$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: wEo+np/XIWNcLZgPFhO99V7YbRs1vydxaoCFwHyZeQc= Subject key identifier: 3F:78:B7:7C:B4:9E:CD:EC:2A:BA:46:64:C0:14:A8:DA:C3:DE:1A:92 Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 6EBFB04378C946CA5118B79ED3E01078616B294B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 0509 Signing time: Wed 17 Sep 2025 03:01:14 +0000 Manifest this update: Wed 17 Sep 2025 02:56:14 +0000 Manifest next update: Sat 20 Sep 2025 07:34:14 +0000 Files and hashes: 1: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=) 2: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=) 3: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=) 4: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=) 5: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=) 6: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: NT7TIC04+U9eo6WAOzppN/xN8ezJZuStHvPesRpUnPA=) 7: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: hKuamBAx77CwO86y1A7xDVYWjcy9qi6pO1mapMzXVQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Sep 2025 07:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:bf:b0:43:78:c9:46:ca:51:18:b7:9e:d3:e0:10:78:61:6b:29:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Sep 17 02:56:14 2025 GMT Not After : Sep 20 07:34:14 2025 GMT Subject: CN=3F78B77CB49ECDEC2ABA4664C014A8DAC3DE1A92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:68:22:43:55:ac:b6:53:39:69:d8:78:73: 59:3d:54:cc:11:11:23:09:70:f9:70:31:d8:c4:dc: a3:8f:95:6b:27:9e:42:de:3f:fa:5d:84:12:9b:84: 4e:2b:dc:29:e3:e6:3a:69:1c:3d:26:a9:c6:63:3b: 23:d2:c3:eb:03:37:6f:3d:81:b6:25:05:80:38:11: 1f:7e:b0:07:e9:c8:99:1a:81:e5:c2:b9:20:17:e3: 0d:dc:6a:57:a6:b5:9f:bc:ee:1d:09:f9:19:bb:a0: 26:d3:90:db:43:19:7d:9a:87:27:5e:11:5b:c0:c1: 3b:be:a2:3c:ae:5e:4d:f1:fa:0b:6b:36:c0:de:21: ce:9b:57:5d:19:af:90:20:99:98:34:0a:bd:da:27: c9:c3:09:53:99:40:dc:9d:ef:21:45:50:08:c9:7a: 27:f6:ff:2d:22:2d:9e:33:11:4f:25:e5:05:71:ad: 0c:d3:e9:17:d4:d0:dc:85:0e:31:43:34:27:e7:d8: e5:75:99:58:bc:58:60:df:f8:ac:a5:07:b3:e5:61: 57:88:6b:b1:b7:51:e4:d6:02:f0:c6:ee:22:f8:79: 40:c6:a6:65:65:01:a7:c6:33:91:50:97:95:05:50: 5b:47:c4:90:83:8b:fa:b5:93:73:84:68:d0:a0:10: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:78:B7:7C:B4:9E:CD:EC:2A:BA:46:64:C0:14:A8:DA:C3:DE:1A:92 X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3f:9c:91:6b:2a:da:31:6b:40:ea:a3:89:35:27:89:67:c1: f7:54:82:4a:e0:4f:56:a4:b8:fd:dc:67:57:74:23:ba:80:18: 7a:b0:9f:0d:78:e1:5f:95:3d:0b:33:15:34:3b:51:b8:cd:65: 22:23:4f:a5:ce:32:77:6a:95:7d:bc:08:32:84:45:53:1d:2b: 82:43:45:c1:c6:5d:5d:c5:bd:11:94:22:e2:73:31:c3:c0:af: f9:59:ee:00:fa:1e:cf:66:7d:5d:0f:f2:a9:7c:76:da:04:00: 90:41:f9:0f:81:15:1a:b4:09:c5:23:f0:02:c9:b7:d9:72:e7: d6:61:f0:ef:4a:8e:44:41:74:bb:1b:3b:6c:32:4a:ce:90:99: d8:73:99:f0:0a:cb:9a:6c:24:70:4a:91:c9:8a:35:ea:d2:fc: 83:db:88:14:f8:25:ed:79:2f:41:9e:17:49:ed:d3:5d:72:ea: 92:e0:a5:5a:04:ff:8e:2a:2d:43:19:1b:ec:ad:de:32:2c:ca: 28:43:85:95:06:e1:8f:2f:52:4b:ef:18:48:a7:6e:4f:af:a1: 52:3f:b1:de:4e:f1:e0:a6:a8:4a:03:3e:f2:a8:79:4f:13:48: f9:94:f6:bd:1c:6b:a1:08:af:48:25:2e:f1:ae:4f:ba:98:bc: b6:7d:18:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbr+wQ3jJRspRGLee0+AQeGFrKUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNTA5MTcwMjU2MTRaFw0yNTA5MjAwNzM0MTRaMDMxMTAvBgNV BAMTKDNGNzhCNzdDQjQ5RUNERUMyQUJBNDY2NEMwMTRBOERBQzNERTFBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLmgiQ1WstlM5adh4c1k9VMwR ESMJcPlwMdjE3KOPlWsnnkLeP/pdhBKbhE4r3Cnj5jppHD0mqcZjOyPSw+sDN289 gbYlBYA4ER9+sAfpyJkageXCuSAX4w3calemtZ+87h0J+Rm7oCbTkNtDGX2ahyde EVvAwTu+ojyuXk3x+gtrNsDeIc6bV10Zr5AgmZg0Cr3aJ8nDCVOZQNyd7yFFUAjJ eif2/y0iLZ4zEU8l5QVxrQzT6RfU0NyFDjFDNCfn2OV1mVi8WGDf+KylB7PlYVeI a7G3UeTWAvDG7iL4eUDGpmVlAafGM5FQl5UFUFtHxJCDi/q1k3OEaNCgEEgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP3i3fLSezewqukZkwBSo2sPeGpIwHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFw/nJFrKtoxa0Dqo4k1J4lnwfdUgkrgT1ak uP3cZ1d0I7qAGHqwnw144V+VPQszFTQ7UbjNZSIjT6XOMndqlX28CDKERVMdK4JD RcHGXV3FvRGUIuJzMcPAr/lZ7gD6Hs9mfV0P8ql8dtoEAJBB+Q+BFRq0CcUj8ALJ t9ly59Zh8O9KjkRBdLsbO2wySs6QmdhzmfAKy5psJHBKkcmKNerS/IPbiBT4Je15 L0GeF0nt011y6pLgpVoE/44qLUMZG+yt3jIsyihDhZUG4Y8vUkvvGEinbk+voVI/ sd5O8eCmqEoDPvKoeU8TSPmU9r0ca6EIr0glLvGuT7qYvLZ9GDc= -----END CERTIFICATE-----Generated at Thu Sep 18 10:25:03 2025 by rpki-client