$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: cGA+hgy8ciBlfmaopEttD3Pdy1p7FRmn8xip7OTandw= Subject key identifier: 11:63:52:A4:7A:D4:20:11:84:48:06:05:C6:EA:1E:A5:D3:D2:30:0F Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 2E88ACC2CE9B8072DDF37EC9547810ADCFB32C7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 04F0 Signing time: Tue 22 Jul 2025 22:31:11 +0000 Manifest this update: Tue 22 Jul 2025 22:26:11 +0000 Manifest next update: Sat 26 Jul 2025 09:03:11 +0000 Files and hashes: 1: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=) 2: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=) 3: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=) 4: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=) 5: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=) 6: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: hKuamBAx77CwO86y1A7xDVYWjcy9qi6pO1mapMzXVQk=) 7: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: WssHgXT7HBavzIOa0Yri7WKi4uk0rltkOLtdz+rxC/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 09:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:88:ac:c2:ce:9b:80:72:dd:f3:7e:c9:54:78:10:ad:cf:b3:2c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Jul 22 22:26:11 2025 GMT Not After : Jul 26 09:03:11 2025 GMT Subject: CN=116352A47AD4201184480605C6EA1EA5D3D2300F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:2e:d8:6d:ae:c7:42:c4:21:c2:87:94:e3: 20:1a:5a:00:fe:d6:89:0f:05:b9:55:8d:97:f2:d6: 86:17:fb:97:8d:ee:6d:fa:5f:c2:1b:4d:cc:ee:b8: 13:89:45:94:e9:d8:ae:44:bb:c5:4b:69:ef:38:25: da:e2:ee:b4:19:fb:6c:5e:26:ce:b1:fd:58:bf:b2: 39:15:e7:83:9c:14:c4:8c:8d:52:49:6f:65:cc:d7: 20:c3:ea:60:c4:26:0b:72:15:ea:6e:d3:4d:d6:97: 81:e3:b2:9b:cd:bd:fa:96:4f:d2:ae:9e:22:5f:79: 6b:95:39:a3:e0:f8:e2:99:bc:f7:ff:d5:80:2b:dd: a6:b5:af:23:d6:3a:45:51:ec:a4:92:ab:71:2b:dd: 98:33:b5:fe:7a:d1:f4:8d:7d:9b:8e:4b:13:9e:00: aa:75:3a:a0:5b:04:22:f6:62:25:db:17:8b:cd:9e: 62:ff:19:09:7c:a6:37:12:7c:4f:bf:de:8a:33:0d: 26:52:d3:7e:bc:ec:21:b3:8f:50:65:09:fa:3f:e0: a3:00:8b:aa:2e:de:8a:c9:4d:cd:80:7d:ca:89:5d: c7:9c:4f:d2:9c:9b:c0:3f:8f:ce:51:bc:08:7e:0a: 0b:ee:45:8d:04:c6:b6:4b:b4:71:fd:cb:2f:f2:9d: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:63:52:A4:7A:D4:20:11:84:48:06:05:C6:EA:1E:A5:D3:D2:30:0F X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b5:15:11:19:45:43:a8:33:81:49:19:6c:2d:24:00:09:2c: bb:bf:f6:44:34:c8:de:1f:58:1c:15:95:9c:f9:3a:4e:1f:c3: a9:74:0d:4e:c4:b9:89:64:a4:41:15:ca:c5:41:cc:c0:2e:6f: 82:c4:65:6f:da:a5:5d:f0:3c:e6:03:08:11:bb:cb:41:5b:8f: ee:6b:f1:54:1a:c6:de:39:48:e8:2a:d8:bb:2f:52:b1:20:dd: d5:30:0e:21:25:c7:08:15:76:46:62:bc:9d:ad:e9:4d:41:eb: 92:23:e9:a9:69:31:2e:be:c6:ca:f4:6c:9c:d5:49:0f:ca:f8: a5:1c:46:ed:37:14:9e:5d:3c:79:8d:4f:5e:49:ae:9f:67:e0: f8:50:24:cb:49:8d:81:ff:d1:08:49:e4:43:c7:8e:33:19:e4: ca:a0:9e:6c:f6:ee:71:0e:ef:26:9d:77:8b:bd:a7:98:ab:46: a0:d0:d5:44:c5:64:32:28:b2:89:3f:77:9a:6a:23:df:62:b1: 2a:b0:f0:34:31:98:2e:5f:72:2b:fe:fe:fd:ef:2f:73:b6:85: 38:a0:9c:00:37:ca:a3:00:d1:a5:89:4f:ac:6f:c8:33:fe:44: 2a:3a:90:22:5c:f6:4f:94:46:0a:58:43:a0:ad:a7:a5:46:87: 00:4e:72:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULoisws6bgHLd837JVHgQrc+zLHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNTA3MjIyMjI2MTFaFw0yNTA3MjYwOTAzMTFaMDMxMTAvBgNV BAMTKDExNjM1MkE0N0FENDIwMTE4NDQ4MDYwNUM2RUExRUE1RDNEMjMwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfty7Yba7HQsQhwoeU4yAaWgD+ 1okPBblVjZfy1oYX+5eN7m36X8IbTczuuBOJRZTp2K5Eu8VLae84Jdri7rQZ+2xe Js6x/Vi/sjkV54OcFMSMjVJJb2XM1yDD6mDEJgtyFepu003Wl4HjspvNvfqWT9Ku niJfeWuVOaPg+OKZvPf/1YAr3aa1ryPWOkVR7KSSq3Er3Zgztf560fSNfZuOSxOe AKp1OqBbBCL2YiXbF4vNnmL/GQl8pjcSfE+/3oozDSZS03687CGzj1BlCfo/4KMA i6ou3orJTc2AfcqJXcecT9Kcm8A/j85RvAh+CgvuRY0ExrZLtHH9yy/ynTFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEWNSpHrUIBGESAYFxuoepdPSMA8wHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFS1FREZRUOoM4FJGWwtJAAJLLu/9kQ0yN4f WBwVlZz5Ok4fw6l0DU7EuYlkpEEVysVBzMAub4LEZW/apV3wPOYDCBG7y0Fbj+5r 8VQaxt45SOgq2LsvUrEg3dUwDiElxwgVdkZivJ2t6U1B65Ij6alpMS6+xsr0bJzV SQ/K+KUcRu03FJ5dPHmNT15Jrp9n4PhQJMtJjYH/0QhJ5EPHjjMZ5Mqgnmz27nEO 7yadd4u9p5irRqDQ1UTFZDIosok/d5pqI99isSqw8DQxmC5fciv+/v3vL3O2hTig nAA3yqMA0aWJT6xvyDP+RCo6kCJc9k+URgpYQ6Ctp6VGhwBOckM= -----END CERTIFICATE-----Generated at Fri Jul 25 01:05:14 2025 by rpki-client