$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: jhf3jP0dx0Xn0ur0bPD/JtGa1MCs4y20826SkCvTv6w= Subject key identifier: 5C:BC:93:88:DD:F3:65:36:BE:9D:33:42:0D:C9:78:70:DB:72:48:4A Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 09E291428A037600C70A918DBEBCEF46B72F218B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 01AA Signing time: Sun 02 Nov 2025 02:51:25 +0000 Manifest this update: Sun 02 Nov 2025 02:46:25 +0000 Manifest next update: Wed 05 Nov 2025 03:05:25 +0000 Files and hashes: 1: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: qhRUSGJ0D86iHiW1TNFNluN0zhefXmNPB8/g+qRBjA0=) 2: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 03:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e2:91:42:8a:03:76:00:c7:0a:91:8d:be:bc:ef:46:b7:2f:21:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Nov 2 02:46:25 2025 GMT Not After : Nov 5 03:05:25 2025 GMT Subject: CN=5CBC9388DDF36536BE9D33420DC97870DB72484A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:58:ec:a3:18:0e:de:8e:d4:4a:4b:ad:50: a5:9f:18:89:16:7f:0e:45:ed:44:9a:15:49:10:66: 41:68:84:27:08:9e:53:30:91:68:8c:84:aa:f4:71: 5b:03:65:1d:0d:26:82:0a:e8:72:c8:f0:c8:ae:d9: 54:9d:eb:4e:2f:7a:07:d7:43:08:54:bc:25:0a:50: 00:06:fd:15:3b:0b:9f:4a:ee:aa:82:91:27:a7:67: 26:9d:c2:fa:33:ea:61:c1:c3:ec:71:aa:7b:1a:ff: ca:15:c2:e4:2d:05:f1:65:43:0d:31:07:e3:2c:86: 90:2c:b3:fc:35:f6:e3:81:97:06:19:7a:41:ad:f5: 65:62:1c:74:13:4d:67:3e:67:11:c6:67:52:37:17: 17:f6:bf:39:5d:d1:5e:af:e5:1c:8a:85:0d:ae:1b: cf:e0:3f:9c:cf:4f:5e:b6:ab:2d:c7:64:a2:cd:7d: f3:5d:ff:26:47:4d:9b:3f:cc:1d:ad:2e:ee:93:38: 32:45:b8:fe:92:58:31:30:42:55:a1:51:94:b6:31: 5d:26:e2:3c:7e:29:6d:03:87:17:75:9b:68:df:95: 91:f1:93:5b:6c:ea:c4:aa:4c:f1:c4:09:e5:f1:c3: 11:f0:66:71:fd:87:32:43:ab:b1:9f:fc:24:f4:cf: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BC:93:88:DD:F3:65:36:BE:9D:33:42:0D:C9:78:70:DB:72:48:4A X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:1c:bf:36:21:72:46:31:de:89:05:8f:cd:ae:65:18:5c:26: a5:af:66:0c:cd:36:8e:24:44:ee:9e:c0:a2:a3:6b:d8:a6:27: 4f:88:bc:c4:69:cb:68:9b:95:49:dd:bf:ec:f4:33:fe:1c:d1: ad:55:7f:73:04:f1:9c:2c:ca:49:13:c8:da:c2:9b:b8:e0:b0: 90:22:41:22:ed:a2:b8:8d:cf:80:08:ac:df:2e:18:5e:db:96: e7:48:d4:93:a3:af:b6:e6:af:2d:1f:a2:6a:5a:ea:b7:ec:e6: e6:56:96:d1:ab:c2:f7:dd:8f:1f:96:e9:fd:82:e8:6b:18:c2: 27:8e:8e:e9:85:e7:8d:21:b6:8b:98:63:78:3d:17:2d:e6:54: 46:2b:26:6b:7a:aa:0e:fe:48:86:88:37:d5:82:fe:dc:0c:b4: 9c:64:79:27:3e:c1:c4:54:76:3d:70:87:67:b5:43:21:a0:59: a8:f2:73:71:e2:12:d2:bd:e9:ef:0e:23:c3:0e:f6:b3:72:84: 6f:e0:5b:dd:45:7c:58:61:dc:33:20:00:e3:d1:0d:ae:52:76: 26:72:dc:8a:46:4a:6b:7e:11:6f:a2:27:86:02:d2:9c:68:bc: 1a:04:7a:44:e8:ef:6b:e9:be:e9:76:cf:d5:09:20:11:81:b7: ad:a7:b4:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCeKRQooDdgDHCpGNvrzvRrcvIYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTExMDIwMjQ2MjVaFw0yNTExMDUwMzA1MjVaMDMxMTAvBgNV BAMTKDVDQkM5Mzg4RERGMzY1MzZCRTlEMzM0MjBEQzk3ODcwREI3MjQ4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjVjsoxgO3o7USkutUKWfGIkW fw5F7USaFUkQZkFohCcInlMwkWiMhKr0cVsDZR0NJoIK6HLI8Miu2VSd604vegfX QwhUvCUKUAAG/RU7C59K7qqCkSenZyadwvoz6mHBw+xxqnsa/8oVwuQtBfFlQw0x B+MshpAss/w19uOBlwYZekGt9WViHHQTTWc+ZxHGZ1I3Fxf2vzld0V6v5RyKhQ2u G8/gP5zPT162qy3HZKLNffNd/yZHTZs/zB2tLu6TODJFuP6SWDEwQlWhUZS2MV0m 4jx+KW0Dhxd1m2jflZHxk1ts6sSqTPHECeXxwxHwZnH9hzJDq7Gf/CT0z6epAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXLyTiN3zZTa+nTNCDcl4cNtySEowHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYcvzYhckYx3okFj82uZRhcJqWvZgzNNo4k RO6ewKKja9imJ0+IvMRpy2iblUndv+z0M/4c0a1Vf3ME8ZwsykkTyNrCm7jgsJAi QSLtoriNz4AIrN8uGF7bludI1JOjr7bmry0fompa6rfs5uZWltGrwvfdjx+W6f2C 6GsYwieOjumF540htouYY3g9Fy3mVEYrJmt6qg7+SIaIN9WC/twMtJxkeSc+wcRU dj1wh2e1QyGgWajyc3HiEtK96e8OI8MO9rNyhG/gW91FfFhh3DMgAOPRDa5SdiZy 3IpGSmt+EW+iJ4YC0pxovBoEekTo72vpvul2z9UJIBGBt62ntF0= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:34 2025 by rpki-client