$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: fdHo48UNOTCVuCZvE6SN51Nxmq4NLYJ31PdMef2PL80= Subject key identifier: 04:CB:0E:C6:79:BF:17:BE:21:43:66:01:AF:C4:A3:5E:6D:B1:48:79 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 0DA3AB1092106A1F10A757C039203D648543C1A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 03D0 Signing time: Mon 03 Nov 2025 15:32:10 +0000 Manifest this update: Mon 03 Nov 2025 15:27:10 +0000 Manifest next update: Thu 06 Nov 2025 23:39:10 +0000 Files and hashes: 1: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=) 2: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: NVvZoKNdOKCnCbLpV7hdJ2+lwy+NKFFSxuzOudFWZhY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a3:ab:10:92:10:6a:1f:10:a7:57:c0:39:20:3d:64:85:43:c1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Nov 3 15:27:10 2025 GMT Not After : Nov 6 23:39:10 2025 GMT Subject: CN=04CB0EC679BF17BE21436601AFC4A35E6DB14879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:43:b6:27:e6:43:8b:74:9e:4a:d9:c8:0a: 34:0d:09:4b:f8:1f:7c:96:8f:bf:60:e1:02:55:8e: 21:c9:21:4d:9a:2c:be:13:c8:79:0b:58:87:82:ab: 96:de:68:93:01:00:21:3e:c1:7a:ce:e8:c9:b9:df: e2:50:dc:e7:f5:9f:d4:aa:9f:86:28:46:1c:d3:58: e2:79:d9:04:da:07:2d:66:38:19:a1:35:b0:0b:6e: f3:19:94:56:8f:5c:d2:a6:39:90:69:4f:14:1e:ff: f8:63:97:07:42:d4:60:e7:b3:b2:bd:6e:8f:0c:c2: 37:b9:34:83:50:aa:c1:67:ca:98:31:61:8c:88:6e: 6e:ca:1f:f5:2f:f9:39:28:9f:dc:34:dd:ec:ff:64: 93:56:a4:7f:c6:82:b7:3e:e7:99:d7:8e:ae:76:d5: c1:02:c8:3b:14:fd:28:a2:45:77:04:01:0c:0a:0b: 30:3e:5c:28:fc:5a:9f:f9:db:4d:fe:12:d8:df:e1: b3:da:a2:14:20:92:cf:cd:42:e6:08:45:e9:02:d5: 62:c8:40:82:83:95:98:ff:40:53:35:a0:7e:90:39: 65:62:07:be:c1:2a:d3:b8:db:8c:39:26:84:d1:19: 3b:c5:7d:de:7d:02:68:7e:26:1f:cb:6f:23:c4:9b: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CB:0E:C6:79:BF:17:BE:21:43:66:01:AF:C4:A3:5E:6D:B1:48:79 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6a:22:1f:bf:bb:4d:38:99:9a:60:c1:6e:27:43:71:2c:e2: 01:0b:97:71:19:73:7f:f4:9c:1b:c7:14:03:0f:87:4e:ab:26: 7c:2c:22:13:58:72:44:3d:e4:e0:b7:60:b9:f8:b5:51:71:25: 8b:f4:59:06:1e:42:53:24:7e:72:4a:f6:d0:ae:49:1f:87:66: 05:d3:de:46:ce:58:f0:72:bb:55:83:dd:26:b4:7e:06:53:9c: 40:f8:51:5b:29:87:1f:55:27:cc:47:fb:21:22:41:c4:81:2e: ac:0d:ec:ae:ac:a2:e4:74:a0:9c:28:a7:f7:79:7a:94:b0:6b: 19:7a:e7:74:a2:d3:22:96:1d:09:09:b0:df:dc:af:1d:bd:4f: 49:4e:03:61:76:73:98:8e:83:33:00:b8:29:e3:fd:d6:7b:6f: 91:76:66:c1:13:a6:d5:4d:ac:d2:31:65:cd:5f:db:2b:88:ba: 9b:4b:12:6a:e5:4f:f0:64:09:d7:1c:d7:de:64:f4:c0:7e:18: 84:02:90:e3:a7:a9:96:f5:4a:8a:aa:8b:49:22:85:55:8d:1b: 55:2a:28:25:c7:1e:42:d7:ae:f3:7a:82:3c:8b:a1:16:26:9f: fd:50:50:43:6b:35:53:91:b9:a3:ce:37:d3:f4:43:b9:0d:0c: a5:0e:31:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDaOrEJIQah8Qp1fAOSA9ZIVDwaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNTExMDMxNTI3MTBaFw0yNTExMDYyMzM5MTBaMDMxMTAvBgNV BAMTKDA0Q0IwRUM2NzlCRjE3QkUyMTQzNjYwMUFGQzRBMzVFNkRCMTQ4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCL0O2J+ZDi3SeStnICjQNCUv4 H3yWj79g4QJVjiHJIU2aLL4TyHkLWIeCq5beaJMBACE+wXrO6Mm53+JQ3Of1n9Sq n4YoRhzTWOJ52QTaBy1mOBmhNbALbvMZlFaPXNKmOZBpTxQe//hjlwdC1GDns7K9 bo8Mwje5NINQqsFnypgxYYyIbm7KH/Uv+Tkon9w03ez/ZJNWpH/Ggrc+55nXjq52 1cECyDsU/SiiRXcEAQwKCzA+XCj8Wp/5203+Etjf4bPaohQgks/NQuYIRekC1WLI QIKDlZj/QFM1oH6QOWViB77BKtO424w5JoTRGTvFfd59Amh+Jh/LbyPEm+BtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMsOxnm/F74hQ2YBr8SjXm2xSHkwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxqIh+/u004mZpgwW4nQ3Es4gELl3EZc3/0 nBvHFAMPh06rJnwsIhNYckQ95OC3YLn4tVFxJYv0WQYeQlMkfnJK9tCuSR+HZgXT 3kbOWPByu1WD3Sa0fgZTnED4UVsphx9VJ8xH+yEiQcSBLqwN7K6souR0oJwop/d5 epSwaxl653Si0yKWHQkJsN/crx29T0lOA2F2c5iOgzMAuCnj/dZ7b5F2ZsETptVN rNIxZc1f2yuIuptLEmrlT/BkCdcc195k9MB+GIQCkOOnqZb1Soqqi0kihVWNG1Uq KCXHHkLXrvN6gjyLoRYmn/1QUENrNVORuaPON9P0Q7kNDKUOMWU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:41 2025 by rpki-client