$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: A6EElD0xgd05kDfo0vq40GTbR+xUBpsy6n47UQX3qJo= Subject key identifier: 3C:7C:52:AC:63:F8:E7:6F:E3:6C:1B:2D:47:B4:52:2E:3D:57:53:EE Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 779B025A545ABBF9DB30CF8863A96FB4D8389A57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 04CF Signing time: Mon 12 May 2025 04:21:11 +0000 Manifest this update: Mon 12 May 2025 04:16:11 +0000 Manifest next update: Thu 15 May 2025 14:33:11 +0000 Files and hashes: 1: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: RTnhI30e0+wVJg3wwSc+DV3WBIt7hKNuWTy9wOhuvP4=) 2: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: dxsc/lY5LVIvqlsrGk7iVLSq6qNvcNN7QAwMu4u4bcM=) 3: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: hKuamBAx77CwO86y1A7xDVYWjcy9qi6pO1mapMzXVQk=) 4: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: 3GDWd5HFOus4BUOBTb2uyHOJpRj1Ipbr33f+C8Wt4s8=) 5: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: c+HFHNwk7ROGOZOrajkXbiomeXkfS1dFkGyt5uioGAM=) 6: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: XPO9afBoVf6G3D6scTPU32a6XViZeAJ4e6BikvKZs2k=) 7: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: y7Qq0j4EfiWZTERAoMjrFjVuVHwxk6tWtmZhqDzPKGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 10:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9b:02:5a:54:5a:bb:f9:db:30:cf:88:63:a9:6f:b4:d8:38:9a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: May 12 04:16:11 2025 GMT Not After : May 15 14:33:11 2025 GMT Subject: CN=3C7C52AC63F8E76FE36C1B2D47B4522E3D5753EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f8:94:84:ad:f6:d6:e3:81:3d:19:a7:4c:3e: 7c:35:08:fd:5a:21:60:c0:44:c8:9f:ad:7a:4d:3c: 35:41:d0:12:d9:83:43:02:d8:f0:b6:18:28:3c:41: a2:64:9a:a8:c1:94:5f:79:2d:90:3e:36:d9:c7:a2: dc:08:7e:eb:34:b1:f9:b0:81:5c:07:86:c5:79:21: 77:d1:fd:4f:5f:1e:bc:42:53:18:20:d1:c9:e0:45: be:ec:b0:52:91:cf:75:ff:3f:cb:44:df:e2:a4:c4: 83:df:5e:87:a0:fc:a6:bc:95:b3:cc:fc:61:67:d1: 3e:90:94:2c:cd:b2:80:30:76:f8:d3:fd:f4:de:c8: 56:f4:d5:1f:7e:7a:a7:f9:11:57:dd:43:47:0a:ec: 2e:90:c4:e7:55:41:5a:08:3d:b5:d0:1f:8c:75:39: bc:47:3e:92:19:8a:8c:a2:ea:26:cd:ab:de:cf:2e: 45:9f:04:68:f1:de:62:e3:08:e6:77:ad:63:0e:ba: 2b:41:97:26:19:83:e3:17:2c:0c:7f:32:84:79:f4: cc:a5:74:19:c2:c1:1a:51:ae:d4:a6:99:0e:60:93: f0:4f:83:0f:ac:32:00:b2:88:cc:96:3e:57:28:10: 90:71:db:56:bf:c6:9a:7f:dc:90:e4:aa:ca:5f:6f: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7C:52:AC:63:F8:E7:6F:E3:6C:1B:2D:47:B4:52:2E:3D:57:53:EE X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:93:59:f6:0c:f7:f9:91:01:b4:45:dd:56:dd:26:82:bd:89: 29:89:11:74:f6:f3:48:3e:26:a8:95:c6:db:1e:e3:d6:1e:25: c3:05:d1:ac:21:fd:24:c0:7b:8f:a6:61:5f:d0:6b:cb:c4:be: 41:77:bc:c7:02:b1:0b:d0:3c:c9:1e:01:78:b9:d0:2f:5f:a3: b6:83:6c:c9:ff:72:09:96:f4:eb:62:95:f8:e2:a4:13:c7:c8: 0a:82:b1:16:f9:52:fb:d4:ff:32:e1:d1:4f:1b:cf:09:01:e2: df:6e:f7:44:4e:4a:44:2c:78:b0:44:84:4f:41:d2:83:16:d2: 6a:8e:87:ee:c9:fb:55:ce:15:26:02:c0:1f:8e:a1:1e:40:6c: e2:8f:75:bc:b5:2b:ba:da:3d:56:cc:f5:05:78:91:2c:65:37: 5b:f4:ad:c2:05:74:35:d0:08:6c:cf:cf:52:71:80:5b:8d:d3: 98:16:cb:91:4f:45:59:14:12:80:97:4e:8d:e6:a1:fd:1b:82: 54:d6:35:10:f6:3b:ed:c5:5d:82:f7:d1:3e:53:f7:c9:76:64: d1:8b:38:4d:9d:ce:06:bf:30:38:13:d5:eb:72:cb:06:96:ea: 68:f4:dd:3a:b7:dd:9c:70:68:6e:84:2e:ea:06:2a:a3:85:44: 58:e9:60:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd5sCWlRau/nbMM+IY6lvtNg4mlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNTA1MTIwNDE2MTFaFw0yNTA1MTUxNDMzMTFaMDMxMTAvBgNV BAMTKDNDN0M1MkFDNjNGOEU3NkZFMzZDMUIyRDQ3QjQ1MjJFM0Q1NzUzRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+JSErfbW44E9GadMPnw1CP1a IWDARMifrXpNPDVB0BLZg0MC2PC2GCg8QaJkmqjBlF95LZA+NtnHotwIfus0sfmw gVwHhsV5IXfR/U9fHrxCUxgg0cngRb7ssFKRz3X/P8tE3+KkxIPfXoeg/Ka8lbPM /GFn0T6QlCzNsoAwdvjT/fTeyFb01R9+eqf5EVfdQ0cK7C6QxOdVQVoIPbXQH4x1 ObxHPpIZioyi6ibNq97PLkWfBGjx3mLjCOZ3rWMOuitBlyYZg+MXLAx/MoR59Myl dBnCwRpRrtSmmQ5gk/BPgw+sMgCyiMyWPlcoEJBx21a/xpp/3JDkqspfb/CvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPHxSrGP452/jbBstR7RSLj1XU+4wHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+TWfYM9/mRAbRF3VbdJoK9iSmJEXT280g+ JqiVxtse49YeJcMF0awh/STAe4+mYV/Qa8vEvkF3vMcCsQvQPMkeAXi50C9fo7aD bMn/cgmW9OtilfjipBPHyAqCsRb5UvvU/zLh0U8bzwkB4t9u90ROSkQseLBEhE9B 0oMW0mqOh+7J+1XOFSYCwB+OoR5AbOKPdby1K7raPVbM9QV4kSxlN1v0rcIFdDXQ CGzPz1JxgFuN05gWy5FPRVkUEoCXTo3mof0bglTWNRD2O+3FXYL30T5T98l2ZNGL OE2dzga/MDgT1etyywaW6mj03Tq33ZxwaG6ELuoGKqOFRFjpYFg= -----END CERTIFICATE-----Generated at Mon May 12 15:46:51 2025 by rpki-client