$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft File: AC555447BA62C39107F16BF572F82A417F728DBF.mft (raw, json) Hash identifier: a7e9Srtf+v/uV0XfBVEzPcboE3TJA9QnOHV1SP8E+tU= Subject key identifier: F3:4E:5E:A8:D4:B2:71:F4:E1:56:7D:24:A1:89:58:2E:8D:D8:AC:F1 Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF Certificate serial: 5BF3F84BA767FF38E7F9BC62EB344B4E9A4E9F0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft Manifest number: 0652 Signing time: Sun 19 Oct 2025 17:31:50 +0000 Manifest this update: Sun 19 Oct 2025 17:26:50 +0000 Manifest next update: Thu 23 Oct 2025 00:29:50 +0000 Files and hashes: 1: AS17451.roa (hash: tmM6qX+LFEA2u7mguSoOt69JCSG0LkrLXZokKSQ5vnM=) 2: AS38482.roa (hash: mqOgj/4JaT7AGWmmy0w7CKSJj5WCQYyZUeVO9quFzao=) 3: AC555447BA62C39107F16BF572F82A417F728DBF.crl (hash: BgOrv94nKE3qj0LDspbJZ2gtyGrD+3e7SjCwbIYS0O8=) 4: AS45493.roa (hash: mb0AgCXbkScEv7HGYPRCGM6VDPWZb0xWmZOIeGOHRDA=) 5: AS38060.roa (hash: eOcmz88SeKGkb0DMwImS4Yyf8BOpXzai0Cr7w/OsMC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f3:f8:4b:a7:67:ff:38:e7:f9:bc:62:eb:34:4b:4e:9a:4e:9f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF Validity Not Before: Oct 19 17:26:50 2025 GMT Not After : Oct 23 00:29:50 2025 GMT Subject: CN=F34E5EA8D4B271F4E1567D24A189582E8DD8ACF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:46:11:04:40:3b:b8:92:fe:30:8f:88:4a: b5:12:09:c7:e9:1f:ae:64:10:ef:63:03:43:4f:d0: 87:15:52:23:c9:19:38:94:f1:70:4b:10:68:92:fd: a9:03:b9:d4:ba:6e:a2:b0:1a:95:b2:ee:d7:be:f8: 09:e3:c6:ed:51:e4:f7:ec:15:5a:b7:9d:0b:58:a5: 20:22:32:f7:44:d9:e6:d7:bc:4b:06:19:b5:29:7a: 57:5a:f6:ac:f8:bc:c4:c2:ac:bb:b5:cf:81:03:7c: 2b:6a:44:b8:89:05:d3:44:cb:97:b7:8a:52:e0:dc: d9:d7:96:fb:44:b4:ab:f5:ce:c0:f9:b0:01:c5:c5: 28:4b:7c:5e:86:32:d2:60:ff:24:cc:3a:4b:da:e0: ea:62:92:9d:05:df:25:4b:54:52:a5:cb:2f:03:dc: 37:e0:b6:fc:ed:27:b6:ee:03:7a:93:b4:52:60:2a: 49:a7:e2:85:f4:9b:48:11:ee:b0:bc:e7:4c:58:fe: a3:c1:29:20:38:71:29:c2:7e:a6:9c:ff:b3:e0:be: bd:e9:a8:62:ef:2c:ce:bb:69:2a:74:44:5a:f5:bb: 6d:b4:df:f0:42:e6:6e:d5:7c:c3:7c:7d:d3:c1:3c: 97:60:f9:74:68:72:d3:45:fd:e3:c2:50:35:20:a8: 66:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4E:5E:A8:D4:B2:71:F4:E1:56:7D:24:A1:89:58:2E:8D:D8:AC:F1 X509v3 Authority Key Identifier: keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:34:f5:14:37:d8:b4:21:c4:b7:b9:3c:84:49:43:90:2b:c8: 71:73:ea:65:a1:31:24:42:54:8c:51:c5:14:10:17:28:95:ad: 89:4d:25:24:a6:25:0e:fa:40:69:a7:ee:d4:f7:db:0a:69:81: 22:ad:3d:7d:36:22:80:a0:17:2a:19:72:25:00:85:0b:74:58: ec:b5:6c:47:d5:12:94:1c:7c:33:27:77:ee:91:7c:83:9a:2a: bc:83:da:7e:05:74:4f:23:de:6b:c8:ce:4b:92:0c:d1:b8:5f: 3c:43:35:1b:0d:b3:32:f0:a7:be:04:bc:4c:28:8c:98:14:7f: 3d:9a:d7:43:e4:7e:ca:56:8a:fc:4e:e3:f4:5c:29:28:c9:9b: b3:31:2b:7d:58:cf:0b:d8:01:2d:a7:5c:ca:44:01:7b:5e:e5: aa:ad:1f:6f:85:d7:57:90:38:70:26:3f:b6:37:bb:d2:2e:1f: ec:ff:f7:22:cb:e8:bf:60:5b:f5:0e:5d:2a:bd:98:2e:44:2b: a1:eb:d4:07:cb:67:ea:b9:49:19:14:b2:02:93:32:87:16:0c: f1:5f:77:a9:68:51:00:ee:0d:4d:ac:40:e8:73:3f:b2:ae:ed: 52:d5:ba:8b:bf:b2:34:bd:70:22:c9:6a:68:d3:05:27:db:db: 70:81:61:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/P4S6dn/zjn+bxi6zRLTppOnw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3 RjcyOERCRjAeFw0yNTEwMTkxNzI2NTBaFw0yNTEwMjMwMDI5NTBaMDMxMTAvBgNV BAMTKEYzNEU1RUE4RDRCMjcxRjRFMTU2N0QyNEExODk1ODJFOEREOEFDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOT0YRBEA7uJL+MI+ISrUSCcfp H65kEO9jA0NP0IcVUiPJGTiU8XBLEGiS/akDudS6bqKwGpWy7te++Anjxu1R5Pfs FVq3nQtYpSAiMvdE2ebXvEsGGbUpelda9qz4vMTCrLu1z4EDfCtqRLiJBdNEy5e3 ilLg3NnXlvtEtKv1zsD5sAHFxShLfF6GMtJg/yTMOkva4Opikp0F3yVLVFKlyy8D 3DfgtvztJ7buA3qTtFJgKkmn4oX0m0gR7rC850xY/qPBKSA4cSnCfqac/7Pgvr3p qGLvLM67aSp0RFr1u2203/BC5m7VfMN8fdPBPJdg+XRoctNF/ePCUDUgqGa7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU805eqNSycfThVn0koYlYLo3YrPEwHwYDVR0j BBgwFoAUrFVUR7piw5EH8Wv1cvgqQX9yjb8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC9BQzU1NTQ0N0JB NjJDMzkxMDdGMTZCRjU3MkY4MkE0MTdGNzI4REJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3Rjcy OERCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB NDE3RjcyOERCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG009RQ32LQhxLe5PIRJQ5AryHFz6mWhMSRC VIxRxRQQFyiVrYlNJSSmJQ76QGmn7tT32wppgSKtPX02IoCgFyoZciUAhQt0WOy1 bEfVEpQcfDMnd+6RfIOaKryD2n4FdE8j3mvIzkuSDNG4XzxDNRsNszLwp74EvEwo jJgUfz2a10PkfspWivxO4/RcKSjJm7MxK31YzwvYAS2nXMpEAXte5aqtH2+F11eQ OHAmP7Y3u9IuH+z/9yLL6L9gW/UOXSq9mC5EK6Hr1AfLZ+q5SRkUsgKTMocWDPFf d6loUQDuDU2sQOhzP7Ku7VLVuou/sjS9cCLJamjTBSfb23CBYYE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:21 2025 by rpki-client