$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: d2JdoZpfTQ86KRx0K+5MGShs+YSz0R7X4AV/zo5u2ig= Subject key identifier: 01:72:CA:91:A6:76:C0:09:50:D3:A6:A5:89:89:83:39:ED:E2:AF:E8 Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 59C303708ACA54206CC33C5B3C1C7037842AC39B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 037E Signing time: Fri 22 Aug 2025 13:51:17 +0000 Manifest this update: Fri 22 Aug 2025 13:46:17 +0000 Manifest next update: Mon 25 Aug 2025 20:10:17 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: c8ZBxIkYu4lQhPh7KOJpCZXHyG4WojlA9cssQRO5Q3k=) 2: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: I36kueH/YJVhZ0jO8svMt0LAJohCIGX3s584xgueR3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c3:03:70:8a:ca:54:20:6c:c3:3c:5b:3c:1c:70:37:84:2a:c3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: Aug 22 13:46:17 2025 GMT Not After : Aug 25 20:10:17 2025 GMT Subject: CN=0172CA91A676C00950D3A6A589898339EDE2AFE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:92:d4:1d:8b:23:9a:5a:a8:de:05:c4:c0:ce: b5:e8:27:d5:82:3a:5b:fb:d5:1d:1c:11:54:fb:22: f3:07:02:ae:11:2c:cb:78:56:53:1e:8d:5f:83:48: 23:39:75:15:2b:12:32:cb:35:32:1c:e4:32:50:89: 8f:5d:ae:0e:45:57:98:18:2a:f9:12:0a:d7:04:ae: a4:e3:29:80:48:9d:cf:a3:30:26:02:3a:21:ff:cf: 6d:c5:0a:30:eb:d1:36:5d:fa:92:d0:0f:2a:df:fa: cd:f4:d7:51:5e:be:99:0b:fb:c2:48:50:e1:f4:02: b5:fe:eb:f6:a9:9e:6d:37:29:d6:6b:9c:fa:5d:4c: 5b:ce:f2:61:50:58:d5:38:d9:f5:f9:33:24:de:4f: e5:d2:69:2f:f3:5e:0d:0e:ef:c4:0c:86:9d:49:ee: 42:4e:32:d3:d6:31:74:0f:7b:b8:2f:d6:a6:1b:c6: ab:a1:f1:ab:a5:a3:7a:43:33:12:ef:4e:91:1d:d3: d2:13:ac:e8:ca:9c:9d:07:0e:dd:2c:1a:b6:8c:6d: 13:b2:e5:3d:e8:b5:f6:42:15:d5:8e:b2:4b:92:db: 0a:bf:94:26:14:85:e7:79:d6:cf:3e:75:2e:29:ae: fa:7b:b9:56:76:a0:cd:be:b4:71:49:56:df:4e:0d: 2b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:72:CA:91:A6:76:C0:09:50:D3:A6:A5:89:89:83:39:ED:E2:AF:E8 X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:24:fb:9a:fb:54:b1:a3:64:0f:45:ff:80:96:8c:a3:aa:5a: fc:8f:24:d4:8f:f2:bf:5e:4c:2b:fc:df:7f:ff:55:d6:fb:29: c1:b4:78:b6:a7:b0:78:18:7d:8f:c6:06:1c:20:6d:c3:51:e5: 12:ba:15:ef:aa:73:04:03:9a:c8:cb:a2:2e:5d:0f:c1:50:ef: db:9b:ed:e7:f1:3c:21:54:58:b5:52:ee:37:b3:8d:6d:f7:0d: 1e:2d:78:b0:08:e6:0c:85:d6:14:7a:ef:8b:e5:c6:1d:ab:ba: da:f5:a6:cd:94:49:5d:6b:08:d6:4b:76:24:4f:f4:6e:72:fa: c0:33:99:37:65:fc:7d:48:85:2c:e1:95:f2:3e:2d:f8:f6:4c: e9:98:8c:ff:13:42:39:44:7c:cb:c0:1b:25:5b:b4:1f:fd:57: 28:cb:6f:73:c8:f6:7b:2a:46:11:12:b4:db:95:b4:25:9e:fd: 82:74:cf:6e:98:9f:03:10:a8:97:14:68:7e:61:ca:bd:e5:9c: 26:88:8b:73:54:ba:21:6e:57:6f:36:5f:75:70:62:86:44:10: 80:29:bb:2a:ec:f4:0d:67:04:c1:34:d6:3f:2b:7f:18:6f:63: 89:94:13:53:17:07:4b:06:55:a1:35:a4:db:88:6f:59:28:0f: 34:52:8e:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWcMDcIrKVCBswzxbPBxwN4Qqw5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNTA4MjIxMzQ2MTdaFw0yNTA4MjUyMDEwMTdaMDMxMTAvBgNV BAMTKDAxNzJDQTkxQTY3NkMwMDk1MEQzQTZBNTg5ODk4MzM5RURFMkFGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbktQdiyOaWqjeBcTAzrXoJ9WC Olv71R0cEVT7IvMHAq4RLMt4VlMejV+DSCM5dRUrEjLLNTIc5DJQiY9drg5FV5gY KvkSCtcErqTjKYBInc+jMCYCOiH/z23FCjDr0TZd+pLQDyrf+s3011FevpkL+8JI UOH0ArX+6/apnm03KdZrnPpdTFvO8mFQWNU42fX5MyTeT+XSaS/zXg0O78QMhp1J 7kJOMtPWMXQPe7gv1qYbxquh8aulo3pDMxLvTpEd09ITrOjKnJ0HDt0sGraMbROy 5T3otfZCFdWOskuS2wq/lCYUhed51s8+dS4prvp7uVZ2oM2+tHFJVt9ODSulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAXLKkaZ2wAlQ06aliYmDOe3ir+gwHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEk+5r7VLGjZA9F/4CWjKOqWvyPJNSP8r9e TCv833//Vdb7KcG0eLansHgYfY/GBhwgbcNR5RK6Fe+qcwQDmsjLoi5dD8FQ79ub 7efxPCFUWLVS7jezjW33DR4teLAI5gyF1hR674vlxh2rutr1ps2USV1rCNZLdiRP 9G5y+sAzmTdl/H1IhSzhlfI+Lfj2TOmYjP8TQjlEfMvAGyVbtB/9VyjLb3PI9nsq RhEStNuVtCWe/YJ0z26YnwMQqJcUaH5hyr3lnCaIi3NUuiFuV282X3VwYoZEEIAp uyrs9A1nBME01j8rfxhvY4mUE1MXB0sGVaE1pNuIb1koDzRSjho= -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:36 2025 by rpki-client