$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json) Hash identifier: cGqkpmfzKSoWvypcQ+SCun/+NdR4W/W/zoyf1SJ0de0= Subject key identifier: C6:B1:AA:A2:D8:2E:48:38:E6:9D:55:D8:89:EE:A2:7A:AA:31:D0:E9 Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Certificate serial: 137254A7AF1F06FF03C0E70F916E8AEEB8C05232 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft Manifest number: 04BF Signing time: Fri 04 Apr 2025 00:10:55 +0000 Manifest this update: Fri 04 Apr 2025 00:05:55 +0000 Manifest next update: Mon 07 Apr 2025 07:46:55 +0000 Files and hashes: 1: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: m3UVrYJYXFHa8imIrZaT78R5qSwve8jvFtes7Hqd38A=) 2: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: Lyuu3Yv+vfLSZYPjYsbKPzPgnZu6KfdTSML5yCvuon0=) 3: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: q1EQYZ6iNPW3t4LlXf4k/X8bo2aRGJHVd5zj18IK3dM=) 4: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: nIyvPLswrn6JrMQHoCzg0jmauaxB1wQfLPIK6tLcCx8=) 5: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: nbLUx0zwNCy6aQ8A3kpODZGK75+GGwm1EraoXswUfb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 07:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:72:54:a7:af:1f:06:ff:03:c0:e7:0f:91:6e:8a:ee:b8:c0:52:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Validity Not Before: Apr 4 00:05:55 2025 GMT Not After : Apr 7 07:46:55 2025 GMT Subject: CN=C6B1AAA2D82E4838E69D55D889EEA27AAA31D0E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:2d:9b:e6:e4:91:f8:e7:5c:01:cb:74:d9: be:ac:2c:ef:02:c1:67:7d:b2:9e:0a:3f:52:89:04: 11:b1:f7:9d:7a:35:2d:67:8c:9c:10:6b:da:96:fc: 8a:c9:c8:6e:65:79:bd:61:8c:69:0d:14:aa:6a:2a: 28:1a:ea:1d:64:65:5f:c1:dc:11:60:dd:44:46:89: 97:ea:61:4d:3b:81:55:4a:14:62:67:6f:04:ee:29: f4:19:93:ee:71:1d:4f:37:df:c2:61:d3:d0:f4:3d: 08:06:36:0e:4c:9d:15:5f:2c:f5:e2:47:98:24:ab: 1e:a8:7a:de:e9:28:c0:2f:5c:d5:62:de:f5:ef:65: 82:fb:05:a0:30:21:76:36:f8:2d:e2:cf:e3:71:3b: 62:0f:ac:1d:2e:96:64:33:7a:5d:b6:77:9a:35:f1: 93:d5:d0:b4:3f:27:2c:10:ba:27:4c:e7:e4:28:d3: c9:60:37:18:f8:24:de:0e:37:be:d3:ed:c1:a8:2c: 10:cc:6d:9e:b2:3f:dc:68:7b:64:c9:81:2a:07:4b: 71:d3:50:e2:57:fa:a7:07:56:13:09:82:72:a2:17: 34:d0:57:73:dc:9f:e0:e3:f2:d8:97:4a:e2:fb:66: 07:4d:85:b9:a2:7c:4e:8b:38:67:af:6f:0a:a9:aa: b7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B1:AA:A2:D8:2E:48:38:E6:9D:55:D8:89:EE:A2:7A:AA:31:D0:E9 X509v3 Authority Key Identifier: keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:3a:e3:9e:60:4a:1d:18:48:4a:57:41:8a:14:ba:85:55:43: 27:d6:79:0a:dc:db:06:77:be:26:d1:d3:36:77:1e:42:17:b4: 2d:4f:88:51:98:ac:ce:4c:66:7f:60:88:12:cc:df:c6:85:60: ef:4d:f6:42:b4:8d:b4:2d:70:8b:8d:20:3c:7d:f2:99:5d:db: d6:91:1b:80:b7:da:4c:d2:af:3b:df:b8:8f:81:0f:1e:6a:78: 14:28:16:9c:9d:61:09:23:2d:a7:bb:e7:3c:2d:c7:97:57:f7: 54:ce:5d:b8:79:9b:74:7e:26:62:e6:fe:7a:9f:b6:ac:40:2e: 44:b8:75:81:02:0a:b1:1f:44:56:2d:16:79:ce:7c:12:99:c0: e3:68:7c:d3:d7:3f:a3:81:34:e2:60:f9:5d:2c:e2:79:09:8c: 5a:26:04:b6:63:45:b8:2b:69:a2:25:8f:fd:80:68:ff:04:73: 7b:45:be:e0:7f:2c:f5:32:8e:50:5e:08:56:f4:9b:d5:61:16: 79:67:f6:14:f3:19:08:71:0f:26:e8:7d:62:76:3a:b2:0c:8c: c1:1d:a4:02:c8:ec:a6:0f:0b:72:de:43:ab:bc:9f:b5:d7:c6: 79:01:b2:df:c0:bd:66:94:b2:91:40:92:c7:5f:68:50:e2:d4: 77:2d:c8:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3JUp68fBv8DwOcPkW6K7rjAUjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2 QUE5MDM1MzAeFw0yNTA0MDQwMDA1NTVaFw0yNTA0MDcwNzQ2NTVaMDMxMTAvBgNV BAMTKEM2QjFBQUEyRDgyRTQ4MzhFNjlENTVEODg5RUVBMjdBQUEzMUQwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHy2b5uSR+OdcAct02b6sLO8C wWd9sp4KP1KJBBGx9516NS1njJwQa9qW/IrJyG5leb1hjGkNFKpqKiga6h1kZV/B 3BFg3URGiZfqYU07gVVKFGJnbwTuKfQZk+5xHU8338Jh09D0PQgGNg5MnRVfLPXi R5gkqx6oet7pKMAvXNVi3vXvZYL7BaAwIXY2+C3iz+NxO2IPrB0ulmQzel22d5o1 8ZPV0LQ/JywQuidM5+Qo08lgNxj4JN4ON77T7cGoLBDMbZ6yP9xoe2TJgSoHS3HT UOJX+qcHVhMJgnKiFzTQV3Pcn+Dj8tiXSuL7ZgdNhbmifE6LOGevbwqpqrfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxrGqotguSDjmnVXYie6ieqox0OkwHwYDVR0j BBgwFoAUrMPXmrG+9ivACVtvasPzRGqpA1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzU4YzgwZS1hMzI4LTRmOGMtYTAzZi05MWMzYzI2MjE0YTIvMC9BQ0MzRDc5QUIx QkVGNjJCQzAwOTVCNkY2QUMzRjM0NDZBQTkwMzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2QUE5 MDM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0Yz NDQ2QUE5MDM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHA6455gSh0YSEpXQYoUuoVVQyfWeQrc2wZ3 vibR0zZ3HkIXtC1PiFGYrM5MZn9giBLM38aFYO9N9kK0jbQtcIuNIDx98pld29aR G4C32kzSrzvfuI+BDx5qeBQoFpydYQkjLae75zwtx5dX91TOXbh5m3R+JmLm/nqf tqxALkS4dYECCrEfRFYtFnnOfBKZwONofNPXP6OBNOJg+V0s4nkJjFomBLZjRbgr aaIlj/2AaP8Ec3tFvuB/LPUyjlBeCFb0m9VhFnln9hTzGQhxDybofWJ2OrIMjMEd pALI7KYPC3LeQ6u8n7XXxnkBst/AvWaUspFAksdfaFDi1HctyEM= -----END CERTIFICATE-----Generated at Sat Apr 5 22:28:28 2025 by rpki-client