$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json) Hash identifier: Im6ebXqx9hhxlUBsgTEHdnFGhqOmgRLn3zzjETmEMJg= Subject key identifier: 40:CF:62:4E:AE:F3:A9:EF:8D:DC:F1:A5:5B:74:F9:62:4A:F3:A7:F8 Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Certificate serial: 659002EE28D11D4EE1BBA5C175548DE6D783EB5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft Manifest number: 04DB Signing time: Wed 04 Jun 2025 10:20:56 +0000 Manifest this update: Wed 04 Jun 2025 10:15:56 +0000 Manifest next update: Sat 07 Jun 2025 10:32:56 +0000 Files and hashes: 1: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: UUI0UvU6AUH37Q/H9zW8u0Apq7Y6pN001mJMdkH8taI=) 2: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: JE0sJw2Y30gQbCmAIhnjpinJa8eG7Fgewlr8Jax6ero=) 3: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: XTrAUzINtImcd3F+XaTVo5H750rmDxdeBt+LpGOrxS4=) 4: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: ejfVv9si1K2MpeXhh8zMJGLdHAeeV0dhSQaga8rtoCM=) 5: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: FFDd2q2kZLyhpExHyIbcSg82ZSOm6A3WW7Q9rvlaJZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:90:02:ee:28:d1:1d:4e:e1:bb:a5:c1:75:54:8d:e6:d7:83:eb:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Validity Not Before: Jun 4 10:15:56 2025 GMT Not After : Jun 7 10:32:56 2025 GMT Subject: CN=40CF624EAEF3A9EF8DDCF1A55B74F9624AF3A7F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:0f:4b:52:81:2b:d0:7f:cc:ad:63:24:f0: 0a:b8:ae:ad:4b:5b:66:10:25:2d:4a:e4:f9:81:9f: 5d:8a:73:76:60:ed:55:79:e9:b9:52:cb:a5:87:a4: 16:e9:59:ed:fa:2c:42:c2:22:69:0b:02:a1:1f:c9: fe:ff:40:ee:8a:7a:1c:89:63:75:d8:97:53:10:39: a0:ab:83:8c:07:d7:a6:9e:65:6e:8c:0b:9d:66:8a: eb:b7:d5:5a:eb:c6:07:51:85:ab:5e:b2:3d:aa:e2: 08:ae:4f:a9:b0:45:cc:50:bb:b2:d3:95:38:ff:f7: aa:0a:1c:f4:a4:25:07:8b:3f:54:d1:a4:59:cb:66: 1c:20:4f:0e:7e:44:92:a8:92:73:0f:6a:49:02:f6: 95:a5:03:06:bc:d3:61:70:85:3a:3b:eb:d3:ad:c9: c2:f0:9d:21:d4:a6:ab:cd:fe:28:2b:23:34:98:d1: a6:5d:e6:44:19:e7:43:96:92:9f:14:55:2e:db:13: 1a:77:0e:59:85:a3:de:0c:75:e5:47:9f:cd:10:c4: 23:a4:dd:99:ab:3f:43:95:f3:cf:0c:95:5a:a9:5e: df:01:52:08:01:1f:37:2b:c6:0c:d4:18:25:2f:0c: 08:11:40:10:a1:5d:c2:99:ca:c8:c6:12:a6:30:66: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CF:62:4E:AE:F3:A9:EF:8D:DC:F1:A5:5B:74:F9:62:4A:F3:A7:F8 X509v3 Authority Key Identifier: keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c0:77:6b:7c:0f:7b:eb:5f:6d:03:d9:51:a5:9f:c7:38:57: db:32:73:d4:f3:01:5b:8f:b9:26:03:6d:8a:d0:f4:79:37:fb: 24:58:82:a6:cf:3b:43:9c:ce:fa:ed:71:a7:2b:0b:f0:88:87: 43:7e:6a:4a:51:31:ea:ae:c2:c9:62:38:b0:02:a6:ba:a5:c8: dc:92:71:79:8b:2a:34:64:9f:79:cb:20:88:06:33:d0:b3:2b: 7d:50:49:b4:89:0c:47:89:fe:34:77:e0:82:77:75:da:c6:cf: ec:de:17:e0:7b:e1:f9:29:91:38:6b:67:ee:21:d5:ff:f0:12: 04:ba:e5:ec:c3:47:a1:a5:b3:29:48:f9:23:15:2f:bc:4d:1c: cf:a8:01:2a:ff:ab:61:0f:8d:78:dd:09:bc:cb:12:e0:90:02: ee:80:d1:93:b2:1f:4b:c8:f8:72:30:5a:0d:34:db:99:08:e6: 5a:8a:2b:63:22:8d:79:8c:e9:a8:2e:2c:30:42:7c:14:cc:97: d0:ad:de:c6:c6:13:c8:84:1f:29:b4:a1:a4:b8:a7:03:a2:c7: fe:43:55:0d:d8:af:d6:f0:c2:1e:58:5d:71:23:37:8d:39:af: 06:00:43:6f:1f:2f:5f:7e:5f:4d:ed:f5:93:34:a0:6c:02:58: b6:28:cf:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZAC7ijRHU7hu6XBdVSN5teD614wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2 QUE5MDM1MzAeFw0yNTA2MDQxMDE1NTZaFw0yNTA2MDcxMDMyNTZaMDMxMTAvBgNV BAMTKDQwQ0Y2MjRFQUVGM0E5RUY4RERDRjFBNTVCNzRGOTYyNEFGM0E3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKg9LUoEr0H/MrWMk8Aq4rq1L W2YQJS1K5PmBn12Kc3Zg7VV56blSy6WHpBbpWe36LELCImkLAqEfyf7/QO6KehyJ Y3XYl1MQOaCrg4wH16aeZW6MC51miuu31VrrxgdRhatesj2q4giuT6mwRcxQu7LT lTj/96oKHPSkJQeLP1TRpFnLZhwgTw5+RJKoknMPakkC9pWlAwa802FwhTo769Ot ycLwnSHUpqvN/igrIzSY0aZd5kQZ50OWkp8UVS7bExp3DlmFo94MdeVHn80QxCOk 3ZmrP0OV888MlVqpXt8BUggBHzcrxgzUGCUvDAgRQBChXcKZysjGEqYwZsqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQM9iTq7zqe+N3PGlW3T5Ykrzp/gwHwYDVR0j BBgwFoAUrMPXmrG+9ivACVtvasPzRGqpA1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzU4YzgwZS1hMzI4LTRmOGMtYTAzZi05MWMzYzI2MjE0YTIvMC9BQ0MzRDc5QUIx QkVGNjJCQzAwOTVCNkY2QUMzRjM0NDZBQTkwMzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2QUE5 MDM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0Yz NDQ2QUE5MDM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLAd2t8D3vrX20D2VGln8c4V9syc9TzAVuP uSYDbYrQ9Hk3+yRYgqbPO0OczvrtcacrC/CIh0N+akpRMequwsliOLACprqlyNyS cXmLKjRkn3nLIIgGM9CzK31QSbSJDEeJ/jR34IJ3ddrGz+zeF+B74fkpkThrZ+4h 1f/wEgS65ezDR6GlsylI+SMVL7xNHM+oASr/q2EPjXjdCbzLEuCQAu6A0ZOyH0vI +HIwWg0025kI5lqKK2MijXmM6aguLDBCfBTMl9Ct3sbGE8iEHym0oaS4pwOix/5D VQ3Yr9bwwh5YXXEjN405rwYAQ28fL19+X03t9ZM0oGwCWLYoz7o= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:10 2025 by rpki-client