$ rpki-client -vvf repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft File: ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft (raw, json) Hash identifier: x7t4QXpLzPNFqqFQKiIF+n+urR/raEggAJE+yKNSZ5U= Subject key identifier: 90:25:D1:B4:36:F9:B5:FC:A4:D8:FF:ED:41:CA:D6:1B:A4:A1:A8:2E Authority key identifier: AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA Certificate issuer: /CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA Certificate serial: 32CCFCCBD808D85DF6E0B5584BDF98CC2D0C075D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft Manifest number: 050C Signing time: Mon 20 Oct 2025 11:21:00 +0000 Manifest this update: Mon 20 Oct 2025 11:16:00 +0000 Manifest next update: Thu 23 Oct 2025 13:33:00 +0000 Files and hashes: 1: ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl (hash: 3ALurKz01jHDIoZ9y6NK3JttkBoaeCdNsw9egrnNJJQ=) 2: 3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (hash: Cea98TN6JOippPT1Yl/tw6t70hFs59kHZ8IV7LC26fU=) 3: 3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa (hash: 9xvDYfAkrAuBORhBg+JkljOUtwulgTLF9m5JOM3oSF4=) 4: 323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa (hash: 2ZsS2VEgZnEWCXg+GRqI2uFHC4HL54ZPfTFqcd0guLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:cc:fc:cb:d8:08:d8:5d:f6:e0:b5:58:4b:df:98:cc:2d:0c:07:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA Validity Not Before: Oct 20 11:16:00 2025 GMT Not After : Oct 23 13:33:00 2025 GMT Subject: CN=9025D1B436F9B5FCA4D8FFED41CAD61BA4A1A82E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:dc:e7:0a:08:f1:d7:35:b7:5f:63:4e:90:ae: 79:1c:f3:e6:e9:84:9c:b8:ed:6e:63:ae:84:6b:b7: 54:68:4f:d7:6d:fa:2f:19:a5:66:2c:01:bf:7e:38: b9:4b:c7:49:ab:c7:ea:a8:e0:01:67:09:ca:3d:5c: 87:29:4a:fa:c8:45:5c:ee:ea:9b:95:3f:36:fe:94: 18:37:4a:01:ac:0d:3b:14:2d:90:aa:a6:db:ae:35: 26:98:f1:77:c8:ef:3b:35:38:80:ed:be:5b:af:d1: 69:be:7a:75:f2:95:b6:98:c5:3e:2f:79:32:d5:58: 79:9d:9f:75:a9:db:76:d9:42:42:53:58:4c:92:83: a5:cb:f6:cf:ae:40:82:f0:67:4f:35:e7:33:2e:73: a6:da:bd:bb:ac:d5:66:55:29:aa:ad:3b:60:48:68: 21:20:09:83:37:b7:09:7f:ab:05:d8:88:97:ee:b4: 30:45:b4:8b:b9:c8:41:9f:9f:f0:2c:aa:8c:7b:8b: 27:32:84:42:b9:9a:f7:1d:d9:76:85:61:df:e1:13: ae:bc:ab:49:2b:7a:84:00:b4:df:c6:41:08:48:39: 28:d8:aa:7e:44:b4:f8:1f:a5:29:d9:92:a0:94:fb: 4b:af:59:b0:d1:09:e7:74:b9:d3:62:b4:61:36:de: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:25:D1:B4:36:F9:B5:FC:A4:D8:FF:ED:41:CA:D6:1B:A4:A1:A8:2E X509v3 Authority Key Identifier: keyid:AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9d:00:12:99:13:29:86:88:fa:13:1d:d8:2f:c2:69:37:67: 56:78:8d:70:ba:44:a8:dc:ec:93:b3:df:7c:70:04:f5:93:8c: 19:eb:6d:5e:42:e2:b2:0c:e5:f4:63:8f:68:f5:c1:f6:e0:55: 65:a8:a4:11:8f:f7:bf:bc:d7:00:41:b2:c0:3f:8a:fe:99:51: 0e:2d:46:d5:b3:68:f8:24:0f:12:0b:a8:6e:ed:f5:29:3d:51: f5:a5:a9:7b:37:d0:d5:4a:13:a7:fa:2f:0a:33:dd:01:26:82: 50:a6:8f:da:b2:49:a2:11:23:25:38:01:75:cd:de:97:9a:c1: 96:b4:f4:30:c0:20:ed:1c:d7:90:59:59:22:ee:12:27:0f:b0: 0f:17:6c:78:c8:c3:76:11:61:26:79:3e:9b:70:82:90:25:82: de:34:fd:c1:fb:ae:fb:3c:47:7a:ba:f8:b7:28:45:e0:77:40: 4c:bd:d7:93:43:7a:37:68:d2:24:1f:36:79:63:97:c5:aa:f5: 42:73:b9:25:89:97:d1:02:78:91:26:1d:08:3e:0f:d4:a0:e0: 97:cb:95:08:b2:a1:76:6e:41:79:44:b7:19:48:19:c1:84:65: b1:6d:6a:b9:3f:4d:49:52:43:28:6f:ab:2c:f7:08:f6:8a:d1: 5c:d5:d1:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsz8y9gI2F324LVYS9+YzC0MB10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQzNjFF RUY0REZCQTAeFw0yNTEwMjAxMTE2MDBaFw0yNTEwMjMxMzMzMDBaMDMxMTAvBgNV BAMTKDkwMjVEMUI0MzZGOUI1RkNBNEQ4RkZFRDQxQ0FENjFCQTRBMUE4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD03OcKCPHXNbdfY06Qrnkc8+bp hJy47W5jroRrt1RoT9dt+i8ZpWYsAb9+OLlLx0mrx+qo4AFnCco9XIcpSvrIRVzu 6puVPzb+lBg3SgGsDTsULZCqptuuNSaY8XfI7zs1OIDtvluv0Wm+enXylbaYxT4v eTLVWHmdn3Wp23bZQkJTWEySg6XL9s+uQILwZ0815zMuc6bavbus1WZVKaqtO2BI aCEgCYM3twl/qwXYiJfutDBFtIu5yEGfn/Asqox7iycyhEK5mvcd2XaFYd/hE668 q0kreoQAtN/GQQhIOSjYqn5EtPgfpSnZkqCU+0uvWbDRCed0udNitGE23lGzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkCXRtDb5tfyk2P/tQcrWG6ShqC4wHwYDVR0j BBgwFoAUrM7ONo8EFCUFlA/yn03TYe7037owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDRjYjhkOC0xNTA1LTQ2ODItOWRkYi1mY2Q4NjIwMGI5NjYvMC9BQ0NFQ0UzNjhG MDQxNDI1MDU5NDBGRjI5RjRERDM2MUVFRjRERkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQzNjFFRUY0 REZCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQ0Y2I4ZDgtMTUwNS00NjgyLTlk ZGItZmNkODYyMDBiOTY2LzAvQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQz NjFFRUY0REZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2dABKZEymGiPoTHdgvwmk3Z1Z4jXC6RKjc 7JOz33xwBPWTjBnrbV5C4rIM5fRjj2j1wfbgVWWopBGP97+81wBBssA/iv6ZUQ4t RtWzaPgkDxILqG7t9Sk9UfWlqXs30NVKE6f6Lwoz3QEmglCmj9qySaIRIyU4AXXN 3peawZa09DDAIO0c15BZWSLuEicPsA8XbHjIw3YRYSZ5PptwgpAlgt40/cH7rvs8 R3q6+LcoReB3QEy915NDejdo0iQfNnljl8Wq9UJzuSWJl9ECeJEmHQg+D9Sg4JfL lQiyoXZuQXlEtxlIGcGEZbFtark/TUlSQyhvqyz3CPaK0VzV0dg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:01 2025 by rpki-client