$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: 14gAVWinXt+R/8X2CpokB2jXc3h79vb16KN/TIC3VAE= Subject key identifier: 2C:F7:49:D2:ED:94:DC:65:07:C3:7B:EA:D6:9C:8E:24:90:49:E5:43 Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 5C1E00C88A19D99DFAE80CCEEAE9E11A923BB8D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 04DA Signing time: Wed 04 Jun 2025 11:20:44 +0000 Manifest this update: Wed 04 Jun 2025 11:15:44 +0000 Manifest next update: Sat 07 Jun 2025 22:40:44 +0000 Files and hashes: 1: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: Y748FrZbuj9yWHUuSGvXddYEciOpwvOVX01dqlnZj1s=) 2: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) 3: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) 4: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) 5: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) 6: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1e:00:c8:8a:19:d9:9d:fa:e8:0c:ce:ea:e9:e1:1a:92:3b:b8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Jun 4 11:15:44 2025 GMT Not After : Jun 7 22:40:44 2025 GMT Subject: CN=2CF749D2ED94DC6507C37BEAD69C8E249049E543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:ba:1b:10:d0:0a:86:60:cd:25:fe:35:48: 5b:e6:00:e1:19:8c:3a:91:ec:03:8d:a0:f7:34:cc: 12:83:4a:d5:ff:4f:61:6c:53:12:10:c6:52:66:bf: 78:24:5c:d5:ad:7f:c8:3b:04:c1:00:55:44:80:25: f0:3a:c8:f8:7f:15:62:c7:01:a2:75:fe:9d:7e:6a: 74:ee:81:c2:26:54:74:dc:37:c8:d1:5d:b3:0a:ee: e4:5d:8a:1b:23:b8:26:83:54:32:0c:08:d5:4e:2f: 51:96:0d:74:87:ae:36:5e:ee:27:91:9b:5e:ee:c4: 2c:c4:16:ec:06:b7:28:62:69:e5:48:56:d3:6f:be: 0d:a2:56:aa:82:0c:af:ef:4a:ac:4a:66:a4:f4:a4: 2f:ab:40:ce:04:3d:88:36:6d:a3:e4:89:2b:8f:89: a6:6d:b1:a9:bf:04:dd:d2:78:d2:a4:d7:1c:33:15: 93:fe:ea:b4:7e:cc:70:4b:d8:8d:bd:cd:ac:87:14: 45:42:2a:13:26:a6:12:c6:22:a9:2b:4a:3f:a4:fc: 86:01:38:84:da:70:0f:d5:b6:93:3d:89:ab:fc:bf: 00:c4:56:c0:af:7d:bd:2b:4e:64:bc:1a:61:1c:7e: a4:46:44:71:84:08:0a:40:40:4d:b5:99:91:1a:80: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F7:49:D2:ED:94:DC:65:07:C3:7B:EA:D6:9C:8E:24:90:49:E5:43 X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ba:41:e6:b5:de:99:6b:8f:17:06:86:32:42:cc:c4:f5:97: ad:24:fe:14:a9:8f:20:6d:dc:c0:8f:14:b8:08:0b:ff:40:18: 4f:37:14:d1:bf:ef:71:e3:30:59:ec:30:fa:c0:78:11:df:c5: 84:31:36:9f:1b:cd:2e:49:d0:8a:6c:af:86:1a:af:85:f6:a8: e5:ce:68:39:d9:2c:9b:49:f4:20:23:6d:98:b3:2a:81:7f:8d: be:f7:5f:f1:07:cc:e8:2b:0b:ab:2e:17:6a:61:cc:80:38:b9: 8a:53:2b:c8:c2:55:8d:c6:01:c3:84:a8:8f:ac:55:c1:9d:ee: b9:96:53:7e:cc:45:a5:34:b5:ff:32:ad:99:b3:74:f3:d9:55: 9d:b7:c3:fe:84:d7:f8:e7:33:a8:4b:9e:6b:ce:1b:95:79:36: f5:1f:81:b1:d5:a9:69:19:76:18:ae:4b:7d:94:8f:af:17:c7: f2:be:a1:65:2e:ff:24:d0:f6:4c:53:86:0d:bd:6d:ea:df:5b: 02:55:16:c0:42:62:78:8e:a9:d0:b8:2f:f7:65:e7:ee:04:9b: 41:f4:6b:fe:33:71:e8:5f:1e:28:d0:94:8a:80:80:b0:f9:53: eb:97:eb:8a:a0:fd:e0:e6:ea:99:f5:76:7a:56:34:e5:83:01: 7c:3b:c3:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXB4AyIoZ2Z366AzO6unhGpI7uNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNTA2MDQxMTE1NDRaFw0yNTA2MDcyMjQwNDRaMDMxMTAvBgNV BAMTKDJDRjc0OUQyRUQ5NERDNjUwN0MzN0JFQUQ2OUM4RTI0OTA0OUU1NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NbobENAKhmDNJf41SFvmAOEZ jDqR7AONoPc0zBKDStX/T2FsUxIQxlJmv3gkXNWtf8g7BMEAVUSAJfA6yPh/FWLH AaJ1/p1+anTugcImVHTcN8jRXbMK7uRdihsjuCaDVDIMCNVOL1GWDXSHrjZe7ieR m17uxCzEFuwGtyhiaeVIVtNvvg2iVqqCDK/vSqxKZqT0pC+rQM4EPYg2baPkiSuP iaZtsam/BN3SeNKk1xwzFZP+6rR+zHBL2I29zayHFEVCKhMmphLGIqkrSj+k/IYB OITacA/VtpM9iav8vwDEVsCvfb0rTmS8GmEcfqRGRHGECApAQE21mZEagNOVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULPdJ0u2U3GUHw3vq1pyOJJBJ5UMwHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy6Qea13plrjxcGhjJCzMT1l60k/hSpjyBt 3MCPFLgIC/9AGE83FNG/73HjMFnsMPrAeBHfxYQxNp8bzS5J0Ipsr4Yar4X2qOXO aDnZLJtJ9CAjbZizKoF/jb73X/EHzOgrC6suF2phzIA4uYpTK8jCVY3GAcOEqI+s VcGd7rmWU37MRaU0tf8yrZmzdPPZVZ23w/6E1/jnM6hLnmvOG5V5NvUfgbHVqWkZ dhiuS32Uj68Xx/K+oWUu/yTQ9kxThg29berfWwJVFsBCYniOqdC4L/dl5+4Em0H0 a/4zcehfHijQlIqAgLD5U+uX64qg/eDm6pn1dnpWNOWDAXw7w3U= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:22 2025 by rpki-client