$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: +ERPjwb39IJ2BoJ94mjU6eBzv9dkP2CSJE2N9BJe55Q= Subject key identifier: BE:91:66:8B:D1:3C:4B:CC:A3:FA:F7:A6:7C:B7:34:B8:CF:C0:1E:09 Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 26DF368278748A0B4DD601CF38CE5BA4AFFAF04E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 051D Signing time: Mon 03 Nov 2025 15:10:44 +0000 Manifest this update: Mon 03 Nov 2025 15:05:44 +0000 Manifest next update: Fri 07 Nov 2025 01:39:44 +0000 Files and hashes: 1: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: 1Jz9NMDFD4WyXq1UA+Q0XUUh47srLTDiHK7ItOYHo7o=) 2: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) 3: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) 4: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) 5: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) 6: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:df:36:82:78:74:8a:0b:4d:d6:01:cf:38:ce:5b:a4:af:fa:f0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Nov 3 15:05:44 2025 GMT Not After : Nov 7 01:39:44 2025 GMT Subject: CN=BE91668BD13C4BCCA3FAF7A67CB734B8CFC01E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:db:6b:92:a1:87:0f:fc:b5:02:dc:65:3a: 2e:bf:48:56:f9:94:46:e4:26:5e:c1:a8:b5:7e:2d: ba:05:70:17:13:37:0a:89:b9:44:83:70:75:0a:5a: 27:88:07:10:79:a3:e7:18:3d:4b:ff:28:56:93:df: b7:8a:45:e5:64:02:3d:89:7e:25:18:e8:33:82:2f: 06:5c:2f:a4:3a:18:ec:ee:b9:86:3b:46:7d:09:c3: 3e:e1:0d:08:4c:da:21:e8:85:84:d7:85:b2:3f:0a: 33:a2:80:28:a7:ad:84:03:7d:ce:a5:76:d8:27:ff: b6:7a:fc:a4:ac:49:fe:64:17:5b:37:36:7d:ec:cb: a2:76:c6:5e:c0:9d:63:70:18:1e:f0:3e:b1:77:41: ac:ef:4d:f7:fa:df:61:6a:fb:e5:1c:b2:ac:67:59: 5f:09:e8:ae:30:2c:54:c5:02:5a:e0:9c:b6:3e:d5: a6:fe:a6:15:c8:43:e0:b2:02:4c:13:5e:3e:5b:b0: 40:55:ee:3a:d5:9d:7f:5c:31:7d:cc:6b:18:02:8a: 2c:10:b2:07:48:0e:13:fc:82:bd:7d:b9:38:73:37: 38:57:05:0a:ea:e4:13:0d:04:52:8a:a9:3a:96:4b: 71:58:bb:37:bb:4a:39:62:58:ef:ee:06:55:da:14: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:91:66:8B:D1:3C:4B:CC:A3:FA:F7:A6:7C:B7:34:B8:CF:C0:1E:09 X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:0a:8f:e5:33:97:55:bc:74:7f:45:93:cc:c8:3e:c0:a1:f0: fe:61:2c:2e:d4:86:56:a1:69:7a:af:62:3d:7b:12:af:48:ff: 2c:7f:92:4d:f4:2c:a3:10:be:5f:0f:1f:f2:dd:e1:f3:44:9c: e6:87:f2:ca:17:8d:fa:2f:7c:92:37:1e:0b:f7:d8:3b:f4:8c: a1:10:ba:1e:a0:75:0c:1a:54:ec:6c:b4:4c:9c:0c:bb:69:03: 48:40:04:ab:33:31:d3:24:75:95:5a:2f:6b:be:86:1c:27:f4: cb:c8:f2:eb:07:af:50:37:87:29:dc:33:14:ff:c6:09:da:cb: 8b:00:6d:c3:e6:0a:5f:dd:ca:91:9a:ac:05:e9:b2:86:d4:23: 70:ea:b2:c2:cb:94:b9:6e:90:7d:8a:d9:ad:da:27:74:87:df: dd:36:56:ea:40:ea:57:06:71:f0:ad:b1:6d:19:fa:bb:3d:4e: 6a:9d:cc:e3:90:70:3e:74:b5:b8:91:f7:94:98:0e:5d:85:f6: 28:f8:de:78:ee:92:05:11:10:08:60:f6:e2:b2:ce:8b:5f:97: 31:6f:48:5e:d6:39:70:b4:ba:fc:c6:bf:5f:cc:e7:d3:80:59: e7:3d:28:1d:02:0f:27:0a:1f:52:43:5a:66:b4:62:b5:c5:13: 46:43:09:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJt82gnh0igtN1gHPOM5bpK/68E4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNTExMDMxNTA1NDRaFw0yNTExMDcwMTM5NDRaMDMxMTAvBgNV BAMTKEJFOTE2NjhCRDEzQzRCQ0NBM0ZBRjdBNjdDQjczNEI4Q0ZDMDFFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4dtrkqGHD/y1AtxlOi6/SFb5 lEbkJl7BqLV+LboFcBcTNwqJuUSDcHUKWieIBxB5o+cYPUv/KFaT37eKReVkAj2J fiUY6DOCLwZcL6Q6GOzuuYY7Rn0Jwz7hDQhM2iHohYTXhbI/CjOigCinrYQDfc6l dtgn/7Z6/KSsSf5kF1s3Nn3sy6J2xl7AnWNwGB7wPrF3QazvTff632Fq++Ucsqxn WV8J6K4wLFTFAlrgnLY+1ab+phXIQ+CyAkwTXj5bsEBV7jrVnX9cMX3MaxgCiiwQ sgdIDhP8gr19uThzNzhXBQrq5BMNBFKKqTqWS3FYuze7SjliWO/uBlXaFKMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvpFmi9E8S8yj+vemfLc0uM/AHgkwHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQKj+Uzl1W8dH9Fk8zIPsCh8P5hLC7Uhlah aXqvYj17Eq9I/yx/kk30LKMQvl8PH/Ld4fNEnOaH8soXjfovfJI3Hgv32Dv0jKEQ uh6gdQwaVOxstEycDLtpA0hABKszMdMkdZVaL2u+hhwn9MvI8usHr1A3hyncMxT/ xgnay4sAbcPmCl/dypGarAXpsobUI3DqssLLlLlukH2K2a3aJ3SH3902VupA6lcG cfCtsW0Z+rs9TmqdzOOQcD50tbiR95SYDl2F9ij43njukgUREAhg9uKyzotflzFv SF7WOXC0uvzGv1/M59OAWec9KB0CDycKH1JDWma0YrXFE0ZDCYY= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:40 2025 by rpki-client