$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: oIsh4Kgf9I6CT6maBuOsCSAvwRnzYNaw8zxZ/5f9Tq0= Subject key identifier: 15:A7:25:BF:2B:D4:5E:79:9C:C7:7F:21:45:37:D5:F4:89:AA:21:C0 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 78D69E051F1D4D3F792548FFABEA7AB7F549470D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 03AF Signing time: Thu 21 Aug 2025 23:42:17 +0000 Manifest this update: Thu 21 Aug 2025 23:37:17 +0000 Manifest next update: Mon 25 Aug 2025 03:14:17 +0000 Files and hashes: 1: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: 4vdEckureA73UjTE8qr1p6B0NNmoR0uOwcWucsoPonA=) 2: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d6:9e:05:1f:1d:4d:3f:79:25:48:ff:ab:ea:7a:b7:f5:49:47:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Aug 21 23:37:17 2025 GMT Not After : Aug 25 03:14:17 2025 GMT Subject: CN=15A725BF2BD45E799CC77F214537D5F489AA21C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:23:8a:41:fa:03:04:8a:3f:63:b0:07:e5: 2d:9c:78:83:eb:56:74:ee:03:4a:df:f2:ea:ed:85: 51:3e:9c:84:91:87:2a:ab:e1:94:b8:78:6a:c5:6c: be:ee:ef:76:14:4a:c5:df:41:a9:53:09:a8:6c:8d: f6:83:52:22:c8:7f:bf:0c:03:54:28:79:3a:6f:d6: b8:ae:14:ac:f7:23:48:d6:2d:02:8b:9b:87:18:72: 29:12:92:71:55:15:79:a8:5b:2b:04:c2:ab:0a:77: 58:15:d5:fa:a4:8a:e3:61:e1:47:77:99:60:9a:2f: 1f:43:29:7c:08:53:1d:c9:7d:95:b3:56:66:33:48: 55:00:3a:b3:38:80:5d:22:00:c3:92:36:cc:20:bd: 14:1b:c5:c3:f0:aa:13:58:9e:dc:8d:8f:bd:ae:4e: ca:5c:0a:76:86:51:92:0a:3f:46:a9:e5:3b:93:93: 68:54:f6:3c:9e:de:08:e1:f9:81:56:63:80:3f:d5: 58:d3:cc:44:35:7e:14:32:a8:c6:b6:ef:d3:87:84: ba:39:53:28:e5:ba:ef:67:5a:4c:97:e7:c5:3e:cf: 1f:da:3d:d2:ca:d1:cd:aa:fa:af:5d:99:ec:35:00: c7:4d:f8:ec:75:ac:1f:23:12:20:dc:a8:fc:49:19: ac:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A7:25:BF:2B:D4:5E:79:9C:C7:7F:21:45:37:D5:F4:89:AA:21:C0 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ec:90:9f:3a:29:60:fd:8d:e5:d7:e1:54:59:12:2f:8d:b7: 29:64:f1:37:11:89:a0:06:d2:29:80:be:43:77:ea:d5:26:5b: a8:5c:86:eb:f7:99:3d:5a:26:4e:f0:90:1e:da:a2:49:a8:b2: 33:e0:e1:3f:94:19:92:18:6c:2f:dc:e9:0b:2e:81:81:23:56: 30:c8:eb:9f:5f:8d:0e:24:26:55:b7:0a:0b:d0:2e:75:ff:b1: 4c:e2:15:16:c2:44:8a:ee:d0:ad:90:98:a9:8b:e1:c5:b9:7a: 0d:c8:d8:53:b0:fe:11:28:e5:0d:7b:e3:9e:14:18:91:ca:13: e6:b6:22:95:61:7f:56:ab:a5:0e:4c:b7:d1:68:ea:30:86:19: 75:72:a1:92:f6:e7:12:91:46:7a:9c:57:20:eb:87:a7:2a:18: 7b:9c:50:94:24:41:15:ce:1d:b8:52:72:e6:96:ed:ca:79:5d: 30:53:4f:9e:98:29:e8:69:f4:1e:ad:cf:71:ce:3f:4f:a9:0b: bb:ed:51:28:00:7c:ee:c1:df:5b:4b:b9:ec:14:5a:95:23:ca: 43:2b:6c:f8:95:58:55:00:0d:cc:2b:81:fe:a5:b6:55:d3:7a: 65:28:b4:91:48:9c:68:47:53:af:5f:3c:44:11:f3:54:4a:22: c7:f8:13:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNaeBR8dTT95JUj/q+p6t/VJRw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNTA4MjEyMzM3MTdaFw0yNTA4MjUwMzE0MTdaMDMxMTAvBgNV BAMTKDE1QTcyNUJGMkJENDVFNzk5Q0M3N0YyMTQ1MzdENUY0ODlBQTIxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01SOKQfoDBIo/Y7AH5S2ceIPr VnTuA0rf8urthVE+nISRhyqr4ZS4eGrFbL7u73YUSsXfQalTCahsjfaDUiLIf78M A1QoeTpv1riuFKz3I0jWLQKLm4cYcikSknFVFXmoWysEwqsKd1gV1fqkiuNh4Ud3 mWCaLx9DKXwIUx3JfZWzVmYzSFUAOrM4gF0iAMOSNswgvRQbxcPwqhNYntyNj72u TspcCnaGUZIKP0ap5TuTk2hU9jye3gjh+YFWY4A/1VjTzEQ1fhQyqMa279OHhLo5 Uyjluu9nWkyX58U+zx/aPdLK0c2q+q9dmew1AMdN+Ox1rB8jEiDcqPxJGaxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFaclvyvUXnmcx38hRTfV9ImqIcAwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzskJ86KWD9jeXX4VRZEi+Ntylk8TcRiaAG 0imAvkN36tUmW6hchuv3mT1aJk7wkB7aokmosjPg4T+UGZIYbC/c6QsugYEjVjDI 659fjQ4kJlW3CgvQLnX/sUziFRbCRIru0K2QmKmL4cW5eg3I2FOw/hEo5Q17454U GJHKE+a2IpVhf1arpQ5Mt9Fo6jCGGXVyoZL25xKRRnqcVyDrh6cqGHucUJQkQRXO HbhScuaW7cp5XTBTT56YKehp9B6tz3HOP0+pC7vtUSgAfO7B31tLuewUWpUjykMr bPiVWFUADcwrgf6ltlXTemUotJFInGhHU69fPEQR81RKIsf4E+4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:45 2025 by rpki-client