$ rpki-client -vvf repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft File: ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft (raw, json) Hash identifier: G2B7eE/AVEbbkZkzhHGJaKQSWXLVxW3wYecYrJO9ffI= Subject key identifier: 23:D3:DC:36:10:FC:54:59:1F:34:18:6C:26:35:98:69:E3:E3:A4:6B Authority key identifier: AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA Certificate issuer: /CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA Certificate serial: 0D35172EBB5907F78DB76CD10B49A37849984B89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft Manifest number: 04CE Signing time: Tue 03 Jun 2025 17:21:25 +0000 Manifest this update: Tue 03 Jun 2025 17:16:25 +0000 Manifest next update: Sat 07 Jun 2025 02:08:25 +0000 Files and hashes: 1: ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl (hash: g2wKOFyyk9w2iMfNpAllSnfg2VHVq+DtM3G/T7C4NNw=) 2: 3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (hash: F145PEXcJUPJI44/ofZQgqUtr1Cn+lV3LefiZC3Cwhw=) 3: 3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa (hash: RxAqqGIjAjElrnU8PFN5nKoDC84ZzbZV0l+WFSmmu2o=) 4: 323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa (hash: P4PZgQDgKj+ENiKIZj6iIx0I5gzDEshFCz1sMqi/1X8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:35:17:2e:bb:59:07:f7:8d:b7:6c:d1:0b:49:a3:78:49:98:4b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA Validity Not Before: Jun 3 17:16:25 2025 GMT Not After : Jun 7 02:08:25 2025 GMT Subject: CN=23D3DC3610FC54591F34186C26359869E3E3A46B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1b:2b:70:02:25:f8:ad:42:fd:e9:24:8d:5c: 2a:a3:fe:38:2e:09:e2:7a:61:ad:df:83:24:d3:32: af:2b:a9:94:2f:00:e7:c3:49:27:0c:47:db:61:8a: b9:35:c8:8d:0c:96:80:59:47:53:fe:ed:c5:1b:b4: 83:99:d3:39:e3:d6:29:74:b7:13:22:54:86:17:0d: e3:58:4e:e0:2d:f6:91:d4:5c:07:6a:b3:1e:ce:3b: 21:4b:38:7e:ec:d6:0a:e5:03:97:ab:06:c8:2a:3a: 99:96:63:1b:24:62:c7:22:fc:d2:e1:88:5f:bf:f0: 1b:f2:c9:f5:8e:a5:30:eb:a7:e8:f4:5f:b3:2c:ad: 35:a0:9a:c4:62:86:3f:a9:0c:6f:2b:51:e2:72:fb: dd:fd:4a:e9:0f:a4:73:48:18:34:40:3f:80:b9:28: b3:4f:8e:cd:f9:47:f1:e8:f6:57:8d:0d:5a:ee:bb: 57:07:10:a4:0e:d4:b1:e9:7a:0a:40:ca:fe:27:29: c1:7b:4e:c5:5c:00:d7:83:f9:3a:26:38:7a:2b:3d: 40:ad:c1:c3:1d:c3:ce:0b:43:e0:53:d4:66:24:25: 29:7b:69:83:33:b5:4e:8e:24:07:f8:25:93:19:27: 89:c7:88:f1:8f:87:c4:a2:8d:1f:ba:d8:81:c4:e0: 2e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D3:DC:36:10:FC:54:59:1F:34:18:6C:26:35:98:69:E3:E3:A4:6B X509v3 Authority Key Identifier: keyid:AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:85:28:0b:75:44:45:2c:e3:28:5b:ed:65:63:4f:85:6a:0d: 86:20:72:4f:c3:bf:e8:4e:04:35:ad:21:7f:df:06:41:24:5e: 4d:e9:bf:b7:64:85:97:0b:c8:81:5a:68:0b:a0:ce:4b:66:c2: 86:7d:0a:32:79:34:28:44:12:ab:ed:7c:ba:12:cb:56:19:a2: 64:be:f7:96:20:01:7c:b7:d4:eb:a2:fd:be:8c:71:ec:51:39: 4a:6a:e0:ac:a1:44:a5:94:12:ca:ea:6d:2f:16:f4:99:b5:3c: 43:41:3e:9f:09:60:de:ba:40:83:2d:48:59:ba:97:3d:bc:f6: 0b:89:fa:ef:cd:fd:1e:3c:d5:4e:79:dc:d4:11:fa:06:b9:e4: a5:5b:6b:48:83:41:b8:12:4e:d6:0e:27:ad:f4:8c:02:56:0c: 4b:64:86:e7:65:e9:bb:27:2f:16:90:f7:00:7b:26:7f:65:6c: 00:3a:42:b1:9f:bf:48:ec:d6:37:d8:d8:72:58:2d:d5:5e:e2: 24:f4:43:7c:79:09:29:59:bb:67:5d:e5:d8:24:e6:3b:89:61: 2c:bc:29:93:e8:6e:31:a7:80:bc:e1:94:99:91:47:dd:ad:fe: b0:23:8a:69:ef:c6:47:09:ca:82:12:f2:2c:cd:b6:99:b3:56: 3e:25:a6:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTUXLrtZB/eNt2zRC0mjeEmYS4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQzNjFF RUY0REZCQTAeFw0yNTA2MDMxNzE2MjVaFw0yNTA2MDcwMjA4MjVaMDMxMTAvBgNV BAMTKDIzRDNEQzM2MTBGQzU0NTkxRjM0MTg2QzI2MzU5ODY5RTNFM0E0NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcGytwAiX4rUL96SSNXCqj/jgu CeJ6Ya3fgyTTMq8rqZQvAOfDSScMR9thirk1yI0MloBZR1P+7cUbtIOZ0znj1il0 txMiVIYXDeNYTuAt9pHUXAdqsx7OOyFLOH7s1grlA5erBsgqOpmWYxskYsci/NLh iF+/8BvyyfWOpTDrp+j0X7MsrTWgmsRihj+pDG8rUeJy+939SukPpHNIGDRAP4C5 KLNPjs35R/Ho9leNDVruu1cHEKQO1LHpegpAyv4nKcF7TsVcANeD+TomOHorPUCt wcMdw84LQ+BT1GYkJSl7aYMztU6OJAf4JZMZJ4nHiPGPh8SijR+62IHE4C5pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI9PcNhD8VFkfNBhsJjWYaePjpGswHwYDVR0j BBgwFoAUrM7ONo8EFCUFlA/yn03TYe7037owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDRjYjhkOC0xNTA1LTQ2ODItOWRkYi1mY2Q4NjIwMGI5NjYvMC9BQ0NFQ0UzNjhG MDQxNDI1MDU5NDBGRjI5RjRERDM2MUVFRjRERkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQzNjFFRUY0 REZCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQ0Y2I4ZDgtMTUwNS00NjgyLTlk ZGItZmNkODYyMDBiOTY2LzAvQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQz NjFFRUY0REZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOFKAt1REUs4yhb7WVjT4VqDYYgck/Dv+hO BDWtIX/fBkEkXk3pv7dkhZcLyIFaaAugzktmwoZ9CjJ5NChEEqvtfLoSy1YZomS+ 95YgAXy31Oui/b6McexROUpq4KyhRKWUEsrqbS8W9Jm1PENBPp8JYN66QIMtSFm6 lz289guJ+u/N/R481U553NQR+ga55KVba0iDQbgSTtYOJ630jAJWDEtkhudl6bsn LxaQ9wB7Jn9lbAA6QrGfv0js1jfY2HJYLdVe4iT0Q3x5CSlZu2dd5dgk5juJYSy8 KZPobjGngLzhlJmRR92t/rAjimnvxkcJyoIS8izNtpmzVj4lppo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:29:46 2025 by rpki-client