$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: BH3yjaro7PWTfzgR+lDbOJI0mptk+k6yQHVvdC7uIF0= Subject key identifier: EB:0E:40:DA:ED:60:B4:AD:79:71:B1:1B:FD:50:2B:1C:41:19:11:75 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 3CD0C569DA3EDDAAA198268C54AC43051B8AA1F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 0189 Signing time: Sat 18 Oct 2025 11:01:38 +0000 Manifest this update: Sat 18 Oct 2025 10:56:38 +0000 Manifest next update: Tue 21 Oct 2025 15:21:38 +0000 Files and hashes: 1: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: Fls83pQbY/0p3vVEWExQtLEvsXX+aGL2F6xFdCq7vqA=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 3: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d0:c5:69:da:3e:dd:aa:a1:98:26:8c:54:ac:43:05:1b:8a:a1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Oct 18 10:56:38 2025 GMT Not After : Oct 21 15:21:38 2025 GMT Subject: CN=EB0E40DAED60B4AD7971B11BFD502B1C41191175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:df:de:df:15:b8:50:37:d1:18:55:0c:1e: 0c:7d:95:70:40:43:9a:10:0c:38:e6:d6:24:dd:c9: 72:04:2f:d3:73:64:b6:bb:34:ce:1d:aa:b3:dc:98: d6:bb:47:41:5b:bf:82:f0:d1:7c:94:d6:ac:1f:48: 9c:1b:34:ae:54:eb:7b:d4:37:de:ba:ad:aa:44:8d: 55:af:a9:18:5e:13:0a:bf:a1:91:84:04:f1:78:30: 34:89:e2:df:c2:a1:36:fc:42:9f:88:f6:b4:00:26: 00:1e:0e:23:02:dd:8b:14:9e:f2:71:60:42:ac:cd: 60:6f:09:1c:27:d1:de:bb:09:ec:25:4d:59:61:4f: 2c:1e:28:e4:9e:28:41:34:4e:fd:91:b8:91:01:6c: 6c:bd:cd:a8:b0:34:b9:ab:07:d9:a9:b2:78:4d:9d: 3c:06:39:2f:e0:71:37:42:50:ed:8e:fa:51:94:11: 5c:92:12:0b:c9:4e:bb:b8:d9:68:03:bd:9c:1c:e1: 39:d9:08:09:64:f6:29:42:04:d3:74:a5:3c:81:27: 53:f9:cc:5c:a9:75:5d:b1:fe:9b:84:4d:1d:21:0c: d9:fd:3d:2a:85:63:c8:93:f1:b5:b2:e3:42:01:1d: 1d:d3:d8:5f:c5:a2:5f:35:14:d7:07:b1:3a:dd:1d: 4d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0E:40:DA:ED:60:B4:AD:79:71:B1:1B:FD:50:2B:1C:41:19:11:75 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:81:bd:ee:31:01:40:b6:b1:08:06:5b:bb:86:3b:2a:f6:58: 06:d5:6f:d3:9f:09:17:7a:6a:a6:ac:a9:d1:49:87:8f:88:9d: 02:c9:81:05:4c:9e:66:5a:45:01:c9:13:4c:83:55:6c:cc:1f: fd:e8:26:c3:bd:b2:09:a9:2f:47:40:05:7d:4d:9c:92:67:40: 86:36:dc:9e:08:b4:50:27:9b:b1:d2:56:9a:11:19:54:90:45: 8d:aa:5b:2f:df:8c:73:3d:73:4a:69:de:36:b2:53:10:e9:aa: 58:62:be:09:77:55:b0:f1:67:ec:b7:69:24:7a:09:70:31:a7: 62:8b:fb:e2:57:9e:60:ad:1a:b6:98:fb:f0:37:c7:e0:25:03: 76:97:82:65:c1:78:78:c9:10:d7:28:fd:c1:c9:f7:ee:2e:26: 33:6b:7e:16:7c:a0:e4:3e:40:ef:06:87:25:ff:3d:a8:f3:1c: f4:28:67:e2:4e:40:f4:de:73:0a:0c:82:64:d7:db:10:d5:38: 5a:37:31:a5:7b:40:bb:bc:be:b4:59:f8:d4:7a:aa:60:da:a8: 3b:e2:5c:fe:ec:aa:88:91:ef:e2:89:1b:bf:46:8e:3f:16:f4: f4:7c:2f:a5:fb:39:e5:1a:8c:f2:a4:dd:6d:2d:39:cb:5c:09: 9e:4e:7d:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNDFado+3aqhmCaMVKxDBRuKofkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTEwMTgxMDU2MzhaFw0yNTEwMjExNTIxMzhaMDMxMTAvBgNV BAMTKEVCMEU0MERBRUQ2MEI0QUQ3OTcxQjExQkZENTAyQjFDNDExOTExNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjt/e3xW4UDfRGFUMHgx9lXBA Q5oQDDjm1iTdyXIEL9NzZLa7NM4dqrPcmNa7R0Fbv4Lw0XyU1qwfSJwbNK5U63vU N966rapEjVWvqRheEwq/oZGEBPF4MDSJ4t/CoTb8Qp+I9rQAJgAeDiMC3YsUnvJx YEKszWBvCRwn0d67CewlTVlhTyweKOSeKEE0Tv2RuJEBbGy9zaiwNLmrB9mpsnhN nTwGOS/gcTdCUO2O+lGUEVySEgvJTru42WgDvZwc4TnZCAlk9ilCBNN0pTyBJ1P5 zFypdV2x/puETR0hDNn9PSqFY8iT8bWy40IBHR3T2F/Fol81FNcHsTrdHU3FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6w5A2u1gtK15cbEb/VArHEEZEXUwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWBve4xAUC2sQgGW7uGOyr2WAbVb9OfCRd6 aqasqdFJh4+InQLJgQVMnmZaRQHJE0yDVWzMH/3oJsO9sgmpL0dABX1NnJJnQIY2 3J4ItFAnm7HSVpoRGVSQRY2qWy/fjHM9c0pp3jayUxDpqlhivgl3VbDxZ+y3aSR6 CXAxp2KL++JXnmCtGraY+/A3x+AlA3aXgmXBeHjJENco/cHJ9+4uJjNrfhZ8oOQ+ QO8GhyX/PajzHPQoZ+JOQPTecwoMgmTX2xDVOFo3MaV7QLu8vrRZ+NR6qmDaqDvi XP7sqoiR7+KJG79Gjj8W9PR8L6X7OeUajPKk3W0tOctcCZ5OfQI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:29 2025 by rpki-client