$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: LoXQeZGBiZRo58//6BfltA7GyF5lJUr6a72VdwZwrf0= Subject key identifier: 5C:41:CC:95:0D:71:C8:8C:2A:2B:C3:B8:D4:31:7E:38:CA:E4:2E:8D Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 121F6000DC07079D6B6C81BF4A921B689C67CFF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 01A5 Signing time: Sat 23 Aug 2025 02:30:02 +0000 Manifest this update: Sat 23 Aug 2025 02:25:02 +0000 Manifest next update: Tue 26 Aug 2025 11:55:02 +0000 Files and hashes: 1: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=) 2: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: TwlWWhSGQDanUpJri9NLISNI5DML1CFeRSfO9Xf7htk=) 3: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1f:60:00:dc:07:07:9d:6b:6c:81:bf:4a:92:1b:68:9c:67:cf:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Aug 23 02:25:02 2025 GMT Not After : Aug 26 11:55:02 2025 GMT Subject: CN=5C41CC950D71C88C2A2BC3B8D4317E38CAE42E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:de:67:94:2a:4c:2b:86:a3:d7:7d:8f:8c: f6:b1:b2:bc:cb:dc:62:f7:8e:7a:af:c1:e7:5b:01: 78:d1:a9:d3:76:7b:a0:39:85:70:85:4b:74:33:f1: f9:39:9a:30:c9:e5:e0:e5:eb:f7:47:04:c7:bd:63: 70:5f:0c:c3:4d:de:11:ad:8c:d9:8d:9e:dd:b3:2f: 3d:49:fc:16:8c:35:3e:07:c4:e0:1c:31:7a:34:74: 3b:91:03:af:1a:ec:ce:99:14:17:0b:a1:58:4c:8d: c4:38:7c:97:a5:fd:94:3b:4a:79:cd:c9:d4:fc:e7: af:23:f1:12:7c:a0:3f:b3:7a:07:e9:46:c4:8b:f0: 61:d1:22:8a:f3:69:67:72:6b:01:37:7f:a1:cc:16: f3:45:b1:8c:d4:ed:1a:c1:7b:99:dd:e1:df:da:91: 80:71:61:21:67:f8:e2:a3:d3:f3:d8:9b:e3:71:2d: 19:27:1e:70:80:c4:49:d9:49:9f:98:e4:b8:c1:bd: ae:bd:ea:05:3d:5d:a8:da:26:12:c5:d1:ee:07:ee: c9:ae:78:90:13:89:92:31:a0:5f:67:02:b3:bd:1f: 12:30:a1:ec:51:82:e5:10:ef:97:23:c9:b0:c4:4d: 79:b5:db:fc:a6:b7:6d:89:49:2b:34:1e:7e:5d:74: 06:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:41:CC:95:0D:71:C8:8C:2A:2B:C3:B8:D4:31:7E:38:CA:E4:2E:8D X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:68:10:da:1c:a3:28:5b:66:7d:70:a4:30:93:24:cd:73:83: 1a:6e:e4:13:dc:9b:2e:7e:60:75:98:80:77:7a:0b:82:bf:c9: eb:9a:65:71:8f:16:67:01:9c:41:e5:3b:db:e8:e0:e7:43:ad: 22:51:c5:da:26:3c:23:3c:b1:18:00:06:46:67:b9:26:b8:e1: 5d:f4:fd:7a:1f:69:d0:96:e0:a2:cd:38:c8:cc:a3:40:52:e7: eb:e4:65:c4:fa:88:a9:09:c1:d4:db:b0:c0:13:7a:d1:47:d0: 85:ff:9a:b3:ea:94:58:bc:3d:30:cc:d4:8d:e9:e2:4d:cf:2f: 6e:57:91:76:ad:b8:34:87:c0:e4:96:e5:2c:4b:c3:6e:8a:cc: 76:9b:0f:3e:af:7f:a6:cc:74:9b:ed:50:12:4e:c6:24:a4:04: 60:04:0f:b2:de:fb:42:82:b5:3b:5f:72:62:73:5b:58:8e:76: 7c:3f:27:15:52:8a:7c:93:f7:a3:dc:12:49:0c:9c:41:6b:43: 57:5a:ea:5c:78:1c:da:ed:ee:4f:a5:c2:50:c1:ba:69:83:ea: 37:3e:41:76:9e:9a:21:ab:7c:65:0f:b4:2f:8e:58:04:88:49: 1c:5b:d4:0f:c2:b7:4c:79:77:49:c3:94:b3:99:74:2e:fd:b5: 46:75:c3:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEh9gANwHB51rbIG/SpIbaJxnz/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTA4MjMwMjI1MDJaFw0yNTA4MjYxMTU1MDJaMDMxMTAvBgNV BAMTKDVDNDFDQzk1MEQ3MUM4OEMyQTJCQzNCOEQ0MzE3RTM4Q0FFNDJFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuy95nlCpMK4aj132PjPaxsrzL 3GL3jnqvwedbAXjRqdN2e6A5hXCFS3Qz8fk5mjDJ5eDl6/dHBMe9Y3BfDMNN3hGt jNmNnt2zLz1J/BaMNT4HxOAcMXo0dDuRA68a7M6ZFBcLoVhMjcQ4fJel/ZQ7SnnN ydT8568j8RJ8oD+zegfpRsSL8GHRIorzaWdyawE3f6HMFvNFsYzU7RrBe5nd4d/a kYBxYSFn+OKj0/PYm+NxLRknHnCAxEnZSZ+Y5LjBva696gU9XajaJhLF0e4H7smu eJATiZIxoF9nArO9HxIwoexRguUQ75cjybDETXm12/ymt22JSSs0Hn5ddAbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXEHMlQ1xyIwqK8O41DF+OMrkLo0wHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJoENocoyhbZn1wpDCTJM1zgxpu5BPcmy5+ YHWYgHd6C4K/yeuaZXGPFmcBnEHlO9vo4OdDrSJRxdomPCM8sRgABkZnuSa44V30 /XofadCW4KLNOMjMo0BS5+vkZcT6iKkJwdTbsMATetFH0IX/mrPqlFi8PTDM1I3p 4k3PL25XkXatuDSHwOSW5SxLw26KzHabDz6vf6bMdJvtUBJOxiSkBGAED7Le+0KC tTtfcmJzW1iOdnw/JxVSinyT96PcEkkMnEFrQ1da6lx4HNrt7k+lwlDBummD6jc+ QXaemiGrfGUPtC+OWASISRxb1A/Ct0x5d0nDlLOZdC79tUZ1wyM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:30:07 2025 by rpki-client