$ rpki-client -vvf repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft File: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft (raw, json) Hash identifier: FA9kYxWBr6SmKj6+3MgjCjww0HfrrICdec+tputDE8I= Subject key identifier: 94:BC:DC:F2:2B:F8:71:62:50:CB:A3:6E:0B:46:93:49:BE:7B:37:7F Authority key identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 Certificate issuer: /CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Certificate serial: 70FE6EEC6079CA68C5FC5E15A26C399968A44D52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft Manifest number: 6D Signing time: Sun 15 Jun 2025 23:20:43 +0000 Manifest this update: Sun 15 Jun 2025 23:15:43 +0000 Manifest next update: Thu 19 Jun 2025 04:04:43 +0000 Files and hashes: 1: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl (hash: NN0r6j0lkZd9rwwLPphi+O4t8aHuYl2lHXSs/gQTyJE=) 2: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: TUftzXS+oj2AbovNghTdsk7dvgxd67++ktxO9Txg2ME=) 3: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: HECbSGD9YK53jdSJKp91llPoIm35SiyeV/gqkOqJG/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 04:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fe:6e:ec:60:79:ca:68:c5:fc:5e:15:a2:6c:39:99:68:a4:4d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Validity Not Before: Jun 15 23:15:43 2025 GMT Not After : Jun 19 04:04:43 2025 GMT Subject: CN=94BCDCF22BF8716250CBA36E0B469349BE7B377F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:e8:93:40:0d:a7:4b:9e:5d:73:28:73:79: 27:6e:e3:3e:c7:ca:69:42:b5:54:f3:dc:72:2c:0b: 35:04:cb:bd:8a:f9:17:b3:55:49:ff:0e:43:16:ad: e5:0b:20:78:77:81:dc:db:2c:4d:fa:7f:3e:61:9f: 43:c6:75:19:f6:b5:fc:06:a1:97:ed:2f:58:5f:07: c0:c2:90:fa:5a:c1:d5:01:aa:03:ce:2d:fb:1c:da: 73:06:41:05:ea:25:b7:2b:cb:91:c8:f8:46:4d:97: d3:77:ee:70:8b:dd:25:89:83:d3:a0:5c:f9:f4:37: ba:f3:1a:42:db:af:1d:a5:4c:9b:4b:b5:cb:68:26: 3b:bb:f5:9c:8e:24:42:b5:dc:db:c3:68:49:12:f7: 5f:3e:10:e1:5a:83:40:97:c4:1d:df:58:f2:6c:f8: 32:68:54:c1:84:e4:d6:e0:1f:b7:11:4f:50:e0:7b: ac:f0:7c:c4:63:f2:76:ee:56:9d:a1:9a:64:16:74: 7b:68:64:04:91:84:44:bd:e6:29:8b:2e:dd:61:dd: 17:ee:bd:e1:b4:cb:00:8b:bc:7a:ee:dc:56:fb:39: 39:15:57:14:9a:97:99:0d:4b:b9:58:97:5d:d6:4c: 45:a6:8b:ff:f9:fb:89:f0:75:99:0b:ac:1d:cd:e7: 1b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BC:DC:F2:2B:F8:71:62:50:CB:A3:6E:0B:46:93:49:BE:7B:37:7F X509v3 Authority Key Identifier: keyid:4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6b:5c:7d:a3:5d:79:e3:de:5f:90:d2:2d:ff:71:c0:66:a4: 5e:89:5a:2d:43:29:81:1c:b5:15:38:a6:84:f9:c9:e1:54:5b: 84:bb:3a:0c:87:33:31:70:6d:31:38:ca:f0:e4:4e:5a:4e:73: aa:de:b3:25:4e:10:d0:65:5e:d6:b8:5c:14:10:a4:93:c0:04: eb:a0:71:0c:c9:73:54:78:40:01:3f:1c:a0:bd:1e:cb:f4:2a: f1:20:64:7a:12:86:53:34:4a:f7:a2:5b:53:88:21:86:34:20: aa:7f:04:3e:25:a0:a3:2d:96:b8:ac:4d:76:b6:0e:69:33:02: 72:93:a5:30:8c:d7:34:84:53:02:ae:8f:d9:21:d1:eb:48:b2: 31:2a:2f:64:40:c0:f6:ed:ce:8b:67:d2:20:e5:f7:e4:c1:7b: 56:fa:2f:63:fa:58:1a:63:e1:d3:29:62:2c:85:ed:4f:a6:99: ec:52:f0:a4:d6:d5:f0:19:4e:9f:3b:67:cd:50:93:cf:59:6b: f5:9a:63:b1:a2:3a:99:c6:4a:23:a8:07:6b:3a:23:70:55:75: 93:25:01:3e:0b:30:4d:a1:2a:17:7d:7b:7d:10:76:81:c4:48: 1c:e9:71:05:0d:11:b1:a6:c1:f8:bb:56:f6:1e:aa:bf:29:0a: f2:bd:06:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcP5u7GB5ymjF/F4Vomw5mWikTVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZC MzM0QTY1OTAeFw0yNTA2MTUyMzE1NDNaFw0yNTA2MTkwNDA0NDNaMDMxMTAvBgNV BAMTKDk0QkNEQ0YyMkJGODcxNjI1MENCQTM2RTBCNDY5MzQ5QkU3QjM3N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/OiTQA2nS55dcyhzeSdu4z7H ymlCtVTz3HIsCzUEy72K+RezVUn/DkMWreULIHh3gdzbLE36fz5hn0PGdRn2tfwG oZftL1hfB8DCkPpawdUBqgPOLfsc2nMGQQXqJbcry5HI+EZNl9N37nCL3SWJg9Og XPn0N7rzGkLbrx2lTJtLtctoJju79ZyOJEK13NvDaEkS918+EOFag0CXxB3fWPJs +DJoVMGE5NbgH7cRT1Dge6zwfMRj8nbuVp2hmmQWdHtoZASRhES95imLLt1h3Rfu veG0ywCLvHru3Fb7OTkVVxSal5kNS7lYl13WTEWmi//5+4nwdZkLrB3N5xsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlLzc8iv4cWJQy6NuC0aTSb57N38wHwYDVR0j BBgwFoAUSs4K3btb87SbHNpaIxDPBrM0plkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjY5ZDY2Ny0xN2E0LTRmZGQtOWM1Ny0xMTIyMDMzZWY5OTkvMC80QUNFMEFEREJC NUJGM0I0OUIxQ0RBNUEyMzEwQ0YwNkIzMzRBNjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZCMzM0 QTY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENG MDZCMzM0QTY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxrXH2jXXnj3l+Q0i3/ccBmpF6JWi1DKYEc tRU4poT5yeFUW4S7OgyHMzFwbTE4yvDkTlpOc6resyVOENBlXta4XBQQpJPABOug cQzJc1R4QAE/HKC9Hsv0KvEgZHoShlM0SveiW1OIIYY0IKp/BD4loKMtlrisTXa2 DmkzAnKTpTCM1zSEUwKuj9kh0etIsjEqL2RAwPbtzotn0iDl9+TBe1b6L2P6WBpj 4dMpYiyF7U+mmexS8KTW1fAZTp87Z81Qk89Za/WaY7GiOpnGSiOoB2s6I3BVdZMl AT4LME2hKhd9e30QdoHESBzpcQUNEbGmwfi7VvYeqr8pCvK9Buo= -----END CERTIFICATE-----Generated at Wed Jun 18 05:19:20 2025 by rpki-client