$ rpki-client -vvf repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft File: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft (raw, json) Hash identifier: GB8dBhiGjmJSUbrXQ/eJfhogpd7tBmcKeIl/nDpjskg= Subject key identifier: 44:8D:9E:5E:24:A4:4C:16:AF:D9:07:2E:A9:F3:D5:E4:EF:37:9B:95 Authority key identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 Certificate issuer: /CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Certificate serial: 4E6C178991BF6B03F783A834EB5113A31689DBE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft Manifest number: AC Signing time: Tue 04 Nov 2025 19:40:45 +0000 Manifest this update: Tue 04 Nov 2025 19:35:45 +0000 Manifest next update: Sat 08 Nov 2025 07:31:45 +0000 Files and hashes: 1: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl (hash: 8SJ9S9FStwAASqeKfpJrVnRqqXe5dxIFb8U55NT8AkA=) 2: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: xdI7HWpC7S6F3YsdhXQZOI+Bb5mAqBVyTqf6Y1GJCkg=) 3: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: WXQWW4Wi6xrEbWBjUR+QMjICoHgwf/HhAfAnKsJzlws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6c:17:89:91:bf:6b:03:f7:83:a8:34:eb:51:13:a3:16:89:db:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Validity Not Before: Nov 4 19:35:45 2025 GMT Not After : Nov 8 07:31:45 2025 GMT Subject: CN=448D9E5E24A44C16AFD9072EA9F3D5E4EF379B95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ca:82:a7:e8:db:fb:50:21:ba:c3:4e:a6:ea: 5b:1a:4f:5b:44:87:44:97:42:fd:a9:9a:a2:e3:c9: 41:3b:39:00:65:33:89:a0:da:3f:1b:c3:eb:15:27: 17:c5:e5:d8:37:12:de:37:c9:8e:af:6e:ad:f4:6c: b5:ad:26:7f:00:25:b2:e7:93:7b:f5:69:e0:8a:02: 67:1c:d2:17:6b:51:e4:ce:c5:8a:a3:65:53:c5:d5: 2d:be:0f:79:62:45:41:5c:5c:39:78:2e:d1:9f:33: 5f:35:ef:a3:17:c8:2c:43:d2:a1:3a:f0:e0:20:c2: 05:c3:a1:de:23:0b:9e:23:7a:08:ac:61:e2:b8:47: 7a:92:9d:e5:84:f2:a8:52:f6:a4:b7:9c:3a:f0:59: d1:98:d2:9c:e4:41:37:bc:5f:af:8e:89:ee:eb:b0: df:09:8c:dd:22:5b:00:ca:59:44:5f:6e:aa:bf:c7: 26:1b:c7:ce:9e:70:da:12:7c:5e:dd:e8:a6:fe:b4: 80:c1:86:c8:ff:a2:27:ba:12:28:ce:ba:6d:3f:7f: 58:2c:1a:f7:46:82:4e:f1:96:d0:26:4a:91:23:ce: c3:33:57:09:74:1d:62:65:13:5f:36:53:16:ee:7f: e7:b4:e6:40:11:bc:c8:92:a7:4b:ef:d9:04:db:d9: f1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8D:9E:5E:24:A4:4C:16:AF:D9:07:2E:A9:F3:D5:E4:EF:37:9B:95 X509v3 Authority Key Identifier: keyid:4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e3:27:ac:65:1f:fe:e5:7f:68:4b:82:16:65:61:03:25:eb: b3:6a:2a:2a:3e:85:6a:cd:cb:3a:16:8a:92:fc:be:61:4f:91: 95:03:ad:e3:27:5a:dd:91:54:ab:15:1b:1c:fc:57:75:a6:b1: b5:a0:5c:21:a2:45:ab:f5:16:49:8c:92:84:de:05:15:22:47: 42:f5:1f:bf:54:b2:b7:fc:03:52:a6:c5:d0:bc:d7:7e:9e:db: 15:d2:30:10:e0:b5:c9:33:1d:9e:2b:45:01:b4:bb:40:00:4b: b2:34:0e:23:f6:82:93:a2:2d:e1:c6:fe:57:7a:97:7b:d4:e9: 25:89:bf:21:47:90:b1:ca:62:fd:0d:b2:7e:63:24:3f:f0:0f: e6:0e:f0:ed:e9:d9:77:cb:4f:09:58:a1:91:38:2e:03:c8:0b: cc:d7:f5:b1:f0:ae:8f:55:7e:d9:5c:b0:d0:59:b8:52:3c:84: 6f:9c:16:a6:3e:d0:e0:05:84:62:81:8f:5b:6e:b7:ee:8d:78: ef:b5:ab:bf:fc:67:ff:25:3b:cc:00:32:ff:35:19:c2:7c:0a: 05:51:c7:2c:b1:51:e8:50:98:6e:3f:42:07:a4:23:ed:f9:10: f0:6d:2e:8a:7b:d8:78:de:1d:a1:76:d8:9d:04:fa:04:38:f2: 28:ae:f8:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmwXiZG/awP3g6g061EToxaJ2+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZC MzM0QTY1OTAeFw0yNTExMDQxOTM1NDVaFw0yNTExMDgwNzMxNDVaMDMxMTAvBgNV BAMTKDQ0OEQ5RTVFMjRBNDRDMTZBRkQ5MDcyRUE5RjNENUU0RUYzNzlCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjyoKn6Nv7UCG6w06m6lsaT1tE h0SXQv2pmqLjyUE7OQBlM4mg2j8bw+sVJxfF5dg3Et43yY6vbq30bLWtJn8AJbLn k3v1aeCKAmcc0hdrUeTOxYqjZVPF1S2+D3liRUFcXDl4LtGfM18176MXyCxD0qE6 8OAgwgXDod4jC54jegisYeK4R3qSneWE8qhS9qS3nDrwWdGY0pzkQTe8X6+Oie7r sN8JjN0iWwDKWURfbqq/xyYbx86ecNoSfF7d6Kb+tIDBhsj/oie6EijOum0/f1gs GvdGgk7xltAmSpEjzsMzVwl0HWJlE182Uxbuf+e05kARvMiSp0vv2QTb2fFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURI2eXiSkTBav2QcuqfPV5O83m5UwHwYDVR0j BBgwFoAUSs4K3btb87SbHNpaIxDPBrM0plkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjY5ZDY2Ny0xN2E0LTRmZGQtOWM1Ny0xMTIyMDMzZWY5OTkvMC80QUNFMEFEREJC NUJGM0I0OUIxQ0RBNUEyMzEwQ0YwNkIzMzRBNjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZCMzM0 QTY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENG MDZCMzM0QTY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3jJ6xlH/7lf2hLghZlYQMl67NqKio+hWrN yzoWipL8vmFPkZUDreMnWt2RVKsVGxz8V3WmsbWgXCGiRav1FkmMkoTeBRUiR0L1 H79Usrf8A1KmxdC8136e2xXSMBDgtckzHZ4rRQG0u0AAS7I0DiP2gpOiLeHG/ld6 l3vU6SWJvyFHkLHKYv0Nsn5jJD/wD+YO8O3p2XfLTwlYoZE4LgPIC8zX9bHwro9V ftlcsNBZuFI8hG+cFqY+0OAFhGKBj1tut+6NeO+1q7/8Z/8lO8wAMv81GcJ8CgVR xyyxUehQmG4/QgekI+35EPBtLop72HjeHaF22J0E+gQ48iiu+Dg= -----END CERTIFICATE-----Generated at Tue Nov 4 20:57:43 2025 by rpki-client