$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: aSrbcKN5JIFgxTITx2oWyX+tgZ22aFuh53lfgGc0Up0= Subject key identifier: 9F:7E:70:A1:73:A7:F9:2B:A9:9F:2C:08:CB:B7:77:10:8C:F6:E4:DC Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 3AEDB6933F73D7AA51A2138CF54966AE56D964B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: 0189 Signing time: Sat 23 Aug 2025 07:40:59 +0000 Manifest this update: Sat 23 Aug 2025 07:35:59 +0000 Manifest next update: Tue 26 Aug 2025 13:59:59 +0000 Files and hashes: 1: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: tbN19feblT3PguVaZeJVSZOFHq52R/v7NXiFpVjRDJ4=) 2: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: H/C8JBNaVqOow9m1g+QZ6kwM7JKkj4ce0Cna5R3evE0=) 3: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: UeHjxvwxeCrQ0mZmQUnfqp55XXsgyz+ZyVSC07SF5hU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ed:b6:93:3f:73:d7:aa:51:a2:13:8c:f5:49:66:ae:56:d9:64:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: Aug 23 07:35:59 2025 GMT Not After : Aug 26 13:59:59 2025 GMT Subject: CN=9F7E70A173A7F92BA99F2C08CBB777108CF6E4DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d0:ec:de:76:ec:5c:01:23:2a:d1:89:69:82: 1a:94:7c:a5:32:86:44:1a:d7:67:90:66:86:73:f7: 23:66:ad:c3:bd:9e:89:a4:0b:a1:d5:2b:48:ea:ef: 46:ae:69:6e:97:e2:89:4a:8f:c0:a3:a0:3b:68:f7: d7:ce:c3:21:60:80:4f:15:26:55:81:df:97:d3:0d: 9a:65:09:eb:cb:1a:28:86:b1:61:bf:c8:70:f5:9c: 2f:a3:b5:1b:74:ca:a3:d1:45:12:05:fd:96:d6:cd: 4c:ca:f3:96:64:e1:4d:b0:17:a2:07:91:26:fb:20: ea:ec:02:84:b8:f3:8b:c2:ab:a6:bd:d9:1e:21:1b: 83:2b:d1:d0:2c:c6:cf:90:6b:b7:53:8f:11:52:f3: 0c:58:de:b8:3f:59:45:3b:3e:6d:d4:8e:0a:df:39: a1:c4:a9:9b:41:bf:81:03:d7:30:f8:96:5f:49:7f: f2:22:e1:4c:1c:d6:f9:88:39:ca:fa:a7:2b:2a:85: fc:5c:da:2e:c8:d0:57:87:4c:7b:9b:20:c3:44:a3: 5a:6d:9e:d0:9f:5f:85:8e:11:89:01:83:7b:90:64: 8c:96:17:fa:9d:86:10:32:a9:ba:c5:4c:c3:f3:c3: 0e:ae:07:7a:8c:7a:fd:d9:b4:43:72:a1:60:a1:eb: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7E:70:A1:73:A7:F9:2B:A9:9F:2C:08:CB:B7:77:10:8C:F6:E4:DC X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1e:9b:5c:24:a8:43:d7:d9:63:b0:58:e1:3b:aa:7c:44:db: 6c:1b:3c:58:19:0f:2e:07:31:e8:b8:0d:ad:c3:4a:68:25:87: 4c:17:9d:80:c2:78:22:43:95:cd:8e:22:6a:97:ca:74:52:47: 81:d9:4d:8f:82:a2:dd:20:78:fb:c7:05:b5:0c:2b:9b:eb:91: 7c:30:d7:22:f9:48:05:e2:6a:8c:31:e9:e4:14:f5:84:6b:ab: 27:11:ff:e4:f7:c1:05:f5:f9:9a:5b:25:e1:fd:af:29:f4:e6: b0:79:1c:2d:aa:fd:05:a8:62:d3:74:dc:ee:20:f6:08:e7:de: c2:61:95:13:1e:eb:ed:44:16:06:25:3c:04:13:22:45:95:26: a3:72:33:b0:37:5b:ab:de:e6:30:52:5e:f1:c3:69:f6:93:13: 08:d4:41:e3:d6:ae:dd:b0:b5:c6:73:8a:03:c3:45:8f:2b:97: 42:71:e1:8f:2c:e4:20:1c:2d:96:f2:6f:30:11:ee:25:99:9a: 0b:90:4e:b2:ca:57:b2:40:14:c7:70:06:5e:54:d8:7a:75:1a: cd:b0:7c:da:79:9c:eb:9d:25:91:3c:3e:ed:fa:b1:18:98:49: f2:ef:f2:a5:2d:c0:53:bf:d5:63:dc:16:5c:ef:e0:be:b2:59: 3f:6f:a9:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOu22kz9z16pRohOM9UlmrlbZZLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNTA4MjMwNzM1NTlaFw0yNTA4MjYxMzU5NTlaMDMxMTAvBgNV BAMTKDlGN0U3MEExNzNBN0Y5MkJBOTlGMkMwOENCQjc3NzEwOENGNkU0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn0OzeduxcASMq0YlpghqUfKUy hkQa12eQZoZz9yNmrcO9nomkC6HVK0jq70auaW6X4olKj8CjoDto99fOwyFggE8V JlWB35fTDZplCevLGiiGsWG/yHD1nC+jtRt0yqPRRRIF/ZbWzUzK85Zk4U2wF6IH kSb7IOrsAoS484vCq6a92R4hG4Mr0dAsxs+Qa7dTjxFS8wxY3rg/WUU7Pm3Ujgrf OaHEqZtBv4ED1zD4ll9Jf/Ii4Uwc1vmIOcr6pysqhfxc2i7I0FeHTHubIMNEo1pt ntCfX4WOEYkBg3uQZIyWF/qdhhAyqbrFTMPzww6uB3qMev3ZtENyoWCh6zFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn35woXOn+SupnywIy7d3EIz25NwwHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgem1wkqEPX2WOwWOE7qnxE22wbPFgZDy4H Mei4Da3DSmglh0wXnYDCeCJDlc2OImqXynRSR4HZTY+Cot0gePvHBbUMK5vrkXww 1yL5SAXiaowx6eQU9YRrqycR/+T3wQX1+ZpbJeH9ryn05rB5HC2q/QWoYtN03O4g 9gjn3sJhlRMe6+1EFgYlPAQTIkWVJqNyM7A3W6ve5jBSXvHDafaTEwjUQePWrt2w tcZzigPDRY8rl0Jx4Y8s5CAcLZbybzAR7iWZmguQTrLKV7JAFMdwBl5U2Hp1Gs2w fNp5nOudJZE8Pu36sRiYSfLv8qUtwFO/1WPcFlzv4L6yWT9vqf4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:14:14 2025 by rpki-client