$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: 7Wtl2FNQrnvagcgnta2y+GGwzno0vw7bArXcrGWkscI= Subject key identifier: 4F:1B:59:22:55:93:0A:CA:FB:FE:61:95:FE:2F:75:C9:FC:B1:C8:4E Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 06D07394F9DFC18E23ACC3D13AFB798A61B47BCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 04FD Signing time: Sat 23 Aug 2025 02:30:46 +0000 Manifest this update: Sat 23 Aug 2025 02:25:46 +0000 Manifest next update: Tue 26 Aug 2025 08:55:46 +0000 Files and hashes: 1: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) 2: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) 3: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) 4: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) 5: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: GI7oZVQ7Aj17SR3hhVKN4TW/GEB2Nqpp6U9MBOZ8h3k=) 6: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d0:73:94:f9:df:c1:8e:23:ac:c3:d1:3a:fb:79:8a:61:b4:7b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Aug 23 02:25:46 2025 GMT Not After : Aug 26 08:55:46 2025 GMT Subject: CN=4F1B592255930ACAFBFE6195FE2F75C9FCB1C84E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e7:09:85:c3:73:e5:8b:85:8c:46:53:4f:df: 8b:59:5c:3b:77:3c:55:94:b2:d2:4a:65:96:bf:be: 74:6c:db:bd:50:30:87:f8:91:7f:cf:3b:4a:6f:b7: 30:30:f0:bf:7c:ff:3a:66:74:14:b7:81:a8:7c:a6: d3:2f:62:9e:1f:2d:76:34:ca:11:73:6c:ee:e9:c3: 77:2c:cc:a3:6e:ed:4b:44:a7:f4:03:30:e2:38:f6: e3:e0:f9:e0:e5:68:79:59:24:71:5e:b2:da:3a:b6: 9f:7f:d4:80:de:95:56:34:32:f2:01:da:f5:d6:df: 91:ca:fa:43:7a:e7:3a:08:64:43:07:cc:83:53:b6: a9:d9:81:fd:00:7a:d8:17:8a:16:ce:70:45:5a:11: 74:7c:e7:2b:f4:1c:74:46:7b:90:01:d2:1e:d3:15: 1d:fd:f1:69:af:d1:98:81:07:f7:2f:64:2d:db:74: 8d:92:63:b6:23:8f:98:78:c9:f8:e7:fd:83:56:1d: d1:26:b2:1a:db:99:75:a4:0c:7c:30:f4:d9:3d:51: 70:ec:0a:7d:f2:3c:1f:29:09:62:a0:65:a7:bc:7d: 7d:af:5a:06:e1:ec:fb:42:43:2d:45:a7:9e:68:89: 74:d1:3b:57:e6:46:49:36:31:3a:98:29:84:f7:4d: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1B:59:22:55:93:0A:CA:FB:FE:61:95:FE:2F:75:C9:FC:B1:C8:4E X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:9f:10:aa:c8:29:18:fb:44:4b:3f:37:60:a0:09:ee:0a:08: 64:5e:75:1e:b7:96:c1:bd:bb:fc:fa:cb:b2:ee:e8:62:bf:dd: 08:17:3d:53:4b:26:6d:b8:04:a9:d8:8c:02:53:d6:29:15:2b: 69:5f:79:c1:35:dd:90:f9:94:f1:25:e7:39:0a:e6:98:1c:1a: bf:2c:b3:33:d3:39:0c:11:11:4b:07:dc:3c:07:f3:6d:b6:15: 46:80:cc:43:9a:27:04:e5:6b:f9:16:02:cd:b5:a3:ee:23:3a: ca:7f:a1:87:23:cd:90:de:b5:d4:82:51:11:e6:3c:6c:69:a7: 6d:14:93:de:ba:7d:28:2e:cf:5d:42:21:44:be:e1:1c:95:2c: 5a:97:07:eb:06:85:7e:c8:09:a9:98:18:94:85:5f:d1:64:aa: a7:19:c9:23:49:98:6c:7d:5d:ab:94:04:13:be:dd:cd:7c:6b: ab:df:0f:e7:62:51:f6:8e:91:bd:7a:e5:8d:81:86:ed:0b:4d: cb:72:b6:5f:1f:fd:24:fa:8a:86:1f:08:1d:b3:cb:4e:a1:fe: 65:5c:62:4d:f7:4a:57:9c:88:b3:5b:92:b7:29:17:d8:a8:50: 06:bf:f7:fe:8e:75:5d:32:97:59:fa:10:c1:aa:ce:94:64:29: 21:5a:73:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBtBzlPnfwY4jrMPROvt5imG0e80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNTA4MjMwMjI1NDZaFw0yNTA4MjYwODU1NDZaMDMxMTAvBgNV BAMTKDRGMUI1OTIyNTU5MzBBQ0FGQkZFNjE5NUZFMkY3NUM5RkNCMUM4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg5wmFw3Pli4WMRlNP34tZXDt3 PFWUstJKZZa/vnRs271QMIf4kX/PO0pvtzAw8L98/zpmdBS3gah8ptMvYp4fLXY0 yhFzbO7pw3cszKNu7UtEp/QDMOI49uPg+eDlaHlZJHFesto6tp9/1IDelVY0MvIB 2vXW35HK+kN65zoIZEMHzINTtqnZgf0AetgXihbOcEVaEXR85yv0HHRGe5AB0h7T FR398Wmv0ZiBB/cvZC3bdI2SY7Yjj5h4yfjn/YNWHdEmshrbmXWkDHww9Nk9UXDs Cn3yPB8pCWKgZae8fX2vWgbh7PtCQy1Fp55oiXTRO1fmRkk2MTqYKYT3TXztAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTxtZIlWTCsr7/mGV/i91yfyxyE4wHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSfEKrIKRj7REs/N2CgCe4KCGRedR63lsG9 u/z6y7Lu6GK/3QgXPVNLJm24BKnYjAJT1ikVK2lfecE13ZD5lPEl5zkK5pgcGr8s szPTOQwREUsH3DwH8222FUaAzEOaJwTla/kWAs21o+4jOsp/oYcjzZDetdSCURHm PGxpp20Uk966fSguz11CIUS+4RyVLFqXB+sGhX7ICamYGJSFX9FkqqcZySNJmGx9 XauUBBO+3c18a6vfD+diUfaOkb165Y2Bhu0LTctytl8f/ST6ioYfCB2zy06h/mVc Yk33SleciLNbkrcpF9ioUAa/9/6OdV0yl1n6EMGqzpRkKSFacwo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:00:50 2025 by rpki-client