$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: FGDiyMXdgqSBgvc2BaMuDpZD+4if/bnvEG9m3o3p9b8= Subject key identifier: 7B:E4:3F:75:3C:12:65:00:27:CD:A2:B7:5E:94:21:F0:98:A4:E0:DA Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 594E7AFB89730387C26D02A0ACD24575A170EE4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 04C9 Signing time: Mon 28 Apr 2025 06:00:42 +0000 Manifest this update: Mon 28 Apr 2025 05:55:42 +0000 Manifest next update: Thu 01 May 2025 12:42:42 +0000 Files and hashes: 1: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: GyQ3rTA4havMS5lidJTX5ZhWoHPWWQvhSKW+0x1lFv4=) 2: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: ii+HEOYSI26ONdCQzTSyl9DTOtWXGw12f4RUOO1wwl4=) 3: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: mIQL4Q5wnaduq+Smgc4E/2achiI+t5Z1BEbqpLX1tbs=) 4: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: 88060muyxj8SmMJ3cFJ+8zPfnGJAJ/ZqEWF1wca6xL8=) 5: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: 3EM09fz5U4vIetkukDcNawwvtS4WV5nD8HmoRxw+WmQ=) 6: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: Mb0v9h1dQ2fzKimG/dnv0t/MA1EgX4nopy7o63/fKic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 12:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:4e:7a:fb:89:73:03:87:c2:6d:02:a0:ac:d2:45:75:a1:70:ee:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Apr 28 05:55:42 2025 GMT Not After : May 1 12:42:42 2025 GMT Subject: CN=7BE43F753C12650027CDA2B75E9421F098A4E0DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:6c:c7:df:2e:dd:2d:f3:13:a3:64:cc:ef: 64:3c:70:f0:5f:de:22:16:d7:9e:23:86:b1:e5:72: 95:dd:be:f6:a0:ab:74:55:ac:c4:33:b3:ad:43:5c: 70:8f:ee:d6:b8:75:2f:0a:a3:38:62:2c:46:76:3e: c4:f3:d5:c3:22:5d:71:c2:4f:e6:b2:d7:4d:0d:30: 6d:fe:e0:b6:cc:9d:34:11:da:4e:1c:bd:82:5d:0d: 85:70:d3:35:85:11:df:4f:98:ea:26:c2:d7:cc:34: 36:7e:26:0d:75:a8:ca:d0:78:71:c0:d1:18:54:48: b6:8b:8a:bb:6b:ea:e7:e4:3c:82:a5:4d:06:78:08: 69:c3:cb:84:3d:ed:ef:68:a5:08:dd:92:4e:e7:b2: 46:ff:c7:fa:35:cc:87:cb:09:35:a2:7d:d5:8e:45: 08:47:85:77:eb:d5:0e:54:da:78:0c:bd:40:14:16: 4c:44:8f:d7:0d:21:55:d2:3e:68:47:51:f4:89:a7: 9b:34:18:05:76:b9:48:e2:bf:d0:87:5a:89:87:14: f2:7b:90:d2:5e:68:42:8a:d2:0b:9b:63:cd:2c:c2: 4f:1d:02:af:b2:3b:92:b9:44:f5:3e:81:72:be:91: 33:7c:d1:f6:6e:3d:ba:60:0c:c4:41:3e:ef:2a:42: b8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E4:3F:75:3C:12:65:00:27:CD:A2:B7:5E:94:21:F0:98:A4:E0:DA X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:cc:c4:29:0c:82:7f:76:01:f4:58:a0:06:09:5d:87:30:93: 7b:4a:2b:51:f2:70:31:75:a5:ba:6a:df:39:e6:14:3e:58:cf: a8:df:cd:33:50:9e:67:2c:8e:bc:cb:3f:d4:fb:8c:30:94:e1: 76:10:08:c8:3d:9f:7f:ee:ab:4e:3c:e8:e7:e4:3f:3c:14:9f: 48:84:45:78:a6:97:99:79:fd:84:20:e3:83:2d:4d:3f:86:66: 32:79:55:4f:be:e1:0a:d2:ed:c7:cc:68:a1:e1:a2:ad:ba:0e: 1d:95:7b:65:9c:d1:3a:b8:24:33:c1:63:22:e3:3e:f2:25:ee: fe:5c:40:0c:77:0a:54:e0:41:ac:e4:fa:36:a2:c1:f9:c3:ec: 99:ec:95:ee:1e:43:35:e2:7f:79:f4:7b:2e:58:3e:2a:34:ee: 30:18:62:30:18:78:36:75:92:d5:91:a7:8d:45:70:10:09:29: ec:ff:7c:94:2c:2c:1f:ce:20:09:85:70:4d:6a:94:86:54:22: 86:38:8b:23:16:ac:6e:dd:50:bf:d3:27:d7:f2:4a:88:ed:f0: df:e5:76:bf:18:7f:37:5b:51:c4:c4:80:2f:9b:0e:a5:23:ec: cd:c4:ea:86:60:a2:7b:f5:39:93:de:a7:74:65:64:c2:c4:ef: ec:90:49:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWU56+4lzA4fCbQKgrNJFdaFw7k4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNTA0MjgwNTU1NDJaFw0yNTA1MDExMjQyNDJaMDMxMTAvBgNV BAMTKDdCRTQzRjc1M0MxMjY1MDAyN0NEQTJCNzVFOTQyMUYwOThBNEUwREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvGzH3y7dLfMTo2TM72Q8cPBf 3iIW154jhrHlcpXdvvagq3RVrMQzs61DXHCP7ta4dS8KozhiLEZ2PsTz1cMiXXHC T+ay100NMG3+4LbMnTQR2k4cvYJdDYVw0zWFEd9PmOomwtfMNDZ+Jg11qMrQeHHA 0RhUSLaLirtr6ufkPIKlTQZ4CGnDy4Q97e9opQjdkk7nskb/x/o1zIfLCTWifdWO RQhHhXfr1Q5U2ngMvUAUFkxEj9cNIVXSPmhHUfSJp5s0GAV2uUjiv9CHWomHFPJ7 kNJeaEKK0gubY80swk8dAq+yO5K5RPU+gXK+kTN80fZuPbpgDMRBPu8qQrhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe+Q/dTwSZQAnzaK3XpQh8Jik4NowHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPMxCkMgn92AfRYoAYJXYcwk3tKK1HycDF1 pbpq3znmFD5Yz6jfzTNQnmcsjrzLP9T7jDCU4XYQCMg9n3/uq0486OfkPzwUn0iE RXiml5l5/YQg44MtTT+GZjJ5VU++4QrS7cfMaKHhoq26Dh2Ve2Wc0Tq4JDPBYyLj PvIl7v5cQAx3ClTgQazk+jaiwfnD7Jnsle4eQzXif3n0ey5YPio07jAYYjAYeDZ1 ktWRp41FcBAJKez/fJQsLB/OIAmFcE1qlIZUIoY4iyMWrG7dUL/TJ9fySojt8N/l dr8YfzdbUcTEgC+bDqUj7M3E6oZgonv1OZPep3RlZMLE7+yQSVk= -----END CERTIFICATE-----Generated at Wed Apr 30 00:07:26 2025 by rpki-client