$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: 6+IgEChtLUh8bPG8ZEDRKoITcMfi4y5zV55y6N/4Bh0= Subject key identifier: DA:DC:F4:7E:9D:68:B0:09:E4:29:D9:F7:66:C1:7A:74:AB:CC:E7:A7 Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 0E4A0EE65F8AB6840D0DA9D55DB040DD79D7C001 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 0251 Signing time: Sat 18 Oct 2025 22:50:05 +0000 Manifest this update: Sat 18 Oct 2025 22:45:05 +0000 Manifest next update: Wed 22 Oct 2025 02:03:05 +0000 Files and hashes: 1: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: mILgNsqQOC7ukAkdxDoanzwIWxBZqUVcAA8Xp+zkfbw=) 2: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: RBevrKcuuIGs3DLQq/994sBhrIM1obPm0m1w+L7Y8Kk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 02:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4a:0e:e6:5f:8a:b6:84:0d:0d:a9:d5:5d:b0:40:dd:79:d7:c0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Oct 18 22:45:05 2025 GMT Not After : Oct 22 02:03:05 2025 GMT Subject: CN=DADCF47E9D68B009E429D9F766C17A74ABCCE7A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:0f:f4:85:07:75:43:16:d2:c6:3a:b1:ff: 56:e4:68:58:38:2f:d4:b1:03:46:79:32:c3:ed:65: 38:d8:55:4c:5e:0d:f7:7f:14:1a:5d:fd:92:f7:23: e7:8d:ed:74:ff:c5:c7:01:a4:39:69:e8:04:36:bd: 96:d7:2c:c8:bf:01:f5:cb:dc:dc:95:3f:74:3e:b4: 6d:b3:53:08:40:ed:47:33:c3:9b:36:2d:00:c8:dd: 0e:fc:af:8e:de:53:98:a1:98:ae:5e:36:20:14:ac: ce:7a:2a:f1:24:02:6e:fd:1f:89:c7:43:d8:6c:76: 4b:de:b5:01:2d:a8:fb:82:f0:91:d3:e3:20:61:e8: ab:c4:95:5f:2f:ce:b6:c1:30:46:d0:d3:a5:1d:d9: 27:bb:92:28:68:00:d6:aa:bb:1a:bd:43:21:77:53: 0c:60:89:d3:c5:c1:a7:4f:65:9f:9a:72:a2:c8:a4: ca:a1:95:de:ec:aa:ec:10:06:7e:9b:0d:a5:57:3e: f0:19:b5:df:9a:ef:aa:08:0e:71:f8:6f:a6:fd:45: ff:d4:52:59:6e:eb:2d:1b:0b:03:09:67:41:16:15: 1f:2d:03:a7:47:5c:5b:7e:73:3b:aa:b0:9d:1a:59: 25:41:65:4b:61:9b:d0:33:c6:6e:85:78:bb:90:08: 62:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DC:F4:7E:9D:68:B0:09:E4:29:D9:F7:66:C1:7A:74:AB:CC:E7:A7 X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b5:89:6b:fb:a5:76:f8:0f:e8:1d:c8:af:fd:40:41:08:2a: fe:fd:19:3d:a5:32:99:cd:1d:f6:35:38:cc:20:2e:f0:16:8c: f5:ee:6c:1e:59:87:4c:c9:86:8d:b4:7e:18:dc:6d:b8:1c:82: 64:bb:10:5c:b3:f5:50:5c:f3:1b:71:5f:f2:99:10:f7:f2:d6: 39:80:66:c6:50:11:aa:a6:9b:22:b4:4b:dc:dd:57:bd:50:c1: ae:9c:4e:81:07:86:ec:06:70:6f:d1:ed:61:9a:0c:fe:82:85: 99:db:0f:0a:3c:04:f5:66:b2:98:ba:7c:a6:00:6e:2d:c2:ac: ac:47:f0:ba:c3:16:fc:78:cc:51:34:8d:d1:40:50:45:e5:02: 36:5a:da:37:c0:4a:bd:aa:bf:34:4a:54:06:24:ec:e4:e9:ab: a9:44:fc:04:a9:f5:ee:0b:7b:a4:fb:eb:dc:de:0a:e6:55:08: 38:60:ac:b9:8f:e8:8d:e3:19:22:42:eb:ff:76:64:0a:67:bb: e4:a6:6b:a9:11:dd:cb:67:51:9e:63:5b:90:51:4d:2b:b9:2e: 82:1b:c0:2b:03:e4:b8:08:37:51:b7:b0:cf:8e:42:a9:79:9e: 1d:37:82:a1:51:8f:7b:0e:15:d2:73:b9:c5:dd:3c:b7:57:24: bc:0c:bf:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDkoO5l+KtoQNDanVXbBA3XnXwAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNTEwMTgyMjQ1MDVaFw0yNTEwMjIwMjAzMDVaMDMxMTAvBgNV BAMTKERBRENGNDdFOUQ2OEIwMDlFNDI5RDlGNzY2QzE3QTc0QUJDQ0U3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMA/0hQd1QxbSxjqx/1bkaFg4 L9SxA0Z5MsPtZTjYVUxeDfd/FBpd/ZL3I+eN7XT/xccBpDlp6AQ2vZbXLMi/AfXL 3NyVP3Q+tG2zUwhA7Uczw5s2LQDI3Q78r47eU5ihmK5eNiAUrM56KvEkAm79H4nH Q9hsdkvetQEtqPuC8JHT4yBh6KvElV8vzrbBMEbQ06Ud2Se7kihoANaquxq9QyF3 UwxgidPFwadPZZ+acqLIpMqhld7squwQBn6bDaVXPvAZtd+a76oIDnH4b6b9Rf/U Ullu6y0bCwMJZ0EWFR8tA6dHXFt+czuqsJ0aWSVBZUthm9Azxm6FeLuQCGIlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2tz0fp1osAnkKdn3ZsF6dKvM56cwHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu1iWv7pXb4D+gdyK/9QEEIKv79GT2lMpnN HfY1OMwgLvAWjPXubB5Zh0zJho20fhjcbbgcgmS7EFyz9VBc8xtxX/KZEPfy1jmA ZsZQEaqmmyK0S9zdV71Qwa6cToEHhuwGcG/R7WGaDP6ChZnbDwo8BPVmspi6fKYA bi3CrKxH8LrDFvx4zFE0jdFAUEXlAjZa2jfASr2qvzRKVAYk7OTpq6lE/ASp9e4L e6T769zeCuZVCDhgrLmP6I3jGSJC6/92ZApnu+Sma6kR3ctnUZ5jW5BRTSu5LoIb wCsD5LgIN1G3sM+OQql5nh03gqFRj3sOFdJzucXdPLdXJLwMv6A= -----END CERTIFICATE-----Generated at Tue Oct 21 01:34:20 2025 by rpki-client