$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json) Hash identifier: /n1C0DhXR9Dp8hP3mRJClZFvnucvw3E0IU29plNDGtI= Subject key identifier: DE:36:7E:37:30:72:E5:CC:CB:9A:13:94:AE:97:16:39:4A:11:57:E7 Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Certificate serial: 6895209ABFE62859F688A848B6B4B8480E7BAA87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft Manifest number: 04F0 Signing time: Mon 21 Jul 2025 02:12:11 +0000 Manifest this update: Mon 21 Jul 2025 02:07:11 +0000 Manifest next update: Thu 24 Jul 2025 04:37:11 +0000 Files and hashes: 1: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: nI+0b3vv92tuUOH7ju5ykrUrx8m9uEvuEJOsZm8cNtg=) 2: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: UUI0UvU6AUH37Q/H9zW8u0Apq7Y6pN001mJMdkH8taI=) 3: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: ejfVv9si1K2MpeXhh8zMJGLdHAeeV0dhSQaga8rtoCM=) 4: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: XTrAUzINtImcd3F+XaTVo5H750rmDxdeBt+LpGOrxS4=) 5: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: JE0sJw2Y30gQbCmAIhnjpinJa8eG7Fgewlr8Jax6ero=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 04:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:95:20:9a:bf:e6:28:59:f6:88:a8:48:b6:b4:b8:48:0e:7b:aa:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Validity Not Before: Jul 21 02:07:11 2025 GMT Not After : Jul 24 04:37:11 2025 GMT Subject: CN=DE367E373072E5CCCB9A1394AE9716394A1157E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:96:d0:bb:5f:20:cc:bd:3d:84:83:8a:fe: 2b:48:99:2d:6e:c8:69:84:64:73:3e:c2:8f:05:ea: 97:f0:ac:f9:b6:59:d7:95:a5:e8:90:0b:fe:20:7b: cd:bf:79:22:8d:21:9c:78:5c:34:68:02:23:17:51: b3:16:1d:d8:27:34:57:50:2b:49:2a:24:6c:a4:e0: ef:f4:bf:d0:fb:b6:8c:a6:7b:ea:df:cd:38:dd:ef: 38:9e:68:86:a8:8e:8a:9f:d1:17:f1:89:a6:89:b5: 0b:b5:b7:41:06:3c:d5:d4:95:28:da:ac:e1:7d:b2: dc:8a:53:e7:1c:73:06:4e:4b:08:1d:41:82:92:58: e5:2d:9b:cc:eb:fb:45:15:9c:49:3d:0e:13:f8:55: 95:2b:ed:c1:2b:ce:19:19:58:4b:54:f1:01:39:e6: 27:cc:cb:1e:85:ae:6c:71:f5:a2:10:41:0c:a7:2a: 01:61:3e:43:4d:54:1c:ce:61:74:16:6b:78:59:b2: 3b:5c:ee:9e:c2:dc:36:1a:5d:81:55:98:06:2b:4b: 61:9f:ec:43:11:51:05:99:05:73:ae:d0:88:1c:d0: 57:b8:78:a1:be:ee:b0:51:fd:02:6e:9a:7e:f8:bd: fe:53:1b:40:81:b0:d8:20:bd:4f:7b:b4:00:20:6e: 00:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:36:7E:37:30:72:E5:CC:CB:9A:13:94:AE:97:16:39:4A:11:57:E7 X509v3 Authority Key Identifier: keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:7c:a3:a5:09:92:b2:b1:71:96:d7:3b:33:af:d7:3c:29:cc: 53:da:17:90:54:c5:4c:e9:36:6e:72:65:4d:28:99:6e:03:ce: 3f:2e:96:6d:d9:57:a0:16:73:c2:7a:27:cc:b6:bf:14:f6:26: aa:f5:52:13:f8:35:61:65:80:05:49:ea:6a:1e:39:a1:54:7b: ac:ec:5b:76:69:34:d2:2e:b2:0f:59:5e:4c:23:8a:ad:2d:42: c0:58:3f:43:54:b6:2e:b5:1a:1b:8f:89:8a:d9:06:07:2b:42: 4d:14:6f:38:76:16:17:88:6b:1c:da:23:4f:85:b1:01:e9:bc: b1:ef:8e:29:92:95:e1:1b:96:8a:37:3d:57:76:11:6d:6b:ac: e7:bc:8f:9c:81:88:7f:67:2d:4c:41:78:a1:d2:69:45:28:0d: 62:bf:a4:14:d7:2a:7f:9d:44:e7:c8:9e:cc:89:48:78:83:81: aa:72:fb:07:47:25:49:77:5e:f6:5b:75:25:1b:16:a5:f8:81: d6:a0:d6:09:91:6f:f8:e8:ff:53:8c:f6:d3:ee:5d:8a:ba:9a: 28:82:9f:7c:33:06:83:b0:90:eb:70:53:56:46:b8:90:c6:e7: 5b:0d:6e:e4:36:95:6c:2f:f0:ed:40:92:41:37:c8:37:99:b1: 9b:23:80:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJUgmr/mKFn2iKhItrS4SA57qocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2 QUE5MDM1MzAeFw0yNTA3MjEwMjA3MTFaFw0yNTA3MjQwNDM3MTFaMDMxMTAvBgNV BAMTKERFMzY3RTM3MzA3MkU1Q0NDQjlBMTM5NEFFOTcxNjM5NEExMTU3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqpbQu18gzL09hIOK/itImS1u yGmEZHM+wo8F6pfwrPm2WdeVpeiQC/4ge82/eSKNIZx4XDRoAiMXUbMWHdgnNFdQ K0kqJGyk4O/0v9D7toyme+rfzTjd7zieaIaojoqf0RfxiaaJtQu1t0EGPNXUlSja rOF9styKU+cccwZOSwgdQYKSWOUtm8zr+0UVnEk9DhP4VZUr7cErzhkZWEtU8QE5 5ifMyx6Frmxx9aIQQQynKgFhPkNNVBzOYXQWa3hZsjtc7p7C3DYaXYFVmAYrS2Gf 7EMRUQWZBXOu0Igc0Fe4eKG+7rBR/QJumn74vf5TG0CBsNggvU97tAAgbgBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3jZ+NzBy5czLmhOUrpcWOUoRV+cwHwYDVR0j BBgwFoAUrMPXmrG+9ivACVtvasPzRGqpA1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzU4YzgwZS1hMzI4LTRmOGMtYTAzZi05MWMzYzI2MjE0YTIvMC9BQ0MzRDc5QUIx QkVGNjJCQzAwOTVCNkY2QUMzRjM0NDZBQTkwMzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2QUE5 MDM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0Yz NDQ2QUE5MDM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMp8o6UJkrKxcZbXOzOv1zwpzFPaF5BUxUzp Nm5yZU0omW4Dzj8ulm3ZV6AWc8J6J8y2vxT2Jqr1UhP4NWFlgAVJ6moeOaFUe6zs W3ZpNNIusg9ZXkwjiq0tQsBYP0NUti61GhuPiYrZBgcrQk0Ubzh2FheIaxzaI0+F sQHpvLHvjimSleEbloo3PVd2EW1rrOe8j5yBiH9nLUxBeKHSaUUoDWK/pBTXKn+d ROfInsyJSHiDgapy+wdHJUl3XvZbdSUbFqX4gdag1gmRb/jo/1OM9tPuXYq6miiC n3wzBoOwkOtwU1ZGuJDG51sNbuQ2lWwv8O1AkkE3yDeZsZsjgAU= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:05 2025 by rpki-client