$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json) Hash identifier: 9PJMmBWrOaTVrIZjMJ83v8oO5n/Bh1PRmnWAWuMhB50= Subject key identifier: 23:B3:C4:49:59:EB:17:30:14:88:8F:C7:C8:80:78:DA:BA:07:80:75 Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Certificate serial: 104F270C3390FF5D0F818D6CDC16CACE59AF44FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft Manifest number: 0133 Signing time: Sat 06 Sep 2025 21:51:05 +0000 Manifest this update: Sat 06 Sep 2025 21:46:05 +0000 Manifest next update: Wed 10 Sep 2025 09:42:05 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: qxf//YzvZquiMhJd5iJXlsIhTKmJQsFvO/D1AKj+2BM=) 2: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: /Uj3U+Uu632nqJgVqsTP+ldODb29DSKWOAF2wWQu2Zc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 09:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4f:27:0c:33:90:ff:5d:0f:81:8d:6c:dc:16:ca:ce:59:af:44:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Validity Not Before: Sep 6 21:46:05 2025 GMT Not After : Sep 10 09:42:05 2025 GMT Subject: CN=23B3C44959EB173014888FC7C88078DABA078075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:be:db:b8:5b:43:40:1d:a7:f8:55:fc:75: b2:2f:28:db:00:5a:1a:c0:d2:87:04:58:44:07:03: 5d:e8:30:b9:9b:55:d9:74:e3:db:94:27:ff:e2:43: 27:6f:b0:99:fa:da:b8:6f:e2:1d:4b:09:38:c8:ff: fd:4b:b8:d1:2e:9b:17:bd:6e:05:66:1d:de:08:84: 55:72:2e:06:31:90:2e:fb:de:76:8c:68:dd:7e:ca: b1:e4:62:f2:e4:0d:87:47:93:27:49:df:1b:f1:75: 31:06:72:ff:06:ae:af:b6:de:49:3d:e3:e2:44:48: c6:5e:ed:77:e1:17:95:06:4d:aa:18:83:ac:93:47: 24:fd:14:2d:7c:36:f0:2f:ab:fa:5a:fc:e6:c7:ae: b6:86:d9:53:f9:d9:35:f7:be:9a:3e:7d:4d:b3:e2: df:51:7c:c7:bd:5c:de:8a:0e:0a:f8:09:42:82:3b: 69:b7:33:11:95:2b:b9:eb:27:3b:aa:5b:ea:8e:9f: cb:45:80:34:a7:51:58:68:9d:eb:94:46:c6:af:f0: 8d:dd:cd:56:2d:3e:04:3f:0d:fb:4b:78:2a:22:71: 09:10:51:9f:66:00:ae:ce:54:03:ff:b8:6d:89:ec: d8:f8:90:93:a6:5e:32:1f:82:68:bd:1c:39:52:d4: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B3:C4:49:59:EB:17:30:14:88:8F:C7:C8:80:78:DA:BA:07:80:75 X509v3 Authority Key Identifier: keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f1:ac:b8:e4:26:4b:76:a2:5c:ad:6f:91:4d:73:32:49:40: 67:7f:0b:8b:7c:b4:3b:93:74:f0:43:fe:e6:f0:39:86:cb:3e: 3c:37:cb:1b:65:b9:ef:8a:26:d2:08:4e:37:6c:f4:fd:72:4c: 34:fd:7d:33:c3:2d:d1:e7:a9:c4:f3:95:fd:06:11:f7:6c:fe: 98:47:b1:79:be:af:7a:01:e2:88:a1:fe:c7:96:bd:80:e5:44: d7:ac:86:6f:e6:48:02:6e:91:70:05:03:45:a9:00:39:88:eb: 8e:aa:91:8f:21:81:89:7f:cc:6e:72:90:2c:32:97:1e:85:a9: 9e:7c:bc:5f:36:9d:e1:a4:cc:03:49:f9:c1:61:db:92:69:ae: 17:62:11:f7:21:91:ce:9d:90:4f:92:6b:8b:f9:d3:71:8c:39: 08:69:e6:84:83:6c:f7:e4:95:26:f7:21:6e:69:e5:4e:75:3c: 5b:b7:a8:72:2f:19:79:a3:f8:bb:a4:f3:f3:62:fd:24:73:dc: a6:06:b6:6e:26:18:e3:ab:f4:7d:b2:41:7b:c6:2e:02:3b:04: 94:07:3a:08:6b:39:36:82:09:39:7d:b0:e3:8d:b2:f1:28:bf: ff:fa:8e:17:6e:ca:97:ba:66:5d:77:8a:ed:d1:f2:ee:58:64: 49:e7:8d:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEE8nDDOQ/10PgY1s3BbKzlmvRP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJC NjI2Q0E0RDAeFw0yNTA5MDYyMTQ2MDVaFw0yNTA5MTAwOTQyMDVaMDMxMTAvBgNV BAMTKDIzQjNDNDQ5NTlFQjE3MzAxNDg4OEZDN0M4ODA3OERBQkEwNzgwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1i77buFtDQB2n+FX8dbIvKNsA WhrA0ocEWEQHA13oMLmbVdl049uUJ//iQydvsJn62rhv4h1LCTjI//1LuNEumxe9 bgVmHd4IhFVyLgYxkC773naMaN1+yrHkYvLkDYdHkydJ3xvxdTEGcv8Grq+23kk9 4+JESMZe7XfhF5UGTaoYg6yTRyT9FC18NvAvq/pa/ObHrraG2VP52TX3vpo+fU2z 4t9RfMe9XN6KDgr4CUKCO2m3MxGVK7nrJzuqW+qOn8tFgDSnUVhoneuURsav8I3d zVYtPgQ/DftLeCoicQkQUZ9mAK7OVAP/uG2J7Nj4kJOmXjIfgmi9HDlS1JEPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI7PESVnrFzAUiI/HyIB42roHgHUwHwYDVR0j BBgwFoAUrOLauqJJ1WrZaK19YKCWQrYmyk0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC9BQ0UyREFCQUEy NDlENTZBRDk2OEFEN0Q2MEEwOTY0MkI2MjZDQTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJCNjI2 Q0E0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2 NDJCNjI2Q0E0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjxrLjkJkt2olytb5FNczJJQGd/C4t8tDuT dPBD/ubwOYbLPjw3yxtlue+KJtIITjds9P1yTDT9fTPDLdHnqcTzlf0GEfds/phH sXm+r3oB4oih/seWvYDlRNeshm/mSAJukXAFA0WpADmI646qkY8hgYl/zG5ykCwy lx6FqZ58vF82neGkzANJ+cFh25JprhdiEfchkc6dkE+Sa4v503GMOQhp5oSDbPfk lSb3IW5p5U51PFu3qHIvGXmj+Luk8/Ni/SRz3KYGtm4mGOOr9H2yQXvGLgI7BJQH OghrOTaCCTl9sOONsvEov//6jhduype6Zl13iu3R8u5YZEnnjRU= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:43 2025 by rpki-client