$ rpki-client -vvf repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft File: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft (raw, json) Hash identifier: ZQ66kpH+kbIo4y8S3vconYqA/aYuhGq92gCABiIJ/7g= Subject key identifier: 3B:3E:BE:6E:6F:5C:DA:3F:CC:EB:B2:23:40:3A:C1:E8:86:0F:42:F6 Authority key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 Certificate issuer: /CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Certificate serial: 6671B2411E034E47D7CDD8A329048BE5A3B6F4A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft Manifest number: 03A5 Signing time: Mon 02 Jun 2025 17:00:02 +0000 Manifest this update: Mon 02 Jun 2025 16:55:02 +0000 Manifest next update: Fri 06 Jun 2025 00:24:02 +0000 Files and hashes: 1: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl (hash: fJXmQxo41XWYeRCN1uJUnjAiCV/hUzoiEq6ciDtkjzk=) 2: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: x0OQqyyh84xdArHozU+dSgyqUpzyJ86TNYhGyZIH4/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:71:b2:41:1e:03:4e:47:d7:cd:d8:a3:29:04:8b:e5:a3:b6:f4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Validity Not Before: Jun 2 16:55:02 2025 GMT Not After : Jun 6 00:24:02 2025 GMT Subject: CN=3B3EBE6E6F5CDA3FCCEBB223403AC1E8860F42F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:cc:a1:99:7a:c3:40:70:d5:7b:d7:5c:f7: 61:47:64:f2:08:2d:f5:2d:5b:aa:ae:fd:a9:6b:d3: b5:81:2c:58:87:ce:03:25:d3:7c:0d:3d:14:a2:f6: 27:bd:5c:29:e7:32:06:ab:e9:30:fc:04:6d:2e:93: 58:49:78:b7:75:27:df:a8:fb:1e:38:2e:34:2b:fc: cf:f0:99:32:61:73:d8:1c:9b:6e:eb:3a:e0:aa:c7: 0c:23:42:b2:74:de:bc:00:ed:c0:9f:9b:59:64:21: bc:6f:a0:40:76:ba:58:e2:fd:3c:85:cb:50:3a:aa: 2e:10:9d:32:d8:1a:2c:1b:13:e0:e7:89:2c:62:c6: 72:38:92:bf:f0:77:87:21:89:5e:54:5d:2a:49:45: b6:29:df:fb:8a:57:4f:19:a0:f5:99:a2:c5:74:fd: a2:c3:98:30:fd:45:0d:e2:6b:83:0d:dc:e7:2f:5a: 8b:89:c9:75:28:6e:3c:3c:96:1d:5a:4c:07:10:42: 01:cc:1a:db:72:12:5c:0e:80:cd:30:83:f3:88:0c: a4:ec:d4:ff:fb:74:4e:d0:2f:20:42:1c:ab:09:3e: 8e:62:6d:be:7a:e0:b9:cb:f8:a1:8e:be:d0:ff:e8: ed:83:a7:e3:80:5c:ed:2d:81:20:01:d3:74:8b:46: 92:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3E:BE:6E:6F:5C:DA:3F:CC:EB:B2:23:40:3A:C1:E8:86:0F:42:F6 X509v3 Authority Key Identifier: keyid:AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:98:ab:fd:b6:e2:e1:76:b3:5b:f3:1c:da:ad:2c:68:be:73: c9:5f:d5:63:2b:a6:eb:f1:a6:6c:ef:16:8b:34:60:b0:7f:d0: f1:f3:9a:b2:2e:2f:35:ce:fb:ae:29:19:c9:3e:4e:7f:8b:f5: 95:93:3b:79:77:ae:7b:63:bd:1b:af:c4:75:75:d0:30:20:8a: 3b:4a:6b:34:c9:c7:a3:cf:0e:30:c9:45:b7:ac:dc:d5:e1:dd: 73:6b:12:a4:41:11:3d:9f:87:c3:cf:33:cd:8e:e9:f1:19:66: 76:98:b2:d7:56:cf:c1:7f:1b:2c:f4:c6:94:22:ec:ef:a5:a6: 3e:a8:b7:68:a8:12:ea:96:bb:ae:c1:a3:16:33:64:35:1b:a1: ca:56:37:6f:26:e9:a4:dd:87:3c:21:59:83:d5:3e:fb:ba:b0: 61:4c:e8:94:f2:b8:de:f4:f1:a4:e1:b4:4b:0e:ba:e9:ae:47: b8:28:e8:3f:71:e8:29:c0:3f:0d:4a:99:51:e1:2a:c1:42:c2: 0b:33:0f:35:bc:ba:06:e5:e1:88:c5:b4:ce:12:f1:1a:2b:ed: 4e:6b:c4:3c:30:53:4b:9a:ad:81:eb:94:9f:9f:6f:1d:8a:c1: dd:9c:b1:7b:17:48:6a:a6:28:c7:8c:5f:96:38:f8:a5:6b:a1: e2:76:61:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnGyQR4DTkfXzdijKQSL5aO29KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgz Q0QwN0M3MzAeFw0yNTA2MDIxNjU1MDJaFw0yNTA2MDYwMDI0MDJaMDMxMTAvBgNV BAMTKDNCM0VCRTZFNkY1Q0RBM0ZDQ0VCQjIyMzQwM0FDMUU4ODYwRjQyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpT8yhmXrDQHDVe9dc92FHZPII LfUtW6qu/alr07WBLFiHzgMl03wNPRSi9ie9XCnnMgar6TD8BG0uk1hJeLd1J9+o +x44LjQr/M/wmTJhc9gcm27rOuCqxwwjQrJ03rwA7cCfm1lkIbxvoEB2ulji/TyF y1A6qi4QnTLYGiwbE+DniSxixnI4kr/wd4chiV5UXSpJRbYp3/uKV08ZoPWZosV0 /aLDmDD9RQ3ia4MN3OcvWouJyXUobjw8lh1aTAcQQgHMGttyElwOgM0wg/OIDKTs 1P/7dE7QLyBCHKsJPo5ibb564LnL+KGOvtD/6O2Dp+OAXO0tgSAB03SLRpKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOz6+bm9c2j/M67IjQDrB6IYPQvYwHwYDVR0j BBgwFoAUrNoCL38+KKbhMdqA1MQY6DzQfHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmViYjY4YS04YTVkLTQxMWMtOGJiMy04MzM0MjMxMDBiNmUvMC9BQ0RBMDIyRjdG M0UyOEE2RTEzMURBODBENEM0MThFODNDRDA3QzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgzQ0Qw N0M3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZlYmI2OGEtOGE1ZC00MTFjLThi YjMtODMzNDIzMTAwYjZlLzAvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4 RTgzQ0QwN0M3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyYq/224uF2s1vzHNqtLGi+c8lf1WMrpuvx pmzvFos0YLB/0PHzmrIuLzXO+64pGck+Tn+L9ZWTO3l3rntjvRuvxHV10DAgijtK azTJx6PPDjDJRbes3NXh3XNrEqRBET2fh8PPM82O6fEZZnaYstdWz8F/Gyz0xpQi 7O+lpj6ot2ioEuqWu67BoxYzZDUbocpWN28m6aTdhzwhWYPVPvu6sGFM6JTyuN70 8aThtEsOuumuR7go6D9x6CnAPw1KmVHhKsFCwgszDzW8ugbl4YjFtM4S8Ror7U5r xDwwU0uarYHrlJ+fbx2Kwd2csXsXSGqmKMeMX5Y4+KVroeJ2YVA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:21 2025 by rpki-client