$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: UctdL76zvp8veV4+hGvzF0ilTWxSE9gcCum613YisVI= Subject key identifier: 47:15:8E:51:28:05:66:F6:AF:EE:5B:AE:F1:F1:55:84:EC:E3:03:3E Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 56098F0CC814EB655C6F3BC9951A09ADD52505E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 0221 Signing time: Sun 29 Jun 2025 17:20:35 +0000 Manifest this update: Sun 29 Jun 2025 17:15:35 +0000 Manifest next update: Thu 03 Jul 2025 02:20:35 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: uCnCxdQDrYciQbhG+GiFTJKohkSJ+ovVAFrpbKYbX5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:09:8f:0c:c8:14:eb:65:5c:6f:3b:c9:95:1a:09:ad:d5:25:05:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Jun 29 17:15:35 2025 GMT Not After : Jul 3 02:20:35 2025 GMT Subject: CN=47158E51280566F6AFEE5BAEF1F15584ECE3033E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:1c:ef:5f:a5:18:0c:2f:9c:f0:21:44:66: a5:ac:cd:65:ae:63:3a:53:18:5b:22:82:60:52:00: b4:dd:c6:89:6d:4c:fa:62:f7:55:3c:12:30:6e:f9: 7a:78:d8:79:57:74:23:61:4b:77:e5:25:7c:f3:dc: f3:37:08:86:d0:6b:2b:25:d4:3a:25:e4:14:c0:78: 42:4f:64:f2:08:4f:32:e6:c9:cf:90:36:ee:61:1a: e7:eb:c8:7c:e2:d1:22:00:f2:c8:33:e7:36:96:f1: b1:3d:30:59:80:24:1e:7d:cb:99:92:5b:21:69:c1: 5a:33:c0:fe:9e:25:10:81:fd:ae:59:04:a8:98:e2: df:74:d4:45:25:ca:68:74:59:eb:bf:7f:17:af:e8: 4e:b7:60:c5:86:7d:40:2e:9e:31:ae:3b:c7:03:45: 1c:3c:34:7c:97:85:81:83:0f:80:8a:cf:94:36:70: 26:4c:0c:cb:62:4e:53:3b:f3:b2:40:0e:32:0a:17: eb:8f:a1:66:50:81:1b:36:d2:b5:b9:3a:05:da:59: f6:15:2d:08:49:af:b0:fc:ff:29:3f:ce:7d:a8:49: 62:53:fc:c6:91:25:c5:fd:27:e8:6e:1f:79:a6:38: 0a:c1:fc:a5:31:6c:da:fa:c7:ec:c3:d6:d7:51:d6: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:15:8E:51:28:05:66:F6:AF:EE:5B:AE:F1:F1:55:84:EC:E3:03:3E X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9f:b1:a5:69:04:40:b2:91:d2:ad:8e:3d:3b:39:dd:36:d3: 98:c9:46:02:e4:81:b0:d7:b7:e3:cd:40:34:26:c1:c6:b9:3d: b7:f3:88:58:ab:10:38:de:da:ff:04:7a:e8:cb:49:46:b8:0e: 6f:33:c2:b3:0c:9d:63:b5:84:dc:0b:63:97:88:98:32:23:fd: f4:8e:36:02:bb:82:25:d1:20:9d:b0:b3:cc:1b:1f:6b:d5:6f: 19:27:a1:cf:0c:72:48:ec:70:38:a0:55:2c:b9:9a:f6:22:6f: 87:ef:72:8c:26:81:1b:ed:8e:c9:85:1a:06:2b:78:ac:e6:ab: 25:03:04:2e:f7:5d:20:a2:39:58:16:1d:e0:e5:92:3d:e8:a6: 3a:35:97:7b:50:9d:39:87:23:2f:17:7e:f1:39:e2:52:fb:25: df:2d:4d:95:d5:2f:46:49:8b:cf:fc:bf:93:f8:c3:d6:eb:a6: ce:fc:23:77:35:7c:92:ed:04:19:35:f5:e0:a6:21:89:14:96: 07:e6:47:88:da:c6:48:8e:4b:43:29:6b:7c:dd:aa:92:c5:79: b0:15:c7:6b:51:49:74:0f:2b:d9:aa:9a:8b:d3:fe:9c:80:10: e1:4b:f5:fe:8c:a5:31:05:d9:66:7e:c7:ad:07:cb:48:3d:b9: b8:e7:c4:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgmPDMgU62VcbzvJlRoJrdUlBegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNTA2MjkxNzE1MzVaFw0yNTA3MDMwMjIwMzVaMDMxMTAvBgNV BAMTKDQ3MTU4RTUxMjgwNTY2RjZBRkVFNUJBRUYxRjE1NTg0RUNFMzAzM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfxzvX6UYDC+c8CFEZqWszWWu YzpTGFsigmBSALTdxoltTPpi91U8EjBu+Xp42HlXdCNhS3flJXzz3PM3CIbQaysl 1Dol5BTAeEJPZPIITzLmyc+QNu5hGufryHzi0SIA8sgz5zaW8bE9MFmAJB59y5mS WyFpwVozwP6eJRCB/a5ZBKiY4t901EUlymh0Weu/fxev6E63YMWGfUAunjGuO8cD RRw8NHyXhYGDD4CKz5Q2cCZMDMtiTlM787JADjIKF+uPoWZQgRs20rW5OgXaWfYV LQhJr7D8/yk/zn2oSWJT/MaRJcX9J+huH3mmOArB/KUxbNr6x+zD1tdR1oAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURxWOUSgFZvav7luu8fFVhOzjAz4wHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmfsaVpBECykdKtjj07Od0205jJRgLkgbDX t+PNQDQmwca5PbfziFirEDje2v8EeujLSUa4Dm8zwrMMnWO1hNwLY5eImDIj/fSO NgK7giXRIJ2ws8wbH2vVbxknoc8MckjscDigVSy5mvYib4fvcowmgRvtjsmFGgYr eKzmqyUDBC73XSCiOVgWHeDlkj3opjo1l3tQnTmHIy8XfvE54lL7Jd8tTZXVL0ZJ i8/8v5P4w9brps78I3c1fJLtBBk19eCmIYkUlgfmR4jaxkiOS0Mpa3zdqpLFebAV x2tRSXQPK9mqmovT/pyAEOFL9f6MpTEF2WZ+x60Hy0g9ubjnxGQ= -----END CERTIFICATE-----Generated at Mon Jun 30 07:14:28 2025 by rpki-client