$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: A/tNfVJojvNvecTBa7rkrXvuRxNa99Mp8h2N30ABxqQ= Subject key identifier: 03:C4:CD:E6:64:6C:35:D3:AE:A2:0E:5D:E5:16:64:9A:37:89:E5:3D Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 185CCFB6E1C4AFBC1AE1BC7A34F54B1BD366C930 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: C4 Signing time: Tue 21 Oct 2025 07:20:01 +0000 Manifest this update: Tue 21 Oct 2025 07:15:01 +0000 Manifest next update: Fri 24 Oct 2025 16:57:01 +0000 Files and hashes: 1: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: L4zh0VJSqZPipD8pfnH7W7ZyG21Db5Cm8t9eQw5Uv3A=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 16:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:5c:cf:b6:e1:c4:af:bc:1a:e1:bc:7a:34:f5:4b:1b:d3:66:c9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Oct 21 07:15:01 2025 GMT Not After : Oct 24 16:57:01 2025 GMT Subject: CN=03C4CDE6646C35D3AEA20E5DE516649A3789E53D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:ec:e1:6c:1e:46:d4:a2:36:52:31:44:b4: b5:b4:1c:d4:eb:1a:69:28:74:88:61:84:70:96:4f: 47:c8:d4:b4:9b:ea:69:0b:53:82:5b:63:5f:0e:19: ed:ec:95:4d:a2:24:0b:49:60:c3:b1:d4:33:ad:e4: 2d:5f:57:1e:df:bc:da:39:ff:6a:1c:51:ff:ea:6b: 2e:d2:28:51:82:c7:71:4b:68:d4:3e:6a:8e:e4:80: 71:c7:d7:3a:61:bb:10:62:56:f0:ff:e5:15:e8:f4: 79:af:61:2f:9f:14:2c:2b:e9:cd:3a:5f:fd:c1:35: 1e:a7:87:9f:fd:12:0b:76:b0:ce:f1:4c:cb:f9:c4: 8f:b9:17:3c:0d:40:4c:b1:42:18:c8:b4:34:1e:63: 57:83:81:3a:65:2c:27:71:02:45:51:f1:c1:80:43: 4b:b8:9f:0d:2e:65:3c:c2:a3:e3:84:12:ea:b7:c1: c2:a5:50:8e:72:92:38:5f:5d:47:df:e6:ad:45:2c: 8b:ca:dc:1a:29:0e:e5:a3:b8:5b:ab:df:ef:7d:5c: 5e:7a:5e:61:bb:50:2d:c5:95:d6:1c:0a:9f:2e:b6: 1b:cc:b4:40:fb:cf:1a:05:24:87:1c:90:19:86:fd: 57:c9:a6:3e:94:2f:d0:8c:6e:11:05:92:a7:25:76: 23:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C4:CD:E6:64:6C:35:D3:AE:A2:0E:5D:E5:16:64:9A:37:89:E5:3D X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2b:98:fc:89:93:ae:8c:35:be:60:e4:2e:ce:65:8a:da:1e: 56:8d:68:01:33:7e:7c:6c:69:73:66:d4:ab:d2:08:fc:60:99: a9:4f:06:63:a2:25:bf:af:d3:91:71:97:40:7d:c0:69:a8:71: 94:83:ed:11:36:5d:09:52:70:9e:d8:6d:16:49:26:2f:0b:5d: 28:c3:89:c1:d4:42:aa:b0:f1:f5:04:f5:68:03:d5:83:a1:00: 70:a2:40:4e:f2:cd:e0:be:f1:4b:d5:d0:59:39:ac:9b:84:49: 28:87:7f:cc:d5:ab:df:4d:12:60:ac:4c:a4:a2:ee:9c:1f:ba: 09:32:d3:79:e1:e3:46:a9:d2:07:47:b1:ee:c7:ab:c8:6b:ac: 91:9b:05:fc:3d:0f:03:4e:ff:4e:a9:eb:58:b1:68:8e:60:5f: 70:e3:01:a2:3c:86:7f:ce:f3:52:78:6b:ef:8c:f3:93:9d:50: 9c:d8:56:db:0c:aa:f2:e7:3c:f1:c3:d0:64:af:7a:33:7f:45: 4e:53:b5:d2:dc:00:01:44:ca:6d:10:42:03:b1:4c:38:14:04: 63:71:1c:0f:ae:3c:89:d8:30:54:af:5e:70:da:e4:8a:e0:a0: 9e:ec:0a:d4:05:93:43:10:03:12:8e:60:ad:28:f5:ac:5f:cd: d6:36:76:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFzPtuHEr7wa4bx6NPVLG9NmyTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNTEwMjEwNzE1MDFaFw0yNTEwMjQxNjU3MDFaMDMxMTAvBgNV BAMTKDAzQzRDREU2NjQ2QzM1RDNBRUEyMEU1REU1MTY2NDlBMzc4OUU1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyG+zhbB5G1KI2UjFEtLW0HNTr GmkodIhhhHCWT0fI1LSb6mkLU4JbY18OGe3slU2iJAtJYMOx1DOt5C1fVx7fvNo5 /2ocUf/qay7SKFGCx3FLaNQ+ao7kgHHH1zphuxBiVvD/5RXo9HmvYS+fFCwr6c06 X/3BNR6nh5/9Egt2sM7xTMv5xI+5FzwNQEyxQhjItDQeY1eDgTplLCdxAkVR8cGA Q0u4nw0uZTzCo+OEEuq3wcKlUI5ykjhfXUff5q1FLIvK3BopDuWjuFur3+99XF56 XmG7UC3FldYcCp8uthvMtED7zxoFJIcckBmG/VfJpj6UL9CMbhEFkqcldiMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA8TN5mRsNdOuog5d5RZkmjeJ5T0wHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMrmPyJk66MNb5g5C7OZYraHlaNaAEzfnxs aXNm1KvSCPxgmalPBmOiJb+v05Fxl0B9wGmocZSD7RE2XQlScJ7YbRZJJi8LXSjD icHUQqqw8fUE9WgD1YOhAHCiQE7yzeC+8UvV0Fk5rJuESSiHf8zVq99NEmCsTKSi 7pwfugky03nh40ap0gdHse7Hq8hrrJGbBfw9DwNO/06p61ixaI5gX3DjAaI8hn/O 81J4a++M85OdUJzYVtsMqvLnPPHD0GSvejN/RU5TtdLcAAFEym0QQgOxTDgUBGNx HA+uPInYMFSvXnDa5IrgoJ7sCtQFk0MQAxKOYK0o9axfzdY2duY= -----END CERTIFICATE-----Generated at Tue Oct 21 22:33:41 2025 by rpki-client