$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: ALMy1s+UvakI0DhgETqLpmyP2Jzgj9XmIPQWvw5wu0M= Subject key identifier: 09:68:71:F1:B0:64:EF:F2:15:E3:3C:E4:36:6A:10:C0:D2:48:C9:04 Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 062DB45D7A3965488614A1128712F041400FDDBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: 86 Signing time: Thu 05 Jun 2025 00:50:01 +0000 Manifest this update: Thu 05 Jun 2025 00:45:01 +0000 Manifest next update: Sun 08 Jun 2025 06:32:01 +0000 Files and hashes: 1: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: cMtQHsAjsc+UCp9m0IxyUgJVL0BoFFLQW7rALDPWehU=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: Ga+yghCCzynYQRLXxC8Ud9CUE2ETMSKZ2vuWiIruJEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2d:b4:5d:7a:39:65:48:86:14:a1:12:87:12:f0:41:40:0f:dd:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Jun 5 00:45:01 2025 GMT Not After : Jun 8 06:32:01 2025 GMT Subject: CN=096871F1B064EFF215E33CE4366A10C0D248C904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f8:a2:7d:6a:9c:ac:93:7c:cd:ae:af:b4:ea: 2a:bf:af:5e:d0:2c:cc:4c:3d:9d:a3:c8:9e:4f:40: 7f:05:24:2c:3b:f2:cc:10:12:6e:a9:21:42:5c:24: dc:eb:94:77:dc:3b:89:66:f5:69:1c:88:f0:06:f2: 64:fb:4c:ca:00:1b:5f:77:19:ae:6d:bd:36:f3:3c: 06:28:47:54:50:c2:f1:06:68:65:48:d1:03:69:e1: 07:02:5b:52:ad:74:d6:40:fd:f2:3f:28:48:d7:92: 21:09:76:1c:27:76:47:65:e0:0c:25:66:cf:be:22: 1e:7a:88:00:80:b4:36:e6:57:c1:8f:0c:58:9a:e5: 12:ce:3a:97:09:5c:bc:ec:dd:ac:75:9a:ef:57:0f: 75:e3:31:f9:13:9f:4d:06:72:8c:32:0f:78:d5:01: 9d:f6:2b:a7:ae:8b:03:26:7a:97:43:c2:24:3f:da: 18:4b:46:33:08:5a:c9:cc:8c:34:0b:c7:3f:8b:d0: 92:6d:c5:5f:f8:77:d7:13:d7:1b:90:93:f2:df:7f: ac:d0:c2:41:b9:c7:0b:bd:5c:e4:c7:6b:03:75:5f: d8:82:fd:57:d8:cc:2f:52:7d:14:04:6c:dd:80:3b: 46:78:96:07:7c:33:1b:56:7d:89:02:ba:80:fa:55: ef:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:68:71:F1:B0:64:EF:F2:15:E3:3C:E4:36:6A:10:C0:D2:48:C9:04 X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:85:a3:21:e2:a3:bf:73:dc:37:57:9b:79:66:3b:e6:1f:7a: 21:27:c2:58:de:6f:8f:40:0d:6b:2c:37:78:a2:c4:6b:3b:2e: 03:4b:d5:53:6c:b4:9b:50:e5:03:ce:7e:f3:72:fb:fd:91:d2: 46:a7:e0:fa:5a:70:7b:e0:47:cc:c5:33:da:65:c9:1c:dc:92: db:c7:8c:f8:b9:f9:c6:30:9d:9a:ce:f4:c5:8a:40:f8:18:1d: 0e:ed:63:7b:0d:f1:50:05:9f:84:d1:d6:92:69:d8:dd:58:9b: 98:28:28:24:c6:be:7b:69:cf:09:3a:41:18:97:f9:4c:52:a5: f9:d0:8a:df:d3:cb:45:22:20:fa:9a:96:53:a1:32:8b:29:be: b2:9d:d4:e4:65:62:74:b4:1e:4b:f9:5a:48:e2:dd:07:f4:df: 37:fe:8c:93:1d:7f:05:9d:c7:13:3d:ea:09:21:32:18:24:97: bb:f3:a6:4b:3d:3e:39:9a:34:1c:ca:57:21:e3:19:2f:4d:05: 7c:26:c3:df:18:a9:36:58:93:25:f7:91:51:0c:6a:e6:be:b0: 4a:73:37:b2:2e:1b:77:88:f8:fd:d1:be:0a:92:79:6b:c0:b2: eb:65:bf:13:d0:b2:e0:0f:6f:ae:62:86:79:13:80:0f:3f:e1: 91:9d:74:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBi20XXo5ZUiGFKEShxLwQUAP3b8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNTA2MDUwMDQ1MDFaFw0yNTA2MDgwNjMyMDFaMDMxMTAvBgNV BAMTKDA5Njg3MUYxQjA2NEVGRjIxNUUzM0NFNDM2NkExMEMwRDI0OEM5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3+KJ9apysk3zNrq+06iq/r17Q LMxMPZ2jyJ5PQH8FJCw78swQEm6pIUJcJNzrlHfcO4lm9WkciPAG8mT7TMoAG193 Ga5tvTbzPAYoR1RQwvEGaGVI0QNp4QcCW1KtdNZA/fI/KEjXkiEJdhwndkdl4Awl Zs++Ih56iACAtDbmV8GPDFia5RLOOpcJXLzs3ax1mu9XD3XjMfkTn00GcowyD3jV AZ32K6euiwMmepdDwiQ/2hhLRjMIWsnMjDQLxz+L0JJtxV/4d9cT1xuQk/Lff6zQ wkG5xwu9XOTHawN1X9iC/VfYzC9SfRQEbN2AO0Z4lgd8MxtWfYkCuoD6Ve9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCWhx8bBk7/IV4zzkNmoQwNJIyQQwHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeFoyHio79z3DdXm3lmO+YfeiEnwljeb49A DWssN3iixGs7LgNL1VNstJtQ5QPOfvNy+/2R0kan4PpacHvgR8zFM9plyRzcktvH jPi5+cYwnZrO9MWKQPgYHQ7tY3sN8VAFn4TR1pJp2N1Ym5goKCTGvntpzwk6QRiX +UxSpfnQit/Ty0UiIPqallOhMospvrKd1ORlYnS0Hkv5Wkji3Qf03zf+jJMdfwWd xxM96gkhMhgkl7vzpks9PjmaNBzKVyHjGS9NBXwmw98YqTZYkyX3kVEMaua+sEpz N7IuG3eI+P3RvgqSeWvAsutlvxPQsuAPb65ihnkTgA8/4ZGddGQ= -----END CERTIFICATE-----Generated at Fri Jun 6 19:29:39 2025 by rpki-client