$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft File: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft (raw, json) Hash identifier: kFO2SaPc32+Mof09bGQslOehxEsz1CgwRFn2pM1AQNs= Subject key identifier: C0:76:54:3C:88:48:E4:1B:AF:A5:3D:C6:1E:19:3F:19:B9:89:AE:EA Authority key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Certificate issuer: /CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Certificate serial: 0AB2038A7E86DCD954906AF5EA173C57465C07C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft Manifest number: 02F1 Signing time: Thu 21 Aug 2025 06:41:57 +0000 Manifest this update: Thu 21 Aug 2025 06:36:57 +0000 Manifest next update: Sun 24 Aug 2025 12:33:57 +0000 Files and hashes: 1: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: U53MbJZVdHMZelcGWK9+w7EaXlcDpDpc+jeZ3MbM1Kw=) 2: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl (hash: 2TeaC7nw9yoXIwnZoMevJQmcNcZCbcuPHKpw7CHIZOE=) 3: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: jtOEt7E3nAQ6Fw9cITIUUkvRpfUDsJxH4CxbFv1xpGk=) 4: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: gOoZfgSIZIk3IBqctpdE6ERoqLaD97A4ApFjnTt/tAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b2:03:8a:7e:86:dc:d9:54:90:6a:f5:ea:17:3c:57:46:5c:07:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Validity Not Before: Aug 21 06:36:57 2025 GMT Not After : Aug 24 12:33:57 2025 GMT Subject: CN=C076543C8848E41BAFA53DC61E193F19B989AEEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:d2:ec:65:e2:78:83:88:68:25:51:56:f0: 20:67:8c:b1:ab:20:ea:a2:31:b3:f9:f6:0f:16:5d: b3:c4:95:46:c4:15:38:5b:08:c4:04:bf:e2:58:32: dc:cc:f6:2c:1f:20:9e:2e:f3:c6:9d:ab:fb:23:6b: 7b:41:9d:e4:2a:24:c3:17:0d:38:c5:9b:37:b5:8d: 21:bb:98:aa:73:0a:4f:fc:af:dd:92:31:02:2e:64: 46:74:2b:5d:5b:4d:02:98:72:16:f1:cf:aa:ea:ad: 4c:96:89:1d:13:95:61:ef:9d:b5:1d:aa:70:9a:b3: a1:dc:25:49:04:15:c2:ef:06:6a:2a:20:95:fb:d3: ab:19:f7:23:ec:36:7f:28:ef:1d:d7:6a:40:b1:55: 36:1a:56:d4:6d:7d:cb:fc:2c:a6:c9:7b:cc:db:0f: e0:41:d3:c6:0b:11:59:e3:8b:c2:ad:32:e1:e1:d9: bd:68:48:d8:11:0b:66:43:f2:d6:62:48:2b:02:78: 14:cf:8f:a1:6b:04:66:f8:05:16:50:03:f9:3f:9c: 2a:79:99:63:6c:33:04:df:54:11:b6:d3:fc:74:24: cb:0d:0a:d7:86:98:4e:5d:94:e0:73:5b:cc:84:b0: 12:de:e0:e5:5e:fe:f6:62:2a:b0:b1:75:6f:e7:23: ee:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:76:54:3C:88:48:E4:1B:AF:A5:3D:C6:1E:19:3F:19:B9:89:AE:EA X509v3 Authority Key Identifier: keyid:AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7b:9b:5a:0a:bc:1b:5f:c7:a4:1e:08:33:1d:85:31:73:66: 6a:90:81:fb:a9:fb:63:3c:44:b2:23:ae:a7:a5:54:c7:78:e7: 75:60:d9:62:dc:33:ef:4b:3f:89:8a:ec:fc:b0:a0:a4:fc:3a: be:f8:0f:19:a2:71:80:fe:4d:9d:f7:26:26:94:8c:d5:71:7a: 36:e1:3c:45:f4:d2:20:42:0f:b3:68:6e:79:93:82:61:c2:66: 01:2e:74:81:29:b6:9a:c1:7a:dc:7f:3b:05:af:84:66:d2:dc: 00:9e:aa:ee:79:09:44:e3:c4:57:cb:9e:b1:a5:3b:6e:5b:79: 87:d2:78:8b:28:04:29:55:d6:bb:f9:e8:83:0e:15:23:c6:51: ce:2e:09:43:30:8f:8a:fa:97:4f:8c:1a:19:e8:29:cc:be:c6: 0b:4a:5f:25:e0:3c:fa:1e:32:a9:b3:f5:85:8b:b5:d6:9f:8b: a9:bf:70:f1:e7:d4:6d:f7:f3:3d:bb:e8:64:2a:99:25:7a:2a: c1:e3:b0:37:2e:8e:a0:e5:cb:92:ce:09:b6:0e:fc:cb:1c:6b: d4:97:c0:91:01:42:01:31:dc:47:d5:40:72:dd:61:c7:ec:bc: 38:d9:11:8c:60:34:6c:2f:26:4b:7c:e3:1b:15:35:3f:2f:28: a2:28:5e:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrIDin6G3NlUkGr16hc8V0ZcB8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5 MjMxMDUwNDAeFw0yNTA4MjEwNjM2NTdaFw0yNTA4MjQxMjMzNTdaMDMxMTAvBgNV BAMTKEMwNzY1NDNDODg0OEU0MUJBRkE1M0RDNjFFMTkzRjE5Qjk4OUFFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ctLsZeJ4g4hoJVFW8CBnjLGr IOqiMbP59g8WXbPElUbEFThbCMQEv+JYMtzM9iwfIJ4u88adq/sja3tBneQqJMMX DTjFmze1jSG7mKpzCk/8r92SMQIuZEZ0K11bTQKYchbxz6rqrUyWiR0TlWHvnbUd qnCas6HcJUkEFcLvBmoqIJX706sZ9yPsNn8o7x3XakCxVTYaVtRtfcv8LKbJe8zb D+BB08YLEVnji8KtMuHh2b1oSNgRC2ZD8tZiSCsCeBTPj6FrBGb4BRZQA/k/nCp5 mWNsMwTfVBG20/x0JMsNCteGmE5dlOBzW8yEsBLe4OVe/vZiKrCxdW/nI+4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwHZUPIhI5BuvpT3GHhk/GbmJruowHwYDVR0j BBgwFoAUrrMv+gAHwKBn+4zp3XfP75IxBQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMC9BRUIzMkZGQTAw MDdDMEEwNjdGQjhDRTlERDc3Q0ZFRjkyMzEwNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5MjMx MDUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk ZDQtMjYzNDcyN2E5ZWQ0LzAvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NG RUY5MjMxMDUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF17m1oKvBtfx6QeCDMdhTFzZmqQgfup+2M8 RLIjrqelVMd453Vg2WLcM+9LP4mK7PywoKT8Or74DxmicYD+TZ33JiaUjNVxejbh PEX00iBCD7NobnmTgmHCZgEudIEptprBetx/OwWvhGbS3ACequ55CUTjxFfLnrGl O25beYfSeIsoBClV1rv56IMOFSPGUc4uCUMwj4r6l0+MGhnoKcy+xgtKXyXgPPoe Mqmz9YWLtdafi6m/cPHn1G338z276GQqmSV6KsHjsDcujqDly5LOCbYO/Msca9SX wJEBQgEx3EfVQHLdYcfsvDjZEYxgNGwvJkt84xsVNT8vKKIoXsE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:53 2025 by rpki-client