$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: QcUSBXsNfyo+UlMoweierc2SSWDuOWqFYztbi8LNdRU= Subject key identifier: C0:59:A5:7D:F8:EB:F2:F9:1D:C9:98:3D:31:A3:EA:17:2E:D2:40:E2 Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 41BD7E55B16963745308AB2D88B75B7F10A63E2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 0253 Signing time: Sun 19 Oct 2025 07:40:38 +0000 Manifest this update: Sun 19 Oct 2025 07:35:38 +0000 Manifest next update: Wed 22 Oct 2025 16:29:38 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: mSFrkN8Y+H+BJYHJzG+j+uUwMvV7AU8iHma9MOUKnuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bd:7e:55:b1:69:63:74:53:08:ab:2d:88:b7:5b:7f:10:a6:3e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Oct 19 07:35:38 2025 GMT Not After : Oct 22 16:29:38 2025 GMT Subject: CN=C059A57DF8EBF2F91DC9983D31A3EA172ED240E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:41:2e:d4:a6:f9:79:30:28:be:17:51:9a: d6:5d:e4:47:27:71:e2:4c:bd:7b:f6:65:e5:82:f3: b2:d9:d4:25:6d:e1:78:ef:7f:57:70:33:d2:0a:83: dc:93:c9:0d:61:2d:aa:e2:95:63:60:33:51:87:f8: d9:27:3f:75:39:1c:d3:22:06:4a:65:82:8e:26:5d: ff:45:b3:16:67:86:35:2c:9f:4e:8c:3d:ab:8a:56: ca:9a:bf:f5:b6:29:65:b7:20:cd:cb:8b:c0:b8:12: e7:f3:1a:63:51:b7:a6:59:ee:ee:0b:7a:7b:c6:b1: 75:f8:68:16:61:45:0f:f4:88:06:07:55:a7:ac:1d: a2:67:ca:c4:20:5c:05:36:b8:59:ee:ed:70:c2:cc: 88:3c:3c:ee:a4:ce:b4:c8:46:2a:a7:08:95:8c:09: d3:89:ce:db:92:11:1d:c3:ff:08:4e:a3:e1:5e:2d: 99:9a:41:06:d8:dd:0c:d6:a1:fc:bc:f7:2a:87:42: ff:1e:bc:ea:ab:3b:ad:df:15:22:76:84:47:18:bb: fb:a9:1c:73:19:4a:9a:14:bd:9c:10:8c:2a:bb:b1: 27:7d:71:cf:ad:71:0b:a4:1f:ac:9b:e8:f1:30:c0: a5:ad:60:54:f3:cb:02:33:de:d0:e8:54:2e:69:37: a1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:59:A5:7D:F8:EB:F2:F9:1D:C9:98:3D:31:A3:EA:17:2E:D2:40:E2 X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b1:ff:55:b9:98:90:4c:d9:db:e1:96:cb:81:52:83:a3:b0: a5:64:df:8c:cd:09:75:f0:07:72:e1:54:51:91:a2:f0:8c:f5: a0:cc:bc:0c:fd:1f:48:7a:ee:d3:c5:22:eb:05:60:82:8e:13: 85:ed:4d:cf:ff:35:45:3b:67:4d:55:12:0e:f7:f3:dd:dd:c4: c8:d5:40:60:83:34:0b:83:b5:c6:7f:4d:e2:6e:91:4b:a7:88: 0e:46:65:9c:15:87:b4:0e:09:18:8b:b7:d9:95:9c:0d:cb:76: 21:96:80:67:2c:2a:a8:22:ca:69:6f:ff:b9:87:57:d7:4b:57: 24:8c:48:d9:b5:9e:1d:43:98:20:c7:b3:92:24:90:47:bb:91: 0f:ef:87:47:13:d7:50:2e:89:47:e8:b8:2c:b5:dd:cd:89:03: 99:e2:3a:c2:8f:22:0c:a7:d5:f5:16:de:ec:f2:4f:06:33:99: b7:f4:0a:5c:57:a6:db:88:45:77:fe:36:14:c0:e5:17:75:bc: 47:89:84:6a:b7:38:7f:c6:fb:e7:3c:e1:83:3d:00:74:6a:90: 94:e9:53:b1:77:e4:10:a1:36:6c:05:72:4f:c9:8d:0d:57:51: 54:15:22:84:71:6e:cd:f3:7d:7a:f6:1b:bf:46:35:ab:a8:69: 94:bd:a0:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQb1+VbFpY3RTCKstiLdbfxCmPiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNTEwMTkwNzM1MzhaFw0yNTEwMjIxNjI5MzhaMDMxMTAvBgNV BAMTKEMwNTlBNTdERjhFQkYyRjkxREM5OTgzRDMxQTNFQTE3MkVEMjQwRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCok0Eu1Kb5eTAovhdRmtZd5Ecn ceJMvXv2ZeWC87LZ1CVt4Xjvf1dwM9IKg9yTyQ1hLarilWNgM1GH+NknP3U5HNMi Bkplgo4mXf9FsxZnhjUsn06MPauKVsqav/W2KWW3IM3Li8C4EufzGmNRt6ZZ7u4L envGsXX4aBZhRQ/0iAYHVaesHaJnysQgXAU2uFnu7XDCzIg8PO6kzrTIRiqnCJWM CdOJztuSER3D/whOo+FeLZmaQQbY3QzWofy89yqHQv8evOqrO63fFSJ2hEcYu/up HHMZSpoUvZwQjCq7sSd9cc+tcQukH6yb6PEwwKWtYFTzywIz3tDoVC5pN6FbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwFmlffjr8vkdyZg9MaPqFy7SQOIwHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADix/1W5mJBM2dvhlsuBUoOjsKVk34zNCXXw B3LhVFGRovCM9aDMvAz9H0h67tPFIusFYIKOE4XtTc//NUU7Z01VEg73893dxMjV QGCDNAuDtcZ/TeJukUuniA5GZZwVh7QOCRiLt9mVnA3LdiGWgGcsKqgiymlv/7mH V9dLVySMSNm1nh1DmCDHs5IkkEe7kQ/vh0cT11AuiUfouCy13c2JA5niOsKPIgyn 1fUW3uzyTwYzmbf0ClxXptuIRXf+NhTA5Rd1vEeJhGq3OH/G++c84YM9AHRqkJTp U7F35BChNmwFck/JjQ1XUVQVIoRxbs3zfXr2G79GNauoaZS9oGQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:32:11 2025 by rpki-client