$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json) Hash identifier: clCsbSTNEVZrTkUYrFvPZW7/1zoZLXVRUObGGijmCY0= Subject key identifier: 78:C3:5E:F3:54:D5:0E:03:22:EF:90:5A:52:76:B4:34:F2:EE:1D:84 Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Certificate serial: 5435FCB75E8463BC5D726825D0B32E3B2BB3FB60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft Manifest number: 04E1 Signing time: Tue 17 Jun 2025 07:40:56 +0000 Manifest this update: Tue 17 Jun 2025 07:35:56 +0000 Manifest next update: Fri 20 Jun 2025 19:28:56 +0000 Files and hashes: 1: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: ejfVv9si1K2MpeXhh8zMJGLdHAeeV0dhSQaga8rtoCM=) 2: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: UUI0UvU6AUH37Q/H9zW8u0Apq7Y6pN001mJMdkH8taI=) 3: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: XTrAUzINtImcd3F+XaTVo5H750rmDxdeBt+LpGOrxS4=) 4: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: JE0sJw2Y30gQbCmAIhnjpinJa8eG7Fgewlr8Jax6ero=) 5: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: k6ajQqilVawXOjADIii+VuPiNo1yCuPASe5Q46icB6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 19:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:35:fc:b7:5e:84:63:bc:5d:72:68:25:d0:b3:2e:3b:2b:b3:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Validity Not Before: Jun 17 07:35:56 2025 GMT Not After : Jun 20 19:28:56 2025 GMT Subject: CN=78C35EF354D50E0322EF905A5276B434F2EE1D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:90:f4:24:57:aa:85:84:43:24:76:e5:af: af:69:80:ca:49:13:8f:01:a6:7c:ef:1c:8f:2e:0f: 78:1b:80:7e:e5:af:5f:6a:ad:5d:8b:d3:46:5d:ed: 93:53:38:8d:20:1c:0f:d3:06:c4:52:c5:83:2b:40: 24:35:a4:a5:df:71:c9:2c:47:83:fc:b9:bd:48:38: 73:fd:61:3a:d7:76:2f:47:f0:06:5a:8c:ce:a0:31: d1:1f:28:57:ec:4c:03:b2:ee:6f:c4:cc:bb:4f:78: c9:24:2e:05:18:58:35:52:86:68:f2:ea:18:2a:59: 29:13:ac:66:90:74:f2:ae:4a:3a:5a:cc:f2:4d:d6: 6a:c1:c3:ef:e9:5f:93:81:86:82:8c:e6:d7:32:a1: 4e:5c:d1:47:e6:56:1c:0a:39:43:72:4b:57:87:27: 13:22:cc:58:cf:14:78:4e:2b:7d:84:f9:88:67:cc: b2:bd:3d:a1:9d:ad:9c:54:48:6a:20:b3:62:b9:7c: 22:84:5d:41:a8:20:bc:07:97:ac:25:1e:20:29:ef: 65:15:ae:d5:dd:50:0c:32:89:c1:fd:43:34:b6:27: 60:08:ae:89:77:cd:5d:99:71:c1:9d:9b:b4:bc:8f: 84:44:11:f6:74:6e:88:16:a1:7b:ea:17:9a:aa:04: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C3:5E:F3:54:D5:0E:03:22:EF:90:5A:52:76:B4:34:F2:EE:1D:84 X509v3 Authority Key Identifier: keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:c3:89:28:a3:68:99:cf:6f:20:3f:f3:0b:9f:8a:66:14:02: c4:dd:af:c5:59:a0:0f:2b:70:34:13:e6:94:b9:b1:f3:56:51: f8:e1:99:ab:34:9f:08:dd:48:c2:b1:68:1a:d1:52:05:49:ad: c3:66:59:59:07:43:59:56:4b:25:fb:90:28:84:e0:0f:65:11: a2:01:e6:04:b3:3f:5f:e6:55:8b:e1:f6:eb:a7:d3:4c:f1:00: 58:c8:7f:8e:36:a8:e4:d7:6c:8e:64:af:ee:56:40:8a:33:d8: 43:a0:2f:01:d0:cc:37:95:49:7e:42:62:89:e4:be:a2:e3:cf: 68:e3:7b:a8:33:fc:88:e4:f9:64:84:bf:c2:92:ff:a9:f7:05: e8:a4:c8:3d:e0:2b:85:ae:01:81:76:95:29:92:c0:49:1e:eb: 9b:fc:8f:5d:cf:17:54:a2:e3:fc:22:fd:28:52:92:2d:9e:8e: 3d:a4:c5:a2:e3:a4:a1:94:46:cb:18:13:27:62:bf:60:54:51: 39:bb:27:a0:f9:d2:b6:0f:4c:8d:42:22:64:fb:ff:5b:e7:a1: 96:0d:fe:f3:94:df:81:33:6a:2d:2f:0e:d1:e4:89:85:6c:63: 17:59:dd:32:88:f8:cf:45:9f:29:6e:50:9b:53:80:e1:7c:de: 54:81:70:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDX8t16EY7xdcmgl0LMuOyuz+2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2 QUE5MDM1MzAeFw0yNTA2MTcwNzM1NTZaFw0yNTA2MjAxOTI4NTZaMDMxMTAvBgNV BAMTKDc4QzM1RUYzNTRENTBFMDMyMkVGOTA1QTUyNzZCNDM0RjJFRTFEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CZD0JFeqhYRDJHblr69pgMpJ E48BpnzvHI8uD3gbgH7lr19qrV2L00Zd7ZNTOI0gHA/TBsRSxYMrQCQ1pKXfccks R4P8ub1IOHP9YTrXdi9H8AZajM6gMdEfKFfsTAOy7m/EzLtPeMkkLgUYWDVShmjy 6hgqWSkTrGaQdPKuSjpazPJN1mrBw+/pX5OBhoKM5tcyoU5c0UfmVhwKOUNyS1eH JxMizFjPFHhOK32E+YhnzLK9PaGdrZxUSGogs2K5fCKEXUGoILwHl6wlHiAp72UV rtXdUAwyicH9QzS2J2AIrol3zV2ZccGdm7S8j4REEfZ0bogWoXvqF5qqBGtZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeMNe81TVDgMi75BaUna0NPLuHYQwHwYDVR0j BBgwFoAUrMPXmrG+9ivACVtvasPzRGqpA1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzU4YzgwZS1hMzI4LTRmOGMtYTAzZi05MWMzYzI2MjE0YTIvMC9BQ0MzRDc5QUIx QkVGNjJCQzAwOTVCNkY2QUMzRjM0NDZBQTkwMzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2QUE5 MDM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0Yz NDQ2QUE5MDM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANXDiSijaJnPbyA/8wufimYUAsTdr8VZoA8r cDQT5pS5sfNWUfjhmas0nwjdSMKxaBrRUgVJrcNmWVkHQ1lWSyX7kCiE4A9lEaIB 5gSzP1/mVYvh9uun00zxAFjIf442qOTXbI5kr+5WQIoz2EOgLwHQzDeVSX5CYonk vqLjz2jje6gz/Ijk+WSEv8KS/6n3BeikyD3gK4WuAYF2lSmSwEke65v8j13PF1Si 4/wi/ShSki2ejj2kxaLjpKGURssYEydiv2BUUTm7J6D50rYPTI1CImT7/1vnoZYN /vOU34Ezai0vDtHkiYVsYxdZ3TKI+M9FnyluUJtTgOF83lSBcBo= -----END CERTIFICATE-----Generated at Wed Jun 18 10:39:45 2025 by rpki-client