$ rpki-client -vvf repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft File: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft (raw, json) Hash identifier: Wmg6k7Khpdub9jfcRevhPA2nl+dEeUAnug0UNM/8WQc= Subject key identifier: 17:0D:65:C4:67:C9:35:A9:36:56:B2:AF:A1:10:AC:DE:B1:72:24:BE Authority key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 Certificate issuer: /CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Certificate serial: 4112E91A609338C675C533F88575042446107B0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft Manifest number: 03E3 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 14:55:03 +0000 Manifest next update: Thu 23 Oct 2025 19:53:03 +0000 Files and hashes: 1: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: x0OQqyyh84xdArHozU+dSgyqUpzyJ86TNYhGyZIH4/4=) 2: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl (hash: AjZK5U2p6ewqXkXfEKCRMXUiTo2NeqHdhyV3V16ZXJI=) 3: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: zWM0xGqqaOdxz1Hu9SQE3wCPcPGJcY2qyq+pULXMUKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:12:e9:1a:60:93:38:c6:75:c5:33:f8:85:75:04:24:46:10:7b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Validity Not Before: Oct 20 14:55:03 2025 GMT Not After : Oct 23 19:53:03 2025 GMT Subject: CN=170D65C467C935A93656B2AFA110ACDEB17224BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bc:f4:17:a8:ff:51:eb:e6:14:23:d6:69:ec: 84:c9:2b:73:37:3e:fd:e9:1f:05:53:e3:94:09:bf: 9a:80:4a:69:3b:ce:cb:b6:4e:57:49:7f:56:a7:89: ca:83:87:71:ba:3a:88:dc:e3:0c:ac:be:03:39:d4: 16:c4:18:b6:f8:68:70:dc:7b:3a:bc:c8:56:65:a9: e7:a0:e0:fd:eb:b9:b9:d5:08:0d:14:17:37:8f:3d: 94:6c:4f:ec:e3:76:9d:9e:02:37:c6:33:a5:c1:7d: f8:be:bd:91:c1:ac:5c:a9:09:62:1e:e0:d1:c2:36: f7:e3:da:41:e7:3f:3b:4a:08:a9:f7:1b:13:ac:f3: d4:e6:08:d6:c9:f8:3e:8f:fc:0b:7e:ac:33:58:d2: a5:6c:05:89:05:0a:fb:f8:41:f6:6f:bd:7e:8e:4f: a7:b2:00:e1:60:b2:2e:84:3f:28:5f:c9:7b:ff:9c: 5b:d9:50:83:72:7c:ff:1a:42:ab:db:14:58:0e:6e: 9f:07:e1:6a:16:87:c5:82:51:e4:ef:3f:96:0d:b3: 1d:ed:33:7a:d7:c6:b9:41:52:e4:0d:86:d9:83:f2: ed:fc:1b:c6:da:0f:a5:65:98:75:f7:a1:7b:d2:53: 64:ae:cc:23:cb:0a:01:67:c4:3d:42:c3:0c:af:c2: 86:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0D:65:C4:67:C9:35:A9:36:56:B2:AF:A1:10:AC:DE:B1:72:24:BE X509v3 Authority Key Identifier: keyid:AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:63:e3:7f:e1:7a:fb:9b:d4:83:d0:9b:41:ec:fb:cd:34:81: 4d:a5:59:29:88:d9:5a:f8:52:66:1a:47:8b:79:6e:e9:20:38: 10:86:76:c4:22:dc:a3:f2:b9:4c:d0:b2:fb:71:d4:9e:6b:a7: 6e:35:76:ca:6f:88:b8:8e:42:c7:22:09:4f:6f:a8:18:0e:66: 41:aa:43:57:94:2a:9e:a0:53:89:98:57:00:d6:0d:53:88:40: 6b:ad:17:8e:0d:b2:a4:20:5e:44:b4:3c:f1:bb:3e:f5:1d:04: 8c:3e:b2:6c:17:c0:8e:94:98:fa:42:e2:0a:6f:14:78:34:12: 5b:c1:16:84:ca:16:c0:42:5b:36:17:0e:b7:9f:97:56:60:48: 18:88:b0:2a:41:45:f8:45:27:f1:f1:52:0e:25:88:b6:63:ff: cc:f8:60:23:4b:c2:e8:c5:50:46:10:8b:8c:81:36:d9:c0:f9: 38:9b:e1:86:e5:66:96:62:42:ad:d2:82:db:cd:c4:6d:97:99: 58:b6:16:ac:bf:0c:26:5b:20:99:67:6c:c8:9f:02:02:88:48: b4:80:01:91:09:8f:d9:bc:a0:30:d7:e3:71:54:4e:09:11:82: d7:75:22:a0:d5:ee:89:fd:23:88:55:52:bc:36:df:73:1f:72: 2a:7e:be:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQRLpGmCTOMZ1xTP4hXUEJEYQewwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgz Q0QwN0M3MzAeFw0yNTEwMjAxNDU1MDNaFw0yNTEwMjMxOTUzMDNaMDMxMTAvBgNV BAMTKDE3MEQ2NUM0NjdDOTM1QTkzNjU2QjJBRkExMTBBQ0RFQjE3MjI0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZvPQXqP9R6+YUI9Zp7ITJK3M3 Pv3pHwVT45QJv5qASmk7zsu2TldJf1anicqDh3G6Oojc4wysvgM51BbEGLb4aHDc ezq8yFZlqeeg4P3rubnVCA0UFzePPZRsT+zjdp2eAjfGM6XBffi+vZHBrFypCWIe 4NHCNvfj2kHnPztKCKn3GxOs89TmCNbJ+D6P/At+rDNY0qVsBYkFCvv4QfZvvX6O T6eyAOFgsi6EPyhfyXv/nFvZUINyfP8aQqvbFFgObp8H4WoWh8WCUeTvP5YNsx3t M3rXxrlBUuQNhtmD8u38G8baD6VlmHX3oXvSU2SuzCPLCgFnxD1Cwwyvwoa1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFw1lxGfJNak2VrKvoRCs3rFyJL4wHwYDVR0j BBgwFoAUrNoCL38+KKbhMdqA1MQY6DzQfHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmViYjY4YS04YTVkLTQxMWMtOGJiMy04MzM0MjMxMDBiNmUvMC9BQ0RBMDIyRjdG M0UyOEE2RTEzMURBODBENEM0MThFODNDRDA3QzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgzQ0Qw N0M3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZlYmI2OGEtOGE1ZC00MTFjLThi YjMtODMzNDIzMTAwYjZlLzAvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4 RTgzQ0QwN0M3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdj43/hevub1IPQm0Hs+800gU2lWSmI2Vr4 UmYaR4t5bukgOBCGdsQi3KPyuUzQsvtx1J5rp241dspviLiOQsciCU9vqBgOZkGq Q1eUKp6gU4mYVwDWDVOIQGutF44NsqQgXkS0PPG7PvUdBIw+smwXwI6UmPpC4gpv FHg0ElvBFoTKFsBCWzYXDrefl1ZgSBiIsCpBRfhFJ/HxUg4liLZj/8z4YCNLwujF UEYQi4yBNtnA+Tib4YblZpZiQq3SgtvNxG2XmVi2Fqy/DCZbIJlnbMifAgKISLSA AZEJj9m8oDDX43FUTgkRgtd1IqDV7on9I4hVUrw233Mfcip+viY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:49 2025 by rpki-client