$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json) Hash identifier: xCN8vg9lmFiHazH4F1SnKYXDVXIH4yh0L/++pdlLlzk= Subject key identifier: DB:1B:EC:D4:22:E0:2C:F2:A4:5D:47:74:51:F1:50:36:53:F9:4E:03 Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Certificate serial: 7177153517A169984BE2DD0BB38EA51BBBA0FC1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft Manifest number: 012C Signing time: Thu 21 Aug 2025 17:51:04 +0000 Manifest this update: Thu 21 Aug 2025 17:46:04 +0000 Manifest next update: Mon 25 Aug 2025 05:40:04 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: qxf//YzvZquiMhJd5iJXlsIhTKmJQsFvO/D1AKj+2BM=) 2: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: S8phqQInpV+V+Ky6BvGOApn9EuB738A4LqXgR4KP3c0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:77:15:35:17:a1:69:98:4b:e2:dd:0b:b3:8e:a5:1b:bb:a0:fc:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Validity Not Before: Aug 21 17:46:04 2025 GMT Not After : Aug 25 05:40:04 2025 GMT Subject: CN=DB1BECD422E02CF2A45D477451F1503653F94E03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:37:96:86:63:c4:e4:70:11:8c:ad:60:b7:f8: 2e:76:e9:31:21:d8:8c:0d:ae:e1:ba:4e:b8:c1:64: 53:3a:4e:0e:f7:ce:19:c9:25:c7:51:34:cc:a8:fc: 71:6e:ad:39:dc:42:ef:16:b0:3b:45:58:9e:e3:f3: 89:bb:20:cd:e6:ee:c2:48:72:a9:28:8a:15:15:d4: a1:99:10:c2:d6:43:a6:f8:df:e4:c1:be:c2:2c:c6: e3:60:a6:3a:c7:cc:a9:28:ea:f4:87:b6:de:5f:4c: 2e:be:55:a7:21:39:46:cf:01:75:76:dc:75:8e:7d: 0e:d8:ac:a8:ef:30:9f:70:05:95:e3:f6:15:a2:17: 66:c1:e3:3f:8a:0b:b2:e3:87:9d:e5:ca:ad:f3:94: 94:18:6b:dc:e5:88:fb:e7:94:2c:b4:94:16:9e:2c: df:83:be:20:86:7d:42:d1:9f:61:22:29:ac:23:0d: 1b:f2:5f:13:a0:d7:a4:a3:3a:9f:f3:75:31:56:33: 61:61:70:db:63:0f:27:95:ce:0b:7b:8b:ab:ea:69: 9c:dc:e3:50:ae:fe:49:0d:e7:04:06:e0:11:92:07: ee:7e:84:8e:c3:ff:36:8e:fa:2c:5c:46:c0:c7:8e: ba:66:4c:25:19:5f:b2:39:72:8b:e5:ca:52:d4:26: 05:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1B:EC:D4:22:E0:2C:F2:A4:5D:47:74:51:F1:50:36:53:F9:4E:03 X509v3 Authority Key Identifier: keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:64:83:ba:1c:71:ca:be:0a:87:fa:70:f0:01:c9:c3:87:a4: 0a:0c:fa:1e:e9:05:3d:91:23:23:f9:21:f6:72:f1:1d:08:44: 81:56:38:77:4c:3d:d0:32:63:c6:2d:3c:ee:60:ea:c1:9c:48: 5b:1c:51:f5:e0:f3:c4:98:f4:c3:c1:fb:b1:06:d4:80:51:4e: d2:85:97:dd:90:7b:e3:da:8d:1e:c9:0b:ee:59:bb:00:db:5a: b9:02:c5:7c:d6:2e:45:7b:28:ed:ec:c0:a8:4a:98:35:cd:3b: 6b:0e:84:4b:c8:6f:06:fb:8d:0b:2c:58:a1:fb:91:ac:69:6d: cb:36:35:a2:69:50:40:47:7a:5d:de:a1:52:9c:e4:56:5c:12: bc:8d:c1:4a:40:b7:7a:d9:bc:e6:a5:03:23:ef:3e:8e:78:b2: 9d:48:72:a7:49:d5:81:cc:3f:8f:c0:f2:23:6d:22:ba:e8:98: 01:f8:18:bd:5a:ca:1f:c7:e0:5f:02:c8:78:ea:e9:b0:5f:ff: 55:e1:07:8c:d9:34:61:6d:e2:2c:fc:52:d7:f1:fe:77:7d:5b: ad:93:4a:9d:62:00:33:df:ff:31:24:e3:8e:1e:5e:9f:a9:c1: b1:30:5d:f1:00:4e:36:3f:e6:48:ad:eb:45:95:f8:c2:37:b6: 46:6c:90:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXcVNRehaZhL4t0Ls46lG7ug/B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJC NjI2Q0E0RDAeFw0yNTA4MjExNzQ2MDRaFw0yNTA4MjUwNTQwMDRaMDMxMTAvBgNV BAMTKERCMUJFQ0Q0MjJFMDJDRjJBNDVENDc3NDUxRjE1MDM2NTNGOTRFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEN5aGY8TkcBGMrWC3+C526TEh 2IwNruG6TrjBZFM6Tg73zhnJJcdRNMyo/HFurTncQu8WsDtFWJ7j84m7IM3m7sJI cqkoihUV1KGZEMLWQ6b43+TBvsIsxuNgpjrHzKko6vSHtt5fTC6+VachOUbPAXV2 3HWOfQ7YrKjvMJ9wBZXj9hWiF2bB4z+KC7Ljh53lyq3zlJQYa9zliPvnlCy0lBae LN+DviCGfULRn2EiKawjDRvyXxOg16SjOp/zdTFWM2FhcNtjDyeVzgt7i6vqaZzc 41Cu/kkN5wQG4BGSB+5+hI7D/zaO+ixcRsDHjrpmTCUZX7I5covlylLUJgXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2xvs1CLgLPKkXUd0UfFQNlP5TgMwHwYDVR0j BBgwFoAUrOLauqJJ1WrZaK19YKCWQrYmyk0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC9BQ0UyREFCQUEy NDlENTZBRDk2OEFEN0Q2MEEwOTY0MkI2MjZDQTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJCNjI2 Q0E0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2 NDJCNjI2Q0E0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZkg7occcq+Cof6cPABycOHpAoM+h7pBT2R IyP5IfZy8R0IRIFWOHdMPdAyY8YtPO5g6sGcSFscUfXg88SY9MPB+7EG1IBRTtKF l92Qe+PajR7JC+5ZuwDbWrkCxXzWLkV7KO3swKhKmDXNO2sOhEvIbwb7jQssWKH7 kaxpbcs2NaJpUEBHel3eoVKc5FZcEryNwUpAt3rZvOalAyPvPo54sp1IcqdJ1YHM P4/A8iNtIrromAH4GL1ayh/H4F8CyHjq6bBf/1XhB4zZNGFt4iz8Utfx/nd9W62T Sp1iADPf/zEk444eXp+pwbEwXfEATjY/5kit60WV+MI3tkZskM8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:29:20 2025 by rpki-client