$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: PxzQvGACpmronPOxKj+wnwzKLgPrs6HbYbzuBDwIWGM= Subject key identifier: 2B:D7:4A:B5:A7:98:A0:76:26:81:B6:6E:A5:2D:10:E6:92:18:33:A2 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 366161F475A064A60471FE8BC4C15E0F738B49AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 038C Signing time: Tue 03 Jun 2025 14:32:24 +0000 Manifest this update: Tue 03 Jun 2025 14:27:24 +0000 Manifest next update: Sat 07 Jun 2025 01:32:24 +0000 Files and hashes: 1: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=) 2: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: KGg2XoAC9esN8MRbEON8LfUCDcMsxq3uOVJZwJxLA64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:61:61:f4:75:a0:64:a6:04:71:fe:8b:c4:c1:5e:0f:73:8b:49:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Jun 3 14:27:24 2025 GMT Not After : Jun 7 01:32:24 2025 GMT Subject: CN=2BD74AB5A798A0762681B66EA52D10E6921833A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:26:5c:ba:36:c4:ee:d1:26:5d:4c:a9:90:ad: bc:ac:eb:0a:5a:d9:a1:e1:1b:69:9f:b4:be:32:8d: b5:39:b9:4c:4b:fc:ee:36:fc:71:0c:f7:97:cd:92: 57:35:92:a1:79:30:63:88:df:cc:b1:2c:d7:47:56: 03:20:78:1d:fd:95:cc:cf:32:f9:75:0c:6c:37:0a: 6e:df:f3:f4:35:7a:a2:21:8a:be:b7:0d:a3:03:90: b3:49:93:88:03:f0:0d:03:da:ef:cb:90:2d:70:06: 20:62:9d:2d:7b:7f:62:4d:e6:d8:01:30:6d:73:4d: ca:a0:91:2b:0e:0b:5a:88:2e:d3:fd:83:2d:cd:66: 7c:70:17:8a:00:11:ca:06:7c:39:f1:ff:c3:3e:5f: 61:b0:41:f6:a3:56:aa:56:85:e4:a9:4e:5d:b1:b9: 1a:33:53:8f:6a:33:4a:bb:a0:a2:53:83:2c:37:f7: 1c:79:5a:7a:85:d0:f4:3a:36:53:46:2b:1a:87:61: bc:16:64:95:b5:0f:9f:39:13:13:bd:22:36:93:72: 9b:23:54:b8:43:61:e0:85:cb:ba:dc:75:f8:df:b1: 6c:df:3f:ba:05:a8:db:f0:34:54:d6:0a:e9:3c:67: 87:65:cc:fe:3c:d8:b0:78:26:fa:46:43:1d:af:bc: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D7:4A:B5:A7:98:A0:76:26:81:B6:6E:A5:2D:10:E6:92:18:33:A2 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e8:e7:85:11:0d:ec:7a:dc:eb:62:d3:4f:4a:64:0d:27:8b: c2:19:65:3f:b3:74:53:2f:6b:d0:6e:4b:48:dc:3c:77:5f:9c: 2f:2f:5d:e4:1c:e3:71:2f:44:37:7e:c1:32:14:c5:72:56:38: 37:6e:61:c9:00:1f:ff:b6:08:fa:88:7a:66:3c:53:c5:d3:68: a4:d1:3f:29:da:87:8e:d7:3c:5b:63:09:8a:0d:e9:47:6a:9e: ae:a4:f5:66:8d:c2:0a:f9:83:4c:05:af:6a:33:39:43:b4:3c: d7:76:10:d1:92:80:a9:a1:8c:74:e5:35:07:17:c6:6b:28:44: 25:92:26:9f:a5:62:be:9e:34:47:d7:e0:cc:4c:89:c6:ac:ec: 8d:74:be:39:45:da:f3:07:ee:7d:be:a5:69:66:3e:e2:cd:b1: 26:0b:e8:f4:d0:01:28:d1:3e:4e:05:05:6e:54:ba:b2:66:8a: 37:6a:34:ef:25:f5:60:d2:65:b6:8d:d2:e6:01:a6:2b:07:82: a1:94:79:c1:2d:1b:58:a3:33:60:52:ed:7a:12:a0:52:4c:db: 96:97:ee:17:bb:0a:7c:21:b1:ca:c2:5e:51:7c:54:8d:13:12: cf:0f:11:4a:01:92:b0:a8:a8:14:b2:30:9a:2c:80:02:0c:00: af:3c:96:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmFh9HWgZKYEcf6LxMFeD3OLSa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNTA2MDMxNDI3MjRaFw0yNTA2MDcwMTMyMjRaMDMxMTAvBgNV BAMTKDJCRDc0QUI1QTc5OEEwNzYyNjgxQjY2RUE1MkQxMEU2OTIxODMzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvJly6NsTu0SZdTKmQrbys6wpa 2aHhG2mftL4yjbU5uUxL/O42/HEM95fNklc1kqF5MGOI38yxLNdHVgMgeB39lczP Mvl1DGw3Cm7f8/Q1eqIhir63DaMDkLNJk4gD8A0D2u/LkC1wBiBinS17f2JN5tgB MG1zTcqgkSsOC1qILtP9gy3NZnxwF4oAEcoGfDnx/8M+X2GwQfajVqpWheSpTl2x uRozU49qM0q7oKJTgyw39xx5WnqF0PQ6NlNGKxqHYbwWZJW1D585ExO9IjaTcpsj VLhDYeCFy7rcdfjfsWzfP7oFqNvwNFTWCuk8Z4dlzP482LB4JvpGQx2vvKAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK9dKtaeYoHYmgbZupS0Q5pIYM6IwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXo54URDex63Oti009KZA0ni8IZZT+zdFMv a9BuS0jcPHdfnC8vXeQc43EvRDd+wTIUxXJWODduYckAH/+2CPqIemY8U8XTaKTR Pynah47XPFtjCYoN6Udqnq6k9WaNwgr5g0wFr2ozOUO0PNd2ENGSgKmhjHTlNQcX xmsoRCWSJp+lYr6eNEfX4MxMicas7I10vjlF2vMH7n2+pWlmPuLNsSYL6PTQASjR Pk4FBW5UurJmijdqNO8l9WDSZbaN0uYBpisHgqGUecEtG1ijM2BS7XoSoFJM25aX 7he7CnwhscrCXlF8VI0TEs8PEUoBkrCoqBSyMJosgAIMAK88lj8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:01 2025 by rpki-client