$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: wbfjjS7Na9qeb3t+jC7SuD8A/dsKuGPuuKccruPPQ/I= Subject key identifier: 83:54:67:E0:65:E7:1E:1B:9E:2B:EA:9E:D7:52:6E:A7:44:04:8A:D6 Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 0BEF627475F5BA7D8972C4C0BBAB643C1AA0C8E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 04FD Signing time: Thu 21 Aug 2025 06:01:14 +0000 Manifest this update: Thu 21 Aug 2025 05:56:14 +0000 Manifest next update: Sun 24 Aug 2025 15:32:14 +0000 Files and hashes: 1: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=) 2: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: hKuamBAx77CwO86y1A7xDVYWjcy9qi6pO1mapMzXVQk=) 3: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: 0/gaUuDs5eM9/7RcEhABqyRXjMNC7kdX0xMrAdsrcvk=) 4: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=) 5: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=) 6: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=) 7: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ef:62:74:75:f5:ba:7d:89:72:c4:c0:bb:ab:64:3c:1a:a0:c8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Aug 21 05:56:14 2025 GMT Not After : Aug 24 15:32:14 2025 GMT Subject: CN=835467E065E71E1B9E2BEA9ED7526EA744048AD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:0e:04:3a:df:6e:5c:18:34:02:14:33:0f: 80:fd:68:9e:0b:ae:b8:ca:cd:bf:b5:fd:af:1f:71: 67:54:8e:0d:ec:2e:50:61:7f:e4:e1:e1:f8:77:e0: b6:1f:20:9c:ba:a7:ac:ae:21:5f:36:71:95:fe:8b: 4b:b3:50:e2:34:8a:04:74:54:bc:ed:eb:3d:db:5f: 83:82:df:73:d5:74:cf:a7:14:2d:66:8d:d8:be:5f: cd:31:52:e9:b5:80:fc:68:d7:20:46:ca:b2:79:08: 4f:6c:61:4d:05:bd:04:66:ef:56:c9:6f:c6:ff:98: 1d:72:65:e6:c6:9e:59:8b:5d:36:b7:e7:0d:df:09: 99:d0:98:8e:3f:bd:dc:c3:31:a3:33:a3:f5:ae:3a: 55:6f:16:75:23:0c:d2:4d:e3:77:b2:1c:36:00:c9: e9:7a:4e:2e:9b:31:2a:7e:c8:13:27:e4:88:e2:26: a0:ba:b3:65:5e:01:5a:af:55:ef:ae:c2:67:9b:e1: c8:ec:7a:38:8c:5c:41:b2:3c:90:c3:e7:4c:99:2a: 71:d6:0c:d9:37:0e:74:75:54:f1:71:76:0f:94:01: 76:5b:d4:bb:c4:e9:b9:af:8c:8f:6f:c0:b6:43:74: 5a:b6:c1:64:0f:c0:7f:ed:43:4c:e6:af:e0:d8:61: 4e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:54:67:E0:65:E7:1E:1B:9E:2B:EA:9E:D7:52:6E:A7:44:04:8A:D6 X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d9:cb:db:f9:00:3c:96:00:e9:17:fc:d8:f5:0f:68:5c:4f: 95:0f:52:41:ac:78:ba:45:c1:72:13:39:6c:38:4e:4a:0f:b4: 0a:e3:6f:2f:79:e1:e0:93:dd:57:85:18:4a:4e:0e:27:b1:c0: f2:5e:8e:1c:72:07:d0:41:2f:cf:32:c2:99:a6:f3:83:ad:21: dd:54:06:30:5e:58:1b:5e:6d:b3:80:ca:2b:8f:fa:4a:36:7d: 49:e6:a8:43:3d:42:b8:57:59:4c:d6:44:f2:c9:af:77:8f:fc: a9:d7:ae:8f:2c:cb:71:3e:97:4b:59:93:8d:77:f2:31:2c:de: 31:e0:d4:c8:c1:54:a3:19:2d:15:6e:da:5e:4d:e1:2f:4b:8d: f3:76:9a:cf:9d:70:fe:d9:28:0d:5a:05:58:97:ba:00:d8:ce: 70:84:6a:ca:44:e9:c8:ea:a0:35:c6:8f:42:df:21:ac:10:07: 1f:cd:80:ee:f8:63:94:16:e8:82:e1:90:26:7b:86:40:09:8c: 6b:47:3b:42:a5:d6:a4:e3:1c:5f:9d:5e:cf:fa:81:9f:31:cd: 92:64:68:4b:a1:48:70:e5:f4:0a:63:48:40:24:d1:b4:c9:72: 35:ab:61:25:3a:b0:0b:24:3c:a4:76:e3:be:10:f4:03:49:ef: e5:57:8e:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+9idHX1un2JcsTAu6tkPBqgyOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNTA4MjEwNTU2MTRaFw0yNTA4MjQxNTMyMTRaMDMxMTAvBgNV BAMTKDgzNTQ2N0UwNjVFNzFFMUI5RTJCRUE5RUQ3NTI2RUE3NDQwNDhBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33w4EOt9uXBg0AhQzD4D9aJ4L rrjKzb+1/a8fcWdUjg3sLlBhf+Th4fh34LYfIJy6p6yuIV82cZX+i0uzUOI0igR0 VLzt6z3bX4OC33PVdM+nFC1mjdi+X80xUum1gPxo1yBGyrJ5CE9sYU0FvQRm71bJ b8b/mB1yZebGnlmLXTa35w3fCZnQmI4/vdzDMaMzo/WuOlVvFnUjDNJN43eyHDYA yel6Ti6bMSp+yBMn5IjiJqC6s2VeAVqvVe+uwmeb4cjsejiMXEGyPJDD50yZKnHW DNk3DnR1VPFxdg+UAXZb1LvE6bmvjI9vwLZDdFq2wWQPwH/tQ0zmr+DYYU5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg1Rn4GXnHhueK+qe11Jup0QEitYwHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzZy9v5ADyWAOkX/Nj1D2hcT5UPUkGseLpF wXITOWw4TkoPtArjby954eCT3VeFGEpODiexwPJejhxyB9BBL88ywpmm84OtId1U BjBeWBtebbOAyiuP+ko2fUnmqEM9QrhXWUzWRPLJr3eP/KnXro8sy3E+l0tZk413 8jEs3jHg1MjBVKMZLRVu2l5N4S9LjfN2ms+dcP7ZKA1aBViXugDYznCEaspE6cjq oDXGj0LfIawQBx/NgO74Y5QW6ILhkCZ7hkAJjGtHO0Kl1qTjHF+dXs/6gZ8xzZJk aEuhSHDl9ApjSEAk0bTJcjWrYSU6sAskPKR2474Q9ANJ7+VXjkE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:35:22 2025 by rpki-client