$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: CdOrysMOyMqkvpPWndXGguIwtOJ1OJ2n4l544/cokEM= Subject key identifier: 75:F7:1E:37:11:2D:A9:7C:4D:19:0B:6C:B3:F3:90:E3:2A:09:60:75 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 319C89E5A4BEE3CD2D08E5222E198A0B209F56FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 03C9 Signing time: Sun 19 Oct 2025 14:02:11 +0000 Manifest this update: Sun 19 Oct 2025 13:57:11 +0000 Manifest next update: Wed 22 Oct 2025 21:53:11 +0000 Files and hashes: 1: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: 0mI9m+AZIGXUDGSKR1M5Y5pKyfaPdMSQ9wTSf7xdhCw=) 2: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9c:89:e5:a4:be:e3:cd:2d:08:e5:22:2e:19:8a:0b:20:9f:56:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Oct 19 13:57:11 2025 GMT Not After : Oct 22 21:53:11 2025 GMT Subject: CN=75F71E37112DA97C4D190B6CB3F390E32A096075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:b1:78:82:60:62:bc:8b:37:08:d0:84:82: ef:a1:9a:6f:e1:54:ee:0c:59:0d:18:eb:e2:75:04: c0:11:5d:16:e4:90:d8:68:62:b1:54:3a:55:dd:a0: 4e:0b:f5:c2:64:71:be:01:66:69:60:60:a3:f6:49: 07:50:58:73:3c:61:de:f2:e7:52:ce:ce:5f:70:4e: fb:67:b1:98:ea:70:0e:55:22:e8:b3:ad:67:1c:47: 79:f9:f9:aa:e0:0d:25:6b:86:ee:9a:94:51:6b:7a: fd:8d:1e:8f:ed:81:bf:95:80:6e:b1:20:f8:d2:e4: cc:2a:70:41:97:0e:dd:9e:bd:40:5d:22:32:ab:59: 13:19:f0:3f:a6:3f:5e:7c:fb:77:39:68:4a:7a:53: 4a:b7:59:f9:4f:cf:f3:f9:84:d9:9e:6e:32:86:cc: 8f:fd:08:eb:50:f7:00:3f:43:4e:87:9a:c5:d4:ae: 84:d8:e3:99:48:70:cd:5c:28:fa:87:34:93:9f:40: f2:82:5f:2f:5a:42:6b:23:3c:9f:44:b3:37:a7:40: be:07:ef:60:8a:62:87:cd:22:07:86:0c:fe:31:df: 09:08:b8:39:c0:92:62:4a:14:e3:8b:22:58:18:8b: 15:47:f9:68:ef:d1:53:47:ac:5f:08:11:01:2f:dc: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F7:1E:37:11:2D:A9:7C:4D:19:0B:6C:B3:F3:90:E3:2A:09:60:75 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3b:fe:ea:67:64:ef:8a:c8:63:cd:89:67:08:75:87:98:22: 9f:de:32:3f:ac:9d:5a:fb:ad:f6:9e:80:0d:1b:7f:63:6e:56: 25:c9:d0:1c:95:ba:e4:a9:b0:25:ca:9e:a9:04:4d:41:17:5c: e6:63:25:d8:e9:4b:49:bb:24:4e:28:ca:d3:c6:12:e2:aa:dd: a4:b5:05:40:bc:85:dc:16:19:5d:af:8e:05:97:e5:f0:8f:88: 8a:97:6d:3d:b5:fa:28:34:be:20:ba:ad:6d:80:99:2c:92:02: 4e:c1:6b:3b:32:7b:d1:1c:10:94:07:ee:f1:06:cf:73:3a:c2: e9:23:8a:5a:e0:9e:0d:15:39:59:83:e1:7f:9a:d7:ee:bb:4c: 7b:92:3a:4e:b6:96:98:65:43:6d:ea:eb:4c:a0:80:e1:a9:0d: 62:44:1e:a7:e8:f3:53:1b:d3:90:8f:63:d1:9c:78:c5:4c:ef: cf:13:0a:53:18:dc:10:43:78:d8:c7:76:8e:bc:24:32:5f:74: b9:73:2d:c9:60:fa:10:d0:26:4a:db:17:ca:9b:e1:a2:1d:09: b7:58:ee:0a:50:0b:0f:ba:8c:e0:6c:cf:ea:94:71:9b:ae:6b: 31:ad:4d:e4:69:9d:68:5e:96:c0:d4:56:80:0b:3b:58:50:dc: b8:cd:0c:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZyJ5aS+480tCOUiLhmKCyCfVvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNTEwMTkxMzU3MTFaFw0yNTEwMjIyMTUzMTFaMDMxMTAvBgNV BAMTKDc1RjcxRTM3MTEyREE5N0M0RDE5MEI2Q0IzRjM5MEUzMkEwOTYwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNrF4gmBivIs3CNCEgu+hmm/h VO4MWQ0Y6+J1BMARXRbkkNhoYrFUOlXdoE4L9cJkcb4BZmlgYKP2SQdQWHM8Yd7y 51LOzl9wTvtnsZjqcA5VIuizrWccR3n5+argDSVrhu6alFFrev2NHo/tgb+VgG6x IPjS5MwqcEGXDt2evUBdIjKrWRMZ8D+mP158+3c5aEp6U0q3WflPz/P5hNmebjKG zI/9COtQ9wA/Q06HmsXUroTY45lIcM1cKPqHNJOfQPKCXy9aQmsjPJ9EszenQL4H 72CKYofNIgeGDP4x3wkIuDnAkmJKFOOLIlgYixVH+Wjv0VNHrF8IEQEv3GsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdfceNxEtqXxNGQtss/OQ4yoJYHUwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABY7/upnZO+KyGPNiWcIdYeYIp/eMj+snVr7 rfaegA0bf2NuViXJ0ByVuuSpsCXKnqkETUEXXOZjJdjpS0m7JE4oytPGEuKq3aS1 BUC8hdwWGV2vjgWX5fCPiIqXbT21+ig0viC6rW2AmSySAk7Bazsye9EcEJQH7vEG z3M6wukjilrgng0VOVmD4X+a1+67THuSOk62lphlQ23q60yggOGpDWJEHqfo81Mb 05CPY9GceMVM788TClMY3BBDeNjHdo68JDJfdLlzLclg+hDQJkrbF8qb4aIdCbdY 7gpQCw+6jOBsz+qUcZuuazGtTeRpnWhelsDUVoALO1hQ3LjNDOY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:08 2025 by rpki-client