$ rpki-client -vvf repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft File: ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft (raw, json) Hash identifier: 6pon6A05TamHw+23VE1dqyva5SM6NJe+IScVzKl84qM= Subject key identifier: 24:05:2C:34:06:D2:E9:11:7E:D2:D5:3A:30:77:4E:76:70:4C:58:97 Authority key identifier: AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA Certificate issuer: /CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA Certificate serial: 641EEFB20DB9C1622A7D05EB948852E5C6AB4265 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft Manifest number: 04E3 Signing time: Sat 19 Jul 2025 16:20:58 +0000 Manifest this update: Sat 19 Jul 2025 16:15:58 +0000 Manifest next update: Tue 22 Jul 2025 23:38:58 +0000 Files and hashes: 1: ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl (hash: sEGCa9pw0BbxiK0k/Z86wuiPMM2Q7ox6jDls0EKItio=) 2: 323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa (hash: 2ZsS2VEgZnEWCXg+GRqI2uFHC4HL54ZPfTFqcd0guLc=) 3: 3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (hash: Cea98TN6JOippPT1Yl/tw6t70hFs59kHZ8IV7LC26fU=) 4: 3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa (hash: 9xvDYfAkrAuBORhBg+JkljOUtwulgTLF9m5JOM3oSF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 23:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1e:ef:b2:0d:b9:c1:62:2a:7d:05:eb:94:88:52:e5:c6:ab:42:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA Validity Not Before: Jul 19 16:15:58 2025 GMT Not After : Jul 22 23:38:58 2025 GMT Subject: CN=24052C3406D2E9117ED2D53A30774E76704C5897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:06:15:de:46:68:98:63:38:cb:b3:fd:bd: 90:61:07:0a:27:43:4b:35:6f:b3:d1:82:b2:e0:8c: 83:d2:c7:fe:59:63:00:c3:28:f8:67:37:52:61:1f: eb:90:eb:e4:64:20:a1:1b:ba:e5:d6:cd:d6:2b:b1: 36:da:2c:18:bd:63:51:0f:3a:a3:4b:7d:7e:86:3f: 6c:54:d1:f4:83:8f:4b:bb:e1:f6:8c:63:ac:ef:a1: f5:44:6c:73:0a:e9:da:54:6f:74:83:8e:0a:d0:91: 51:73:40:45:36:b2:ff:8c:2d:14:95:15:d1:22:1b: 6b:f1:1e:ce:51:a7:4b:0f:93:31:50:7f:4e:9a:a3: cf:c8:7c:0b:f7:8c:85:2a:42:67:a5:69:6c:74:89: d2:a3:72:38:10:ba:da:c8:c6:35:15:26:a6:93:33: 0c:f5:29:bf:d8:6d:0c:eb:87:ff:b4:70:e3:ef:7e: 29:1d:78:b8:21:98:10:96:11:bc:33:85:dc:67:3d: fb:56:4d:2d:22:46:b7:75:4c:e4:76:2c:21:0c:56: 2f:39:de:79:bc:65:74:61:ae:15:f9:03:8c:90:d3: b6:e1:23:5b:84:60:30:57:b9:d6:c0:dc:76:9c:87: 46:3f:fd:e5:e6:9b:0b:53:1a:a3:51:aa:1a:d5:6d: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:05:2C:34:06:D2:E9:11:7E:D2:D5:3A:30:77:4E:76:70:4C:58:97 X509v3 Authority Key Identifier: keyid:AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ab:7a:1b:10:18:2d:1d:e5:9c:d0:5d:3c:3b:9d:96:63:81: a4:c3:3a:44:9b:4c:72:34:c3:48:79:0d:28:71:18:80:c8:3e: b1:03:1d:c5:f1:63:73:5f:8a:41:45:62:27:ea:60:5a:ed:f4: 14:57:d6:5c:4f:ba:e6:86:ad:b0:2f:f2:f9:d6:16:8a:55:54: 82:8c:4e:da:d3:74:89:8f:e7:e1:f4:f2:42:c1:44:4c:74:7e: a7:2f:84:74:b7:37:ae:8c:3e:55:93:f6:64:fa:26:38:a5:01: f9:c5:f8:71:1b:b6:6e:e8:ca:fa:99:77:1f:d8:45:51:12:06: 79:ed:13:14:40:94:d9:ab:d9:9c:a0:70:c7:6f:85:90:7c:d3: 4f:94:e8:97:4d:65:33:97:a8:22:7e:5d:47:a9:13:99:a2:0d: c4:56:6b:ca:b3:cf:3b:4e:bb:5f:01:2d:6e:eb:99:ca:96:f4: b9:0e:32:32:c0:7d:ec:00:00:33:64:6f:89:0e:c6:c5:dc:ca: 71:5c:52:47:b1:d9:36:e1:4b:3b:19:7a:54:e5:73:7f:49:71: a6:17:bc:48:90:10:09:93:f1:a6:a2:20:f4:fa:e4:f9:9e:56: 80:d2:89:61:41:3c:0e:07:de:dc:5c:b9:26:26:0c:66:31:f1: 2c:4e:b7:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZB7vsg25wWIqfQXrlIhS5carQmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQzNjFF RUY0REZCQTAeFw0yNTA3MTkxNjE1NThaFw0yNTA3MjIyMzM4NThaMDMxMTAvBgNV BAMTKDI0MDUyQzM0MDZEMkU5MTE3RUQyRDUzQTMwNzc0RTc2NzA0QzU4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF5AYV3kZomGM4y7P9vZBhBwon Q0s1b7PRgrLgjIPSx/5ZYwDDKPhnN1JhH+uQ6+RkIKEbuuXWzdYrsTbaLBi9Y1EP OqNLfX6GP2xU0fSDj0u74faMY6zvofVEbHMK6dpUb3SDjgrQkVFzQEU2sv+MLRSV FdEiG2vxHs5Rp0sPkzFQf06ao8/IfAv3jIUqQmelaWx0idKjcjgQutrIxjUVJqaT Mwz1Kb/YbQzrh/+0cOPvfikdeLghmBCWEbwzhdxnPftWTS0iRrd1TOR2LCEMVi85 3nm8ZXRhrhX5A4yQ07bhI1uEYDBXudbA3Hach0Y//eXmmwtTGqNRqhrVbWMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJAUsNAbS6RF+0tU6MHdOdnBMWJcwHwYDVR0j BBgwFoAUrM7ONo8EFCUFlA/yn03TYe7037owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDRjYjhkOC0xNTA1LTQ2ODItOWRkYi1mY2Q4NjIwMGI5NjYvMC9BQ0NFQ0UzNjhG MDQxNDI1MDU5NDBGRjI5RjRERDM2MUVFRjRERkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQzNjFFRUY0 REZCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQ0Y2I4ZDgtMTUwNS00NjgyLTlk ZGItZmNkODYyMDBiOTY2LzAvQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQz NjFFRUY0REZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCrehsQGC0d5ZzQXTw7nZZjgaTDOkSbTHI0 w0h5DShxGIDIPrEDHcXxY3NfikFFYifqYFrt9BRX1lxPuuaGrbAv8vnWFopVVIKM TtrTdImP5+H08kLBREx0fqcvhHS3N66MPlWT9mT6JjilAfnF+HEbtm7oyvqZdx/Y RVESBnntExRAlNmr2ZygcMdvhZB800+U6JdNZTOXqCJ+XUepE5miDcRWa8qzzztO u18BLW7rmcqW9LkOMjLAfewAADNkb4kOxsXcynFcUkex2TbhSzsZelTlc39JcaYX vEiQEAmT8aaiIPT65PmeVoDSiWFBPA4H3txcuSYmDGYx8SxOt/U= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:41 2025 by rpki-client