$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: TDpEO7aeUg4efx1NswBmkxd+Rm2IahFpThKe0yjRFP8= Subject key identifier: 5B:09:B8:84:E8:AF:FF:B7:74:1A:28:A7:B5:CE:0C:59:82:90:B9:2D Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 1493D2E89677E616B896DD441B21768DCDCD6357 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: C3 Signing time: Sun 19 Oct 2025 04:20:01 +0000 Manifest this update: Sun 19 Oct 2025 04:15:01 +0000 Manifest next update: Wed 22 Oct 2025 07:14:01 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=) 2: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: 6TtojfMpOiXpUMNl2sM/2jWV0kWVwNXoXa3/WunOtmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:93:d2:e8:96:77:e6:16:b8:96:dd:44:1b:21:76:8d:cd:cd:63:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Oct 19 04:15:01 2025 GMT Not After : Oct 22 07:14:01 2025 GMT Subject: CN=5B09B884E8AFFFB7741A28A7B5CE0C598290B92D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:be:97:de:c6:6c:4c:52:76:0d:2c:20:2a: 3c:92:8d:fe:7a:ab:50:7a:0e:ce:ac:31:54:d7:9d: b8:6a:17:92:5b:46:41:4e:fe:ff:ef:86:65:d1:98: 9b:6d:3e:70:7a:60:6d:61:d5:63:c6:ce:50:a7:76: c7:34:f7:df:55:6f:52:b1:3b:db:4a:91:de:6d:a5: 35:33:0d:b6:e7:31:7e:0e:2f:95:d2:c3:5d:58:c7: f0:4a:57:ac:34:9d:83:48:96:a4:c6:98:76:80:6e: 8b:50:b0:ac:2f:a6:57:29:49:db:cf:ac:53:be:cf: 68:85:96:29:03:e3:5c:8e:d4:35:8a:3f:7f:5f:5d: 51:f7:c8:be:3f:b1:5e:1d:e9:2d:79:1e:95:08:ae: df:e8:83:0b:b7:58:e3:45:e2:99:f2:2f:fc:6f:b5: 44:56:11:a5:3b:17:29:eb:fc:bf:f8:eb:9a:eb:db: aa:3d:b9:5b:cf:2d:db:f5:70:07:fb:0d:c9:29:c1: 3a:2e:59:03:e9:5a:5e:7a:04:60:f8:e3:13:74:fa: 8d:e9:b4:ea:47:5f:3a:b3:51:d7:9c:bb:8d:7a:9c: 4f:35:3c:4f:44:15:32:ec:ff:e6:b5:ef:88:4a:1a: 69:1a:ca:ee:87:f0:09:16:11:bb:ea:be:a9:90:f5: c6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:09:B8:84:E8:AF:FF:B7:74:1A:28:A7:B5:CE:0C:59:82:90:B9:2D X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:21:d4:06:a5:e4:51:23:39:ef:d3:4e:93:0a:64:4a:13:4d: da:e1:92:52:f3:e6:ce:05:66:e3:08:79:24:3f:bd:c9:e7:dd: 0d:c0:af:17:1c:0e:d7:d5:1c:61:f8:d4:2f:9c:db:ce:c5:d7: 95:a6:7e:57:fc:11:ef:46:77:53:84:2e:07:3c:e4:8a:31:13: b7:fe:49:83:9e:aa:31:14:78:c2:d5:d5:84:4c:ff:6f:c1:c4: f4:0c:85:63:5b:ce:6a:2e:c6:df:df:ff:ed:16:72:24:e3:fa: 17:29:ce:26:10:f0:c0:53:74:32:00:f3:95:b1:17:b5:d8:90: 5f:2f:4e:ac:97:3a:e4:18:c7:f2:db:10:4d:77:30:cb:f4:12: d6:83:ac:ad:7c:65:0f:da:1d:db:3f:61:9b:95:7c:c0:b5:79: 62:9c:da:6f:17:5e:3a:7c:45:a6:b5:8a:cb:78:03:3e:ea:9c: 27:db:28:da:a8:21:2c:fa:27:46:66:86:8a:d1:16:a1:fa:21: ac:5b:ad:bd:3d:3f:8b:a4:8d:b1:88:6f:c3:cf:42:c5:08:e8: e7:6f:ec:8f:ea:e7:ce:4a:68:4d:06:3b:7b:85:2d:60:41:f9: 41:f9:93:ed:cd:17:13:35:2d:bf:ce:90:f2:da:d5:5d:b7:5f: ed:d5:bc:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJPS6JZ35ha4lt1EGyF2jc3NY1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNTEwMTkwNDE1MDFaFw0yNTEwMjIwNzE0MDFaMDMxMTAvBgNV BAMTKDVCMDlCODg0RThBRkZGQjc3NDFBMjhBN0I1Q0UwQzU5ODI5MEI5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKH76X3sZsTFJ2DSwgKjySjf56 q1B6Ds6sMVTXnbhqF5JbRkFO/v/vhmXRmJttPnB6YG1h1WPGzlCndsc0999Vb1Kx O9tKkd5tpTUzDbbnMX4OL5XSw11Yx/BKV6w0nYNIlqTGmHaAbotQsKwvplcpSdvP rFO+z2iFlikD41yO1DWKP39fXVH3yL4/sV4d6S15HpUIrt/ogwu3WONF4pnyL/xv tURWEaU7Fynr/L/465rr26o9uVvPLdv1cAf7DckpwTouWQPpWl56BGD44xN0+o3p tOpHXzqzUdecu416nE81PE9EFTLs/+a174hKGmkayu6H8AkWEbvqvqmQ9cbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWwm4hOiv/7d0Giintc4MWYKQuS0wHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMh1Aal5FEjOe/TTpMKZEoTTdrhklLz5s4F ZuMIeSQ/vcnn3Q3ArxccDtfVHGH41C+c287F15Wmflf8Ee9Gd1OELgc85IoxE7f+ SYOeqjEUeMLV1YRM/2/BxPQMhWNbzmouxt/f/+0WciTj+hcpziYQ8MBTdDIA85Wx F7XYkF8vTqyXOuQYx/LbEE13MMv0EtaDrK18ZQ/aHds/YZuVfMC1eWKc2m8XXjp8 Raa1ist4Az7qnCfbKNqoISz6J0ZmhorRFqH6Iaxbrb09P4ukjbGIb8PPQsUI6Odv 7I/q585KaE0GO3uFLWBB+UH5k+3NFxM1Lb/OkPLa1V23X+3VvBo= -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:39 2025 by rpki-client