$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: NrBlmN61QBloiTOIE6D+yIjHKLARYC2Xe0X8jayOXdc= Subject key identifier: 25:9A:5F:2E:7D:09:55:38:B8:70:79:6A:34:31:E3:15:FA:D1:1F:9D Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 175BF6771BBA0AA62C9627876A3BAE71FCACE017 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 0166 Signing time: Mon 02 Jun 2025 17:31:22 +0000 Manifest this update: Mon 02 Jun 2025 17:26:22 +0000 Manifest next update: Thu 05 Jun 2025 19:48:22 +0000 Files and hashes: 1: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) 2: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: dgB0sU5KQSQxYxXkTITgGf1jUOsj0Feta43BpWpvkPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 19:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5b:f6:77:1b:ba:0a:a6:2c:96:27:87:6a:3b:ae:71:fc:ac:e0:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Jun 2 17:26:22 2025 GMT Not After : Jun 5 19:48:22 2025 GMT Subject: CN=259A5F2E7D095538B870796A3431E315FAD11F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:e7:0d:50:1d:32:a9:ac:b8:c4:f0:b0:69: 36:64:a7:44:e2:99:cc:33:27:77:9a:bf:84:44:23: b9:91:b1:0f:1e:85:63:20:18:c5:c2:3a:75:fa:7b: 31:8c:4b:36:a2:ee:ea:ce:62:f2:88:13:f7:db:81: ee:b5:ff:9e:cc:fa:1d:66:0d:17:12:d3:b0:b1:aa: 1a:65:ba:65:00:e5:bf:4c:fa:c6:09:f1:d7:f8:72: b2:73:c0:fc:32:43:3f:72:09:de:bf:f5:5a:10:fe: 2a:53:2d:43:82:e3:db:72:59:d2:8c:2d:30:de:f7: 6f:49:39:c1:30:cc:1c:4f:33:ca:59:54:09:d0:80: a9:a3:98:ce:f3:57:f0:2f:3f:30:f1:92:6e:24:af: ce:4f:cf:a3:fb:4d:ac:57:5a:5b:8a:02:e5:9b:ec: fe:29:8d:b2:ca:4e:05:e9:b2:a4:10:53:4b:92:94: 64:cf:dc:88:4e:05:f5:01:01:92:5e:09:cc:28:6a: 72:e1:88:c9:86:63:74:fa:3e:b0:c3:c6:bc:30:63: d6:77:28:15:99:3c:d5:4d:01:41:7e:76:03:e8:cd: 5e:96:07:5a:ee:d0:84:fa:8a:c0:33:c2:e9:7e:5b: 3a:60:fe:62:dd:a1:6f:de:f1:f1:9a:97:cf:99:51: 4b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9A:5F:2E:7D:09:55:38:B8:70:79:6A:34:31:E3:15:FA:D1:1F:9D X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:0f:62:64:7f:46:d8:2d:37:d6:69:16:9c:d2:fd:ff:de:43: b0:87:be:98:11:90:6a:42:a4:bb:14:ec:48:6f:c3:cc:95:66: b9:a9:40:d2:48:ff:2b:d5:48:40:3e:81:5a:e9:a6:c7:f6:9a: 3e:c2:c4:7c:6e:d5:4a:67:7c:a5:ee:6b:80:bf:3c:73:99:87: 93:19:94:be:35:8a:0f:1f:33:54:93:b4:a9:cd:96:80:98:33: 52:df:11:b4:6f:d8:dc:c4:39:8d:8b:5e:b7:ef:ef:6e:38:8d: cc:58:78:40:f8:c1:15:6e:bf:1e:57:21:63:38:7c:5f:df:04: 0e:a4:bd:ca:9a:ae:9b:11:b1:bf:7c:05:04:76:b3:71:7f:cf: 43:2a:b6:d3:cd:01:fc:00:0b:6f:bb:12:03:cb:51:0c:42:09: f3:6b:fd:1e:04:27:f1:e8:83:9d:01:9a:76:d5:c9:a7:9a:a6: 03:af:d1:cc:11:1e:14:e1:27:e4:8d:86:9c:62:69:55:ba:9e: 69:af:99:1b:b3:54:88:e7:a9:94:90:84:19:ce:87:a1:73:08: c0:19:da:4a:e9:13:34:c3:03:10:a8:f3:c6:be:98:4e:28:34: 06:2a:8a:a7:32:22:db:21:a6:dc:0a:52:b0:dc:a8:23:94:5b: 2d:ff:8c:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF1v2dxu6CqYslieHajuucfys4BcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTA2MDIxNzI2MjJaFw0yNTA2MDUxOTQ4MjJaMDMxMTAvBgNV BAMTKDI1OUE1RjJFN0QwOTU1MzhCODcwNzk2QTM0MzFFMzE1RkFEMTFGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRHucNUB0yqay4xPCwaTZkp0Ti mcwzJ3eav4REI7mRsQ8ehWMgGMXCOnX6ezGMSzai7urOYvKIE/fbge61/57M+h1m DRcS07CxqhplumUA5b9M+sYJ8df4crJzwPwyQz9yCd6/9VoQ/ipTLUOC49tyWdKM LTDe929JOcEwzBxPM8pZVAnQgKmjmM7zV/AvPzDxkm4kr85Pz6P7TaxXWluKAuWb 7P4pjbLKTgXpsqQQU0uSlGTP3IhOBfUBAZJeCcwoanLhiMmGY3T6PrDDxrwwY9Z3 KBWZPNVNAUF+dgPozV6WB1ru0IT6isAzwul+Wzpg/mLdoW/e8fGal8+ZUUt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJZpfLn0JVTi4cHlqNDHjFfrRH50wHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYPYmR/RtgtN9ZpFpzS/f/eQ7CHvpgRkGpC pLsU7Ehvw8yVZrmpQNJI/yvVSEA+gVrppsf2mj7CxHxu1UpnfKXua4C/PHOZh5MZ lL41ig8fM1STtKnNloCYM1LfEbRv2NzEOY2LXrfv7244jcxYeED4wRVuvx5XIWM4 fF/fBA6kvcqarpsRsb98BQR2s3F/z0MqttPNAfwAC2+7EgPLUQxCCfNr/R4EJ/Ho g50BmnbVyaeapgOv0cwRHhThJ+SNhpxiaVW6nmmvmRuzVIjnqZSQhBnOh6FzCMAZ 2krpEzTDAxCo88a+mE4oNAYqiqcyItshptwKUrDcqCOUWy3/jHQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:07 2025 by rpki-client