$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json) Hash identifier: 6JBiQMebpg43nXAJciD9zpF2+Kg+wR6IPg0RPknDO+U= Subject key identifier: E7:F4:CD:62:B9:85:FF:C0:E0:B2:51:5C:18:4C:6F:E5:82:1D:91:EA Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Certificate serial: 64091A0CBB6A804A707EC9BB4260946B045D561C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft Manifest number: 0518 Signing time: Mon 20 Oct 2025 02:10:56 +0000 Manifest this update: Mon 20 Oct 2025 02:05:56 +0000 Manifest next update: Thu 23 Oct 2025 06:46:56 +0000 Files and hashes: 1: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: XTrAUzINtImcd3F+XaTVo5H750rmDxdeBt+LpGOrxS4=) 2: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: UUI0UvU6AUH37Q/H9zW8u0Apq7Y6pN001mJMdkH8taI=) 3: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: JE0sJw2Y30gQbCmAIhnjpinJa8eG7Fgewlr8Jax6ero=) 4: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: ejfVv9si1K2MpeXhh8zMJGLdHAeeV0dhSQaga8rtoCM=) 5: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: 0WjHD9/aBvFlSyGbtkNIeehQgR8Q1F/4L0+bFwiUGfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:09:1a:0c:bb:6a:80:4a:70:7e:c9:bb:42:60:94:6b:04:5d:56:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Validity Not Before: Oct 20 02:05:56 2025 GMT Not After : Oct 23 06:46:56 2025 GMT Subject: CN=E7F4CD62B985FFC0E0B2515C184C6FE5821D91EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:21:4d:ea:f0:dd:6b:01:b0:78:28:83:ef:87: b7:96:da:63:cf:3e:d5:54:94:34:11:9c:75:21:00: 7e:39:3d:19:c1:64:56:2c:3a:ca:37:05:df:4c:4b: 1a:0a:69:e1:37:69:60:e0:78:fc:01:e3:fa:d3:26: fc:cb:a8:6c:d8:d6:18:ea:1d:db:8e:4e:75:16:ac: f1:89:db:a4:8b:d7:42:ea:cf:75:54:8b:1f:1e:cb: 45:99:95:36:1e:9e:32:b5:3e:df:49:4c:32:a0:29: 0f:87:4f:8d:c1:e9:45:1e:3e:fa:a6:c0:a6:0f:6f: 18:78:ef:4c:48:26:7d:a0:95:1e:ee:75:c5:5a:ce: e8:b3:42:d1:89:02:a6:e0:9b:45:c9:1f:7a:d3:39: 66:c9:18:73:8b:18:85:d8:23:50:74:f9:a3:bd:52: 09:ae:aa:20:73:b7:54:5c:61:bd:ad:7d:dc:af:85: 94:ed:50:f4:57:1e:2f:c0:f3:5c:4b:41:44:68:fd: 89:92:74:4a:66:ad:31:4c:22:2c:94:3e:46:27:f2: 17:59:b0:46:0e:4f:38:df:d4:71:39:be:73:53:84: 66:dd:86:f3:09:6f:54:3a:e2:1b:4b:c9:b5:7d:18: 4c:c8:32:c0:4b:6d:ce:07:d0:90:8f:03:db:d8:bd: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F4:CD:62:B9:85:FF:C0:E0:B2:51:5C:18:4C:6F:E5:82:1D:91:EA X509v3 Authority Key Identifier: keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:51:a3:3d:33:a4:c1:be:32:81:37:56:48:c4:d1:c7:d6:47: 76:08:31:8d:88:ed:80:93:40:3f:58:87:0f:7d:c1:a7:8e:f3: c0:7f:e8:ad:b9:7c:c5:cc:26:3e:d3:12:d4:b3:63:9b:d6:60: a4:51:f2:d6:47:81:73:6d:66:05:d6:cb:07:99:fe:8a:75:3b: 29:9f:6c:57:6f:f8:9e:04:4c:7e:01:e4:77:75:a2:cb:5c:4d: 61:94:01:d5:2f:60:27:47:30:4b:15:86:50:28:3f:26:32:aa: a5:a0:f3:16:c9:9f:e5:aa:50:a3:49:77:d9:c9:21:6b:94:3d: ad:34:07:ca:12:5e:f9:09:5f:4e:b8:70:f2:85:68:6c:29:23: 59:26:17:62:13:ce:22:13:8b:1f:07:df:e9:6d:57:cf:b1:7a: 05:0b:e1:54:a5:a6:42:2a:c6:49:65:64:35:49:ea:95:a9:ce: 61:19:01:bb:be:6d:e4:58:e1:31:71:d6:a7:cb:12:c9:dc:53: 31:e3:d8:52:d0:49:d4:8d:93:bd:a3:ce:cb:8f:3f:2c:47:88: bd:9c:cd:65:b4:ba:69:26:34:13:7a:8c:9e:5a:b3:13:c2:0b: 88:5e:1b:13:89:76:5b:03:3f:46:b6:1c:7e:27:d3:10:b7:61: 7f:cc:b7:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAkaDLtqgEpwfsm7QmCUawRdVhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2 QUE5MDM1MzAeFw0yNTEwMjAwMjA1NTZaFw0yNTEwMjMwNjQ2NTZaMDMxMTAvBgNV BAMTKEU3RjRDRDYyQjk4NUZGQzBFMEIyNTE1QzE4NEM2RkU1ODIxRDkxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgIU3q8N1rAbB4KIPvh7eW2mPP PtVUlDQRnHUhAH45PRnBZFYsOso3Bd9MSxoKaeE3aWDgePwB4/rTJvzLqGzY1hjq HduOTnUWrPGJ26SL10Lqz3VUix8ey0WZlTYenjK1Pt9JTDKgKQ+HT43B6UUePvqm wKYPbxh470xIJn2glR7udcVazuizQtGJAqbgm0XJH3rTOWbJGHOLGIXYI1B0+aO9 UgmuqiBzt1RcYb2tfdyvhZTtUPRXHi/A81xLQURo/YmSdEpmrTFMIiyUPkYn8hdZ sEYOTzjf1HE5vnNThGbdhvMJb1Q64htLybV9GEzIMsBLbc4H0JCPA9vYvWnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/TNYrmF/8DgslFcGExv5YIdkeowHwYDVR0j BBgwFoAUrMPXmrG+9ivACVtvasPzRGqpA1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzU4YzgwZS1hMzI4LTRmOGMtYTAzZi05MWMzYzI2MjE0YTIvMC9BQ0MzRDc5QUIx QkVGNjJCQzAwOTVCNkY2QUMzRjM0NDZBQTkwMzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2QUE5 MDM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0Yz NDQ2QUE5MDM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRRoz0zpMG+MoE3VkjE0cfWR3YIMY2I7YCT QD9Yhw99waeO88B/6K25fMXMJj7TEtSzY5vWYKRR8tZHgXNtZgXWyweZ/op1Oymf bFdv+J4ETH4B5Hd1ostcTWGUAdUvYCdHMEsVhlAoPyYyqqWg8xbJn+WqUKNJd9nJ IWuUPa00B8oSXvkJX064cPKFaGwpI1kmF2ITziITix8H3+ltV8+xegUL4VSlpkIq xkllZDVJ6pWpzmEZAbu+beRY4TFx1qfLEsncUzHj2FLQSdSNk72jzsuPPyxHiL2c zWW0umkmNBN6jJ5asxPCC4heGxOJdlsDP0a2HH4n0xC3YX/Mt6A= -----END CERTIFICATE-----Generated at Mon Oct 20 22:11:56 2025 by rpki-client