$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json) Hash identifier: tpTlHFHEKqygXuk4nQshND6jWVGHHS5KJ6GcaUqCYsM= Subject key identifier: 42:4A:0C:EF:B5:B4:99:46:1B:41:6C:B8:39:70:5D:97:18:6E:7B:A2 Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Certificate serial: 1513138D347C5DF706B3397C47970742BD99DD90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft Manifest number: 04FE Signing time: Thu 21 Aug 2025 11:50:57 +0000 Manifest this update: Thu 21 Aug 2025 11:45:57 +0000 Manifest next update: Sun 24 Aug 2025 21:59:57 +0000 Files and hashes: 1: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: XTrAUzINtImcd3F+XaTVo5H750rmDxdeBt+LpGOrxS4=) 2: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: UUI0UvU6AUH37Q/H9zW8u0Apq7Y6pN001mJMdkH8taI=) 3: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: ejfVv9si1K2MpeXhh8zMJGLdHAeeV0dhSQaga8rtoCM=) 4: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: A6YRgxlPuww14grrWhVgMAabV5+WCXf6B3nCqzp/0AU=) 5: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: JE0sJw2Y30gQbCmAIhnjpinJa8eG7Fgewlr8Jax6ero=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:13:13:8d:34:7c:5d:f7:06:b3:39:7c:47:97:07:42:bd:99:dd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Validity Not Before: Aug 21 11:45:57 2025 GMT Not After : Aug 24 21:59:57 2025 GMT Subject: CN=424A0CEFB5B499461B416CB839705D97186E7BA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a0:ea:11:5f:f9:30:51:4a:fa:5c:fa:9e:f5: 21:cf:31:bf:50:50:6d:dd:ef:dc:eb:79:d2:3d:17: 53:19:f0:f5:08:5c:c5:30:fb:36:29:59:e2:96:fc: 98:bb:4c:79:7e:96:3d:ea:af:ad:b7:03:6d:cd:59: 30:f1:90:19:85:bd:d6:28:92:6f:3f:e0:68:04:8e: bb:be:50:1b:21:aa:5a:26:a0:e8:7a:03:cc:16:fd: 3f:86:8a:f7:09:f7:17:cb:72:7d:06:82:ec:ca:64: 48:e4:ea:a0:9d:de:da:0d:fa:3f:84:42:ff:be:50: 1b:9d:b2:67:e0:cd:6d:55:63:5c:17:c7:50:fc:62: 8b:86:ea:db:5a:3b:fd:9a:e6:6c:95:71:6c:78:43: fd:aa:27:ab:92:08:11:75:5e:90:98:d4:d1:23:2c: 37:27:47:07:a8:72:f3:8d:ea:b8:c3:91:81:86:89: d1:f3:0a:b3:d5:71:a9:a7:47:17:d7:56:2c:a6:ce: a3:21:99:ef:6f:59:04:85:00:49:ed:48:32:65:e9: 2c:26:2d:eb:56:18:3a:0a:3c:15:96:87:d6:b6:94: 54:84:9c:0d:34:a2:15:13:ac:d1:25:31:ce:9e:9c: e6:7f:c7:27:ba:eb:d2:ee:1f:15:17:70:13:e4:5c: 54:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4A:0C:EF:B5:B4:99:46:1B:41:6C:B8:39:70:5D:97:18:6E:7B:A2 X509v3 Authority Key Identifier: keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:80:4a:c3:76:9e:1d:27:01:c3:f2:df:62:5a:bb:68:93:67: 5d:db:04:23:52:6f:60:c0:ea:d2:f0:b2:02:71:00:db:de:ed: 30:f9:f7:83:e4:51:05:21:46:c2:78:61:c5:5f:27:87:a4:fa: 75:c0:a2:4c:2f:d6:e4:6d:20:d5:e9:5d:20:04:83:53:75:9c: b3:76:a0:bd:12:2f:6d:b4:14:9b:49:0c:0f:29:ff:9d:8c:de: 9e:ef:b3:af:48:a6:44:fc:35:b8:6c:68:0d:c8:b1:52:e3:11: 99:b9:a1:2e:ab:e4:26:85:bd:4b:10:d6:91:a8:d9:28:77:98: 54:57:fa:60:d5:69:07:81:25:d8:94:6c:0b:38:3f:72:14:44: ee:dc:57:2e:86:8a:ae:83:94:21:22:39:e0:41:7e:50:56:cc: 41:89:e7:6b:70:79:f9:ea:6d:d4:f3:4a:94:ac:26:b0:ad:2b: bc:52:20:14:57:1f:7e:7d:38:0b:de:1f:ee:52:2b:d6:96:f4: c9:3c:34:44:28:08:c8:93:19:17:65:6c:41:e5:05:a4:a7:95: 0a:5c:61:e8:c2:59:cf:78:03:f2:8c:68:01:d7:54:52:69:0e: 3e:2d:93:9d:ed:3e:ed:51:b2:5c:04:9c:99:13:39:cb:d4:b3: 31:69:e1:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFRMTjTR8XfcGszl8R5cHQr2Z3ZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2 QUE5MDM1MzAeFw0yNTA4MjExMTQ1NTdaFw0yNTA4MjQyMTU5NTdaMDMxMTAvBgNV BAMTKDQyNEEwQ0VGQjVCNDk5NDYxQjQxNkNCODM5NzA1RDk3MTg2RTdCQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYoOoRX/kwUUr6XPqe9SHPMb9Q UG3d79zredI9F1MZ8PUIXMUw+zYpWeKW/Ji7THl+lj3qr623A23NWTDxkBmFvdYo km8/4GgEjru+UBshqlomoOh6A8wW/T+GivcJ9xfLcn0GguzKZEjk6qCd3toN+j+E Qv++UBudsmfgzW1VY1wXx1D8YouG6ttaO/2a5myVcWx4Q/2qJ6uSCBF1XpCY1NEj LDcnRweocvON6rjDkYGGidHzCrPVcamnRxfXViymzqMhme9vWQSFAEntSDJl6Swm LetWGDoKPBWWh9a2lFSEnA00ohUTrNElMc6enOZ/xye669LuHxUXcBPkXFTbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQkoM77W0mUYbQWy4OXBdlxhue6IwHwYDVR0j BBgwFoAUrMPXmrG+9ivACVtvasPzRGqpA1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzU4YzgwZS1hMzI4LTRmOGMtYTAzZi05MWMzYzI2MjE0YTIvMC9BQ0MzRDc5QUIx QkVGNjJCQzAwOTVCNkY2QUMzRjM0NDZBQTkwMzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2QUE5 MDM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0Yz NDQ2QUE5MDM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyASsN2nh0nAcPy32Jau2iTZ13bBCNSb2DA 6tLwsgJxANve7TD594PkUQUhRsJ4YcVfJ4ek+nXAokwv1uRtINXpXSAEg1N1nLN2 oL0SL220FJtJDA8p/52M3p7vs69IpkT8NbhsaA3IsVLjEZm5oS6r5CaFvUsQ1pGo 2Sh3mFRX+mDVaQeBJdiUbAs4P3IURO7cVy6Giq6DlCEiOeBBflBWzEGJ52twefnq bdTzSpSsJrCtK7xSIBRXH359OAveH+5SK9aW9Mk8NEQoCMiTGRdlbEHlBaSnlQpc YejCWc94A/KMaAHXVFJpDj4tk53tPu1RslwEnJkTOcvUszFp4Yc= -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:01 2025 by rpki-client