$ rpki-client -vvf repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft File: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft (raw, json) Hash identifier: 0cHGerEjpdBGx/NcHX2xQFKmB4kLKwrBzXPqDTasY7w= Subject key identifier: 98:A4:1D:EE:EB:CD:F2:7D:44:38:DE:5F:E5:4F:E7:72:A8:90:A9:A7 Authority key identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 Certificate issuer: /CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Certificate serial: 75B03D0DD2C78757F2D8E75365BCE130BA328F47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft Manifest number: 69 Signing time: Fri 06 Jun 2025 12:30:43 +0000 Manifest this update: Fri 06 Jun 2025 12:25:43 +0000 Manifest next update: Mon 09 Jun 2025 21:22:43 +0000 Files and hashes: 1: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: HECbSGD9YK53jdSJKp91llPoIm35SiyeV/gqkOqJG/U=) 2: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl (hash: kXdW4KnPhP+eFIZrQuVqoe4nilfH2ru0QfEtx6kQ6xg=) 3: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: TUftzXS+oj2AbovNghTdsk7dvgxd67++ktxO9Txg2ME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b0:3d:0d:d2:c7:87:57:f2:d8:e7:53:65:bc:e1:30:ba:32:8f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Validity Not Before: Jun 6 12:25:43 2025 GMT Not After : Jun 9 21:22:43 2025 GMT Subject: CN=98A41DEEEBCDF27D4438DE5FE54FE772A890A9A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6d:97:74:85:45:da:a3:8c:11:fb:e5:c2:0f: ca:ed:89:34:35:3d:ac:be:49:d2:69:12:9b:49:3a: 80:0c:75:1a:0d:10:61:88:73:2d:88:05:74:4d:ec: 97:03:a8:de:f0:4e:54:da:62:68:ee:a9:4b:dd:96: 3c:24:99:49:f7:4a:65:91:dc:45:36:b7:f1:17:b9: f2:0a:eb:83:11:0e:bf:1c:6a:af:a6:cc:97:ac:cf: f8:37:a6:39:30:4d:c5:42:6c:b8:86:0e:cd:02:83: 73:52:71:33:10:85:6b:9c:8d:07:8d:87:f8:79:e8: 80:eb:fd:2a:39:e8:42:de:a2:41:fe:24:bd:00:07: 1b:e8:e8:75:51:ab:38:e1:1a:71:92:32:83:74:d9: 7c:b3:40:85:fb:ce:93:47:84:51:36:6d:84:e9:67: fd:c8:ad:80:ae:66:37:d5:80:63:8d:ad:53:88:4f: 6d:06:66:62:f7:73:1e:6d:91:4e:92:79:3c:a2:a1: d7:22:76:7b:ec:9e:57:3b:44:53:6e:4e:a4:66:0e: 65:f7:83:c6:db:fd:e1:1e:ec:00:8e:75:14:39:54: 6f:16:12:1a:5b:fa:3d:ef:76:a1:21:40:58:95:6e: 37:ea:e5:3c:53:b0:09:4b:b9:e2:55:e8:d0:d6:6b: 2a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A4:1D:EE:EB:CD:F2:7D:44:38:DE:5F:E5:4F:E7:72:A8:90:A9:A7 X509v3 Authority Key Identifier: keyid:4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ce:ee:b8:a0:26:55:49:6b:30:fc:36:1f:2e:6b:ea:07:25: b7:02:02:38:02:09:b1:15:3c:01:3b:f5:9f:65:66:40:d2:8c: 84:ce:8d:d2:90:31:e3:fc:7e:5a:cb:bc:9e:9e:0f:fc:94:c9: 9c:27:ee:c9:88:0e:60:ab:c6:99:d2:c0:c4:c0:0f:6c:e3:b5: 57:1e:3d:53:8e:1e:8c:b5:e1:60:07:98:30:00:05:43:8a:a8: 79:53:27:94:69:35:53:0d:01:db:2f:83:bf:d2:76:08:b6:dc: 7e:68:de:93:60:9d:16:60:8f:36:77:f3:4a:2c:25:ac:bc:be: 9f:b9:26:5d:de:72:74:16:df:e1:ed:fa:3c:eb:c9:41:6e:e2: 36:06:2e:99:44:60:26:92:4b:15:1e:48:38:7b:e8:cf:b7:c6: 25:d2:69:9c:05:75:2d:bf:91:47:33:c9:16:41:b3:54:ac:a7: 47:86:a8:1b:0d:25:19:f0:5b:65:ba:68:cf:bd:1e:aa:b8:c5: dc:95:20:d2:ab:1b:42:1d:7e:be:91:15:61:a3:58:bd:10:d1: 6b:d5:e3:08:41:64:78:2f:c7:6e:04:91:85:14:73:c4:17:a9: d1:f6:47:69:46:f7:bf:58:20:92:84:3e:52:b3:53:1c:1c:df: 26:42:eb:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbA9DdLHh1fy2OdTZbzhMLoyj0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZC MzM0QTY1OTAeFw0yNTA2MDYxMjI1NDNaFw0yNTA2MDkyMTIyNDNaMDMxMTAvBgNV BAMTKDk4QTQxREVFRUJDREYyN0Q0NDM4REU1RkU1NEZFNzcyQTg5MEE5QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3bZd0hUXao4wR++XCD8rtiTQ1 Pay+SdJpEptJOoAMdRoNEGGIcy2IBXRN7JcDqN7wTlTaYmjuqUvdljwkmUn3SmWR 3EU2t/EXufIK64MRDr8caq+mzJesz/g3pjkwTcVCbLiGDs0Cg3NScTMQhWucjQeN h/h56IDr/So56ELeokH+JL0ABxvo6HVRqzjhGnGSMoN02XyzQIX7zpNHhFE2bYTp Z/3IrYCuZjfVgGONrVOIT20GZmL3cx5tkU6SeTyiodcidnvsnlc7RFNuTqRmDmX3 g8bb/eEe7ACOdRQ5VG8WEhpb+j3vdqEhQFiVbjfq5TxTsAlLueJV6NDWayrDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmKQd7uvN8n1EON5f5U/ncqiQqacwHwYDVR0j BBgwFoAUSs4K3btb87SbHNpaIxDPBrM0plkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjY5ZDY2Ny0xN2E0LTRmZGQtOWM1Ny0xMTIyMDMzZWY5OTkvMC80QUNFMEFEREJC NUJGM0I0OUIxQ0RBNUEyMzEwQ0YwNkIzMzRBNjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZCMzM0 QTY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENG MDZCMzM0QTY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTO7rigJlVJazD8Nh8ua+oHJbcCAjgCCbEV PAE79Z9lZkDSjITOjdKQMeP8flrLvJ6eD/yUyZwn7smIDmCrxpnSwMTAD2zjtVce PVOOHoy14WAHmDAABUOKqHlTJ5RpNVMNAdsvg7/Sdgi23H5o3pNgnRZgjzZ380os Jay8vp+5Jl3ecnQW3+Ht+jzryUFu4jYGLplEYCaSSxUeSDh76M+3xiXSaZwFdS2/ kUczyRZBs1Ssp0eGqBsNJRnwW2W6aM+9Hqq4xdyVINKrG0Idfr6RFWGjWL0Q0WvV 4whBZHgvx24EkYUUc8QXqdH2R2lG979YIJKEPlKzUxwc3yZC6xg= -----END CERTIFICATE-----Generated at Sat Jun 7 04:14:38 2025 by rpki-client