$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: Mno75L6LZNh0TJUbwaJZ2cJDRTziVtg71keTh0S9xZs= Subject key identifier: A3:CB:B6:CD:99:E0:C0:33:15:8F:E2:CE:46:1E:8A:25:D0:A6:1E:CF Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 65B3FD0D12175B87E50853EC70DAE6AFC7765DC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: A9 Signing time: Fri 22 Aug 2025 21:50:01 +0000 Manifest this update: Fri 22 Aug 2025 21:45:01 +0000 Manifest next update: Tue 26 Aug 2025 01:24:01 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=) 2: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: G63hx8H20lBC+h63CQwRVJkzitV0mrKOXtUdzHN497Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b3:fd:0d:12:17:5b:87:e5:08:53:ec:70:da:e6:af:c7:76:5d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Aug 22 21:45:01 2025 GMT Not After : Aug 26 01:24:01 2025 GMT Subject: CN=A3CBB6CD99E0C033158FE2CE461E8A25D0A61ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:77:ed:6f:7e:3f:18:01:ba:8f:81:01:f4: 60:f3:50:37:3d:95:fb:8d:71:27:eb:73:4f:3e:4a: 41:df:4b:9a:2a:f7:59:d5:e4:bf:2e:38:53:03:19: e7:77:3c:f7:0d:47:e7:a2:18:e1:f8:04:bd:80:a5: 93:cf:1b:b9:de:a3:e4:fd:1f:5d:74:e3:62:a4:98: de:db:8a:ee:df:6f:cf:01:02:95:40:93:26:0f:2a: b0:0e:bc:b5:9b:bb:f3:d5:4d:8a:57:b3:55:36:ba: e3:0f:5c:19:64:30:49:bc:23:64:8c:89:65:e4:12: 1d:95:dd:bd:23:ac:ac:c3:91:29:d3:93:fb:32:2d: c0:c1:42:55:6f:7d:0b:f6:41:9a:92:4f:26:03:b6: 33:c0:e3:6d:10:02:b5:80:14:20:b3:22:c8:75:82: 98:79:2f:06:b6:48:b9:4a:78:7c:a4:e9:a4:19:1e: 92:22:68:a0:c2:6b:2b:f1:b1:a2:aa:43:d1:7c:78: 61:ea:5b:52:17:78:e7:fb:92:62:6f:79:23:7e:73: 87:f0:09:8b:2e:3d:da:17:eb:42:9f:25:ab:1e:1d: 5f:53:82:9c:fa:97:27:4c:97:39:d6:cd:18:81:72: df:a9:31:97:35:81:d1:88:ac:a4:5b:43:3a:4f:2e: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CB:B6:CD:99:E0:C0:33:15:8F:E2:CE:46:1E:8A:25:D0:A6:1E:CF X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:0f:8b:e7:30:92:ca:8d:d4:c3:37:81:07:59:60:45:0e:ca: 7a:4c:45:9e:83:84:74:5e:f4:3a:29:62:b0:59:56:51:53:02: 32:3c:fa:55:cd:6f:f0:a0:bc:e8:74:99:ec:8d:ef:5c:35:7c: 41:fe:28:7e:ed:33:3f:97:5e:6e:5d:35:0a:de:b7:72:ac:45: e2:96:a4:e3:54:61:24:c5:3b:d3:aa:a3:a8:9b:e2:ee:36:87: 6b:0e:db:55:35:80:b3:28:b7:f3:28:a7:9d:e1:a5:ca:99:4f: 13:87:cf:50:03:50:19:1f:32:97:dd:f5:7d:1a:96:8a:0a:f0: 17:09:f7:3c:7c:90:4f:49:18:85:ea:df:52:d9:14:b3:bc:2f: d1:58:fc:24:b4:58:3b:c2:8a:b5:95:25:0d:52:d9:82:05:18: 16:55:e6:c1:ce:94:51:3b:08:71:f3:ec:1f:14:c0:1d:ff:be: 1a:4d:6d:dd:8a:6a:77:94:0f:8a:ca:3b:24:b7:f8:ee:99:2e: 19:87:1c:11:0c:bd:8e:61:5e:31:63:75:90:4c:76:22:79:1e: e1:f7:35:bc:00:78:b7:0f:ee:55:04:d7:d6:bf:b3:57:da:5b: fa:2f:01:ef:fe:18:3e:76:bd:39:9b:b0:c9:49:99:d3:8f:b5: 67:16:84:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbP9DRIXW4flCFPscNrmr8d2XccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNTA4MjIyMTQ1MDFaFw0yNTA4MjYwMTI0MDFaMDMxMTAvBgNV BAMTKEEzQ0JCNkNEOTlFMEMwMzMxNThGRTJDRTQ2MUU4QTI1RDBBNjFFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqXftb34/GAG6j4EB9GDzUDc9 lfuNcSfrc08+SkHfS5oq91nV5L8uOFMDGed3PPcNR+eiGOH4BL2ApZPPG7neo+T9 H11042KkmN7biu7fb88BApVAkyYPKrAOvLWbu/PVTYpXs1U2uuMPXBlkMEm8I2SM iWXkEh2V3b0jrKzDkSnTk/syLcDBQlVvfQv2QZqSTyYDtjPA420QArWAFCCzIsh1 gph5Lwa2SLlKeHyk6aQZHpIiaKDCayvxsaKqQ9F8eGHqW1IXeOf7kmJveSN+c4fw CYsuPdoX60KfJaseHV9Tgpz6lydMlznWzRiBct+pMZc1gdGIrKRbQzpPLg0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo8u2zZngwDMVj+LORh6KJdCmHs8wHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcPi+cwksqN1MM3gQdZYEUOynpMRZ6DhHRe 9DopYrBZVlFTAjI8+lXNb/CgvOh0meyN71w1fEH+KH7tMz+XXm5dNQret3KsReKW pONUYSTFO9Oqo6ib4u42h2sO21U1gLMot/Mop53hpcqZTxOHz1ADUBkfMpfd9X0a looK8BcJ9zx8kE9JGIXq31LZFLO8L9FY/CS0WDvCirWVJQ1S2YIFGBZV5sHOlFE7 CHHz7B8UwB3/vhpNbd2KaneUD4rKOyS3+O6ZLhmHHBEMvY5hXjFjdZBMdiJ5HuH3 NbwAeLcP7lUE19a/s1faW/ovAe/+GD52vTmbsMlJmdOPtWcWhIc= -----END CERTIFICATE-----Generated at Sun Aug 24 03:57:50 2025 by rpki-client