$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: 1jJ6ofxmusuCz4eqHy5I4bKnmWX0O1snxWo4eAQHomg= Subject key identifier: B1:DC:E9:0C:A9:6D:7F:07:A1:65:CC:84:2E:61:44:BF:D8:E1:83:A9 Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 327DE49526B5735757DC6F49C0072E5F39B4E02F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 01BE Signing time: Sun 19 Oct 2025 01:10:02 +0000 Manifest this update: Sun 19 Oct 2025 01:05:02 +0000 Manifest next update: Wed 22 Oct 2025 01:27:02 +0000 Files and hashes: 1: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=) 2: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: /QSprw4cWWpeAHqOAPb1mtVtQp5fnQ1aXUSG4vmZLdk=) 3: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7d:e4:95:26:b5:73:57:57:dc:6f:49:c0:07:2e:5f:39:b4:e0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Oct 19 01:05:02 2025 GMT Not After : Oct 22 01:27:02 2025 GMT Subject: CN=B1DCE90CA96D7F07A165CC842E6144BFD8E183A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:df:f3:2d:7e:16:8b:9d:48:a5:0b:da:33: b1:e6:9b:59:c5:f0:9e:4f:60:5c:0a:fc:8f:2a:4a: 67:6a:6f:0e:d5:65:dc:31:e3:d6:aa:6f:c2:13:bd: 4b:a3:be:6e:b1:11:c8:07:47:ff:22:a7:86:fd:45: bf:4a:ce:3e:12:74:bd:9e:d6:70:57:7b:17:4d:ce: e9:77:a1:fe:62:c2:ff:b0:67:b8:06:26:3d:a3:4f: ab:ae:49:c4:24:40:88:e5:23:61:99:e8:ad:e3:3f: 0d:b3:2b:e7:d0:20:6c:05:8b:79:67:1c:a5:45:b8: ae:0d:2a:2f:75:51:e7:8a:13:b4:96:66:c2:db:ec: 53:a1:44:14:3a:69:7f:17:0c:00:66:dc:b7:8a:ba: 52:08:b6:7d:28:7e:2b:af:91:22:92:22:3c:04:9c: 25:19:b8:e8:1f:cd:e5:01:1c:0c:f1:1d:ac:4e:48: 84:2d:c8:4b:36:0d:81:7c:1c:32:09:7a:19:79:2a: a7:37:98:72:12:1b:b9:ff:63:70:57:4b:23:25:c8: ee:3e:7e:df:79:a9:81:50:1e:d8:1b:11:19:76:a1: e9:1f:25:ed:d1:52:db:ed:29:9b:aa:ad:51:11:73: 6d:44:a2:58:7f:04:f7:61:7f:20:d5:be:28:86:57: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DC:E9:0C:A9:6D:7F:07:A1:65:CC:84:2E:61:44:BF:D8:E1:83:A9 X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:74:c5:d0:48:89:87:ad:a8:5b:d2:60:fb:44:d2:f4:a4:02: 5d:f7:b6:54:e6:4a:19:9d:53:18:c1:4e:13:3e:75:aa:ca:f8: 1c:d6:42:11:08:eb:23:52:4e:4d:71:2d:7f:6d:a3:68:00:f3: fc:02:12:60:f6:0e:23:4b:ab:d2:86:3e:24:f0:26:aa:2d:c8: 96:cb:d3:72:96:4f:84:9c:93:77:3c:4b:6f:82:28:1b:25:fe: af:a9:4d:73:9b:dc:d0:76:17:fa:34:8e:4d:6b:b8:e4:9c:9e: 2c:b5:6c:99:83:4a:c5:d6:d6:82:94:2a:97:41:c0:f6:78:83: 1e:e7:0c:63:0d:91:99:6e:07:fe:48:41:54:df:4a:84:a3:f9: f1:cf:27:ad:4e:1d:31:9e:bd:9e:89:89:7d:56:35:60:61:f8: 05:1f:a5:82:23:66:3a:73:a9:96:36:d5:46:36:ef:6a:01:3b: 19:96:df:56:52:5a:8c:8a:d1:c4:c4:cb:fd:a1:86:fc:0e:99: 09:47:77:d8:66:bd:68:84:87:7d:fd:3c:b7:44:ed:d7:bf:c2: 15:7d:e4:6d:61:72:90:f8:72:9b:dd:49:de:34:b1:89:a1:6e: 20:00:9b:02:64:8e:70:ba:de:17:c5:65:71:c5:d3:32:fd:3f: 56:a5:57:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMn3klSa1c1dX3G9JwAcuXzm04C8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTEwMTkwMTA1MDJaFw0yNTEwMjIwMTI3MDJaMDMxMTAvBgNV BAMTKEIxRENFOTBDQTk2RDdGMDdBMTY1Q0M4NDJFNjE0NEJGRDhFMTgzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxaN/zLX4Wi51IpQvaM7Hmm1nF 8J5PYFwK/I8qSmdqbw7VZdwx49aqb8ITvUujvm6xEcgHR/8ip4b9Rb9Kzj4SdL2e 1nBXexdNzul3of5iwv+wZ7gGJj2jT6uuScQkQIjlI2GZ6K3jPw2zK+fQIGwFi3ln HKVFuK4NKi91UeeKE7SWZsLb7FOhRBQ6aX8XDABm3LeKulIItn0ofiuvkSKSIjwE nCUZuOgfzeUBHAzxHaxOSIQtyEs2DYF8HDIJehl5Kqc3mHISG7n/Y3BXSyMlyO4+ ft95qYFQHtgbERl2oekfJe3RUtvtKZuqrVERc21Eolh/BPdhfyDVviiGV1aRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsdzpDKltfwehZcyELmFEv9jhg6kwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJ0xdBIiYetqFvSYPtE0vSkAl33tlTmShmd UxjBThM+darK+BzWQhEI6yNSTk1xLX9to2gA8/wCEmD2DiNLq9KGPiTwJqotyJbL 03KWT4Sck3c8S2+CKBsl/q+pTXOb3NB2F/o0jk1ruOScniy1bJmDSsXW1oKUKpdB wPZ4gx7nDGMNkZluB/5IQVTfSoSj+fHPJ61OHTGevZ6JiX1WNWBh+AUfpYIjZjpz qZY21UY272oBOxmW31ZSWoyK0cTEy/2hhvwOmQlHd9hmvWiEh339PLdE7de/whV9 5G1hcpD4cpvdSd40sYmhbiAAmwJkjnC63hfFZXHF0zL9P1alV5E= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:00 2025 by rpki-client