$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: g7A5r+Cu1uqGFYtcvai4pMIy0weo1Iw1jljw7krMb/4= Subject key identifier: 19:4B:54:08:3C:6D:53:6D:09:BF:C5:81:9E:42:E6:F7:BA:08:78:A2 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 1A1C6D054F925D8C62299F3DF244CA17941E8575 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 03A1 Signing time: Mon 21 Jul 2025 03:05:56 +0000 Manifest this update: Mon 21 Jul 2025 03:00:56 +0000 Manifest next update: Thu 24 Jul 2025 09:52:56 +0000 Files and hashes: 1: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=) 2: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: 0s/Xs4E10C9vlKSFyM3k8XjCl/moR8u+Y+FXtOLOwIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 09:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1c:6d:05:4f:92:5d:8c:62:29:9f:3d:f2:44:ca:17:94:1e:85:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Jul 21 03:00:56 2025 GMT Not After : Jul 24 09:52:56 2025 GMT Subject: CN=194B54083C6D536D09BFC5819E42E6F7BA0878A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cf:31:97:63:8a:5a:44:44:cf:61:89:df:55: ca:81:8f:02:7d:41:a3:94:fd:48:b4:f4:0f:78:14: e5:4d:b4:89:35:3c:21:b7:59:71:a1:32:a8:53:7e: e8:ac:1d:ae:89:ad:a8:e5:63:b9:63:7e:e2:29:73: 2c:70:c7:84:87:5c:cd:c4:bc:2c:ea:73:f2:58:1b: 13:51:20:ea:9d:db:a0:db:2f:b6:e7:62:e2:4c:a2: 41:57:57:dd:0f:31:cf:f2:db:1c:cc:0b:4a:db:ff: 17:a6:29:bf:b6:3f:8f:1f:84:83:b2:1c:5b:f9:c2: 95:db:6e:70:cc:74:17:48:25:bc:cb:dc:e2:55:bb: 1a:e7:a2:38:d5:b6:ff:8f:78:3c:0c:6a:27:72:38: fc:9a:de:e5:c5:8c:0d:90:84:38:d6:95:ef:2d:4c: b7:82:6e:97:59:ce:c5:a0:8c:d9:b4:dc:7b:93:db: 7d:b5:e3:4f:03:75:8f:36:ee:01:0f:bd:91:a1:85: 8f:59:e4:db:ff:24:0b:cb:92:fb:fa:32:1f:1b:90: 83:65:66:b8:3d:ec:9c:ac:5c:bc:a0:85:f9:8b:5c: 9b:96:4d:39:a4:c0:e9:9d:4d:f6:bb:cb:c4:45:e6: 10:a3:8e:da:17:c0:b3:1e:d4:f3:03:9f:b9:64:ee: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4B:54:08:3C:6D:53:6D:09:BF:C5:81:9E:42:E6:F7:BA:08:78:A2 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:fd:9f:db:35:1c:69:b7:7c:ed:88:45:fa:cb:e1:a9:35:27: e8:ab:e3:51:cb:f0:28:e5:cf:0a:28:03:55:0c:bb:85:5c:2c: 2a:a0:4a:3a:53:88:ac:17:fa:22:bc:a1:ae:a7:a0:7b:d0:f2: af:f0:89:65:ac:a3:13:4f:d7:37:0b:d5:08:7f:02:d1:82:b7: b6:1f:73:73:3f:14:83:fa:72:5e:99:46:18:39:53:4e:8c:f2: 4d:43:74:a2:72:23:cf:ae:c8:a9:88:aa:30:b9:f6:fc:30:33: 31:f3:33:19:9f:b7:cf:f6:5e:d7:ff:63:c9:ad:a8:ae:01:01: be:91:5d:44:7f:85:8c:cd:e2:06:9e:da:46:b0:ea:73:5a:bd: a3:60:c9:93:9b:d5:4d:9f:83:00:c4:20:de:aa:3d:48:b8:8d: 1c:23:42:82:da:42:70:7e:c7:fb:04:50:64:81:6e:ed:0a:d1: 68:d4:07:e6:a7:34:99:41:17:c7:af:43:ed:53:92:6c:91:d1: 36:58:f9:e7:68:62:58:65:c2:1e:39:14:f1:8a:83:06:30:f6: 3c:6c:48:55:ee:78:02:c9:c8:3f:db:9c:71:67:a7:44:2c:c2: 7a:39:33:39:c8:5f:3f:9d:d8:fb:27:c1:48:da:16:2e:9b:4d: 51:72:2d:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhxtBU+SXYxiKZ898kTKF5QehXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNTA3MjEwMzAwNTZaFw0yNTA3MjQwOTUyNTZaMDMxMTAvBgNV BAMTKDE5NEI1NDA4M0M2RDUzNkQwOUJGQzU4MTlFNDJFNkY3QkEwODc4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdzzGXY4paRETPYYnfVcqBjwJ9 QaOU/Ui09A94FOVNtIk1PCG3WXGhMqhTfuisHa6JrajlY7ljfuIpcyxwx4SHXM3E vCzqc/JYGxNRIOqd26DbL7bnYuJMokFXV90PMc/y2xzMC0rb/xemKb+2P48fhIOy HFv5wpXbbnDMdBdIJbzL3OJVuxrnojjVtv+PeDwMaidyOPya3uXFjA2QhDjWle8t TLeCbpdZzsWgjNm03HuT2321408DdY827gEPvZGhhY9Z5Nv/JAvLkvv6Mh8bkINl Zrg97JysXLyghfmLXJuWTTmkwOmdTfa7y8RF5hCjjtoXwLMe1PMDn7lk7rOXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGUtUCDxtU20Jv8WBnkLm97oIeKIwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFD9n9s1HGm3fO2IRfrL4ak1J+ir41HL8Cjl zwooA1UMu4VcLCqgSjpTiKwX+iK8oa6noHvQ8q/wiWWsoxNP1zcL1Qh/AtGCt7Yf c3M/FIP6cl6ZRhg5U06M8k1DdKJyI8+uyKmIqjC59vwwMzHzMxmft8/2Xtf/Y8mt qK4BAb6RXUR/hYzN4gae2kaw6nNavaNgyZOb1U2fgwDEIN6qPUi4jRwjQoLaQnB+ x/sEUGSBbu0K0WjUB+anNJlBF8evQ+1TkmyR0TZY+edoYlhlwh45FPGKgwYw9jxs SFXueALJyD/bnHFnp0Qswno5MznIXz+d2PsnwUjaFi6bTVFyLbA= -----END CERTIFICATE-----Generated at Mon Jul 21 21:18:58 2025 by rpki-client