$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft File: AC555447BA62C39107F16BF572F82A417F728DBF.mft (raw, json) Hash identifier: vjDCJf0uBa9I5jBgcgIXzGnBTm1oLAGffOOvj2+P3MM= Subject key identifier: 74:9B:BA:EC:9C:3B:E0:1F:F1:08:D6:09:C4:26:F0:FD:A7:DD:FC:34 Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF Certificate serial: 2B942120A12BAD02268B9453D2C09E8F9C78A6F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft Manifest number: 0627 Signing time: Tue 22 Jul 2025 07:52:21 +0000 Manifest this update: Tue 22 Jul 2025 07:47:21 +0000 Manifest next update: Fri 25 Jul 2025 13:53:21 +0000 Files and hashes: 1: AC555447BA62C39107F16BF572F82A417F728DBF.crl (hash: T9lIm1wGoSVVY2Rvtvg7oF7JVPYfmGhLhju/4UDOdQE=) 2: AS38060.roa (hash: eOcmz88SeKGkb0DMwImS4Yyf8BOpXzai0Cr7w/OsMC8=) 3: AS38482.roa (hash: mqOgj/4JaT7AGWmmy0w7CKSJj5WCQYyZUeVO9quFzao=) 4: AS45493.roa (hash: mb0AgCXbkScEv7HGYPRCGM6VDPWZb0xWmZOIeGOHRDA=) 5: AS17451.roa (hash: Ukvik6xbRxykVXLSDrO+vSNNdsj3TC241H03y6KEQkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 13:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:94:21:20:a1:2b:ad:02:26:8b:94:53:d2:c0:9e:8f:9c:78:a6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF Validity Not Before: Jul 22 07:47:21 2025 GMT Not After : Jul 25 13:53:21 2025 GMT Subject: CN=749BBAEC9C3BE01FF108D609C426F0FDA7DDFC34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:f3:f3:e7:41:61:4a:09:f7:08:05:cf:26: 57:b2:49:d1:f4:75:1d:e0:2c:a5:1b:0a:a7:aa:b6: 11:cc:28:53:1d:7c:85:0e:e2:7f:f0:30:db:a4:31: 87:01:ee:b4:5e:ef:d0:9e:12:e1:59:5c:c0:39:cc: d9:c4:d5:af:b6:fa:5f:d7:67:51:45:41:ba:86:78: 62:bf:7b:ae:69:95:69:d5:0b:04:2c:27:6f:fa:cc: e6:e7:76:22:0d:e1:d8:3b:9d:1b:fa:f3:ee:99:05: 9c:4a:8e:6d:9b:ee:a9:f2:62:09:e3:da:91:a2:86: 7e:ba:9e:65:65:d5:ed:a3:94:18:0c:ff:13:00:0e: 8d:bc:99:99:38:12:d4:cb:ff:43:e3:10:cc:73:ad: 40:a6:65:51:fb:c7:85:40:13:6f:81:b6:12:23:15: 90:af:a2:9a:e5:7a:6c:91:46:fa:b0:81:90:fe:2c: 44:8a:01:34:67:17:73:ba:e9:3e:c0:8f:f3:ca:4e: cf:54:19:49:86:0b:d4:70:36:7c:99:5e:7e:40:69: 03:e9:e6:b8:24:85:2d:17:c8:f4:75:3b:cf:56:44: d0:40:99:c3:33:db:7f:41:42:db:fb:48:d4:c6:65: f4:2b:70:93:45:a8:96:2b:c7:a5:2e:17:76:7f:dd: b7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9B:BA:EC:9C:3B:E0:1F:F1:08:D6:09:C4:26:F0:FD:A7:DD:FC:34 X509v3 Authority Key Identifier: keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:26:5e:c8:eb:26:1b:48:8a:d3:a4:c1:4f:1b:df:ff:b5:67: 3a:31:7f:e3:42:68:15:0b:6c:da:e8:1c:e6:35:f1:dc:b4:45: 25:af:84:d7:cc:e3:bf:94:a8:fe:25:b6:86:78:db:cf:c3:fb: c0:9b:1f:cc:77:dc:ff:d6:ec:fe:48:46:5a:c9:4c:b6:c3:27: 85:50:f9:71:95:e6:f6:fb:6d:ea:48:88:c7:33:e4:90:fe:b0: 0e:69:c8:71:22:8d:8c:1e:27:9d:5f:50:18:cc:e8:8b:86:f6: 67:ae:c6:c5:ac:69:75:f4:60:9c:1b:20:2a:4f:68:df:53:62: 7c:eb:0e:a0:64:e6:bd:34:bb:3f:69:d3:9c:01:19:cf:eb:d8: f8:c7:e0:6e:2e:2b:99:5c:34:07:e0:15:98:17:38:23:5a:d9: 26:6d:eb:cf:fe:fe:40:16:18:ec:ac:e3:07:98:54:09:97:26: 3d:51:04:1f:96:1e:84:4d:59:71:16:18:57:18:41:78:18:c9: b4:6b:fa:61:29:33:b5:fa:a3:93:a0:7d:08:ac:37:bd:76:54: e3:9a:d6:9e:dc:ae:b8:ae:d0:f5:8f:c7:30:a8:8e:05:ec:b8: 9e:0f:ec:40:73:ae:36:e1:ae:99:b1:9d:b8:a6:5e:71:8b:96: b1:9b:c5:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK5QhIKErrQImi5RT0sCej5x4pvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3 RjcyOERCRjAeFw0yNTA3MjIwNzQ3MjFaFw0yNTA3MjUxMzUzMjFaMDMxMTAvBgNV BAMTKDc0OUJCQUVDOUMzQkUwMUZGMTA4RDYwOUM0MjZGMEZEQTdEREZDMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk9/Pz50FhSgn3CAXPJleySdH0 dR3gLKUbCqeqthHMKFMdfIUO4n/wMNukMYcB7rRe79CeEuFZXMA5zNnE1a+2+l/X Z1FFQbqGeGK/e65plWnVCwQsJ2/6zObndiIN4dg7nRv68+6ZBZxKjm2b7qnyYgnj 2pGihn66nmVl1e2jlBgM/xMADo28mZk4EtTL/0PjEMxzrUCmZVH7x4VAE2+BthIj FZCvoprlemyRRvqwgZD+LESKATRnF3O66T7Aj/PKTs9UGUmGC9RwNnyZXn5AaQPp 5rgkhS0XyPR1O89WRNBAmcMz239BQtv7SNTGZfQrcJNFqJYrx6UuF3Z/3bdzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdJu67Jw74B/xCNYJxCbw/afd/DQwHwYDVR0j BBgwFoAUrFVUR7piw5EH8Wv1cvgqQX9yjb8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC9BQzU1NTQ0N0JB NjJDMzkxMDdGMTZCRjU3MkY4MkE0MTdGNzI4REJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3Rjcy OERCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB NDE3RjcyOERCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAmXsjrJhtIitOkwU8b3/+1Zzoxf+NCaBUL bNroHOY18dy0RSWvhNfM47+UqP4ltoZ428/D+8CbH8x33P/W7P5IRlrJTLbDJ4VQ +XGV5vb7bepIiMcz5JD+sA5pyHEijYweJ51fUBjM6IuG9meuxsWsaXX0YJwbICpP aN9TYnzrDqBk5r00uz9p05wBGc/r2PjH4G4uK5lcNAfgFZgXOCNa2SZt68/+/kAW GOys4weYVAmXJj1RBB+WHoRNWXEWGFcYQXgYybRr+mEpM7X6o5OgfQisN712VOOa 1p7crriu0PWPxzCojgXsuJ4P7EBzrjbhrpmxnbimXnGLlrGbxQ0= -----END CERTIFICATE-----Generated at Thu Jul 24 12:17:48 2025 by rpki-client