$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: 6ZuhbyahKihP0BonHw5n833DokPIjuiCudVADPdwczs= Subject key identifier: C6:E8:0A:B9:E3:91:39:76:70:C2:97:BB:CA:46:86:92:FB:A2:29:7A Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 388B3D6F193D2778E86A2896A192F0E54BEBF83F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 0516 Signing time: Sat 18 Oct 2025 17:10:44 +0000 Manifest this update: Sat 18 Oct 2025 17:05:44 +0000 Manifest next update: Wed 22 Oct 2025 01:15:44 +0000 Files and hashes: 1: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) 2: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) 3: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) 4: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: D65BN5AwIdw1xcBDEtQxeYgttg3qD5HkXbxyVdgGzgQ=) 5: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) 6: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8b:3d:6f:19:3d:27:78:e8:6a:28:96:a1:92:f0:e5:4b:eb:f8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Oct 18 17:05:44 2025 GMT Not After : Oct 22 01:15:44 2025 GMT Subject: CN=C6E80AB9E391397670C297BBCA468692FBA2297A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b3:e8:ce:0e:1f:cd:21:e0:67:34:ae:04:43: 5a:5a:0f:37:1b:51:e3:af:a3:04:5b:b1:7d:63:8d: 15:a0:c9:31:de:87:71:ac:cb:8c:b8:ed:a6:ce:74: c5:c9:e5:73:31:a4:2b:cf:a3:2b:4d:e9:fa:5d:65: 4f:d9:21:c8:13:6d:c8:ba:3b:c3:7d:ed:df:5a:87: 2c:b3:c5:b8:76:9e:2d:e7:40:85:b1:c2:10:f9:34: 30:f1:04:8f:8e:c1:2c:6a:42:15:54:35:06:33:12: 80:0a:85:4c:81:4d:3d:6f:e7:29:4a:92:b8:72:a1: a5:d9:b3:58:cd:08:b5:92:92:f2:88:44:95:78:bf: 61:c9:24:8c:16:14:15:33:0a:ad:e7:83:53:1e:02: a3:a2:b6:f3:26:1a:ec:52:ef:71:bd:63:d0:0d:79: 79:3e:aa:de:fc:15:ab:f1:b4:1a:d0:70:9f:d2:5f: c0:82:fb:de:88:6f:82:d7:e6:1e:d3:1d:17:33:58: 94:49:d2:b4:bc:38:bf:10:dd:93:ef:5d:e1:97:f7: ae:78:d5:cc:89:a5:78:ed:16:0e:75:1a:84:31:fa: da:b2:3d:6e:47:e1:a6:c1:3a:4f:3a:06:4d:5a:28: 32:b7:56:b6:68:d0:4c:5b:29:77:d9:23:27:0a:18: 0f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E8:0A:B9:E3:91:39:76:70:C2:97:BB:CA:46:86:92:FB:A2:29:7A X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6e:81:7a:3b:36:53:35:92:5f:ac:82:87:01:5f:50:c8:f4: 1c:bb:a5:4d:1c:62:83:38:91:df:f8:b9:82:25:7d:45:aa:6e: 76:9f:67:7d:32:72:25:56:59:08:6b:be:78:28:1a:bf:3e:c0: d1:49:68:6d:a6:c6:4e:87:aa:a4:68:d6:8f:02:7e:d2:da:b9: d2:28:2d:6b:16:73:6e:1a:04:83:76:f9:cd:b3:f4:77:09:8f: 67:29:e5:ae:63:ca:68:5b:05:c1:f0:06:3f:89:47:8a:97:b6: 3f:33:c9:d0:b3:67:ce:04:55:a4:b3:6d:3d:2d:81:42:31:63: 3c:fa:96:08:61:ef:3a:4c:40:46:9d:3f:c5:5b:60:3e:27:61: 62:8a:de:42:61:ef:39:62:36:d0:8d:8f:9c:34:2a:71:9a:6c: ab:6c:fd:30:b3:ca:01:f6:6f:d3:c7:52:cc:b9:b9:22:bd:a7: 85:22:a7:56:b0:ec:47:1f:5c:80:c5:dc:55:83:0b:07:b4:a3: a1:1d:bc:1d:9e:13:cf:6d:7e:5a:8b:3a:2c:81:76:13:f9:21: c0:c2:4f:bb:c2:dd:d9:fc:7a:7d:e7:20:02:28:b0:4f:b1:da: 05:df:03:cb:8c:8c:43:85:73:e6:36:4d:1c:86:b7:2b:3a:34: 5b:78:ab:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOIs9bxk9J3joaiiWoZLw5Uvr+D8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNTEwMTgxNzA1NDRaFw0yNTEwMjIwMTE1NDRaMDMxMTAvBgNV BAMTKEM2RTgwQUI5RTM5MTM5NzY3MEMyOTdCQkNBNDY4NjkyRkJBMjI5N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLs+jODh/NIeBnNK4EQ1paDzcb UeOvowRbsX1jjRWgyTHeh3Gsy4y47abOdMXJ5XMxpCvPoytN6fpdZU/ZIcgTbci6 O8N97d9ahyyzxbh2ni3nQIWxwhD5NDDxBI+OwSxqQhVUNQYzEoAKhUyBTT1v5ylK krhyoaXZs1jNCLWSkvKIRJV4v2HJJIwWFBUzCq3ng1MeAqOitvMmGuxS73G9Y9AN eXk+qt78FavxtBrQcJ/SX8CC+96Ib4LX5h7THRczWJRJ0rS8OL8Q3ZPvXeGX9654 1cyJpXjtFg51GoQx+tqyPW5H4abBOk86Bk1aKDK3VrZo0ExbKXfZIycKGA8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxugKueOROXZwwpe7ykaGkvuiKXowHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVugXo7NlM1kl+sgocBX1DI9By7pU0cYoM4 kd/4uYIlfUWqbnafZ30yciVWWQhrvngoGr8+wNFJaG2mxk6HqqRo1o8CftLaudIo LWsWc24aBIN2+c2z9HcJj2cp5a5jymhbBcHwBj+JR4qXtj8zydCzZ84EVaSzbT0t gUIxYzz6lghh7zpMQEadP8VbYD4nYWKK3kJh7zliNtCNj5w0KnGabKts/TCzygH2 b9PHUsy5uSK9p4Uip1aw7EcfXIDF3FWDCwe0o6EdvB2eE89tflqLOiyBdhP5IcDC T7vC3dn8en3nIAIosE+x2gXfA8uMjEOFc+Y2TRyGtys6NFt4q8o= -----END CERTIFICATE-----Generated at Mon Oct 20 14:33:28 2025 by rpki-client