$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json) Hash identifier: i/DaTisfIZ56amUq16/mWS4pEwJD6XrdRvFPyt5DL7Q= Subject key identifier: D4:2F:3C:47:4E:46:FB:EB:6D:17:AB:B8:5A:FB:88:FC:25:67:CA:EA Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Certificate serial: 2A26C925EECCB04B76D86D793D64F5265D67CF8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft Manifest number: 04F8 Signing time: Thu 07 Aug 2025 18:10:57 +0000 Manifest this update: Thu 07 Aug 2025 18:05:57 +0000 Manifest next update: Sun 10 Aug 2025 23:42:57 +0000 Files and hashes: 1: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: UUI0UvU6AUH37Q/H9zW8u0Apq7Y6pN001mJMdkH8taI=) 2: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: JE0sJw2Y30gQbCmAIhnjpinJa8eG7Fgewlr8Jax6ero=) 3: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: XTrAUzINtImcd3F+XaTVo5H750rmDxdeBt+LpGOrxS4=) 4: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: W+8fU11eeR31Ak/xC2xa2MND9KLOfHr6+2Fhz5lckrs=) 5: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: ejfVv9si1K2MpeXhh8zMJGLdHAeeV0dhSQaga8rtoCM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:26:c9:25:ee:cc:b0:4b:76:d8:6d:79:3d:64:f5:26:5d:67:cf:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Validity Not Before: Aug 7 18:05:57 2025 GMT Not After : Aug 10 23:42:57 2025 GMT Subject: CN=D42F3C474E46FBEB6D17ABB85AFB88FC2567CAEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:d3:00:17:ec:08:26:a2:df:f0:f5:cf:65: 83:20:2b:6d:13:67:fd:65:1a:d4:6e:09:c4:41:6b: 49:0c:d0:42:de:2a:cc:5f:82:f9:71:76:c8:88:33: a9:f3:87:8b:7d:aa:de:7c:80:07:8c:cc:28:8b:64: 37:7b:8c:b4:27:8c:56:d1:a6:21:12:d6:c7:09:d0: 1e:e4:01:f2:5a:90:f2:04:99:92:c5:21:e4:5a:50: e4:07:df:77:e1:29:00:6d:00:bb:b8:f5:2c:c8:5e: f5:ac:61:54:29:f8:6d:f6:60:51:43:cc:58:a7:07: 7d:44:94:db:a7:55:79:0a:93:16:45:f9:38:d7:b0: 99:c4:71:bf:d5:ac:f9:c1:28:eb:20:98:33:91:95: 42:7c:75:ae:da:9a:11:bb:55:a8:46:07:60:d6:92: 22:bf:17:74:08:52:4d:c4:ef:99:7d:c9:06:68:15: b1:0a:26:3e:ea:6c:96:10:69:f1:c8:60:72:fd:2b: dc:0c:16:e7:c9:22:e5:2d:a5:da:f7:83:51:e7:01: 77:84:cd:60:d6:6a:2c:77:39:ae:ee:2e:88:19:df: 11:d6:b7:75:c6:12:47:eb:c7:1b:ff:66:81:5f:a2: 06:fa:3e:f6:55:00:41:44:22:33:12:0f:84:3b:24: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2F:3C:47:4E:46:FB:EB:6D:17:AB:B8:5A:FB:88:FC:25:67:CA:EA X509v3 Authority Key Identifier: keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a2:1e:b4:ac:c6:01:2a:3b:d7:58:42:9c:31:b5:7b:88:58: 4e:5b:49:7b:ed:ed:50:2c:84:8c:1a:3f:03:b5:9b:01:a2:df: 51:d9:bc:bc:f1:75:2f:c3:cf:72:a7:c4:0c:5b:4e:35:1f:97: d0:58:a7:bb:3e:ab:49:50:d3:4b:db:6a:81:e1:66:3a:10:64: ec:de:64:9b:8a:35:3d:ec:72:91:f4:8f:48:1a:56:67:22:49: fd:9e:1b:67:ef:e7:52:cc:19:27:3f:08:33:46:49:3c:39:28: e7:10:87:ee:a9:a0:ed:2a:41:75:9e:af:79:66:64:37:23:98: ce:d6:bf:ee:8a:44:8e:f7:9f:44:5d:9d:7b:52:2a:44:cb:05: a5:cb:44:1d:8e:37:b1:f7:8c:35:56:d5:ef:35:86:2b:2d:90: 8a:86:73:f4:40:73:e4:86:df:a4:41:f4:85:e7:3b:98:f6:34: a1:20:2b:3e:76:b0:b4:bd:9b:35:f0:0b:47:59:db:22:0d:f7: d3:21:f2:8e:0e:42:8b:5c:16:6f:90:35:ea:66:f7:7b:6f:d5: f6:21:4a:86:c3:ea:87:f2:47:3a:a7:77:9d:e4:6d:8d:da:94: 8e:90:fa:4d:90:79:d0:8f:2c:42:8b:f5:04:a9:a3:d7:fb:ea: 00:23:3a:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKibJJe7MsEt22G15PWT1Jl1nz4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2 QUE5MDM1MzAeFw0yNTA4MDcxODA1NTdaFw0yNTA4MTAyMzQyNTdaMDMxMTAvBgNV BAMTKEQ0MkYzQzQ3NEU0NkZCRUI2RDE3QUJCODVBRkI4OEZDMjU2N0NBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERtMAF+wIJqLf8PXPZYMgK20T Z/1lGtRuCcRBa0kM0ELeKsxfgvlxdsiIM6nzh4t9qt58gAeMzCiLZDd7jLQnjFbR piES1scJ0B7kAfJakPIEmZLFIeRaUOQH33fhKQBtALu49SzIXvWsYVQp+G32YFFD zFinB31ElNunVXkKkxZF+TjXsJnEcb/VrPnBKOsgmDORlUJ8da7amhG7VahGB2DW kiK/F3QIUk3E75l9yQZoFbEKJj7qbJYQafHIYHL9K9wMFufJIuUtpdr3g1HnAXeE zWDWaix3Oa7uLogZ3xHWt3XGEkfrxxv/ZoFfogb6PvZVAEFEIjMSD4Q7JG57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1C88R05G++ttF6u4WvuI/CVnyuowHwYDVR0j BBgwFoAUrMPXmrG+9ivACVtvasPzRGqpA1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzU4YzgwZS1hMzI4LTRmOGMtYTAzZi05MWMzYzI2MjE0YTIvMC9BQ0MzRDc5QUIx QkVGNjJCQzAwOTVCNkY2QUMzRjM0NDZBQTkwMzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2QUE5 MDM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0Yz NDQ2QUE5MDM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyiHrSsxgEqO9dYQpwxtXuIWE5bSXvt7VAs hIwaPwO1mwGi31HZvLzxdS/Dz3KnxAxbTjUfl9BYp7s+q0lQ00vbaoHhZjoQZOze ZJuKNT3scpH0j0gaVmciSf2eG2fv51LMGSc/CDNGSTw5KOcQh+6poO0qQXWer3lm ZDcjmM7Wv+6KRI73n0RdnXtSKkTLBaXLRB2ON7H3jDVW1e81histkIqGc/RAc+SG 36RB9IXnO5j2NKEgKz52sLS9mzXwC0dZ2yIN99Mh8o4OQotcFm+QNepm93tv1fYh SobD6ofyRzqnd53kbY3alI6Q+k2QedCPLEKL9QSpo9f76gAjOiM= -----END CERTIFICATE-----Generated at Fri Aug 8 00:16:19 2025 by rpki-client