$ rpki-client -vvf repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft File: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft (raw, json) Hash identifier: nePZ3ijFNtpYI/MTGXEtMGhVqNQSC9CMA0WfT/SBeB0= Subject key identifier: 56:26:67:E0:47:F3:30:34:71:2A:FE:69:4D:C7:50:69:AF:06:E3:41 Authority key identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 Certificate issuer: /CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Certificate serial: 73DC5281CF4F50A977B68FE318F8197F443032A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft Manifest number: A5 Signing time: Mon 20 Oct 2025 07:40:44 +0000 Manifest this update: Mon 20 Oct 2025 07:35:44 +0000 Manifest next update: Thu 23 Oct 2025 08:49:44 +0000 Files and hashes: 1: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: WXQWW4Wi6xrEbWBjUR+QMjICoHgwf/HhAfAnKsJzlws=) 2: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: xdI7HWpC7S6F3YsdhXQZOI+Bb5mAqBVyTqf6Y1GJCkg=) 3: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl (hash: fAGWwSO7X0hTzxFIAgVLZCdelYyF1Bx4St0aII/oBf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:dc:52:81:cf:4f:50:a9:77:b6:8f:e3:18:f8:19:7f:44:30:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Validity Not Before: Oct 20 07:35:44 2025 GMT Not After : Oct 23 08:49:44 2025 GMT Subject: CN=562667E047F33034712AFE694DC75069AF06E341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7a:f3:62:fe:bd:42:aa:8c:e2:d8:7e:92:7a: df:42:a5:5f:a6:20:d4:44:d6:bc:aa:8f:9d:ea:f3: a1:90:4e:e6:45:07:24:12:ab:63:84:c8:8b:0a:63: b0:5f:73:1e:03:02:84:73:24:62:8a:73:df:0c:f7: 2f:d0:6f:ec:26:ba:cc:c8:0a:4c:15:55:89:71:5b: 47:47:6b:a7:c7:02:59:ba:bc:19:8e:68:38:6d:3f: 3b:8e:22:05:24:63:67:f8:35:97:31:58:05:bb:af: 8f:8d:67:54:57:e2:7f:d3:46:41:70:1f:c7:2b:33: 11:1c:67:2c:70:e3:b9:64:ce:92:5e:37:64:70:d3: 1d:ae:47:7d:35:40:4c:09:69:f1:28:d1:0a:6d:b7: d4:35:4e:4b:f4:89:99:09:40:3b:b1:f7:ca:9e:94: 7d:e9:80:4b:7c:42:06:91:f7:8b:92:ae:31:6e:76: 8a:cb:c8:63:53:2a:17:b4:77:c8:51:6d:e3:0a:f3: bd:83:63:a3:dc:e6:b7:42:8c:6e:e5:c0:17:8f:da: fd:09:f3:72:da:1b:de:f5:39:19:56:64:c3:7c:77: 70:02:e4:5f:71:6e:b9:3b:ae:a3:a3:f6:da:bc:cf: bd:9d:b2:5a:1b:fa:ac:4c:77:cc:85:f2:3a:0c:53: b1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:26:67:E0:47:F3:30:34:71:2A:FE:69:4D:C7:50:69:AF:06:E3:41 X509v3 Authority Key Identifier: keyid:4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4b:53:b2:14:0e:f9:68:40:95:3e:01:3a:d6:a8:a1:2a:bd: 23:32:ac:49:4a:7b:ee:8c:fe:c4:52:6c:73:d0:15:0c:98:2d: 82:0b:68:bc:54:c6:de:46:63:0d:ca:c1:ba:18:81:0b:36:b6: d2:f3:f7:a2:f0:ba:1c:bf:88:91:51:8f:d1:77:0c:94:49:7c: 4e:42:0e:c9:96:9d:9e:3e:c9:c8:f8:58:d7:ff:36:91:dc:38: 99:76:9f:b3:a3:1e:52:3e:3d:71:ea:91:51:57:ed:d0:3e:66: 01:72:d0:f9:7c:52:be:94:3e:03:e0:d5:f1:e3:56:40:ca:f6: 6b:01:9f:47:32:30:07:4e:d7:fc:a7:ec:1f:e8:65:c3:f8:62: ad:cf:8e:a3:7d:49:52:c2:d9:d1:83:b7:62:89:e7:4e:db:11: 32:93:23:2f:fe:c2:52:87:50:e5:1b:ab:99:b7:d5:dd:d2:44: 1e:3e:e8:c4:93:70:6a:01:22:7f:d6:40:8d:a4:be:2e:b0:04: 8d:9f:1d:8e:ab:3a:6d:b8:47:b8:cf:07:cb:16:41:89:48:ac: f9:b1:1c:79:94:ab:d1:af:a4:5b:36:db:43:53:97:88:35:2a: f8:d4:d8:54:f1:0d:f8:56:52:df:20:57:f9:fc:ab:7e:36:cb: 28:eb:1a:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9xSgc9PUKl3to/jGPgZf0QwMqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZC MzM0QTY1OTAeFw0yNTEwMjAwNzM1NDRaFw0yNTEwMjMwODQ5NDRaMDMxMTAvBgNV BAMTKDU2MjY2N0UwNDdGMzMwMzQ3MTJBRkU2OTREQzc1MDY5QUYwNkUzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMevNi/r1Cqozi2H6Set9CpV+m INRE1ryqj53q86GQTuZFByQSq2OEyIsKY7Bfcx4DAoRzJGKKc98M9y/Qb+wmuszI CkwVVYlxW0dHa6fHAlm6vBmOaDhtPzuOIgUkY2f4NZcxWAW7r4+NZ1RX4n/TRkFw H8crMxEcZyxw47lkzpJeN2Rw0x2uR301QEwJafEo0Qptt9Q1Tkv0iZkJQDux98qe lH3pgEt8QgaR94uSrjFudorLyGNTKhe0d8hRbeMK872DY6Pc5rdCjG7lwBeP2v0J 83LaG971ORlWZMN8d3AC5F9xbrk7rqOj9tq8z72dslob+qxMd8yF8joMU7H9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUViZn4EfzMDRxKv5pTcdQaa8G40EwHwYDVR0j BBgwFoAUSs4K3btb87SbHNpaIxDPBrM0plkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjY5ZDY2Ny0xN2E0LTRmZGQtOWM1Ny0xMTIyMDMzZWY5OTkvMC80QUNFMEFEREJC NUJGM0I0OUIxQ0RBNUEyMzEwQ0YwNkIzMzRBNjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZCMzM0 QTY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENG MDZCMzM0QTY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxLU7IUDvloQJU+ATrWqKEqvSMyrElKe+6M /sRSbHPQFQyYLYILaLxUxt5GYw3KwboYgQs2ttLz96Lwuhy/iJFRj9F3DJRJfE5C DsmWnZ4+ycj4WNf/NpHcOJl2n7OjHlI+PXHqkVFX7dA+ZgFy0Pl8Ur6UPgPg1fHj VkDK9msBn0cyMAdO1/yn7B/oZcP4Yq3PjqN9SVLC2dGDt2KJ507bETKTIy/+wlKH UOUbq5m31d3SRB4+6MSTcGoBIn/WQI2kvi6wBI2fHY6rOm24R7jPB8sWQYlIrPmx HHmUq9GvpFs220NTl4g1KvjU2FTxDfhWUt8gV/n8q342yyjrGi8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:09 2025 by rpki-client