$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: nDLpIRVOK5/0L41RqS5vNkr4VhrnJquJNGuEoQNVTac= Subject key identifier: 75:D5:53:7C:B3:89:42:76:EA:3E:D7:A8:9F:80:09:51:FE:EB:FA:75 Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 4006CD6E203C39312F1295E2EAE1E83B41D1B9AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 04DF Signing time: Sun 15 Jun 2025 10:31:11 +0000 Manifest this update: Sun 15 Jun 2025 10:26:11 +0000 Manifest next update: Wed 18 Jun 2025 16:18:11 +0000 Files and hashes: 1: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=) 2: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: 3v81iMm0wd/3NjVR856pSZagvAKdFBsOPHjKqk64dwQ=) 3: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=) 4: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: hKuamBAx77CwO86y1A7xDVYWjcy9qi6pO1mapMzXVQk=) 5: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=) 6: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=) 7: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:06:cd:6e:20:3c:39:31:2f:12:95:e2:ea:e1:e8:3b:41:d1:b9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Jun 15 10:26:11 2025 GMT Not After : Jun 18 16:18:11 2025 GMT Subject: CN=75D5537CB3894276EA3ED7A89F800951FEEBFA75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:7c:9c:a8:0e:77:6f:64:3b:1e:a6:be:76: 03:78:63:35:5c:48:95:07:91:b7:e2:24:76:d1:8b: 5f:a8:71:4e:1a:6c:d8:8d:3c:d2:78:8d:f0:5b:ed: 35:b9:e9:91:e7:45:e8:b4:45:57:4f:61:c6:d3:15: cf:be:3c:31:5e:50:dd:66:62:49:55:ae:e6:65:04: 73:0f:6c:ff:50:c5:87:64:cd:54:32:9e:37:34:b3: 55:d5:bb:1f:c8:4d:f8:d5:93:db:20:ca:c2:87:75: 90:46:ec:1e:0a:0c:f6:8b:e8:38:e6:cd:e6:00:99: 33:b3:10:e9:f5:e6:13:47:64:ed:66:3f:36:06:dc: be:e2:ee:b7:75:45:33:1c:fb:a0:e2:f4:8d:c2:ef: 00:11:45:a5:c8:23:6b:eb:7e:1e:ce:35:99:8b:c6: c0:da:5f:ad:c4:0c:0d:ce:d1:bf:eb:3e:0a:98:22: 5f:a1:e1:a3:4d:bd:eb:76:00:65:7b:ab:4c:1f:15: 3c:7c:f9:9e:64:e1:3b:ac:30:5b:0f:d9:d0:13:28: f9:50:43:81:15:73:19:22:01:83:b1:ca:9a:c7:06: 4c:29:d6:b0:d2:43:ed:bf:ed:18:81:e7:54:1b:e6: 7c:f0:2e:04:5b:3b:be:c2:b5:56:97:4a:e0:00:e3: bb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D5:53:7C:B3:89:42:76:EA:3E:D7:A8:9F:80:09:51:FE:EB:FA:75 X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:12:2b:a1:05:ab:b4:30:00:98:ec:78:1c:02:d0:a5:a7:25: ab:92:a7:16:f0:79:62:90:4e:0e:dd:16:44:7f:5e:c7:d5:a3: 66:b1:d7:92:d3:22:b7:56:f5:f8:db:75:0b:dd:d7:74:11:54: 57:64:5d:73:9b:1a:71:16:d1:fe:80:69:80:88:5e:e6:71:71: 3b:73:29:bb:fc:c5:5f:a4:f9:e3:bd:90:c1:a2:89:6c:a9:76: 1e:56:c5:1c:be:c8:ba:a1:d8:41:87:fd:d7:0f:7f:35:67:c9: 2d:57:09:19:76:05:31:95:9d:18:98:c8:7c:4f:98:f7:32:a8: 17:7d:fa:d4:48:82:b3:75:7d:af:75:cc:07:b4:fd:17:10:0e: 7c:27:94:79:c4:a5:85:aa:b0:4f:e4:cf:58:c3:e3:63:f8:05: 1e:07:50:d4:06:df:8c:93:81:67:de:73:20:f1:f4:dd:9b:9c: 7e:4e:41:39:73:eb:07:a8:4d:a3:4d:e1:78:d0:38:e1:7f:58: e7:e9:69:a5:18:6c:07:f6:74:5c:27:be:bd:e1:2a:6a:36:94: 4b:a2:92:7a:a6:7a:0e:a2:e3:93:17:9f:ef:24:ce:b5:2a:e1: 97:64:a4:a7:fa:60:8f:e0:cd:16:c2:29:1f:30:a9:58:33:a1: 8e:4a:b8:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAbNbiA8OTEvEpXi6uHoO0HRua4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNTA2MTUxMDI2MTFaFw0yNTA2MTgxNjE4MTFaMDMxMTAvBgNV BAMTKDc1RDU1MzdDQjM4OTQyNzZFQTNFRDdBODlGODAwOTUxRkVFQkZBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlnycqA53b2Q7Hqa+dgN4YzVc SJUHkbfiJHbRi1+ocU4abNiNPNJ4jfBb7TW56ZHnRei0RVdPYcbTFc++PDFeUN1m YklVruZlBHMPbP9QxYdkzVQynjc0s1XVux/ITfjVk9sgysKHdZBG7B4KDPaL6Djm zeYAmTOzEOn15hNHZO1mPzYG3L7i7rd1RTMc+6Di9I3C7wARRaXII2vrfh7ONZmL xsDaX63EDA3O0b/rPgqYIl+h4aNNvet2AGV7q0wfFTx8+Z5k4TusMFsP2dATKPlQ Q4EVcxkiAYOxyprHBkwp1rDSQ+2/7RiB51Qb5nzwLgRbO77CtVaXSuAA47ubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUddVTfLOJQnbqPteon4AJUf7r+nUwHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4SK6EFq7QwAJjseBwC0KWnJauSpxbweWKQ Tg7dFkR/XsfVo2ax15LTIrdW9fjbdQvd13QRVFdkXXObGnEW0f6AaYCIXuZxcTtz Kbv8xV+k+eO9kMGiiWypdh5WxRy+yLqh2EGH/dcPfzVnyS1XCRl2BTGVnRiYyHxP mPcyqBd9+tRIgrN1fa91zAe0/RcQDnwnlHnEpYWqsE/kz1jD42P4BR4HUNQG34yT gWfecyDx9N2bnH5OQTlz6weoTaNN4XjQOOF/WOfpaaUYbAf2dFwnvr3hKmo2lEui knqmeg6i45MXn+8kzrUq4ZdkpKf6YI/gzRbCKR8wqVgzoY5KuE4= -----END CERTIFICATE-----Generated at Tue Jun 17 12:19:22 2025 by rpki-client