$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: WXMvxv+Hn7hK8HUOffKAR8iI5r7fu34mAPhgxfFqoJ0= Subject key identifier: 5A:6C:89:A5:9D:31:F5:2C:02:D3:04:0C:54:59:C2:B1:ED:7D:4D:C6 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 52DF1D76EAFDE1E9004B5A3128B6EBA9D3AA99FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 03B5 Signing time: Thu 04 Sep 2025 11:52:08 +0000 Manifest this update: Thu 04 Sep 2025 11:47:08 +0000 Manifest next update: Sun 07 Sep 2025 22:47:08 +0000 Files and hashes: 1: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=) 2: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: jfl0VlACDHN+a2qBOmJ26MQpWpUma8zy3nPQXex84UE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 22:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:df:1d:76:ea:fd:e1:e9:00:4b:5a:31:28:b6:eb:a9:d3:aa:99:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Sep 4 11:47:08 2025 GMT Not After : Sep 7 22:47:08 2025 GMT Subject: CN=5A6C89A59D31F52C02D3040C5459C2B1ED7D4DC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:7a:fe:2c:ff:a3:66:a2:bf:c5:bd:af:ce: 57:70:fa:21:fb:ec:e8:1e:51:8f:13:22:38:c7:e5: 2b:dc:54:69:88:01:7f:40:56:24:a8:8a:ac:af:01: 74:f8:50:b6:ad:93:f7:1d:25:82:fe:50:8d:53:51: 4d:5c:2a:ba:5b:6c:a1:fc:91:8d:51:8c:53:e6:c5: 77:37:eb:76:9b:86:82:27:d0:e2:d6:27:ee:8b:5a: 95:15:06:1e:8d:9b:08:bd:23:bf:7e:3a:3d:3f:ec: e3:16:70:c5:ee:5c:ef:4e:91:bf:89:27:b5:d8:69: 54:14:95:8e:55:0f:34:e8:c8:a8:25:1f:38:32:c7: 63:92:42:56:3a:ce:fa:09:c1:60:f7:83:4c:86:39: bb:2a:df:93:92:1e:d4:35:37:b8:51:e9:08:4c:83: 7f:42:d7:f7:24:e7:a9:2d:64:2a:85:cf:56:87:81: 02:d1:6f:e7:b5:15:ff:d5:d1:59:7c:6c:6f:a7:99: fd:5d:4b:8a:be:0b:63:77:00:b9:ca:a6:d9:61:32: 90:fe:02:da:7a:12:a9:62:27:26:ee:f6:e9:06:c1: 0e:82:4f:44:23:1e:49:ee:2e:74:de:54:9a:40:60: 6b:81:fa:fa:1f:08:b1:3a:05:14:27:44:61:8e:1d: 7c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6C:89:A5:9D:31:F5:2C:02:D3:04:0C:54:59:C2:B1:ED:7D:4D:C6 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:48:a1:17:72:f9:18:f1:a2:33:54:94:e6:d6:c3:32:6b:be: b9:6e:1c:d9:4e:de:11:c3:35:85:53:50:7d:fd:97:90:c8:41: 6a:04:c0:44:8e:b7:75:df:09:5f:46:eb:00:c4:6b:b4:af:77: 8c:5d:dc:ae:89:e9:8d:b7:8f:f3:2b:08:2b:94:5f:bd:c6:ae: ac:89:00:8d:9d:91:1b:b0:60:a7:b9:1d:ed:35:51:fd:3d:3c: cf:06:0d:fd:d1:b8:78:44:d2:57:cb:b1:14:ca:9c:91:a0:c4: b9:47:fc:a9:d1:ed:36:ef:17:fc:e3:d5:34:63:9b:a7:42:9e: 71:e4:92:10:8e:f8:24:b9:6d:bd:e7:92:09:ef:86:da:10:90: 32:25:65:c1:2c:1c:81:a4:3a:62:25:a9:0d:48:bc:1b:69:8d: cf:ab:7b:39:ef:47:bc:d8:91:86:08:96:45:b0:c2:cd:a8:91: cc:19:11:51:57:6d:da:24:47:ab:23:ce:f0:5e:51:6f:35:d4: 05:da:30:e8:eb:3b:f1:cb:cb:59:85:b1:65:1c:ff:e3:b8:3d: b9:5b:b0:99:26:bf:ae:6f:83:b4:9c:89:b3:cb:86:81:cf:bb: 63:82:75:b8:54:fe:e2:ef:fe:e2:c9:68:b3:79:64:aa:d0:17: 50:c4:3c:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUt8ddur94ekAS1oxKLbrqdOqmf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNTA5MDQxMTQ3MDhaFw0yNTA5MDcyMjQ3MDhaMDMxMTAvBgNV BAMTKDVBNkM4OUE1OUQzMUY1MkMwMkQzMDQwQzU0NTlDMkIxRUQ3RDREQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFXr+LP+jZqK/xb2vzldw+iH7 7OgeUY8TIjjH5SvcVGmIAX9AViSoiqyvAXT4ULatk/cdJYL+UI1TUU1cKrpbbKH8 kY1RjFPmxXc363abhoIn0OLWJ+6LWpUVBh6Nmwi9I79+Oj0/7OMWcMXuXO9Okb+J J7XYaVQUlY5VDzToyKglHzgyx2OSQlY6zvoJwWD3g0yGObsq35OSHtQ1N7hR6QhM g39C1/ck56ktZCqFz1aHgQLRb+e1Ff/V0Vl8bG+nmf1dS4q+C2N3ALnKptlhMpD+ Atp6EqliJybu9ukGwQ6CT0QjHknuLnTeVJpAYGuB+vofCLE6BRQnRGGOHXz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWmyJpZ0x9SwC0wQMVFnCse19TcYwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpIoRdy+RjxojNUlObWwzJrvrluHNlO3hHD NYVTUH39l5DIQWoEwESOt3XfCV9G6wDEa7Svd4xd3K6J6Y23j/MrCCuUX73GrqyJ AI2dkRuwYKe5He01Uf09PM8GDf3RuHhE0lfLsRTKnJGgxLlH/KnR7TbvF/zj1TRj m6dCnnHkkhCO+CS5bb3nkgnvhtoQkDIlZcEsHIGkOmIlqQ1IvBtpjc+reznvR7zY kYYIlkWwws2okcwZEVFXbdokR6sjzvBeUW811AXaMOjrO/HLy1mFsWUc/+O4Pblb sJkmv65vg7ScibPLhoHPu2OCdbhU/uLv/uLJaLN5ZKrQF1DEPNE= -----END CERTIFICATE-----Generated at Fri Sep 5 12:39:21 2025 by rpki-client