$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json) Hash identifier: +Z3Fq/79m/3Zmexkne8os+Z1hoF4OaeixtMyBhIUB9s= Subject key identifier: EC:03:39:78:B1:75:A6:DF:5E:CD:FB:B1:89:AF:B5:2A:0F:C6:2F:8E Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Certificate serial: 704BD958E77D3E8E0410970E1AEB3D9F6EA4EEAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft Manifest number: 0125 Signing time: Wed 06 Aug 2025 21:11:05 +0000 Manifest this update: Wed 06 Aug 2025 21:06:05 +0000 Manifest next update: Sun 10 Aug 2025 03:44:05 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: yyvOSuJ6EquLIxsFIaOuF4FfX3PA8e054pdmMj30y8s=) 2: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: wNTgrV6s7tRqyxi/r75zt0FjWk2vwQQ9FaC13wHjV6Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4b:d9:58:e7:7d:3e:8e:04:10:97:0e:1a:eb:3d:9f:6e:a4:ee:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Validity Not Before: Aug 6 21:06:05 2025 GMT Not After : Aug 10 03:44:05 2025 GMT Subject: CN=EC033978B175A6DF5ECDFBB189AFB52A0FC62F8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:66:65:81:01:94:ff:a9:d4:9c:06:00:8f: 6c:37:07:eb:59:8a:83:7e:3a:12:6d:ef:d1:48:1b: 48:ed:e9:18:17:f8:7d:b0:fa:5f:27:d5:12:0e:25: 71:18:f3:72:5e:d7:9c:f3:df:89:99:1f:05:53:0f: a2:fe:ae:d2:4e:4a:cd:2d:3d:79:03:bd:f8:66:85: ca:2d:3c:d4:f2:ca:5b:e3:68:b8:d7:69:cd:3e:ee: de:96:ad:03:bd:eb:ac:7f:9e:85:04:6b:bc:c6:ab: 73:90:28:bc:58:fd:e0:12:fe:50:a5:7e:20:b8:1b: 7d:d4:44:10:ff:00:4d:6f:3d:03:e3:a9:22:af:a0: 99:1b:8b:e7:6c:43:da:90:05:f2:a0:6d:80:96:6f: bd:39:68:6c:98:a7:d5:3c:34:3c:97:4b:51:99:be: 41:1a:50:e8:c1:5a:1d:04:f7:44:50:54:e3:57:1e: 8b:50:46:9a:24:1b:bd:e6:0d:3c:4f:a7:5d:32:87: 9e:e9:7d:72:34:d9:14:74:2e:92:5a:7b:23:10:fc: 3f:bc:1c:2b:3b:76:b4:13:1f:ac:59:c1:9a:db:bd: 86:fd:c8:b1:a9:a3:d5:14:8a:7e:6c:df:94:1a:02: 93:97:5e:1c:d1:f0:2f:ee:f0:78:d0:93:a6:db:71: fb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:03:39:78:B1:75:A6:DF:5E:CD:FB:B1:89:AF:B5:2A:0F:C6:2F:8E X509v3 Authority Key Identifier: keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c1:0a:b0:e9:f9:98:e8:ae:4e:e8:3a:bb:45:a2:63:75:2c: bd:a7:fd:2a:6d:59:c5:d2:bf:3e:0e:3c:49:16:7f:ef:52:64: 8a:7e:01:87:d5:e9:7b:06:38:35:fe:58:a9:a4:4b:51:fe:f9: 4d:03:57:9e:1a:62:07:13:c9:b7:0d:8e:84:dc:b1:a1:48:52: 9e:3c:1a:de:4e:e1:02:1b:83:1b:0e:78:05:c4:08:51:20:7d: 0f:28:53:3e:7f:51:7b:75:10:86:04:f0:58:15:a8:bf:87:46: 27:15:c2:31:de:ef:3d:ba:9e:0e:2d:2d:48:55:5f:0a:33:d8: d8:cc:8b:84:a4:6c:e0:59:1c:9c:13:3c:c1:2e:81:8c:ef:bf: 49:26:f3:01:bf:d1:90:df:49:70:e5:f0:3a:d5:e6:49:06:cb: a1:9f:af:2a:ba:48:82:cf:24:d4:76:79:b2:0b:79:f1:21:29: a9:2b:09:3e:86:9d:df:41:d0:6d:1c:47:af:d2:7a:dc:a4:28: b5:ae:04:3a:0d:84:11:34:1a:37:0c:ef:e0:cf:60:3c:82:63: fa:80:dd:ef:5e:0d:a1:80:10:a5:82:9f:f0:d7:09:ec:3e:b0: 44:83:6b:2a:99:01:a9:96:d1:81:1e:c3:6d:d1:6c:64:8f:68: 35:3a:34:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcEvZWOd9Po4EEJcOGus9n26k7q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJC NjI2Q0E0RDAeFw0yNTA4MDYyMTA2MDVaFw0yNTA4MTAwMzQ0MDVaMDMxMTAvBgNV BAMTKEVDMDMzOTc4QjE3NUE2REY1RUNERkJCMTg5QUZCNTJBMEZDNjJGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQWZlgQGU/6nUnAYAj2w3B+tZ ioN+OhJt79FIG0jt6RgX+H2w+l8n1RIOJXEY83Je15zz34mZHwVTD6L+rtJOSs0t PXkDvfhmhcotPNTyylvjaLjXac0+7t6WrQO966x/noUEa7zGq3OQKLxY/eAS/lCl fiC4G33URBD/AE1vPQPjqSKvoJkbi+dsQ9qQBfKgbYCWb705aGyYp9U8NDyXS1GZ vkEaUOjBWh0E90RQVONXHotQRpokG73mDTxPp10yh57pfXI02RR0LpJaeyMQ/D+8 HCs7drQTH6xZwZrbvYb9yLGpo9UUin5s35QaApOXXhzR8C/u8HjQk6bbcftJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7AM5eLF1pt9ezfuxia+1Kg/GL44wHwYDVR0j BBgwFoAUrOLauqJJ1WrZaK19YKCWQrYmyk0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC9BQ0UyREFCQUEy NDlENTZBRDk2OEFEN0Q2MEEwOTY0MkI2MjZDQTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJCNjI2 Q0E0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2 NDJCNjI2Q0E0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPBCrDp+Zjork7oOrtFomN1LL2n/SptWcXS vz4OPEkWf+9SZIp+AYfV6XsGODX+WKmkS1H++U0DV54aYgcTybcNjoTcsaFIUp48 Gt5O4QIbgxsOeAXECFEgfQ8oUz5/UXt1EIYE8FgVqL+HRicVwjHe7z26ng4tLUhV Xwoz2NjMi4SkbOBZHJwTPMEugYzvv0km8wG/0ZDfSXDl8DrV5kkGy6Gfryq6SILP JNR2ebILefEhKakrCT6Gnd9B0G0cR6/SetykKLWuBDoNhBE0GjcM7+DPYDyCY/qA 3e9eDaGAEKWCn/DXCew+sESDayqZAamW0YEew23RbGSPaDU6NO0= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:06 2025 by rpki-client