$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft File: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft (raw, json) Hash identifier: cQk1cEX+vcvfBSpR3NX6P7VZstgu2i92LY6/AJX78vw= Subject key identifier: 62:D8:B3:05:4B:32:23:BD:D2:2B:65:83:6B:84:48:F6:9B:FA:28:D6 Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C Certificate issuer: /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Certificate serial: 5C46F343D13DB38CB16528D61CAC82AA2A2E5AA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft Manifest number: 01A8 Signing time: Thu 03 Apr 2025 20:22:12 +0000 Manifest this update: Thu 03 Apr 2025 20:17:12 +0000 Manifest next update: Sun 06 Apr 2025 23:34:12 +0000 Files and hashes: 1: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl (hash: 8rcFm//w7P0JRm0Exo8DGrggaAjYOKl6PqLTtr/zcto=) 2: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: 0Uw2PIlWDAGE9EAdIQN+cpycFZFDrSr303RCOe7U/E8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 23:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:46:f3:43:d1:3d:b3:8c:b1:65:28:d6:1c:ac:82:aa:2a:2e:5a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Validity Not Before: Apr 3 20:17:12 2025 GMT Not After : Apr 6 23:34:12 2025 GMT Subject: CN=62D8B3054B3223BDD22B65836B8448F69BFA28D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:03:9c:aa:5c:48:46:1c:12:55:02:c4:d0: 36:4c:d6:f9:58:0a:8b:7f:53:44:59:52:ad:d3:dc: ad:b4:7b:9b:56:7b:a1:5f:b2:4b:1b:d9:6d:dc:de: 7b:f3:2f:e2:aa:87:b1:93:cf:6b:5f:5d:d2:54:16: 9d:8d:be:f4:ac:68:64:d9:52:83:82:fd:9f:04:f3: 55:5a:cf:07:dc:87:df:d6:64:ca:72:05:87:b1:5d: ee:97:f8:f7:44:8b:75:79:31:6d:6c:4a:6e:67:1c: b4:f1:1e:6d:2b:5e:06:ed:87:5f:a5:6d:ce:1a:5f: 46:b1:a2:3d:4b:5a:85:17:24:b0:ed:12:31:ac:5f: ef:09:58:0e:18:8e:ff:7d:35:4c:f9:e0:9b:24:06: da:05:d0:40:1f:cb:d0:f9:23:ab:c1:c1:6b:28:be: 9e:f5:64:b2:15:9f:18:55:22:ca:3b:e8:76:f6:0f: 4c:31:f4:4f:34:32:a9:e4:3c:be:a9:be:dd:c6:5b: 48:2b:e1:a7:66:a5:59:3d:87:52:5b:60:81:90:59: 2d:97:25:38:d3:b2:cc:82:cc:66:be:ff:50:64:df: 72:5a:19:c2:1e:61:42:97:9a:be:be:94:31:5e:57: e7:40:57:a1:40:0c:f6:67:57:b6:37:45:cc:d9:b1: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D8:B3:05:4B:32:23:BD:D2:2B:65:83:6B:84:48:F6:9B:FA:28:D6 X509v3 Authority Key Identifier: keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:f0:88:f5:69:8d:76:4f:dc:be:74:fe:f6:aa:4d:f8:05:e3: 2d:26:cb:28:65:8b:bb:0f:a2:65:6b:b8:54:e7:40:b0:63:5e: a3:a0:e9:da:73:53:69:09:2d:93:6f:cd:52:9c:bb:76:6a:1c: 9f:f1:c3:f9:c2:ab:2b:f0:2d:dd:6c:dc:7f:79:2c:38:6a:87: 88:3f:ca:da:c1:de:fc:fe:53:dd:d4:2a:b6:c9:e2:a1:e2:88: 91:c8:db:ae:d2:9e:7e:c7:d1:f2:d0:73:91:f8:ed:bc:ac:e6: 01:03:3c:6c:25:f8:c1:61:e7:a1:3c:f1:96:1d:14:57:e4:2b: 9d:e5:6f:19:6a:64:92:f2:aa:5c:a0:49:4e:4c:ba:ae:86:f2: 45:3a:9e:49:42:5a:2e:95:21:5f:7a:1b:bf:ab:b9:a8:10:b6: fd:f6:d1:ba:b0:8c:1b:36:f8:f6:d4:58:22:75:c3:bf:1e:58: ef:28:f2:a0:95:e5:37:30:7a:79:fb:aa:8e:a5:0b:14:79:03: 7f:3a:3e:ce:3a:14:24:b0:eb:67:9e:0d:7a:98:30:c2:12:6c: 08:3a:dd:d3:a3:e1:cd:72:d9:33:75:06:a0:3e:66:85:57:62: e4:d2:30:a7:a1:90:fc:74:80:a3:01:62:19:97:73:c3:4b:51: 00:21:a7:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEbzQ9E9s4yxZSjWHKyCqiouWqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FD N0EzNTE1QzAeFw0yNTA0MDMyMDE3MTJaFw0yNTA0MDYyMzM0MTJaMDMxMTAvBgNV BAMTKDYyRDhCMzA1NEIzMjIzQkREMjJCNjU4MzZCODQ0OEY2OUJGQTI4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYQOcqlxIRhwSVQLE0DZM1vlY Cot/U0RZUq3T3K20e5tWe6Ffsksb2W3c3nvzL+Kqh7GTz2tfXdJUFp2NvvSsaGTZ UoOC/Z8E81Vazwfch9/WZMpyBYexXe6X+PdEi3V5MW1sSm5nHLTxHm0rXgbth1+l bc4aX0axoj1LWoUXJLDtEjGsX+8JWA4Yjv99NUz54JskBtoF0EAfy9D5I6vBwWso vp71ZLIVnxhVIso76Hb2D0wx9E80MqnkPL6pvt3GW0gr4admpVk9h1JbYIGQWS2X JTjTssyCzGa+/1Bk33JaGcIeYUKXmr6+lDFeV+dAV6FADPZnV7Y3RczZsRzrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYtizBUsyI73SK2WDa4RI9pv6KNYwHwYDVR0j BBgwFoAUEaycrM6ar9ZuQYPm4OWZOsejUVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWJiZTVjMC03OWVkLTQ2ZmEtODk4OS04OGQ4YWNjODdjZjgvMC8xMUFDOUNBQ0NF OUFBRkQ2NkU0MTgzRTZFMEU1OTkzQUM3QTM1MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FDN0Ez NTE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5 ODktODhkOGFjYzg3Y2Y4LzAvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5 M0FDN0EzNTE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvwiPVpjXZP3L50/vaqTfgF4y0myyhli7sP omVruFTnQLBjXqOg6dpzU2kJLZNvzVKcu3ZqHJ/xw/nCqyvwLd1s3H95LDhqh4g/ ytrB3vz+U93UKrbJ4qHiiJHI267Snn7H0fLQc5H47bys5gEDPGwl+MFh56E88ZYd FFfkK53lbxlqZJLyqlygSU5Muq6G8kU6nklCWi6VIV96G7+ruagQtv320bqwjBs2 +PbUWCJ1w78eWO8o8qCV5Tcwenn7qo6lCxR5A386Ps46FCSw62eeDXqYMMISbAg6 3dOj4c1y2TN1BqA+ZoVXYuTSMKehkPx0gKMBYhmXc8NLUQAhp4c= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:22 2025 by rpki-client