$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: Xr8+KLWoxCaE0pwIEjAkGjcBpvLNIK8t72xMFZlRyRE= Subject key identifier: 3A:20:00:FA:A8:14:B9:E4:63:47:79:4C:98:ED:BD:F0:EC:7D:D9:D1 Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 0EC58F177A61B88603E32484544C0CD057373FC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 0503 Signing time: Fri 05 Sep 2025 17:10:44 +0000 Manifest this update: Fri 05 Sep 2025 17:05:44 +0000 Manifest next update: Tue 09 Sep 2025 04:09:44 +0000 Files and hashes: 1: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: mHB3i0Er18v/RiKScvYZy2KntoE3M6M6+QloS3buHz0=) 2: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) 3: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) 4: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) 5: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) 6: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 04:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c5:8f:17:7a:61:b8:86:03:e3:24:84:54:4c:0c:d0:57:37:3f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Sep 5 17:05:44 2025 GMT Not After : Sep 9 04:09:44 2025 GMT Subject: CN=3A2000FAA814B9E46347794C98EDBDF0EC7DD9D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:61:d9:b7:12:6d:55:55:30:0a:b4:a1:8a: d8:4e:05:a9:dd:db:e8:c9:9f:1e:a9:e3:0d:fc:b8: 8f:c4:b7:c3:dc:41:3f:78:0e:1d:2e:d1:9e:78:ac: d2:2d:79:af:9a:95:03:8d:77:ff:e6:d9:6e:50:f3: e7:ec:d6:cd:a3:fb:47:e4:f8:d6:4b:e0:ee:07:ae: aa:2a:8a:fd:69:e8:6d:12:06:20:28:62:2b:fe:7c: 75:6b:bc:3d:e9:41:e6:32:3e:0c:8e:60:ac:93:e0: f6:f1:df:20:e0:80:f8:d9:e5:d6:41:26:2d:98:78: af:e0:7f:5c:eb:fe:b5:31:1f:e5:d4:5e:bd:69:ad: 34:bc:69:25:76:0f:79:ec:a2:a1:28:1e:bc:63:03: d8:2d:9e:ac:b3:2d:18:b9:23:24:6a:3f:04:1d:12: cc:4a:c2:d1:0f:dd:86:e8:0f:94:68:76:55:9d:7b: 9a:1b:0e:ea:8b:92:dd:13:ae:a7:28:98:49:12:9f: 93:f2:85:40:c1:b9:f6:eb:b5:d2:0d:b1:db:4c:0d: f9:18:fa:94:23:d1:7f:5a:f4:0c:1a:4b:70:0a:85: d7:76:98:7a:28:8b:ee:ae:bf:9d:40:d5:64:64:57: 41:63:da:68:52:bb:7f:29:9d:ae:49:36:8a:9e:8a: 6c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:20:00:FA:A8:14:B9:E4:63:47:79:4C:98:ED:BD:F0:EC:7D:D9:D1 X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:fa:96:69:07:2d:6d:02:4b:1a:0d:65:ab:c3:e5:28:24:6a: 0b:24:8b:97:bd:a0:1d:a9:96:e0:3d:fc:51:a7:9d:ab:3a:5d: 39:9d:a6:2d:6b:c1:21:7d:cc:16:38:4c:01:45:f9:bd:57:1f: 01:97:f0:b2:04:79:b6:b5:ce:4f:25:60:49:c6:ae:0d:44:cf: 3d:21:a2:ac:5a:dd:b8:3a:e5:37:e9:da:21:03:19:7b:90:bb: 36:8a:aa:ea:c3:e3:44:f7:e2:12:ac:88:8c:ac:39:38:a3:41: f4:59:17:84:83:39:65:ee:06:50:88:79:01:37:67:b9:4d:3b: 82:62:ca:2b:2c:d8:b9:bf:77:16:5c:61:16:b7:f3:e3:b7:f3: 83:89:79:77:dd:88:a2:87:8c:af:9a:9d:66:e7:e7:d4:16:6c: ed:cf:3b:ec:14:0c:c4:4a:1e:52:a0:e3:4a:fc:47:69:57:54: 52:bf:ff:3f:59:bb:10:5e:2e:c0:e5:6d:a0:21:c4:bf:7b:31: 6a:10:b3:c1:f4:ac:fc:8f:17:f6:97:65:18:07:2b:dd:ab:33: bb:0e:9e:b0:94:b1:bc:28:ed:88:e1:02:2f:eb:b4:f2:c7:94: a6:75:93:fd:af:db:82:8f:d6:82:bf:3d:0e:d3:89:bf:68:85: 2b:cc:36:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDsWPF3phuIYD4ySEVEwM0Fc3P8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNTA5MDUxNzA1NDRaFw0yNTA5MDkwNDA5NDRaMDMxMTAvBgNV BAMTKDNBMjAwMEZBQTgxNEI5RTQ2MzQ3Nzk0Qzk4RURCREYwRUM3REQ5RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdiGHZtxJtVVUwCrShithOBand 2+jJnx6p4w38uI/Et8PcQT94Dh0u0Z54rNItea+alQONd//m2W5Q8+fs1s2j+0fk +NZL4O4Hrqoqiv1p6G0SBiAoYiv+fHVrvD3pQeYyPgyOYKyT4Pbx3yDggPjZ5dZB Ji2YeK/gf1zr/rUxH+XUXr1prTS8aSV2D3nsoqEoHrxjA9gtnqyzLRi5IyRqPwQd EsxKwtEP3YboD5RodlWde5obDuqLkt0TrqcomEkSn5PyhUDBufbrtdINsdtMDfkY +pQj0X9a9AwaS3AKhdd2mHooi+6uv51A1WRkV0Fj2mhSu38pna5JNoqeimwHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOiAA+qgUueRjR3lMmO298Ox92dEwHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADr6lmkHLW0CSxoNZavD5Sgkagski5e9oB2p luA9/FGnnas6XTmdpi1rwSF9zBY4TAFF+b1XHwGX8LIEeba1zk8lYEnGrg1Ezz0h oqxa3bg65Tfp2iEDGXuQuzaKqurD40T34hKsiIysOTijQfRZF4SDOWXuBlCIeQE3 Z7lNO4Jiyiss2Lm/dxZcYRa38+O384OJeXfdiKKHjK+anWbn59QWbO3PO+wUDMRK HlKg40r8R2lXVFK//z9ZuxBeLsDlbaAhxL97MWoQs8H0rPyPF/aXZRgHK92rM7sO nrCUsbwo7YjhAi/rtPLHlKZ1k/2v24KP1oK/PQ7Tib9ohSvMNic= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:38 2025 by rpki-client