:62:33: f2:4b:a9:08:38:b1:b9:21:b7:34:92:bd:86:84:9f: 25:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:16:9A:BA:6E:F8:C8:41:64:C3:E8:32:AC:80:D7:29:02:1E:A1:85 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5b:05:c8:f5:81:08:4d:d8:83:0d:7d:cf:af:9a:90:3c:fc: 8f:cb:37:4e:49:28:ae:7f:8e:cb:60:3c:fe:3c:cb:46:a4:f1: 9c:34:75:fb:a3:ae:ba:11:0a:1c:12:35:0a:0e:fc:07:d9:cd: 50:00:d8:a2:70:b3:6a:44:5b:5f:2f:bd:65:c1:4f:bb:ca:fc: e9:12:ae:81:fa:fc:b6:3f:59:e5:25:eb:5a:17:7f:57:d7:01: 8a:19:ed:e0:17:d5:8c:fe:d2:cb:3e:c5:89:fe:8d:1c:16:6b: 0d:4a:6b:79:2d:2c:01:75:03:7c:83:1e:3c:4e:2a:13:16:ee: ec:65:ac:72:68:0d:29:4c:66:17:f8:60:8a:e2:e5:06:70:2a: bc:54:9f:1e:ca:ea:d9:0e:df:ab:90:15:ab:6a:64:d8:43:1c: cc:65:5e:14:6b:b6:fb:9f:1b:b9:d3:f5:ea:e4:87:b7:82:c5: 45:13:31:6e:53:b6:98:24:a2:0e:07:a2:d0:99:a3:16:38:33: 3d:4b:f5:aa:af:b6:8c:dd:93:d1:f3:55:62:24:b0:7e:d9:0e: 97:12:48:ec:a7:e1:a3:be:e2:d4:8b:9b:8e:fa:95:29:20:e2: ae:02:d2:b7:9b:6a:ec:9a:ea:66:64:ab:7c:7c:09:a1:7e:bc: c6:fa:71:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUBx8GfxgwKLSIOL+GZcT38iNWjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTA4MjIwMTE2MzhaFw0yNTA4MjUwMzI1MzhaMDMxMTAvBgNV BAMTKDY4MTY5QUJBNkVGOEM4NDE2NEMzRTgzMkFDODBENzI5MDIxRUExODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlZopA0a8DBUnz5c+4SmKCjrCO bq+3fn07nZTcaYNFyJEd8tz6pa+rc4Cv1UG0zeOYwmtUHttn8roABPItn915oQHh O1sBc2ukwH3LBav3Fm+1N49OCRV67qtp2yFPNHFTJHwlZp1X62NdhGE5Hz18fuRa n+D+4HWyiIQUiqnGS8RztRC0PjDnKiDKlwRPmXThic5LjtbVQ7Fm233mEbnJOuJM 6gzugW7lQjS1LS4URg2kr+J3rbAk/6RRZnIu5Oks7R/RMLcSic+ufKmlD9ME3KUq 0tdmV8q7kzumEFIdVjGzCb70YWqCIWMOWnhiM/JLqQg4sbkhtzSSvYaEnyU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaBaaum74yEFkw+gyrIDXKQIeoYUwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhbBcj1gQhN2IMNfc+vmpA8/I/LN05JKK5/ jstgPP48y0ak8Zw0dfujrroRChwSNQoO/AfZzVAA2KJws2pEW18vvWXBT7vK/OkS roH6/LY/WeUl61oXf1fXAYoZ7eAX1Yz+0ss+xYn+jRwWaw1Ka3ktLAF1A3yDHjxO KhMW7uxlrHJoDSlMZhf4YIri5QZwKrxUnx7K6tkO36uQFatqZNhDHMxlXhRrtvuf G7nT9erkh7eCxUUTMW5Ttpgkog4HotCZoxY4Mz1L9aqvtozdk9HzVWIksH7ZDpcS SOyn4aO+4tSLm476lSkg4q4C0rebauya6mZkq3x8CaF+vMb6cWI= -----END CERTIFICATE-----Generated at Sat Aug 23 13:47:00 2025 by rpki-client