$ rpki-client -vvf repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft File: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft (raw, json) Hash identifier: hMdgbtHMtHj4/3OFCz6ZgaWgp8OVJuoVUDHRFRsLGvg= Subject key identifier: A5:16:E7:64:D5:64:51:09:7B:E4:14:52:0C:8E:A3:28:51:C4:31:7C Authority key identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 Certificate issuer: /CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Certificate serial: 30BE7BB4F7F6B62B9DC09AA324F179E6F9A6C0FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft Manifest number: 58 Signing time: Mon 28 Apr 2025 03:50:42 +0000 Manifest this update: Mon 28 Apr 2025 03:45:42 +0000 Manifest next update: Thu 01 May 2025 12:18:42 +0000 Files and hashes: 1: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: TUftzXS+oj2AbovNghTdsk7dvgxd67++ktxO9Txg2ME=) 2: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl (hash: iVNE3jiwWBDBEF8iZONBtrDIVM/kJdiCxKgQio9cZNg=) 3: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: HECbSGD9YK53jdSJKp91llPoIm35SiyeV/gqkOqJG/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:be:7b:b4:f7:f6:b6:2b:9d:c0:9a:a3:24:f1:79:e6:f9:a6:c0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Validity Not Before: Apr 28 03:45:42 2025 GMT Not After : May 1 12:18:42 2025 GMT Subject: CN=A516E764D56451097BE414520C8EA32851C4317C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ce:4c:26:af:a2:6a:d5:07:55:46:87:a3:ef: 0a:20:7d:89:6b:9b:79:ff:19:62:f7:2e:85:90:f0: 2d:8b:96:00:42:1f:6b:7a:0e:bb:0f:9a:98:d9:9d: 56:f9:af:e9:f5:0e:47:69:c7:63:9d:03:4a:c2:75: ed:a1:82:5a:ed:43:9d:fc:52:55:2f:bb:b4:1a:ad: 8a:7b:59:af:45:fb:08:e9:4e:16:11:6e:4f:e9:7a: a2:d3:ca:2b:15:64:fb:9b:7c:b5:8f:0d:eb:b4:42: a7:de:18:cf:2e:32:36:2b:1a:f6:a7:18:93:6e:67: 78:b7:00:26:31:01:82:8a:81:92:6d:5b:d4:20:e7: 8c:04:60:7e:5e:b6:31:4e:61:96:31:c3:98:0d:0c: 8f:cd:19:68:52:a4:d8:fc:0e:94:55:74:37:fb:ba: 13:1b:e5:8e:09:50:5c:47:08:99:35:f7:ea:ba:c2: 4a:41:ff:2c:10:b0:53:11:27:f9:d2:5c:8a:7f:cc: b2:8d:e3:e0:4f:93:f6:ed:30:a1:fa:48:54:41:89: c7:d6:c9:2d:2a:d8:81:73:94:d2:cb:a8:44:cc:a3: 3c:c4:8e:b9:13:9d:2a:8a:32:f4:6b:4a:1a:25:7d: 89:74:0f:09:a5:03:e4:92:41:a9:98:53:8c:1b:e5: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:16:E7:64:D5:64:51:09:7B:E4:14:52:0C:8E:A3:28:51:C4:31:7C X509v3 Authority Key Identifier: keyid:4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b9:eb:41:4d:a3:90:77:c6:aa:60:3a:63:42:f9:84:c6:fa: b7:ad:69:17:0e:ab:24:35:67:e7:ef:6c:88:de:ec:8d:e3:9d: 9a:72:f2:28:98:10:fd:a5:15:4c:f3:43:40:e7:82:db:87:4f: 8d:3b:83:12:5c:34:02:f1:ef:42:39:b7:67:ad:db:d8:40:7e: 05:85:6d:4f:06:e1:02:8d:e7:03:92:3d:5b:37:a4:67:0a:3a: b0:4c:1b:2c:fe:87:ba:37:80:ca:aa:13:76:e8:b0:42:1c:1a: 51:43:92:74:10:66:6b:c2:3a:38:72:43:92:cf:9b:f5:91:30: bd:81:a5:4f:4b:44:8e:58:4e:f5:d6:88:dc:5c:2b:1c:ce:af: 0b:e1:34:ee:e4:77:2f:71:87:5d:ab:6b:e0:d9:5a:1a:89:58: 19:2e:17:e1:d5:cb:b3:e6:8e:ff:a4:c9:8e:aa:b7:c6:91:e3: 83:bd:37:0c:1e:ee:1b:3f:44:d5:ad:34:7b:a6:61:24:d2:69: f0:b2:9f:99:b5:6b:f3:7e:a4:54:d2:bb:0c:a8:10:f2:d2:b9: 05:9d:33:78:31:e0:23:89:59:a1:c4:c6:fc:53:31:01:68:8f: 8c:56:d6:9c:2b:ed:56:99:b5:8e:d8:c6:c3:6f:ef:32:d2:b8: cc:9c:0a:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUML57tPf2tiudwJqjJPF55vmmwPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZC MzM0QTY1OTAeFw0yNTA0MjgwMzQ1NDJaFw0yNTA1MDExMjE4NDJaMDMxMTAvBgNV BAMTKEE1MTZFNzY0RDU2NDUxMDk3QkU0MTQ1MjBDOEVBMzI4NTFDNDMxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlzkwmr6Jq1QdVRoej7wogfYlr m3n/GWL3LoWQ8C2LlgBCH2t6DrsPmpjZnVb5r+n1Dkdpx2OdA0rCde2hglrtQ538 UlUvu7QarYp7Wa9F+wjpThYRbk/peqLTyisVZPubfLWPDeu0QqfeGM8uMjYrGvan GJNuZ3i3ACYxAYKKgZJtW9Qg54wEYH5etjFOYZYxw5gNDI/NGWhSpNj8DpRVdDf7 uhMb5Y4JUFxHCJk19+q6wkpB/ywQsFMRJ/nSXIp/zLKN4+BPk/btMKH6SFRBicfW yS0q2IFzlNLLqETMozzEjrkTnSqKMvRrSholfYl0DwmlA+SSQamYU4wb5e0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpRbnZNVkUQl75BRSDI6jKFHEMXwwHwYDVR0j BBgwFoAUSs4K3btb87SbHNpaIxDPBrM0plkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjY5ZDY2Ny0xN2E0LTRmZGQtOWM1Ny0xMTIyMDMzZWY5OTkvMC80QUNFMEFEREJC NUJGM0I0OUIxQ0RBNUEyMzEwQ0YwNkIzMzRBNjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZCMzM0 QTY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENG MDZCMzM0QTY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEG560FNo5B3xqpgOmNC+YTG+retaRcOqyQ1 Z+fvbIje7I3jnZpy8iiYEP2lFUzzQ0DngtuHT407gxJcNALx70I5t2et29hAfgWF bU8G4QKN5wOSPVs3pGcKOrBMGyz+h7o3gMqqE3bosEIcGlFDknQQZmvCOjhyQ5LP m/WRML2BpU9LRI5YTvXWiNxcKxzOrwvhNO7kdy9xh12ra+DZWhqJWBkuF+HVy7Pm jv+kyY6qt8aR44O9Nwwe7hs/RNWtNHumYSTSafCyn5m1a/N+pFTSuwyoEPLSuQWd M3gx4COJWaHExvxTMQFoj4xW1pwr7VaZtY7YxsNv7zLSuMycCnE= -----END CERTIFICATE-----Generated at Tue Apr 29 14:29:37 2025 by rpki-client