$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft File: AC555447BA62C39107F16BF572F82A417F728DBF.mft (raw, json) Hash identifier: Ftt4iu0yhLUDTY++zKbXUl3nWjFkSWLc5Dphn+ivD3M= Subject key identifier: 9F:18:40:55:1F:E0:14:B8:28:38:DF:BF:C8:E1:BB:BA:4F:F1:F0:6A Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF Certificate serial: 2919AEEE576E117A280850FA028A0F1FB74A26AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft Manifest number: 065A Signing time: Sun 02 Nov 2025 18:21:49 +0000 Manifest this update: Sun 02 Nov 2025 18:16:49 +0000 Manifest next update: Thu 06 Nov 2025 04:01:49 +0000 Files and hashes: 1: AS45493.roa (hash: mb0AgCXbkScEv7HGYPRCGM6VDPWZb0xWmZOIeGOHRDA=) 2: AC555447BA62C39107F16BF572F82A417F728DBF.crl (hash: 8ES9njEj1nQCbhA9CqUzJ2qPmwZWMurOaH/4/CfyvZI=) 3: AS38482.roa (hash: mqOgj/4JaT7AGWmmy0w7CKSJj5WCQYyZUeVO9quFzao=) 4: AS17451.roa (hash: 2F3PBu68Bdq5HvCC0sMQ4BANHlqCRYGplU9+vfByK+4=) 5: AS38060.roa (hash: eOcmz88SeKGkb0DMwImS4Yyf8BOpXzai0Cr7w/OsMC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:19:ae:ee:57:6e:11:7a:28:08:50:fa:02:8a:0f:1f:b7:4a:26:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF Validity Not Before: Nov 2 18:16:49 2025 GMT Not After : Nov 6 04:01:49 2025 GMT Subject: CN=9F1840551FE014B82838DFBFC8E1BBBA4FF1F06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:d6:76:71:ca:34:e2:1d:b4:38:5c:10:ff: 24:c8:f0:e2:fa:01:e5:5d:47:f4:59:f2:ef:35:a2: 06:d7:5b:2a:3f:17:86:2e:1a:e3:ca:cf:1b:54:17: d6:f0:d4:8e:df:b3:17:88:b3:0e:a2:f3:c1:54:dd: b3:44:96:72:d2:77:94:81:95:ae:2c:43:3f:aa:aa: ec:f5:93:60:08:ff:ff:f4:73:0d:03:6a:10:de:fd: 7f:03:7b:f2:3d:63:76:41:62:f3:0f:50:12:8d:23: 05:9d:ed:b4:65:e3:94:b8:ef:3d:8f:28:24:6c:94: 6c:87:54:6a:65:b7:ff:62:6e:d9:26:1e:0a:8d:bf: bf:bc:0c:19:ff:2b:d9:d0:a3:99:80:e7:ac:4f:8c: 04:06:9a:87:b8:24:83:9a:1a:88:e7:67:0e:e0:d5: 72:8b:4c:d1:c4:dc:41:b3:57:e8:c0:84:b1:ae:20: d5:8e:52:d0:50:c0:ab:e3:85:21:97:1f:46:a5:d7: 4e:2a:02:b7:47:48:d3:24:54:b6:f1:64:a3:40:72: 99:83:9e:88:6e:53:05:10:ca:6d:66:1c:5b:ff:ea: 3d:d4:9e:3e:7a:9b:63:22:79:61:b5:66:5b:0f:ae: f1:62:80:5f:01:31:27:54:65:68:8a:6e:d6:7b:2b: 4f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:18:40:55:1F:E0:14:B8:28:38:DF:BF:C8:E1:BB:BA:4F:F1:F0:6A X509v3 Authority Key Identifier: keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:03:23:55:18:fc:38:6a:c9:77:27:82:25:e7:59:a3:e7:a3: 6d:2a:61:42:05:0a:13:cb:0f:f8:0b:92:3f:f4:fb:b1:53:05: 58:42:a6:76:ec:3f:04:53:d8:20:b2:78:a9:d2:a4:4e:84:71: 31:d9:41:29:f1:b0:0e:fe:7e:e7:e0:0f:bc:55:cf:fe:fc:cc: 15:d6:3b:92:88:9f:d6:42:f5:b2:3a:c1:e7:ca:f8:fc:36:d7: 36:7a:b9:2c:2a:33:b7:07:43:4c:45:62:c6:81:1c:1f:02:e9: 96:8d:9f:06:47:57:df:c7:18:38:0a:35:2e:07:c3:56:dd:a7: 68:a4:f4:fa:42:08:ce:6a:5e:86:de:63:7e:70:9f:7e:0e:60: f5:3f:5e:a0:34:26:43:6c:d2:88:e6:5b:01:32:27:b8:70:eb: 97:07:f5:64:79:66:02:c2:ef:c3:93:0a:5f:2c:61:14:33:12: 8e:59:23:30:c9:cb:06:0c:06:f6:8b:c9:95:62:a2:4c:6f:64: 22:71:a8:75:1b:7d:88:f3:6d:d0:f6:b5:70:11:73:34:2f:fa: 1c:f6:a3:a4:b6:b1:13:06:cc:84:9a:ac:ee:cd:d6:69:83:05: 3a:19:f4:de:14:4d:1a:23:d1:d4:91:16:b3:59:76:75:7f:50: 6c:c2:42:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRmu7lduEXooCFD6AooPH7dKJqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3 RjcyOERCRjAeFw0yNTExMDIxODE2NDlaFw0yNTExMDYwNDAxNDlaMDMxMTAvBgNV BAMTKDlGMTg0MDU1MUZFMDE0QjgyODM4REZCRkM4RTFCQkJBNEZGMUYwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUNZ2cco04h20OFwQ/yTI8OL6 AeVdR/RZ8u81ogbXWyo/F4YuGuPKzxtUF9bw1I7fsxeIsw6i88FU3bNElnLSd5SB la4sQz+qquz1k2AI///0cw0DahDe/X8De/I9Y3ZBYvMPUBKNIwWd7bRl45S47z2P KCRslGyHVGplt/9ibtkmHgqNv7+8DBn/K9nQo5mA56xPjAQGmoe4JIOaGojnZw7g 1XKLTNHE3EGzV+jAhLGuINWOUtBQwKvjhSGXH0al104qArdHSNMkVLbxZKNAcpmD nohuUwUQym1mHFv/6j3Unj56m2MieWG1ZlsPrvFigF8BMSdUZWiKbtZ7K0/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnxhAVR/gFLgoON+/yOG7uk/x8GowHwYDVR0j BBgwFoAUrFVUR7piw5EH8Wv1cvgqQX9yjb8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC9BQzU1NTQ0N0JB NjJDMzkxMDdGMTZCRjU3MkY4MkE0MTdGNzI4REJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3Rjcy OERCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB NDE3RjcyOERCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkDI1UY/DhqyXcngiXnWaPno20qYUIFChPL D/gLkj/0+7FTBVhCpnbsPwRT2CCyeKnSpE6EcTHZQSnxsA7+fufgD7xVz/78zBXW O5KIn9ZC9bI6wefK+Pw21zZ6uSwqM7cHQ0xFYsaBHB8C6ZaNnwZHV9/HGDgKNS4H w1bdp2ik9PpCCM5qXobeY35wn34OYPU/XqA0JkNs0ojmWwEyJ7hw65cH9WR5ZgLC 78OTCl8sYRQzEo5ZIzDJywYMBvaLyZViokxvZCJxqHUbfYjzbdD2tXARczQv+hz2 o6S2sRMGzISarO7N1mmDBToZ9N4UTRoj0dSRFrNZdnV/UGzCQi8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:37 2025 by rpki-client