$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: vzKe5DUDnUVsx02JKGTUuK9GxT2R+LAm2Kvx8rhsMSw= Subject key identifier: 24:6A:E0:BB:F3:80:8C:0D:C9:58:6C:D8:28:AD:A8:BF:92:C9:F6:EC Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 120238976B1C4D3D52F5AFD846B3A4304452735F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 04F7 Signing time: Thu 07 Aug 2025 12:51:17 +0000 Manifest this update: Thu 07 Aug 2025 12:46:17 +0000 Manifest next update: Sun 10 Aug 2025 22:16:17 +0000 Files and hashes: 1: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: Vm3wACcxzY+1VWdkaWB/j4OfL0xcii5XUHwWQ5emMZo=) 2: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=) 3: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=) 4: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=) 5: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=) 6: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=) 7: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: hKuamBAx77CwO86y1A7xDVYWjcy9qi6pO1mapMzXVQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 22:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:02:38:97:6b:1c:4d:3d:52:f5:af:d8:46:b3:a4:30:44:52:73:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Aug 7 12:46:17 2025 GMT Not After : Aug 10 22:16:17 2025 GMT Subject: CN=246AE0BBF3808C0DC9586CD828ADA8BF92C9F6EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8f:b8:8a:37:ed:b5:00:39:fe:16:94:f5:7c: 4d:56:43:4b:b6:c5:9a:0e:46:3c:fd:7d:95:06:ea: a1:7e:78:53:16:32:8a:d9:c1:fd:13:01:4e:fe:ac: 1e:ff:bb:67:ad:bd:8f:fe:99:5d:28:b6:cf:bd:9f: 7c:90:cc:be:ca:1d:31:0d:52:44:20:fe:71:f0:d5: 76:78:1c:6e:bd:30:57:a6:90:dd:bf:69:7d:80:f6: 3b:8b:36:1b:29:8e:7b:d1:b9:dd:7f:e2:ea:29:c2: 9f:80:06:5d:4c:ab:fc:a3:5b:5d:7c:fe:b3:ca:72: 0d:ff:99:10:3f:52:c9:28:cd:54:6c:27:6f:3a:0c: fc:51:69:98:c4:ab:82:f3:90:7e:5b:cf:69:50:64: d7:07:b8:4a:eb:36:5b:2e:5d:5c:24:8f:d4:2f:a2: 6c:12:ed:23:ac:c4:a7:36:09:87:a9:e4:c0:5c:55: b6:4e:1f:0f:37:0b:51:18:bb:c7:97:6c:cd:82:da: 03:68:36:0a:ee:11:9e:46:8f:c7:b0:11:04:b6:7b: ba:8e:9f:dd:7f:3a:22:53:d6:89:9e:34:43:4f:b3: 86:c4:c9:5d:e6:ce:3e:91:ab:98:8f:f5:6d:50:7a: 0a:75:77:5c:6b:68:40:67:b8:a8:5c:07:ac:38:88: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6A:E0:BB:F3:80:8C:0D:C9:58:6C:D8:28:AD:A8:BF:92:C9:F6:EC X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f9:44:cc:c5:14:21:ba:f7:74:e3:82:9e:94:da:0e:53:05: 95:b2:da:d9:bd:50:49:ab:69:23:77:da:ac:f7:4a:05:64:71: 22:fe:60:b3:76:10:ac:21:85:f8:41:71:59:6d:71:3c:b6:3b: 08:8b:06:50:bf:98:80:5c:6c:e6:2e:b6:16:be:b7:bf:7e:18: b4:24:40:0a:86:74:c7:86:cf:e6:34:0c:bc:8b:f7:60:d3:7a: 8a:ed:99:e9:09:18:fe:af:4d:ff:b5:43:85:a5:5c:14:12:65: 1c:8c:4b:b9:76:43:e2:a7:30:10:ff:ad:00:ab:2d:3a:d3:9d: 5f:86:2a:1b:d7:e2:f5:6f:43:65:11:91:86:22:59:d2:38:28: 1e:cf:9c:8d:e7:20:e7:ba:97:2f:95:30:15:bc:27:95:86:cb: ca:f1:dc:4b:7f:fd:4b:3a:72:4d:56:01:4c:62:72:5f:8c:70: d7:4c:e4:02:84:14:f0:a3:10:20:d4:03:66:34:99:8a:be:3c: ae:61:09:be:f0:ff:07:ee:8b:51:f9:17:98:64:43:c6:d6:0f: 54:73:dd:b1:fd:a8:92:f4:91:81:52:7d:6c:2a:0a:45:4c:bb: 1d:11:53:78:5d:34:fe:23:98:8c:22:5b:e9:4e:aa:28:2d:be: 6c:9a:98:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEgI4l2scTT1S9a/YRrOkMERSc18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNTA4MDcxMjQ2MTdaFw0yNTA4MTAyMjE2MTdaMDMxMTAvBgNV BAMTKDI0NkFFMEJCRjM4MDhDMERDOTU4NkNEODI4QURBOEJGOTJDOUY2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrj7iKN+21ADn+FpT1fE1WQ0u2 xZoORjz9fZUG6qF+eFMWMorZwf0TAU7+rB7/u2etvY/+mV0ots+9n3yQzL7KHTEN UkQg/nHw1XZ4HG69MFemkN2/aX2A9juLNhspjnvRud1/4uopwp+ABl1Mq/yjW118 /rPKcg3/mRA/UskozVRsJ286DPxRaZjEq4LzkH5bz2lQZNcHuErrNlsuXVwkj9Qv omwS7SOsxKc2CYep5MBcVbZOHw83C1EYu8eXbM2C2gNoNgruEZ5Gj8ewEQS2e7qO n91/OiJT1omeNENPs4bEyV3mzj6Rq5iP9W1Qegp1d1xraEBnuKhcB6w4iOhFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJGrgu/OAjA3JWGzYKK2ov5LJ9uwwHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKn5RMzFFCG693Tjgp6U2g5TBZWy2tm9UEmr aSN32qz3SgVkcSL+YLN2EKwhhfhBcVltcTy2OwiLBlC/mIBcbOYutha+t79+GLQk QAqGdMeGz+Y0DLyL92DTeortmekJGP6vTf+1Q4WlXBQSZRyMS7l2Q+KnMBD/rQCr LTrTnV+GKhvX4vVvQ2URkYYiWdI4KB7PnI3nIOe6ly+VMBW8J5WGy8rx3Et//Us6 ck1WAUxicl+McNdM5AKEFPCjECDUA2Y0mYq+PK5hCb7w/wfui1H5F5hkQ8bWD1Rz 3bH9qJL0kYFSfWwqCkVMux0RU3hdNP4jmIwiW+lOqigtvmyamBo= -----END CERTIFICATE-----Generated at Sat Aug 9 10:37:07 2025 by rpki-client