$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: qyOjUAWDrgPTWkdXiHw/LKQiEPShqMFmF7IsMSBlxek= Subject key identifier: 02:61:CD:AC:7D:AC:9C:33:C0:74:B1:16:A2:43:28:C5:E3:5D:E7:1C Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 23A4FBC38268A5E890A09C277069DDB4DF71A935 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 037B Signing time: Sun 27 Apr 2025 02:02:09 +0000 Manifest this update: Sun 27 Apr 2025 01:57:09 +0000 Manifest next update: Wed 30 Apr 2025 04:27:09 +0000 Files and hashes: 1: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=) 2: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: xJszQNWSkDG84YFJ01ncpksaXmlhg12iExNj03z/uMY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 04:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a4:fb:c3:82:68:a5:e8:90:a0:9c:27:70:69:dd:b4:df:71:a9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Apr 27 01:57:09 2025 GMT Not After : Apr 30 04:27:09 2025 GMT Subject: CN=0261CDAC7DAC9C33C074B116A24328C5E35DE71C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:01:6d:64:8f:64:32:7d:ff:d3:c3:42:61: 99:b1:fa:7e:0d:d2:29:6b:9c:1e:a3:82:52:52:47: 8b:16:c5:c0:67:d7:80:f3:1b:3e:c1:08:4c:e4:b7: da:37:ef:f3:51:8b:4f:c1:d5:91:97:6e:8b:eb:99: 4a:17:e3:7d:10:72:4c:2a:af:7e:fb:a3:83:47:d9: 61:5a:e6:26:42:90:2a:73:f4:ef:9c:da:98:fe:58: f4:5e:38:38:35:e4:a1:26:cd:ce:94:aa:24:94:d7: c8:61:74:54:db:df:03:e9:f5:8a:08:2a:8e:40:59: c7:22:53:ec:16:e8:00:38:fa:9b:e2:62:90:d8:7c: 7e:30:ad:88:00:3d:8c:80:89:5e:81:d6:cb:a2:3b: 05:b7:db:d7:2b:f2:f9:c5:16:3f:2c:38:d3:32:94: a2:e2:7e:96:3d:b8:8e:97:c8:49:d0:df:e2:06:cb: 50:54:10:92:1a:f5:90:1f:91:bb:9e:24:37:72:c7: 4a:f9:70:1b:62:04:84:56:34:bd:07:2a:36:3d:9b: 49:62:e4:37:6e:bf:b7:86:05:d3:3b:89:68:6c:1b: 06:b0:c3:26:3a:fc:52:04:87:c0:b6:62:69:81:27: 5f:a8:3a:25:3a:9e:aa:fd:6a:5a:03:18:62:97:b1: c0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:61:CD:AC:7D:AC:9C:33:C0:74:B1:16:A2:43:28:C5:E3:5D:E7:1C X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b6:08:ae:5b:ae:cb:21:99:d9:d7:05:82:f9:b9:03:97:4e: 00:9f:23:47:fc:4d:ec:51:92:c2:f7:c8:24:d5:00:6c:75:1b: c3:66:4b:67:76:b5:e3:cb:24:01:3f:b8:a7:95:79:eb:68:62: f4:f6:1d:7b:47:74:79:be:09:27:57:e0:c0:44:13:53:c6:0e: 48:fc:6e:1c:03:bd:ed:8e:86:5a:cb:b1:dd:84:74:af:57:59: 85:6b:13:82:55:4b:63:1a:7a:42:27:92:38:14:58:96:58:49: 62:44:60:61:f2:ac:ab:51:14:81:b1:4c:36:52:30:93:02:b0: b2:42:98:95:ba:5f:61:d9:a0:c6:47:74:d1:e3:64:03:06:b2: e2:b9:fc:4a:32:44:48:45:81:50:47:10:fe:80:b1:c8:f9:df: c2:81:42:4d:ef:52:71:ed:45:6a:55:46:76:24:a3:01:4a:d3: 0b:a4:30:60:fe:2a:15:4e:ac:c6:53:5e:74:ea:c8:88:70:93: 31:63:fc:39:22:de:bd:0f:58:9c:69:9a:94:0a:f7:84:26:f0: 1a:b7:99:ea:92:00:14:3a:ac:54:b7:6e:d7:91:b8:bb:ff:f1: 2e:f2:76:d9:90:36:9b:c1:88:cf:4a:c4:ae:5d:89:d2:09:26: 2d:40:1f:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6T7w4JopeiQoJwncGndtN9xqTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNTA0MjcwMTU3MDlaFw0yNTA0MzAwNDI3MDlaMDMxMTAvBgNV BAMTKDAyNjFDREFDN0RBQzlDMzNDMDc0QjExNkEyNDMyOEM1RTM1REU3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2egFtZI9kMn3/08NCYZmx+n4N 0ilrnB6jglJSR4sWxcBn14DzGz7BCEzkt9o37/NRi0/B1ZGXbovrmUoX430Qckwq r377o4NH2WFa5iZCkCpz9O+c2pj+WPReODg15KEmzc6UqiSU18hhdFTb3wPp9YoI Ko5AWcciU+wW6AA4+pviYpDYfH4wrYgAPYyAiV6B1suiOwW329cr8vnFFj8sONMy lKLifpY9uI6XyEnQ3+IGy1BUEJIa9ZAfkbueJDdyx0r5cBtiBIRWNL0HKjY9m0li 5Dduv7eGBdM7iWhsGwawwyY6/FIEh8C2YmmBJ1+oOiU6nqr9aloDGGKXscDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAmHNrH2snDPAdLEWokMoxeNd5xwwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFK2CK5brsshmdnXBYL5uQOXTgCfI0f8TexR ksL3yCTVAGx1G8NmS2d2tePLJAE/uKeVeetoYvT2HXtHdHm+CSdX4MBEE1PGDkj8 bhwDve2OhlrLsd2EdK9XWYVrE4JVS2MaekInkjgUWJZYSWJEYGHyrKtRFIGxTDZS MJMCsLJCmJW6X2HZoMZHdNHjZAMGsuK5/EoyREhFgVBHEP6Ascj538KBQk3vUnHt RWpVRnYkowFK0wukMGD+KhVOrMZTXnTqyIhwkzFj/Dki3r0PWJxpmpQK94Qm8Bq3 meqSABQ6rFS3bteRuLv/8S7ydtmQNpvBiM9KxK5didIJJi1AH6k= -----END CERTIFICATE-----Generated at Sun Apr 27 23:50:45 2025 by rpki-client