$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: feg1jy3eFtyHfY9DG1LZ9K56pjTPZyqwAK/1g+d19to= Subject key identifier: 06:2A:07:28:F2:4F:0C:D6:E8:97:BC:99:70:A3:19:30:8B:01:2E:84 Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 6BF1A88F9A75E46909F88342D6D16AB5D9872173 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 018E Signing time: Wed 02 Jul 2025 07:20:02 +0000 Manifest this update: Wed 02 Jul 2025 07:15:02 +0000 Manifest next update: Sat 05 Jul 2025 16:03:02 +0000 Files and hashes: 1: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: aDTfAjQs+RF0kahXVOd5NZlE+BjMgldIb71FjVmXkIo=) 2: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=) 3: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f1:a8:8f:9a:75:e4:69:09:f8:83:42:d6:d1:6a:b5:d9:87:21:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Jul 2 07:15:02 2025 GMT Not After : Jul 5 16:03:02 2025 GMT Subject: CN=062A0728F24F0CD6E897BC9970A319308B012E84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9c:4f:ab:d1:e5:f9:c7:0b:a2:8b:c0:70:7f: e7:21:98:91:5e:67:ce:f3:ed:09:a2:89:01:8b:fe: 94:67:95:f1:81:ad:bb:d9:34:31:e2:16:fe:c1:6d: b9:03:fb:d3:ea:a6:3f:b1:d2:9a:5f:3b:5a:c2:8b: 2d:eb:c9:72:04:8e:73:70:2e:1f:3d:fc:84:51:7d: a1:9e:02:1d:cb:0a:f8:b6:76:ad:7b:9a:8d:d6:40: 12:22:d7:a9:51:43:a5:2b:9c:8f:c8:e2:50:7d:73: 8e:f1:93:3b:34:68:2c:28:f7:2d:9c:de:80:03:5f: 19:66:b0:8d:8a:27:10:94:1f:78:bf:f8:c2:ba:59: 74:06:9e:8b:93:c8:f9:22:b6:25:28:80:cd:65:51: d7:17:69:26:4a:5e:f6:56:fe:7a:9f:50:42:07:d1: 4c:2d:15:82:90:ab:2c:93:c6:11:9b:2c:01:ba:31: 32:fb:98:89:29:19:93:a2:6d:0f:e7:f9:e3:ac:01: 6e:a8:c3:7d:50:17:17:22:f0:ef:80:93:af:ab:3f: ad:2b:8c:cc:e6:b1:50:68:a8:f0:f9:44:eb:a0:ea: cf:61:9a:4e:a6:0c:3f:b9:f4:d6:33:60:70:a5:88: 4c:0a:56:0a:c1:f7:fe:37:c0:fc:0f:1b:af:c7:86: d2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2A:07:28:F2:4F:0C:D6:E8:97:BC:99:70:A3:19:30:8B:01:2E:84 X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:fa:ec:52:dc:34:cc:ea:22:f7:7e:bb:43:9a:9a:0f:11:0e: 76:9d:2a:14:b5:84:2b:92:7f:fe:0e:29:84:32:f3:4b:f2:53: dd:a2:79:56:f9:7a:10:07:a4:ba:6b:bf:4c:e7:a1:ec:f3:76: db:f8:da:20:c7:f9:28:d7:95:30:41:c2:bc:7e:0c:e9:4f:ed: 55:82:f8:bb:3d:eb:66:9f:4f:35:b9:3c:f7:af:88:88:15:9a: 96:c0:04:c9:9c:ff:29:28:b4:94:14:be:aa:cd:69:43:9e:c1: d3:35:35:70:b4:7a:ae:5e:54:ed:ab:29:eb:2d:6e:4e:82:2b: 01:b4:d6:02:9e:44:2a:81:fd:3f:6b:1a:a7:76:b4:2d:ff:d5: 29:c1:9d:e3:97:c8:8d:60:e6:b9:3b:a1:c3:c3:0a:3b:82:e5: 3f:23:94:ce:29:a9:6e:18:ae:e4:bb:27:52:fb:62:7f:bd:92: de:95:37:79:1c:d2:11:02:76:14:d6:4b:b4:95:4d:ba:ce:84: bf:d0:82:7a:22:1d:77:d2:a4:8e:99:61:b6:6e:0c:0f:81:f1: 6b:20:44:97:29:d3:a6:98:b1:39:19:58:9e:13:3c:ab:2c:86: 59:14:e8:01:7a:e4:a2:db:c7:39:a3:89:a7:5e:8e:c0:32:53: 31:2d:6f:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/Goj5p15GkJ+INC1tFqtdmHIXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTA3MDIwNzE1MDJaFw0yNTA3MDUxNjAzMDJaMDMxMTAvBgNV BAMTKDA2MkEwNzI4RjI0RjBDRDZFODk3QkM5OTcwQTMxOTMwOEIwMTJFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTnE+r0eX5xwuii8Bwf+chmJFe Z87z7QmiiQGL/pRnlfGBrbvZNDHiFv7BbbkD+9Pqpj+x0ppfO1rCiy3ryXIEjnNw Lh89/IRRfaGeAh3LCvi2dq17mo3WQBIi16lRQ6UrnI/I4lB9c47xkzs0aCwo9y2c 3oADXxlmsI2KJxCUH3i/+MK6WXQGnouTyPkitiUogM1lUdcXaSZKXvZW/nqfUEIH 0UwtFYKQqyyTxhGbLAG6MTL7mIkpGZOibQ/n+eOsAW6ow31QFxci8O+Ak6+rP60r jMzmsVBoqPD5ROug6s9hmk6mDD+59NYzYHCliEwKVgrB9/43wPwPG6/HhtKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBioHKPJPDNbol7yZcKMZMIsBLoQwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKL67FLcNMzqIvd+u0Oamg8RDnadKhS1hCuS f/4OKYQy80vyU92ieVb5ehAHpLprv0znoezzdtv42iDH+SjXlTBBwrx+DOlP7VWC +Ls962afTzW5PPeviIgVmpbABMmc/ykotJQUvqrNaUOewdM1NXC0eq5eVO2rKest bk6CKwG01gKeRCqB/T9rGqd2tC3/1SnBneOXyI1g5rk7ocPDCjuC5T8jlM4pqW4Y ruS7J1L7Yn+9kt6VN3kc0hECdhTWS7SVTbrOhL/QgnoiHXfSpI6ZYbZuDA+B8Wsg RJcp06aYsTkZWJ4TPKsshlkU6AF65KLbxzmjiadejsAyUzEtbzk= -----END CERTIFICATE-----Generated at Wed Jul 2 14:50:27 2025 by rpki-client