$ rpki-client -vvf repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft File: AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft (raw, json) Hash identifier: kdhYyYzKECCtws+LXbpP9E3l6BB1tJc2YEak2pfnDBk= Subject key identifier: E2:FB:A5:BF:79:01:FB:87:F8:3C:DF:17:24:AB:10:D4:D8:66:2F:91 Authority key identifier: AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 Certificate issuer: /CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Certificate serial: 201329C01433849494BD83B60F28659D84E159A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft Manifest number: 01A2 Signing time: Fri 22 Aug 2025 17:11:14 +0000 Manifest this update: Fri 22 Aug 2025 17:06:14 +0000 Manifest next update: Tue 26 Aug 2025 00:17:14 +0000 Files and hashes: 1: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: fiuKPWuy7RKi+g0sG/LNMj+SSbhL4KU/yazo65GfTmw=) 2: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: EVf2WcFs3bKP8tYqDIaCEQ9aXkKueuElwWbdJ2ysh6o=) 3: AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl (hash: wOyYrXbsJPy1OcKJ5exhTW70LNcpdQhupV+xKOil5CU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:13:29:c0:14:33:84:94:94:bd:83:b6:0f:28:65:9d:84:e1:59:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Validity Not Before: Aug 22 17:06:14 2025 GMT Not After : Aug 26 00:17:14 2025 GMT Subject: CN=E2FBA5BF7901FB87F83CDF1724AB10D4D8662F91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b1:25:cf:c8:34:76:2f:6f:56:e9:83:2f:a0: 50:13:a2:5d:a7:80:b7:ef:6f:24:54:c5:06:fd:b0: d8:78:d9:e4:3c:dd:b5:f5:1f:5e:38:d3:4e:67:ba: 1e:0b:d1:a2:49:74:8b:c4:3d:9d:e5:47:14:55:52: d8:e3:42:65:74:12:2b:e3:99:ac:61:84:db:51:28: 3d:63:ba:0c:60:41:18:0c:c8:39:d4:11:e2:0a:82: 56:8d:47:69:39:f8:43:bb:24:ba:73:e9:9e:15:5d: 5b:38:3a:34:00:68:51:50:c0:85:56:09:ef:c4:1b: f9:1f:99:99:d5:b1:8c:3b:ae:a1:f8:18:77:42:2c: 33:40:24:a2:51:50:5f:5d:b8:d1:2c:16:9f:55:96: 76:54:6c:85:63:d7:1f:6b:f8:88:b3:2c:5a:e2:1a: f7:de:0f:60:e2:36:a6:24:01:28:aa:95:10:6d:4b: 03:ef:5d:3f:46:da:c6:3a:32:77:51:0c:48:61:1f: fa:d8:3d:13:76:59:18:5a:8e:c0:a9:0d:3f:66:50: 10:78:6c:af:51:49:01:03:66:d9:f1:33:74:5c:20: d5:91:d2:43:3f:e3:4b:07:e7:99:cc:a8:ac:49:85: bc:e3:7b:d1:d0:11:b4:95:ca:e8:25:a8:c6:f9:b5: a6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FB:A5:BF:79:01:FB:87:F8:3C:DF:17:24:AB:10:D4:D8:66:2F:91 X509v3 Authority Key Identifier: keyid:AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:bd:7b:96:6f:20:15:38:68:12:12:9d:02:bb:d6:93:15:59: 20:70:cb:3f:66:6d:43:ee:49:24:28:75:5f:f8:ac:12:1b:f9: 5d:28:80:87:9e:ca:da:e1:3f:14:fb:f6:bf:65:a5:56:a0:ff: fe:28:d0:ed:cc:f8:cb:66:79:31:22:ef:eb:96:f8:57:92:ab: de:cf:ae:c3:0c:38:e2:55:1c:6b:f0:8e:f0:1d:97:b3:2c:8b: 5d:f5:02:40:bd:63:6b:a4:82:3a:c6:f5:ff:d5:aa:7a:81:9a: 5a:cf:8a:87:f3:a4:18:89:5c:11:e8:24:12:6a:71:d2:5b:be: 48:5a:6f:c7:da:94:c8:f6:a8:22:a2:85:f6:36:dc:d4:c0:1b: 2a:02:c4:42:ab:ee:fe:e4:d9:5b:12:48:a5:31:11:5f:b7:1c: ec:6a:1c:be:15:62:2b:19:93:a3:10:00:92:b3:74:94:24:e6: 36:de:08:b7:2e:1d:f7:59:af:02:09:0e:f5:11:dd:31:3e:3f: 8a:21:da:d2:82:fa:54:30:ec:48:20:a6:c8:6e:b9:86:70:1a: da:66:2c:36:42:13:f5:bb:02:29:a1:24:7b:e4:28:fd:c7:f7: 0b:03:c4:1a:26:df:c3:41:b9:31:9f:da:e0:a8:eb:14:63:76: e7:df:b4:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBMpwBQzhJSUvYO2DyhlnYThWaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2 OUZGNUUyMDAeFw0yNTA4MjIxNzA2MTRaFw0yNTA4MjYwMDE3MTRaMDMxMTAvBgNV BAMTKEUyRkJBNUJGNzkwMUZCODdGODNDREYxNzI0QUIxMEQ0RDg2NjJGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcsSXPyDR2L29W6YMvoFATol2n gLfvbyRUxQb9sNh42eQ83bX1H144005nuh4L0aJJdIvEPZ3lRxRVUtjjQmV0Eivj maxhhNtRKD1jugxgQRgMyDnUEeIKglaNR2k5+EO7JLpz6Z4VXVs4OjQAaFFQwIVW Ce/EG/kfmZnVsYw7rqH4GHdCLDNAJKJRUF9duNEsFp9VlnZUbIVj1x9r+IizLFri GvfeD2DiNqYkASiqlRBtSwPvXT9G2sY6MndRDEhhH/rYPRN2WRhajsCpDT9mUBB4 bK9RSQEDZtnxM3RcINWR0kM/40sH55nMqKxJhbzje9HQEbSVyuglqMb5taaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4vulv3kB+4f4PN8XJKsQ1NhmL5EwHwYDVR0j BBgwFoAUrnthqcFnk3hMwlzsApVRbGn/XiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTg5NWNlYi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC9BRTdCNjFBOUMx Njc5Mzc4NENDMjVDRUMwMjk1NTE2QzY5RkY1RTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2OUZG NUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUx NkM2OUZGNUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABm9e5ZvIBU4aBISnQK71pMVWSBwyz9mbUPu SSQodV/4rBIb+V0ogIeeytrhPxT79r9lpVag//4o0O3M+MtmeTEi7+uW+FeSq97P rsMMOOJVHGvwjvAdl7Msi131AkC9Y2ukgjrG9f/VqnqBmlrPiofzpBiJXBHoJBJq cdJbvkhab8falMj2qCKihfY23NTAGyoCxEKr7v7k2VsSSKUxEV+3HOxqHL4VYisZ k6MQAJKzdJQk5jbeCLcuHfdZrwIJDvUR3TE+P4oh2tKC+lQw7EggpshuuYZwGtpm LDZCE/W7AimhJHvkKP3H9wsDxBom38NBuTGf2uCo6xRjdufftEU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:07:27 2025 by rpki-client