$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json) Hash identifier: bWFpi7Qi7aOoQGkhVmORq6IGgjMq6d3f7QwefBDkmnA= Subject key identifier: 2B:D6:F6:41:48:60:49:92:3C:CE:24:B9:24:F7:D3:06:0A:27:0D:16 Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Certificate serial: 364852EDB5877A1431E8AE931BDCCC9FE76976B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft Manifest number: 0146 Signing time: Sun 19 Oct 2025 15:01:06 +0000 Manifest this update: Sun 19 Oct 2025 14:56:06 +0000 Manifest next update: Thu 23 Oct 2025 01:57:06 +0000 Files and hashes: 1: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: NqkImVYEtp/i2O30et8l4JDTEjgqM2mq75+7diYsh04=) 2: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: qxf//YzvZquiMhJd5iJXlsIhTKmJQsFvO/D1AKj+2BM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:48:52:ed:b5:87:7a:14:31:e8:ae:93:1b:dc:cc:9f:e7:69:76:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Validity Not Before: Oct 19 14:56:06 2025 GMT Not After : Oct 23 01:57:06 2025 GMT Subject: CN=2BD6F641486049923CCE24B924F7D3060A270D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:79:3f:4c:16:e1:53:49:00:a9:fb:cc:19: 22:f9:ef:22:75:6e:a2:38:8d:53:05:c8:5c:4b:dd: 8d:77:ac:a2:f5:f6:9b:22:bb:cf:70:3c:81:f7:7d: 0e:89:05:e0:da:a2:84:73:b2:6d:d1:63:2e:e5:92: db:4c:2e:7a:5d:42:b7:ba:72:be:76:af:1c:55:3b: 5e:8b:82:72:0d:00:9f:54:60:e5:d1:71:1c:13:28: cf:86:fe:bb:7f:98:e9:ab:68:1c:1a:b9:ae:5b:b9: 6d:fe:d1:2c:74:f6:e4:a7:4e:cc:60:86:b3:c3:43: 8d:71:37:70:d9:16:9a:70:2d:e2:5e:12:a0:74:07: db:93:09:f5:f3:f7:d6:93:7c:1f:03:d2:64:15:48: a1:ee:b6:72:75:64:ab:91:5e:5f:45:ca:ac:04:55: ad:d5:8f:04:b3:10:0f:d6:cb:61:c5:85:82:af:e9: 35:06:6e:8b:46:13:e1:d1:ff:28:60:3a:28:11:e4: 27:a9:8b:4c:20:f1:ef:01:db:6c:b3:7f:9b:bc:67: ff:fe:31:fe:22:94:d8:44:22:01:90:9d:8f:b8:c9: 54:6f:6f:d9:04:83:32:a8:04:b6:8e:54:23:8a:b9: 2b:60:18:80:fd:64:76:e5:8d:7e:de:51:de:70:3c: ac:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D6:F6:41:48:60:49:92:3C:CE:24:B9:24:F7:D3:06:0A:27:0D:16 X509v3 Authority Key Identifier: keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:32:11:8c:52:41:e6:67:66:31:59:23:4f:63:81:45:84:52: d4:8e:a6:42:d6:8f:2b:63:06:dd:87:ee:59:52:69:f5:cd:b9: db:c7:b8:e0:38:ea:74:7c:93:fe:2a:79:6c:cd:ef:e5:5d:74: 89:f1:e2:0a:8b:3a:76:ad:c6:2f:76:b5:93:96:00:e8:6e:c8: cd:0f:e8:65:d1:d7:35:61:e6:2f:43:df:47:24:58:a0:6e:b1: 28:e9:30:04:b5:24:af:12:51:a7:db:0d:e9:ef:6d:bf:e3:b1: 06:21:eb:2a:35:d5:94:0e:b2:58:e9:4c:df:0b:0d:64:01:5c: de:c1:60:8e:5f:b0:72:56:a2:90:f1:5b:66:4c:35:b6:4e:e5: bb:22:c0:e4:5a:39:b8:a8:97:c7:6d:3d:0d:c9:e0:14:71:48: 9a:96:3c:73:a2:1a:8e:73:69:ac:fc:81:f1:ad:10:2b:1c:cb: 7a:67:23:f3:f4:7f:ed:f8:88:fb:32:28:e0:33:86:3d:b0:89: 97:4b:07:2f:98:ce:8d:6b:6b:99:bd:fa:55:e6:df:40:87:b6: ff:50:b4:38:34:95:f3:67:72:ba:c8:27:63:4f:a8:9f:a6:a9: 18:52:e3:70:03:5e:4c:91:d3:eb:4c:2b:ca:0f:c6:12:0d:fe: 85:59:c3:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkhS7bWHehQx6K6TG9zMn+dpdrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJC NjI2Q0E0RDAeFw0yNTEwMTkxNDU2MDZaFw0yNTEwMjMwMTU3MDZaMDMxMTAvBgNV BAMTKDJCRDZGNjQxNDg2MDQ5OTIzQ0NFMjRCOTI0RjdEMzA2MEEyNzBEMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIN3k/TBbhU0kAqfvMGSL57yJ1 bqI4jVMFyFxL3Y13rKL19psiu89wPIH3fQ6JBeDaooRzsm3RYy7lkttMLnpdQre6 cr52rxxVO16LgnINAJ9UYOXRcRwTKM+G/rt/mOmraBwaua5buW3+0Sx09uSnTsxg hrPDQ41xN3DZFppwLeJeEqB0B9uTCfXz99aTfB8D0mQVSKHutnJ1ZKuRXl9FyqwE Va3VjwSzEA/Wy2HFhYKv6TUGbotGE+HR/yhgOigR5Cepi0wg8e8B22yzf5u8Z//+ Mf4ilNhEIgGQnY+4yVRvb9kEgzKoBLaOVCOKuStgGID9ZHbljX7eUd5wPKyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK9b2QUhgSZI8ziS5JPfTBgonDRYwHwYDVR0j BBgwFoAUrOLauqJJ1WrZaK19YKCWQrYmyk0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC9BQ0UyREFCQUEy NDlENTZBRDk2OEFEN0Q2MEEwOTY0MkI2MjZDQTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJCNjI2 Q0E0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2 NDJCNjI2Q0E0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQyEYxSQeZnZjFZI09jgUWEUtSOpkLWjytj Bt2H7llSafXNudvHuOA46nR8k/4qeWzN7+VddInx4gqLOnatxi92tZOWAOhuyM0P 6GXR1zVh5i9D30ckWKBusSjpMAS1JK8SUafbDenvbb/jsQYh6yo11ZQOsljpTN8L DWQBXN7BYI5fsHJWopDxW2ZMNbZO5bsiwORaObiol8dtPQ3J4BRxSJqWPHOiGo5z aaz8gfGtECscy3pnI/P0f+34iPsyKOAzhj2wiZdLBy+Yzo1ra5m9+lXm30CHtv9Q tDg0lfNncrrIJ2NPqJ+mqRhS43ADXkyR0+tMK8oPxhIN/oVZw60= -----END CERTIFICATE-----Generated at Mon Oct 20 09:27:05 2025 by rpki-client