$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: u6hzWCiXKjuIQGanTbu/kw61ULwbllvqp7EoNtKZMeo= Subject key identifier: A6:8D:3B:F1:61:1F:09:4F:5C:78:F2:9E:B0:FC:3A:A3:D0:83:D3:9E Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 1752DCBAC36543845FE98145DB4D571511444834 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: 8B Signing time: Mon 16 Jun 2025 10:50:01 +0000 Manifest this update: Mon 16 Jun 2025 10:45:01 +0000 Manifest next update: Thu 19 Jun 2025 16:05:01 +0000 Files and hashes: 1: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: 1GRJdtvapOoyY5ue0rCky4WRnDM4N+vLRSkf+w0VJd4=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: Ga+yghCCzynYQRLXxC8Ud9CUE2ETMSKZ2vuWiIruJEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:52:dc:ba:c3:65:43:84:5f:e9:81:45:db:4d:57:15:11:44:48:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Jun 16 10:45:01 2025 GMT Not After : Jun 19 16:05:01 2025 GMT Subject: CN=A68D3BF1611F094F5C78F29EB0FC3AA3D083D39E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:c2:88:2b:5a:29:68:63:94:01:dc:85:d9: f5:ab:21:21:7c:5f:3e:ea:5f:92:86:07:56:7a:a8: 62:26:36:ce:5f:85:31:9f:a9:df:57:f6:7b:ec:71: 9e:76:41:3a:21:79:21:92:8a:ea:85:7f:44:68:df: 67:c3:07:15:59:39:ce:23:53:2c:2c:61:6b:ea:76: 06:07:fd:f0:37:98:f9:66:69:c7:69:c9:3d:6f:96: ab:bd:06:36:86:6a:28:b5:f1:8f:d8:1a:a2:6c:77: b5:d0:ab:68:83:bb:44:e6:b5:3d:41:a8:4f:42:8d: 06:31:36:7f:a8:83:ef:fd:3b:f0:45:f8:bf:02:70: f7:01:f2:40:f2:0a:03:ef:fa:fb:ba:d7:ee:35:01: df:fa:4b:ce:87:24:df:78:00:21:f1:73:b2:16:21: 9d:07:98:28:32:96:75:3e:f3:4f:3c:e8:b8:9c:29: f9:02:89:31:0c:fb:cf:b4:43:37:84:29:57:8c:c3: 85:a3:a9:6c:f3:67:2e:be:b2:24:82:19:03:f0:ec: 79:87:6b:86:99:e5:64:a3:57:f2:12:20:aa:ea:ed: 7f:0d:d6:05:3d:46:47:0c:d9:65:f6:39:87:30:b3: ac:cc:b8:d3:7e:f7:c6:1b:15:e7:0d:4e:c2:2e:92: 9e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8D:3B:F1:61:1F:09:4F:5C:78:F2:9E:B0:FC:3A:A3:D0:83:D3:9E X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:a0:18:58:07:8a:0f:4a:75:e3:cb:29:33:b5:7d:a0:ca:de: 18:16:f7:b7:e8:7f:86:10:80:6e:53:dc:fd:bc:9f:f8:a9:e9: 2e:ca:36:71:d5:fd:b8:7b:91:e7:da:45:6c:10:f8:c8:d1:a8: 6d:f7:44:87:13:80:24:c8:89:f1:09:c9:49:fb:f2:8c:8a:2f: b7:cc:48:78:e1:98:a2:5d:d6:4f:62:3c:e2:5b:24:c3:b3:0b: 9a:6b:e7:52:66:0d:55:2c:f8:1e:20:37:4c:23:db:a3:63:ef: 81:ae:96:00:a8:8a:60:b5:20:4b:75:3b:01:a2:2b:40:f2:1e: c1:d2:89:fe:1f:b4:59:20:43:f4:5a:c5:32:6b:4e:1a:4d:cd: cd:3e:cb:87:fe:ad:44:a4:40:c6:11:1b:60:e9:2c:66:cd:34: 2f:7e:ba:a1:5d:29:ef:8e:46:53:ae:5a:e6:b4:1a:c7:9d:2a: be:f8:48:9c:a2:68:c0:49:04:cf:76:e7:c9:ab:e8:71:fe:49: e4:0e:f7:3a:21:7f:e2:51:cc:2d:7e:c4:d2:3b:b7:d7:c5:66: 2d:ca:4a:3f:85:e1:1f:aa:8a:cf:3b:ce:53:e0:e8:f2:f9:91: c0:26:c1:df:4d:a5:56:62:e6:94:f3:d7:c7:2a:b5:ee:42:da: 31:88:e1:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF1LcusNlQ4Rf6YFF201XFRFESDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNTA2MTYxMDQ1MDFaFw0yNTA2MTkxNjA1MDFaMDMxMTAvBgNV BAMTKEE2OEQzQkYxNjExRjA5NEY1Qzc4RjI5RUIwRkMzQUEzRDA4M0QzOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BsKIK1opaGOUAdyF2fWrISF8 Xz7qX5KGB1Z6qGImNs5fhTGfqd9X9nvscZ52QToheSGSiuqFf0Ro32fDBxVZOc4j UywsYWvqdgYH/fA3mPlmacdpyT1vlqu9BjaGaii18Y/YGqJsd7XQq2iDu0TmtT1B qE9CjQYxNn+og+/9O/BF+L8CcPcB8kDyCgPv+vu61+41Ad/6S86HJN94ACHxc7IW IZ0HmCgylnU+80886LicKfkCiTEM+8+0QzeEKVeMw4WjqWzzZy6+siSCGQPw7HmH a4aZ5WSjV/ISIKrq7X8N1gU9RkcM2WX2OYcws6zMuNN+98YbFecNTsIukp5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpo078WEfCU9cePKesPw6o9CD054wHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKgGFgHig9KdePLKTO1faDK3hgW97fof4YQ gG5T3P28n/ip6S7KNnHV/bh7kefaRWwQ+MjRqG33RIcTgCTIifEJyUn78oyKL7fM SHjhmKJd1k9iPOJbJMOzC5pr51JmDVUs+B4gN0wj26Nj74GulgCoimC1IEt1OwGi K0DyHsHSif4ftFkgQ/RaxTJrThpNzc0+y4f+rUSkQMYRG2DpLGbNNC9+uqFdKe+O RlOuWua0GsedKr74SJyiaMBJBM9258mr6HH+SeQO9zohf+JRzC1+xNI7t9fFZi3K Sj+F4R+qis87zlPg6PL5kcAmwd9NpVZi5pTz18cqte5C2jGI4bQ= -----END CERTIFICATE-----Generated at Mon Jun 16 22:50:59 2025 by rpki-client