$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: t2g5MlBG/M9yZhrznJSj3Jv77GZ1B4TOyzKAOogv8uw= Subject key identifier: 48:49:B0:40:3F:7D:04:7F:D3:19:A2:C1:21:18:31:D1:42:7C:F3:79 Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 2DDDA1D06BB8524E80079D6B4B9D9E185A758ED9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 0238 Signing time: Fri 22 Aug 2025 21:50:05 +0000 Manifest this update: Fri 22 Aug 2025 21:45:05 +0000 Manifest next update: Tue 26 Aug 2025 09:02:05 +0000 Files and hashes: 1: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: WBGtfHcnCXXxVIrMywER6xrQsT+S9vn2sCRIcAP8se0=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: mILgNsqQOC7ukAkdxDoanzwIWxBZqUVcAA8Xp+zkfbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:dd:a1:d0:6b:b8:52:4e:80:07:9d:6b:4b:9d:9e:18:5a:75:8e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Aug 22 21:45:05 2025 GMT Not After : Aug 26 09:02:05 2025 GMT Subject: CN=4849B0403F7D047FD319A2C1211831D1427CF379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:3a:17:08:8b:ca:21:84:02:83:a9:57:c8: 69:a0:4e:87:61:a3:d6:e8:a2:64:73:15:3e:34:0b: 53:43:84:53:23:bf:8a:a5:90:28:ea:76:7a:f4:eb: e1:bf:91:4c:00:1e:1f:33:f9:fc:a7:04:7d:9b:bc: 70:c4:81:d6:d2:a7:d5:8c:e9:d6:30:ee:e9:fd:77: 8a:f1:33:35:c1:7a:4b:d8:be:fa:49:9f:47:4d:41: be:5d:f7:90:a2:62:44:b7:4f:23:61:16:74:ec:3d: 74:b8:b7:00:96:1f:a6:8d:f1:57:dc:b5:de:55:7c: 24:88:cf:b9:70:df:57:ad:c6:b3:f5:d7:f2:ca:38: 87:41:80:da:ab:f4:ae:86:57:b3:9e:9c:b0:e0:30: af:70:cc:e8:28:55:b7:22:7d:71:55:43:ac:db:48: 7a:b7:31:6a:09:60:6a:08:0a:cc:f0:58:22:3f:2e: b9:25:9e:12:85:40:af:af:1c:f1:d2:2c:24:f5:af: ed:1e:b4:57:23:1a:9c:19:95:52:2b:07:6e:63:22: d7:11:ac:3a:e2:a0:d0:69:77:b3:ae:09:66:9b:a0: 58:20:c6:da:af:63:de:4d:3c:5e:00:ad:4d:4d:eb: 55:ff:98:6b:9d:4c:ec:86:b5:e7:d0:03:d3:da:d0: 99:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:49:B0:40:3F:7D:04:7F:D3:19:A2:C1:21:18:31:D1:42:7C:F3:79 X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:86:3a:d4:f6:41:80:90:08:bd:c5:e6:28:36:08:ab:29:1c: e4:e9:0d:ff:ea:86:3d:9a:93:61:a8:f5:ef:be:35:25:16:10: 77:39:96:13:e5:15:50:19:37:36:5e:fd:79:0f:90:ac:02:19: f6:c9:2a:dd:bf:75:87:20:38:a6:0b:58:35:31:dc:cb:88:fe: df:c8:87:bc:ae:58:fb:4f:a3:16:62:b2:14:c6:13:93:1a:63: 76:49:77:4c:d4:d5:fd:be:a7:f3:2f:4c:45:ef:65:64:c5:9a: 8b:e4:ee:9d:bd:8d:f9:2a:8d:3d:6f:62:5e:1e:20:8d:d7:15: db:65:e5:e3:dd:47:94:33:af:43:d8:b5:88:ed:f2:d6:7a:29: 93:c9:6f:70:66:48:f0:9e:40:1a:8a:12:af:d4:1c:de:b7:9e: 07:8e:08:7f:6f:39:fb:f4:11:03:39:72:71:df:8e:da:09:f7: ef:8f:61:78:f5:c2:f1:b3:27:15:00:0f:64:48:a6:e7:7b:a6: 97:d8:6e:d3:e1:a8:2f:8b:c0:1e:5a:51:2d:d8:4a:0a:f7:ce: 79:39:b6:9d:ee:11:e8:7f:54:d5:b1:40:0d:02:f6:98:b8:c7: 42:fa:f0:b5:f7:8d:2a:64:8e:cc:81:de:71:f2:3f:1e:0c:f2: ea:bb:c3:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULd2h0Gu4Uk6AB51rS52eGFp1jtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNTA4MjIyMTQ1MDVaFw0yNTA4MjYwOTAyMDVaMDMxMTAvBgNV BAMTKDQ4NDlCMDQwM0Y3RDA0N0ZEMzE5QTJDMTIxMTgzMUQxNDI3Q0YzNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61ToXCIvKIYQCg6lXyGmgTodh o9boomRzFT40C1NDhFMjv4qlkCjqdnr06+G/kUwAHh8z+fynBH2bvHDEgdbSp9WM 6dYw7un9d4rxMzXBekvYvvpJn0dNQb5d95CiYkS3TyNhFnTsPXS4twCWH6aN8Vfc td5VfCSIz7lw31etxrP11/LKOIdBgNqr9K6GV7OenLDgMK9wzOgoVbcifXFVQ6zb SHq3MWoJYGoICszwWCI/LrklnhKFQK+vHPHSLCT1r+0etFcjGpwZlVIrB25jItcR rDrioNBpd7OuCWaboFggxtqvY95NPF4ArU1N61X/mGudTOyGtefQA9Pa0JnHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSEmwQD99BH/TGaLBIRgx0UJ883kwHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6GOtT2QYCQCL3F5ig2CKspHOTpDf/qhj2a k2Go9e++NSUWEHc5lhPlFVAZNzZe/XkPkKwCGfbJKt2/dYcgOKYLWDUx3MuI/t/I h7yuWPtPoxZishTGE5MaY3ZJd0zU1f2+p/MvTEXvZWTFmovk7p29jfkqjT1vYl4e II3XFdtl5ePdR5Qzr0PYtYjt8tZ6KZPJb3BmSPCeQBqKEq/UHN63ngeOCH9vOfv0 EQM5cnHfjtoJ9++PYXj1wvGzJxUAD2RIpud7ppfYbtPhqC+LwB5aUS3YSgr3znk5 tp3uEeh/VNWxQA0C9pi4x0L68LX3jSpkjsyB3nHyPx4M8uq7w5g= -----END CERTIFICATE-----Generated at Sat Aug 23 10:07:48 2025 by rpki-client