$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: vuYHcoCs4cGLquQa9+6R8LK1CrupkCsQf2Yxupz01u4= Subject key identifier: 12:35:D4:BA:85:52:D8:27:FB:47:83:DB:12:BC:04:3D:DB:58:73:33 Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 4F123DF8F8B8525B6E95D68BFFBE093062ACAFB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: CA Signing time: Tue 04 Nov 2025 02:10:01 +0000 Manifest this update: Tue 04 Nov 2025 02:05:01 +0000 Manifest next update: Fri 07 Nov 2025 12:06:01 +0000 Files and hashes: 1: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: lbjr9bXPR9Mk+MHxW5pbuuzMeM5cRHIuk9Bzq76RQ40=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:12:3d:f8:f8:b8:52:5b:6e:95:d6:8b:ff:be:09:30:62:ac:af:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Nov 4 02:05:01 2025 GMT Not After : Nov 7 12:06:01 2025 GMT Subject: CN=1235D4BA8552D827FB4783DB12BC043DDB587333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:60:ae:3c:0a:ef:51:2b:2d:a2:bb:3d:ae: 9b:e8:57:7e:24:35:7a:5e:86:37:81:7c:83:47:3d: 30:cb:5f:c3:d3:37:c7:72:10:43:78:45:f6:86:a2: 02:ea:f0:d5:fe:c7:8c:e1:eb:98:18:5d:0d:b7:eb: 10:0d:30:e1:b3:59:5f:17:a3:4f:aa:24:72:c8:fa: dd:84:32:0e:c5:d1:5f:ce:13:c3:5e:4a:e6:30:af: 44:07:8b:67:f9:3d:16:08:6b:ce:c9:b6:30:bd:d8: 77:9a:d5:a5:16:de:db:d8:ec:e0:5a:ba:d0:80:c3: 51:7a:20:aa:2b:8b:fd:5e:a5:63:ee:1c:1d:03:21: 39:2c:17:47:ec:7b:fa:9e:85:ec:a7:61:e5:52:30: 90:f1:a3:e5:9a:08:2d:cf:58:a5:fe:69:7f:01:55: 31:70:dd:95:91:bc:66:42:6b:a8:97:46:6b:e5:b6: be:70:85:93:4a:29:cb:dd:09:f5:75:f9:2a:f7:ad: d4:cf:be:5f:d4:50:38:4d:9b:49:6c:eb:f0:e3:5d: eb:e0:3a:11:c2:2f:57:a7:af:28:a3:d1:44:fe:c1: fe:54:da:0a:0c:40:42:2d:4a:30:a3:16:17:56:f8: b6:d1:11:2d:ad:c2:07:23:75:f9:0c:4a:c0:76:45: 94:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:35:D4:BA:85:52:D8:27:FB:47:83:DB:12:BC:04:3D:DB:58:73:33 X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:fa:0d:b9:be:4d:8b:28:9e:60:cd:60:45:b1:83:1d:00:31: 22:b1:47:8a:a7:10:2f:71:1b:a9:84:c4:ed:18:fd:07:46:75: 14:60:cd:39:8c:ea:9c:51:f0:a7:57:23:23:a6:86:d7:c2:ba: c8:f3:26:dd:ac:b5:82:fc:77:f8:9d:77:0e:28:d8:b1:5a:a5: da:d5:92:34:da:4a:06:c1:06:01:4b:be:a3:c9:64:41:b8:c7: 4c:a3:54:b0:67:6c:ee:fa:8f:fe:ce:c2:06:0c:5e:06:ea:44: ea:d3:f6:ff:31:81:65:b7:f6:3d:fd:51:da:f6:4f:74:32:55: 64:66:7d:fe:24:fc:48:b6:6e:06:4b:d7:d4:2b:ea:32:73:1a: d6:2c:dd:31:9d:41:a8:de:33:0e:1c:91:9c:ca:d1:6f:41:64: 52:3f:b6:20:75:42:57:ae:5f:e0:87:47:4f:09:e9:ad:6b:fb: 98:fe:49:ee:3f:34:7a:39:4b:22:86:c8:67:07:9d:2f:82:b7: ef:e6:8e:a6:bc:9a:50:90:54:14:e0:85:4c:a0:00:52:bd:27: 6c:85:f1:b5:b1:8e:1d:80:32:db:ba:c4:d5:e3:6d:27:02:cb: 93:97:5c:9f:90:79:23:86:13:97:4d:59:bd:2d:e5:5d:fd:d1: d7:2c:a0:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxI9+Pi4UltuldaL/74JMGKsr7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNTExMDQwMjA1MDFaFw0yNTExMDcxMjA2MDFaMDMxMTAvBgNV BAMTKDEyMzVENEJBODU1MkQ4MjdGQjQ3ODNEQjEyQkMwNDNEREI1ODczMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZkGCuPArvUSstors9rpvoV34k NXpehjeBfINHPTDLX8PTN8dyEEN4RfaGogLq8NX+x4zh65gYXQ236xANMOGzWV8X o0+qJHLI+t2EMg7F0V/OE8NeSuYwr0QHi2f5PRYIa87JtjC92Hea1aUW3tvY7OBa utCAw1F6IKori/1epWPuHB0DITksF0fse/qeheynYeVSMJDxo+WaCC3PWKX+aX8B VTFw3ZWRvGZCa6iXRmvltr5whZNKKcvdCfV1+Sr3rdTPvl/UUDhNm0ls6/DjXevg OhHCL1enryij0UT+wf5U2goMQEItSjCjFhdW+LbRES2twgcjdfkMSsB2RZT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEjXUuoVS2Cf7R4PbErwEPdtYczMwHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKf6Dbm+TYsonmDNYEWxgx0AMSKxR4qnEC9x G6mExO0Y/QdGdRRgzTmM6pxR8KdXIyOmhtfCusjzJt2stYL8d/iddw4o2LFapdrV kjTaSgbBBgFLvqPJZEG4x0yjVLBnbO76j/7OwgYMXgbqROrT9v8xgWW39j39Udr2 T3QyVWRmff4k/Ei2bgZL19Qr6jJzGtYs3TGdQajeMw4ckZzK0W9BZFI/tiB1Qleu X+CHR08J6a1r+5j+Se4/NHo5SyKGyGcHnS+Ct+/mjqa8mlCQVBTghUygAFK9J2yF 8bWxjh2AMtu6xNXjbScCy5OXXJ+QeSOGE5dNWb0t5V390dcsoEE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:36:30 2025 by rpki-client