$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: 6MopxW+kAtjdrwojNCqweoF37JjLox4KNKHQE4xlL1Y= Subject key identifier: AB:02:65:EC:EB:2A:AE:22:79:11:FD:BE:D8:42:64:98:E2:13:6F:1F Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 4136B41D94244A762AD9327092521C8587784B65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 0239 Signing time: Fri 22 Aug 2025 10:10:37 +0000 Manifest this update: Fri 22 Aug 2025 10:05:37 +0000 Manifest next update: Mon 25 Aug 2025 21:16:37 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: f+PW9eWLFVxPu86rS8g5x3G0O8R3/zbueksSoqho/J8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:36:b4:1d:94:24:4a:76:2a:d9:32:70:92:52:1c:85:87:78:4b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Aug 22 10:05:37 2025 GMT Not After : Aug 25 21:16:37 2025 GMT Subject: CN=AB0265ECEB2AAE227911FDBED8426498E2136F1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:c6:72:1d:3c:ca:ac:3c:fb:57:b8:59:7c: f6:d6:d5:7e:90:62:7b:20:35:22:75:62:52:6c:05: 9c:72:52:b9:7d:0a:b3:d1:b9:c2:21:cf:3f:bf:1e: f0:d7:4e:29:f9:22:9f:8b:f3:55:ce:e6:23:88:f3: 69:fd:f4:5d:ca:f1:04:a9:7c:da:03:a6:7f:c1:91: 54:91:e0:cd:2b:93:0f:26:88:c4:51:c5:5f:95:0a: d1:62:57:4d:43:fd:ef:b1:a6:50:69:06:20:db:7f: 79:b1:fc:63:ed:6e:62:e9:06:34:8b:1f:4c:93:c8: 0b:1e:ac:9b:51:10:36:5a:43:d8:8e:24:ca:36:e2: ad:14:07:96:90:57:1d:96:39:74:f3:fb:8d:75:2e: 63:6b:ab:bc:8d:16:92:00:f6:0e:2e:36:0e:4f:fc: b8:57:f2:28:ee:8c:a6:00:5e:c3:39:b7:39:98:71: bf:05:8b:af:74:ec:ab:b7:57:7a:cf:67:59:32:35: ab:f5:29:0b:05:c3:18:1c:8a:3a:6b:a0:68:19:e9: 5d:ff:c0:c1:36:c1:26:8c:e8:d9:60:1d:62:0e:a9: 9f:89:03:43:99:e7:eb:d1:17:50:b9:0f:b4:03:44: f0:c4:cf:2d:d3:ca:d8:07:8f:ed:10:32:42:0c:3a: 4b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:02:65:EC:EB:2A:AE:22:79:11:FD:BE:D8:42:64:98:E2:13:6F:1F X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ee:b0:1e:b7:b1:0a:54:29:b2:5a:a5:be:76:b4:4a:d6:15: 01:b5:63:c9:15:77:37:38:03:30:41:df:d3:82:7f:4c:f6:28: 60:6b:c7:37:3b:0b:5b:f0:6d:6b:94:11:2b:46:f2:f5:e5:d9: ce:6c:46:2c:cc:a4:06:6f:95:9b:52:06:be:51:32:78:b8:d9: 0d:82:4e:63:ad:de:d9:77:85:9b:93:ae:41:71:1e:e0:4f:a6: 57:fe:59:ef:ac:e4:02:4a:d2:59:97:69:59:04:86:3c:f3:b1: 75:2e:ca:ff:14:40:5b:b0:4d:97:72:17:e8:d0:a2:d9:91:13: f5:60:01:10:a6:a2:6e:a3:b5:6f:80:6a:d6:c6:b0:98:66:4a: bd:24:2e:56:4c:42:74:29:78:50:15:b4:77:1f:3f:c0:f7:cd: 8a:91:3c:0a:1b:4d:0a:35:06:91:c7:3d:f3:0b:32:43:b6:6a: 20:c3:e3:9a:10:11:46:80:e6:10:02:e7:fe:95:0b:a4:59:7e: 2b:9c:67:b7:ef:6d:de:22:54:9e:d1:ca:f5:69:61:56:ae:e1: 67:c4:29:c7:04:f1:1a:5a:1a:e0:37:69:bc:78:21:50:a2:ca: b2:8c:a5:0e:28:f6:59:6e:b8:6e:d2:28:da:3c:33:63:85:1b: 33:44:57:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTa0HZQkSnYq2TJwklIchYd4S2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNTA4MjIxMDA1MzdaFw0yNTA4MjUyMTE2MzdaMDMxMTAvBgNV BAMTKEFCMDI2NUVDRUIyQUFFMjI3OTExRkRCRUQ4NDI2NDk4RTIxMzZGMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWcZyHTzKrDz7V7hZfPbW1X6Q YnsgNSJ1YlJsBZxyUrl9CrPRucIhzz+/HvDXTin5Ip+L81XO5iOI82n99F3K8QSp fNoDpn/BkVSR4M0rkw8miMRRxV+VCtFiV01D/e+xplBpBiDbf3mx/GPtbmLpBjSL H0yTyAserJtREDZaQ9iOJMo24q0UB5aQVx2WOXTz+411LmNrq7yNFpIA9g4uNg5P /LhX8ijujKYAXsM5tzmYcb8Fi6907Ku3V3rPZ1kyNav1KQsFwxgcijproGgZ6V3/ wME2wSaM6NlgHWIOqZ+JA0OZ5+vRF1C5D7QDRPDEzy3TytgHj+0QMkIMOktTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqwJl7OsqriJ5Ef2+2EJkmOITbx8wHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfusB63sQpUKbJapb52tErWFQG1Y8kVdzc4 AzBB39OCf0z2KGBrxzc7C1vwbWuUEStG8vXl2c5sRizMpAZvlZtSBr5RMni42Q2C TmOt3tl3hZuTrkFxHuBPplf+We+s5AJK0lmXaVkEhjzzsXUuyv8UQFuwTZdyF+jQ otmRE/VgARCmom6jtW+AatbGsJhmSr0kLlZMQnQpeFAVtHcfP8D3zYqRPAobTQo1 BpHHPfMLMkO2aiDD45oQEUaA5hAC5/6VC6RZfiucZ7fvbd4iVJ7RyvVpYVau4WfE KccE8RpaGuA3abx4IVCiyrKMpQ4o9lluuG7SKNo8M2OFGzNEVws= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:53 2025 by rpki-client