$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: ZBcH8HM4uxTiXC42TsQT64Y9kT0bCajC5E9aSv+GQuo= Subject key identifier: 94:1D:75:E3:A1:2E:C4:2C:5D:E0:C2:BC:67:F6:E1:86:E5:2B:87:02 Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 72C7F9D139F4ACA0ECA5A74DB1B4949F49CCB31D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: A3 Signing time: Sat 09 Aug 2025 06:00:01 +0000 Manifest this update: Sat 09 Aug 2025 05:55:01 +0000 Manifest next update: Tue 12 Aug 2025 09:33:01 +0000 Files and hashes: 1: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: e1cT4nk64D3+n6ARmItbSF/NRb4BRuABNYMM9llNCLQ=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c7:f9:d1:39:f4:ac:a0:ec:a5:a7:4d:b1:b4:94:9f:49:cc:b3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Aug 9 05:55:01 2025 GMT Not After : Aug 12 09:33:01 2025 GMT Subject: CN=941D75E3A12EC42C5DE0C2BC67F6E186E52B8702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:09:86:5b:de:12:38:ba:a5:a1:8a:f1:50:2e: 29:a0:60:d9:0d:cb:87:90:6f:e3:50:5e:a9:d5:2d: 3a:74:f6:c9:6d:1d:2c:1e:0a:e6:a5:52:aa:9b:ca: f5:e6:88:65:16:9e:9e:3f:7a:2d:f3:4b:92:67:3f: d1:20:78:e7:06:dc:13:de:1e:0d:23:ad:77:26:a6: 5c:64:d6:4c:19:d6:0a:65:ef:24:ed:a3:f9:34:f9: 52:35:10:92:d6:6e:dc:ed:a1:ae:9b:c7:0b:87:83: d1:48:6d:ea:66:61:04:2b:a4:f4:02:f5:23:7c:74: f0:23:35:13:13:bb:89:e7:7c:8d:68:21:a8:41:7b: 6a:2c:98:ab:fc:49:47:35:9a:dc:74:2a:8d:a4:2b: 0d:84:ec:16:e1:bd:28:aa:1b:4e:06:59:2e:f4:0f: cd:67:a2:c6:24:58:3f:c9:8f:56:48:79:49:aa:ca: a9:6d:a2:c5:65:11:b4:32:37:09:cc:ca:05:a4:d1: 1a:ba:9a:a5:d3:0b:0f:72:c9:b0:19:4b:00:f2:bf: 9c:e1:2d:64:1d:91:a3:07:e3:ea:6d:62:1a:e5:1f: 11:c9:fe:eb:28:0e:ab:b5:36:89:e6:76:85:b5:7a: b2:c7:e1:58:0d:69:ca:fb:55:2c:87:e2:6d:9e:3d: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1D:75:E3:A1:2E:C4:2C:5D:E0:C2:BC:67:F6:E1:86:E5:2B:87:02 X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:9a:a2:f2:44:2a:fc:d6:7b:85:8a:78:c5:a3:94:8e:13:56: 48:1c:b4:b1:22:08:a1:f0:20:ff:ac:b7:c9:36:98:b2:c3:9e: 98:be:0e:e6:38:21:8a:88:e4:09:4c:07:4c:79:08:3c:26:a1: 96:f2:2a:bf:32:dd:e0:54:f0:18:57:f5:70:de:71:ec:42:53: 15:27:df:2a:bd:c0:84:79:76:78:a3:1b:01:6f:b3:a0:fc:02: ca:64:f2:08:76:a7:80:3d:40:5d:62:b9:1f:0c:f3:c4:21:3e: b2:33:dd:f6:2b:6c:e0:e8:d7:ca:6c:ea:48:75:73:91:22:6e: d2:e3:6b:d9:41:7e:63:58:41:df:f1:03:07:6f:34:1e:9f:c3: fd:4d:21:22:08:4a:71:78:ca:5e:b6:71:92:ef:b7:24:48:f8: 2e:ee:f0:42:1d:8c:a4:32:49:20:de:a7:70:d4:d8:3d:7e:07: 23:ac:e5:86:b1:f7:55:7a:2f:2b:b3:37:b2:bf:4b:30:46:7c: f6:d6:46:0b:9a:ad:5f:15:ff:8d:57:57:c6:17:05:a5:6f:85: 3d:d9:e9:70:45:ab:2f:eb:d9:ef:b1:bc:02:1e:af:db:19:e2: e7:e7:b5:57:87:9b:b8:c6:6f:d4:cd:2a:da:ed:14:00:37:14: 32:0a:13:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcsf50Tn0rKDspadNsbSUn0nMsx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNTA4MDkwNTU1MDFaFw0yNTA4MTIwOTMzMDFaMDMxMTAvBgNV BAMTKDk0MUQ3NUUzQTEyRUM0MkM1REUwQzJCQzY3RjZFMTg2RTUyQjg3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZCYZb3hI4uqWhivFQLimgYNkN y4eQb+NQXqnVLTp09sltHSweCualUqqbyvXmiGUWnp4/ei3zS5JnP9EgeOcG3BPe Hg0jrXcmplxk1kwZ1gpl7yTto/k0+VI1EJLWbtztoa6bxwuHg9FIbepmYQQrpPQC 9SN8dPAjNRMTu4nnfI1oIahBe2osmKv8SUc1mtx0Ko2kKw2E7BbhvSiqG04GWS70 D81nosYkWD/Jj1ZIeUmqyqltosVlEbQyNwnMygWk0Rq6mqXTCw9yybAZSwDyv5zh LWQdkaMH4+ptYhrlHxHJ/usoDqu1NonmdoW1erLH4VgNacr7VSyH4m2ePY4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlB1146EuxCxd4MK8Z/bhhuUrhwIwHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKaovJEKvzWe4WKeMWjlI4TVkgctLEiCKHw IP+st8k2mLLDnpi+DuY4IYqI5AlMB0x5CDwmoZbyKr8y3eBU8BhX9XDecexCUxUn 3yq9wIR5dnijGwFvs6D8Aspk8gh2p4A9QF1iuR8M88QhPrIz3fYrbODo18ps6kh1 c5EibtLja9lBfmNYQd/xAwdvNB6fw/1NISIISnF4yl62cZLvtyRI+C7u8EIdjKQy SSDep3DU2D1+ByOs5Yax91V6LyuzN7K/SzBGfPbWRguarV8V/41XV8YXBaVvhT3Z 6XBFqy/r2e+xvAIer9sZ4ufntVeHm7jGb9TNKtrtFAA3FDIKEwc= -----END CERTIFICATE-----Generated at Sat Aug 9 22:35:40 2025 by rpki-client