$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: RseUQhg5lcfBmwYAvye0QNYc0FkHlT725FWw8lvhslo= Subject key identifier: 99:FF:67:2B:A2:22:61:CE:A5:29:AD:20:39:75:1F:BA:30:C1:5F:E7 Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 0A659FAFE82D22CDEC2713E66B780815FA7C9E86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 0517 Signing time: Mon 20 Oct 2025 00:41:13 +0000 Manifest this update: Mon 20 Oct 2025 00:36:13 +0000 Manifest next update: Thu 23 Oct 2025 11:04:13 +0000 Files and hashes: 1: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: hKuamBAx77CwO86y1A7xDVYWjcy9qi6pO1mapMzXVQk=) 2: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=) 3: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=) 4: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: orGm2kehtNBup/cV2HmcwTejM0llQl3ePTMLGyGMe8c=) 5: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=) 6: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=) 7: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:65:9f:af:e8:2d:22:cd:ec:27:13:e6:6b:78:08:15:fa:7c:9e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Oct 20 00:36:13 2025 GMT Not After : Oct 23 11:04:13 2025 GMT Subject: CN=99FF672BA22261CEA529AD2039751FBA30C15FE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:af:bd:20:c6:7f:a7:92:f9:ea:47:00:83: bc:27:28:4c:d5:d8:83:81:70:28:6e:10:77:25:6f: c5:7b:4d:67:e1:6f:39:b1:ab:56:d1:ac:6e:66:11: 4d:67:b1:1e:2f:43:64:8a:b7:d4:15:f6:b3:ee:47: 00:5f:e0:c7:d6:7c:9d:36:df:38:a7:b8:ea:74:14: e6:73:72:77:38:87:cb:ca:f3:1e:76:d2:fb:d0:b2: 31:9d:9a:34:c6:32:fa:b8:96:bc:8a:9d:a8:36:d7: 7f:4e:19:ab:2f:1d:b0:92:29:53:0c:f0:ae:94:eb: 8d:46:91:0d:df:e0:15:a9:b7:f3:5a:81:d7:6e:2c: 24:a0:29:e4:96:67:db:e0:19:89:1d:fd:3f:a6:eb: f6:59:86:f3:ba:5f:0d:0d:77:62:ff:b5:89:8a:b8: 2e:12:04:19:8a:ca:b7:9d:7a:b2:a0:bd:ef:5e:2d: 49:b1:da:f9:e9:1a:7c:88:ac:fa:f7:a0:f5:71:8a: 43:50:23:ec:6e:12:ca:a9:ff:03:b6:73:16:6b:de: f8:22:95:27:51:60:d9:4a:20:41:cf:9e:3d:cb:9b: 6d:5e:d8:27:6c:57:ca:77:f1:75:a6:76:0f:12:c6: 9c:ff:d6:11:69:a9:42:7b:69:f0:93:31:ef:db:c0: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FF:67:2B:A2:22:61:CE:A5:29:AD:20:39:75:1F:BA:30:C1:5F:E7 X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:71:2d:e2:f4:bf:ff:8a:e8:1b:3c:4e:4e:71:d0:5b:e1:ca: 99:28:58:33:25:3b:0a:a5:82:9d:fb:87:f2:a2:46:33:99:dc: ed:b0:db:e1:4e:7d:ea:eb:c9:69:38:59:14:69:12:3a:1a:16: 22:62:91:65:ac:18:06:76:48:76:05:c5:3b:97:f0:c8:66:27: c3:3b:aa:d9:b5:da:ba:dc:3e:ed:31:ab:64:44:bc:d9:02:49: 8f:0c:02:ff:21:58:f1:09:1f:5f:0d:6a:03:05:9c:4c:2a:b4: 1f:9d:e1:c4:f0:21:52:0e:f5:05:87:86:4b:21:31:92:48:d5: e0:32:73:c2:e0:5f:e1:3e:cc:4f:34:ba:8a:0f:85:c4:02:a6: 3d:db:a6:80:6d:42:4f:3c:0c:26:61:11:61:c5:1a:c4:a6:c5: a8:60:be:2c:ed:9c:19:52:79:4e:6e:f5:aa:2b:83:e4:66:21: b0:92:76:48:c4:46:cc:47:d4:80:fb:d3:ad:ed:98:cb:a5:7a: aa:62:11:84:ab:94:62:26:9d:6f:8f:45:6b:ba:bc:f4:64:fb: 9d:9e:b6:f9:0d:f1:b2:4d:e3:ce:da:95:88:b0:d4:75:4e:ee: 92:9c:f7:1a:f0:ad:fa:11:3f:89:96:ac:10:72:67:00:73:1c: a5:c2:c7:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCmWfr+gtIs3sJxPma3gIFfp8noYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNTEwMjAwMDM2MTNaFw0yNTEwMjMxMTA0MTNaMDMxMTAvBgNV BAMTKDk5RkY2NzJCQTIyMjYxQ0VBNTI5QUQyMDM5NzUxRkJBMzBDMTVGRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+T6+9IMZ/p5L56kcAg7wnKEzV 2IOBcChuEHclb8V7TWfhbzmxq1bRrG5mEU1nsR4vQ2SKt9QV9rPuRwBf4MfWfJ02 3zinuOp0FOZzcnc4h8vK8x520vvQsjGdmjTGMvq4lryKnag2139OGasvHbCSKVMM 8K6U641GkQ3f4BWpt/NagdduLCSgKeSWZ9vgGYkd/T+m6/ZZhvO6Xw0Nd2L/tYmK uC4SBBmKyrederKgve9eLUmx2vnpGnyIrPr3oPVxikNQI+xuEsqp/wO2cxZr3vgi lSdRYNlKIEHPnj3Lm21e2CdsV8p38XWmdg8Sxpz/1hFpqUJ7afCTMe/bwKwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmf9nK6IiYc6lKa0gOXUfujDBX+cwHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRxLeL0v/+K6Bs8Tk5x0FvhypkoWDMlOwql gp37h/KiRjOZ3O2w2+FOferryWk4WRRpEjoaFiJikWWsGAZ2SHYFxTuX8MhmJ8M7 qtm12rrcPu0xq2REvNkCSY8MAv8hWPEJH18NagMFnEwqtB+d4cTwIVIO9QWHhksh MZJI1eAyc8LgX+E+zE80uooPhcQCpj3bpoBtQk88DCZhEWHFGsSmxahgviztnBlS eU5u9aorg+RmIbCSdkjERsxH1ID7063tmMuleqpiEYSrlGImnW+PRWu6vPRk+52e tvkN8bJN487alYiw1HVO7pKc9xrwrfoRP4mWrBByZwBzHKXCx6Q= -----END CERTIFICATE-----Generated at Mon Oct 20 13:57:46 2025 by rpki-client