$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: 34MO0ndcdffCjNaV86R+6PnHnBOTYGVZRbczLqSeGnQ= Subject key identifier: AA:99:A8:E7:AA:22:76:D2:5C:7B:B3:10:11:1C:86:9F:97:AE:90:E7 Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 699307686428503240FDEA412D0F93D42FBC297B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 051E Signing time: Tue 04 Nov 2025 16:01:12 +0000 Manifest this update: Tue 04 Nov 2025 15:56:12 +0000 Manifest next update: Fri 07 Nov 2025 21:16:12 +0000 Files and hashes: 1: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=) 2: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: 1t+JZgQ8Vud34zhd12QzwIciCqEdiNfW8cqhQTTCceU=) 3: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=) 4: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=) 5: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=) 6: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: hKuamBAx77CwO86y1A7xDVYWjcy9qi6pO1mapMzXVQk=) 7: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:93:07:68:64:28:50:32:40:fd:ea:41:2d:0f:93:d4:2f:bc:29:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Nov 4 15:56:12 2025 GMT Not After : Nov 7 21:16:12 2025 GMT Subject: CN=AA99A8E7AA2276D25C7BB310111C869F97AE90E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:9e:a5:d0:d8:c0:93:a1:73:64:a8:a2:4c: 4c:c2:ff:e1:ca:e0:f9:df:92:1d:d0:38:cf:05:85: 27:98:41:fe:c1:74:86:61:0c:f1:f2:72:02:2a:8b: 1f:7b:59:02:e3:a1:13:8d:e2:a1:5d:d1:bb:e7:30: 64:2d:c8:80:73:6a:a8:dd:0b:10:93:9c:bd:47:3b: ca:33:18:32:57:cd:ad:37:19:83:c3:9e:c0:99:49: 96:1d:ac:86:af:7d:00:50:37:13:3d:cc:66:e6:51: 5b:0f:71:22:39:b6:cd:72:1e:64:43:b2:89:c7:c5: 98:27:4c:67:4a:c8:c3:31:05:b0:10:09:72:51:9c: 95:76:5d:6c:ef:11:3f:13:77:47:27:39:ea:34:50: 6f:13:6e:ea:f1:4e:16:b4:d4:c4:69:e9:95:ee:9f: e9:2d:fe:db:e4:98:ae:2b:eb:1c:e2:06:86:94:e7: 02:aa:e5:1e:7d:90:75:a6:a3:da:ea:b5:52:7e:a6: 97:00:5d:fa:f5:95:81:7d:24:ae:34:90:78:e8:c7: 31:71:ed:3d:c1:77:d5:bc:2d:32:8b:71:29:46:3c: cc:9f:63:a8:5d:61:7e:e2:50:c8:1b:77:9e:15:53: 87:d3:cc:dd:5a:c6:22:46:d2:a9:0b:4c:3a:1f:4c: 5c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:99:A8:E7:AA:22:76:D2:5C:7B:B3:10:11:1C:86:9F:97:AE:90:E7 X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c1:37:2c:37:7c:57:c4:ec:ab:76:3f:4a:ce:97:84:a5:ac: 10:82:52:fe:db:cc:ce:d3:bb:0d:01:70:a7:5e:ba:42:a4:13: 62:94:08:72:fd:a0:ff:53:ab:21:61:e5:6d:ff:df:fb:5a:81: e9:7c:db:0e:b5:32:e7:dc:2c:ac:4d:86:4a:5f:1f:65:6d:ad: 25:ba:39:41:b4:3a:c5:0d:c6:a4:12:16:3c:55:6d:73:06:33: 93:e7:2e:3d:31:a3:a9:43:ce:53:4d:70:d0:06:75:c5:58:9f: 0b:c0:58:ef:b9:07:bd:8e:e2:e5:ff:c0:2c:e7:c3:01:cb:6e: 35:4b:44:99:22:d3:e6:35:ec:fe:71:e3:1d:8d:63:a0:91:3c: 19:c1:f5:83:f7:71:4c:af:d8:40:9a:fe:7a:9a:1f:2b:2e:f5: 66:8d:63:cb:35:47:84:9a:50:41:b3:d8:14:82:f8:94:4e:ea: 75:31:7d:af:cd:8b:99:3b:82:3b:a7:40:78:10:2e:d6:e0:b6: 55:d1:32:f6:d9:a1:0d:92:2c:d4:17:da:ef:cc:b2:1c:3b:09: 11:56:bd:ce:4d:93:b7:ac:4b:92:6e:8e:a2:11:6d:f7:2c:c7: 32:a1:5e:bd:c1:97:6f:b3:d0:ab:aa:fe:62:1f:a8:a1:f7:89: c9:d4:75:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZMHaGQoUDJA/epBLQ+T1C+8KXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNTExMDQxNTU2MTJaFw0yNTExMDcyMTE2MTJaMDMxMTAvBgNV BAMTKEFBOTlBOEU3QUEyMjc2RDI1QzdCQjMxMDExMUM4NjlGOTdBRTkwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2k56l0NjAk6FzZKiiTEzC/+HK 4Pnfkh3QOM8FhSeYQf7BdIZhDPHycgIqix97WQLjoRON4qFd0bvnMGQtyIBzaqjd CxCTnL1HO8ozGDJXza03GYPDnsCZSZYdrIavfQBQNxM9zGbmUVsPcSI5ts1yHmRD sonHxZgnTGdKyMMxBbAQCXJRnJV2XWzvET8Td0cnOeo0UG8TburxTha01MRp6ZXu n+kt/tvkmK4r6xziBoaU5wKq5R59kHWmo9rqtVJ+ppcAXfr1lYF9JK40kHjoxzFx 7T3Bd9W8LTKLcSlGPMyfY6hdYX7iUMgbd54VU4fTzN1axiJG0qkLTDofTFz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqpmo56oidtJce7MQERyGn5eukOcwHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3BNyw3fFfE7Kt2P0rOl4SlrBCCUv7bzM7T uw0BcKdeukKkE2KUCHL9oP9TqyFh5W3/3/tagel82w61MufcLKxNhkpfH2VtrSW6 OUG0OsUNxqQSFjxVbXMGM5PnLj0xo6lDzlNNcNAGdcVYnwvAWO+5B72O4uX/wCzn wwHLbjVLRJki0+Y17P5x4x2NY6CRPBnB9YP3cUyv2ECa/nqaHysu9WaNY8s1R4Sa UEGz2BSC+JRO6nUxfa/Ni5k7gjunQHgQLtbgtlXRMvbZoQ2SLNQX2u/Mshw7CRFW vc5Nk7esS5JujqIRbfcsxzKhXr3Bl2+z0Kuq/mIfqKH3icnUdXM= -----END CERTIFICATE-----Generated at Tue Nov 4 22:22:32 2025 by rpki-client