$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: tf73SM5iUdciq9c62Wm30THwJJCIE66pWW3BrraXK3A= Subject key identifier: 57:8C:9A:45:D0:0E:8D:15:B5:BC:EE:B1:8B:04:7E:DD:6C:E0:BA:E1 Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 7D55BA1F39FDBE20E14B4C7743E115797407C6C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 04DC Signing time: Sun 08 Jun 2025 16:31:13 +0000 Manifest this update: Sun 08 Jun 2025 16:26:13 +0000 Manifest next update: Wed 11 Jun 2025 18:34:13 +0000 Files and hashes: 1: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=) 2: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=) 3: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=) 4: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: hkabFwKXfFLcwnhTUCBFxxycXLOYP2w7A8Qle8RSnY0=) 5: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=) 6: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: hKuamBAx77CwO86y1A7xDVYWjcy9qi6pO1mapMzXVQk=) 7: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:55:ba:1f:39:fd:be:20:e1:4b:4c:77:43:e1:15:79:74:07:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Jun 8 16:26:13 2025 GMT Not After : Jun 11 18:34:13 2025 GMT Subject: CN=578C9A45D00E8D15B5BCEEB18B047EDD6CE0BAE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:47:27:a3:c0:02:5a:be:c9:1e:85:99:b1: 95:74:fb:2f:05:53:7c:aa:f6:f6:47:16:3c:09:b5: 7c:d3:98:e3:bc:d6:d3:ec:38:58:f3:7d:38:1f:f3: 17:6f:6e:18:8c:a1:3e:85:24:73:a8:df:b5:4c:a9: 26:f4:bb:1b:5e:36:7b:a7:2b:28:a6:04:95:0a:89: 06:71:d5:f6:97:3b:52:b8:1c:1e:ff:64:6e:57:01: 53:97:d0:39:18:d3:39:4f:10:2b:ac:57:c7:19:6e: 16:12:46:a0:09:58:04:b1:8a:20:cb:9c:bd:9e:59: 1f:b9:e4:96:00:a1:2c:b3:71:c6:bc:45:a0:6e:38: 29:8c:46:6f:c2:06:cf:55:c5:01:3f:a0:6f:f8:15: af:8d:6a:00:55:83:da:14:e1:ef:5f:d0:ae:ed:60: 05:d2:3d:8f:86:bc:2a:88:21:c0:56:4f:5b:9b:53: ed:b6:5c:34:6f:03:3e:87:d8:06:b0:25:d2:61:fa: b8:6d:6e:ea:e6:1e:ee:2a:ad:d8:85:5c:54:84:a8: 3b:fb:e7:ab:a2:51:97:87:2f:88:78:f5:60:05:b7: 9e:3f:e0:db:38:a6:7f:f2:9d:8b:0e:04:85:36:82: 55:2b:8d:5d:cc:5a:1d:7f:d3:0c:52:ae:64:34:61: 5e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8C:9A:45:D0:0E:8D:15:B5:BC:EE:B1:8B:04:7E:DD:6C:E0:BA:E1 X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c0:40:49:3d:eb:7e:3b:94:67:82:d1:8b:49:69:1b:0f:8e: f1:fa:c3:16:5a:b2:dd:e9:85:d6:4f:27:4e:a0:45:b2:3e:69: 34:3b:6b:68:d4:28:a6:d0:9e:3d:bf:1c:70:63:67:15:d2:d9: 00:61:b5:0f:8f:f0:67:58:92:85:bc:ae:2b:f2:69:e5:52:4c: 87:92:07:d3:2f:7a:c6:19:61:ec:95:42:c0:0e:bc:1c:11:6c: ac:6d:a7:cb:ea:03:a2:1f:36:c1:a8:63:53:25:65:ec:93:b2: 1c:72:4d:60:22:80:0b:c2:74:39:bc:cf:d8:b8:d0:4c:17:27: e8:0a:f3:84:7d:26:89:00:b0:31:65:d2:c3:e6:8f:ec:04:72: c0:18:b4:c8:5c:1b:f1:73:1b:7a:c9:c7:12:6f:3e:51:69:f3: 5d:d4:75:92:a0:b9:b5:27:d9:4c:cb:cb:b3:4b:79:d0:51:c3: 7e:9a:19:00:e9:44:b3:8f:54:8a:38:00:c8:65:10:28:27:bb: 32:af:a8:03:4f:a2:ac:2b:a2:78:01:68:a7:33:9b:f9:5c:8e: 0c:24:29:01:6b:f0:f9:b2:87:ed:8a:42:07:35:ad:86:73:9b: 7a:0d:46:78:8d:1c:3c:9f:50:98:6a:8b:b1:2d:fb:8a:85:55: b1:51:32:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVW6Hzn9viDhS0x3Q+EVeXQHxsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNTA2MDgxNjI2MTNaFw0yNTA2MTExODM0MTNaMDMxMTAvBgNV BAMTKDU3OEM5QTQ1RDAwRThEMTVCNUJDRUVCMThCMDQ3RURENkNFMEJBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRUcno8ACWr7JHoWZsZV0+y8F U3yq9vZHFjwJtXzTmOO81tPsOFjzfTgf8xdvbhiMoT6FJHOo37VMqSb0uxteNnun KyimBJUKiQZx1faXO1K4HB7/ZG5XAVOX0DkY0zlPECusV8cZbhYSRqAJWASxiiDL nL2eWR+55JYAoSyzcca8RaBuOCmMRm/CBs9VxQE/oG/4Fa+NagBVg9oU4e9f0K7t YAXSPY+GvCqIIcBWT1ubU+22XDRvAz6H2AawJdJh+rhtburmHu4qrdiFXFSEqDv7 56uiUZeHL4h49WAFt54/4Ns4pn/ynYsOBIU2glUrjV3MWh1/0wxSrmQ0YV5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV4yaRdAOjRW1vO6xiwR+3WzguuEwHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3AQEk96347lGeC0YtJaRsPjvH6wxZast3p hdZPJ06gRbI+aTQ7a2jUKKbQnj2/HHBjZxXS2QBhtQ+P8GdYkoW8rivyaeVSTIeS B9MvesYZYeyVQsAOvBwRbKxtp8vqA6IfNsGoY1MlZeyTshxyTWAigAvCdDm8z9i4 0EwXJ+gK84R9JokAsDFl0sPmj+wEcsAYtMhcG/FzG3rJxxJvPlFp813UdZKgubUn 2UzLy7NLedBRw36aGQDpRLOPVIo4AMhlECgnuzKvqANPoqwrongBaKczm/lcjgwk KQFr8Pmyh+2KQgc1rYZzm3oNRniNHDyfUJhqi7Et+4qFVbFRMuU= -----END CERTIFICATE-----Generated at Sun Jun 8 18:09:59 2025 by rpki-client