$ rpki-client -vvf repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft File: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft (raw, json) Hash identifier: CNusnT76IX4Sc+eOQR6mvzwKlnQCnyXJ6+TqDHy1yJ0= Subject key identifier: B8:31:0B:1C:2E:8F:77:FC:9C:1B:E8:A1:3C:5A:67:C8:AE:AD:C2:AF Authority key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 Certificate issuer: /CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Certificate serial: 6B1FE42F2984FA886EC14FFA83F35CCC3AE63506 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft Manifest number: 03CF Signing time: Sat 06 Sep 2025 04:40:03 +0000 Manifest this update: Sat 06 Sep 2025 04:35:03 +0000 Manifest next update: Tue 09 Sep 2025 08:20:03 +0000 Files and hashes: 1: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: x0OQqyyh84xdArHozU+dSgyqUpzyJ86TNYhGyZIH4/4=) 2: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: zWM0xGqqaOdxz1Hu9SQE3wCPcPGJcY2qyq+pULXMUKw=) 3: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl (hash: wCHbN8rvjkwGjhMR4C3/HV9Nlv9oO04wQ8+PA1NOqgI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1f:e4:2f:29:84:fa:88:6e:c1:4f:fa:83:f3:5c:cc:3a:e6:35:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Validity Not Before: Sep 6 04:35:03 2025 GMT Not After : Sep 9 08:20:03 2025 GMT Subject: CN=B8310B1C2E8F77FC9C1BE8A13C5A67C8AEADC2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:e9:33:da:1f:c9:cd:fb:3b:0e:14:26:02: 17:d8:84:fc:91:60:a2:93:20:40:41:3c:96:bd:6d: 82:63:fd:43:da:76:8e:aa:94:05:52:27:2d:65:78: d6:b2:6b:5f:0f:b9:6b:9a:72:07:6e:cf:ec:47:16: 18:48:9d:27:4e:52:6f:51:30:47:ff:49:e0:ec:88: c5:c2:e9:c7:cc:ab:e7:b5:fb:cf:62:b0:17:cf:3f: 81:ed:7c:d5:5f:0d:ea:e8:8c:83:00:16:00:ce:35: c3:0a:03:ba:56:0a:8d:02:69:b6:5d:4f:f0:b8:45: 77:75:6b:25:ea:64:f0:74:8e:a5:f9:4a:b9:67:6f: 31:77:1d:67:4b:b4:56:cb:c9:9e:49:e6:63:be:d4: b0:5e:4e:78:98:e6:64:bb:bc:c2:9f:c9:d8:30:36: 5a:90:f9:23:c9:cf:8d:25:26:7d:d4:46:0e:d3:ff: cb:a0:46:5d:5b:f8:d0:da:ab:3e:22:6d:93:23:68: 6e:73:f5:6d:dc:ff:7d:cf:b1:14:bb:27:1f:d7:fd: 43:2f:fd:9b:12:70:c0:ce:e4:b0:94:dd:4e:97:e9: 5e:26:d4:fc:b5:a5:87:8c:9d:2f:12:43:74:9e:0e: 94:38:c9:65:45:cd:56:d3:50:73:8c:7e:8a:c1:8c: 8d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:31:0B:1C:2E:8F:77:FC:9C:1B:E8:A1:3C:5A:67:C8:AE:AD:C2:AF X509v3 Authority Key Identifier: keyid:AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:05:f0:30:cd:06:28:ae:b8:19:b9:6d:f3:79:ec:48:5a:1f: 8b:df:17:aa:ef:cc:14:e9:25:ae:b0:ce:84:9b:3c:55:1b:22: db:0a:15:a4:7e:be:de:48:05:04:fd:fd:08:0d:fd:17:94:1f: b9:2f:31:25:76:0b:6d:ea:ce:d6:eb:d8:6c:aa:0b:d0:21:ab: 65:6b:42:60:a5:ec:7d:8f:24:94:04:dd:f5:7c:b9:9f:b4:46: 0d:28:70:42:8a:a4:0f:13:bc:39:a5:3e:91:f9:45:61:7b:fa: 02:a9:d5:22:e2:fb:d5:3f:51:30:34:13:76:48:10:5e:18:1b: 5c:99:23:3b:da:6f:69:8e:c1:ae:7f:b6:bc:7d:4f:b3:c3:4b: e0:11:4b:5f:c7:20:1b:2c:22:42:e3:78:6e:82:03:5d:a8:b5: fe:28:d8:21:2e:87:4d:1d:25:e0:a1:ba:4f:46:4c:d5:4d:da: 54:82:13:45:8c:6e:59:28:25:64:9f:0b:a3:53:73:2d:ac:b8: b5:c7:1e:ce:55:fd:39:da:34:72:00:2b:ac:3e:0b:3c:12:76: eb:14:02:49:54:f0:43:c9:34:69:58:37:5a:db:cb:93:e1:d0: dd:fd:9f:7d:d6:90:2b:ef:7a:25:1c:d9:08:8e:8b:52:0f:6e: 48:5f:50:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUax/kLymE+ohuwU/6g/NczDrmNQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgz Q0QwN0M3MzAeFw0yNTA5MDYwNDM1MDNaFw0yNTA5MDkwODIwMDNaMDMxMTAvBgNV BAMTKEI4MzEwQjFDMkU4Rjc3RkM5QzFCRThBMTNDNUE2N0M4QUVBREMyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBukz2h/Jzfs7DhQmAhfYhPyR YKKTIEBBPJa9bYJj/UPado6qlAVSJy1leNaya18PuWuacgduz+xHFhhInSdOUm9R MEf/SeDsiMXC6cfMq+e1+89isBfPP4HtfNVfDerojIMAFgDONcMKA7pWCo0CabZd T/C4RXd1ayXqZPB0jqX5SrlnbzF3HWdLtFbLyZ5J5mO+1LBeTniY5mS7vMKfydgw NlqQ+SPJz40lJn3URg7T/8ugRl1b+NDaqz4ibZMjaG5z9W3c/33PsRS7Jx/X/UMv /ZsScMDO5LCU3U6X6V4m1Py1pYeMnS8SQ3SeDpQ4yWVFzVbTUHOMforBjI3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuDELHC6Pd/ycG+ihPFpnyK6twq8wHwYDVR0j BBgwFoAUrNoCL38+KKbhMdqA1MQY6DzQfHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmViYjY4YS04YTVkLTQxMWMtOGJiMy04MzM0MjMxMDBiNmUvMC9BQ0RBMDIyRjdG M0UyOEE2RTEzMURBODBENEM0MThFODNDRDA3QzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgzQ0Qw N0M3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZlYmI2OGEtOGE1ZC00MTFjLThi YjMtODMzNDIzMTAwYjZlLzAvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4 RTgzQ0QwN0M3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkF8DDNBiiuuBm5bfN57EhaH4vfF6rvzBTp Ja6wzoSbPFUbItsKFaR+vt5IBQT9/QgN/ReUH7kvMSV2C23qztbr2GyqC9Ahq2Vr QmCl7H2PJJQE3fV8uZ+0Rg0ocEKKpA8TvDmlPpH5RWF7+gKp1SLi+9U/UTA0E3ZI EF4YG1yZIzvab2mOwa5/trx9T7PDS+ARS1/HIBssIkLjeG6CA12otf4o2CEuh00d JeChuk9GTNVN2lSCE0WMblkoJWSfC6NTcy2suLXHHs5V/TnaNHIAK6w+CzwSdusU AklU8EPJNGlYN1rby5Ph0N39n33WkCvveiUc2QiOi1IPbkhfUFA= -----END CERTIFICATE-----Generated at Sun Sep 7 17:51:40 2025 by rpki-client