$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: Fe+Q4+maCOSdchMabVEOdfJ88HYCT7TkGoRpYuHcC/0= Subject key identifier: 96:B9:5D:B3:E0:AB:DC:39:38:12:29:47:EF:0A:1F:B3:C7:37:3D:28 Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 6F695A8C91F3FF82BFF511A798B16190B144FCB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 04CC Signing time: Mon 05 May 2025 04:10:42 +0000 Manifest this update: Mon 05 May 2025 04:05:42 +0000 Manifest next update: Thu 08 May 2025 14:32:42 +0000 Files and hashes: 1: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: GyQ3rTA4havMS5lidJTX5ZhWoHPWWQvhSKW+0x1lFv4=) 2: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: Mb0v9h1dQ2fzKimG/dnv0t/MA1EgX4nopy7o63/fKic=) 3: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: mIQL4Q5wnaduq+Smgc4E/2achiI+t5Z1BEbqpLX1tbs=) 4: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: ii+HEOYSI26ONdCQzTSyl9DTOtWXGw12f4RUOO1wwl4=) 5: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: 3EM09fz5U4vIetkukDcNawwvtS4WV5nD8HmoRxw+WmQ=) 6: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: B2E/iGNq1AJdSAATAU7ddoaWqnOkpCi/pb0Xy2Q/iys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:69:5a:8c:91:f3:ff:82:bf:f5:11:a7:98:b1:61:90:b1:44:fc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: May 5 04:05:42 2025 GMT Not After : May 8 14:32:42 2025 GMT Subject: CN=96B95DB3E0ABDC3938122947EF0A1FB3C7373D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:9c:2d:05:27:38:79:32:27:ed:76:0c:ff: bc:69:c8:2a:2a:53:54:67:4d:6c:95:aa:2d:59:9f: 52:ac:d1:e8:2e:84:52:54:4d:97:03:9a:b5:77:e4: 91:7c:fe:39:90:6c:10:69:b1:8e:d1:5f:df:15:08: 59:1c:73:71:af:43:1e:c1:8e:e7:15:7a:a0:03:81: 2c:43:01:6f:8e:24:73:60:61:e3:56:a9:0c:4e:00: 02:af:5b:a6:6c:36:53:23:31:57:e9:73:57:4b:dc: 0c:b3:8e:4d:06:4b:e9:99:23:6f:a9:a9:e1:d5:f3: 79:cc:db:f0:7c:5a:fb:7e:eb:85:a1:d6:90:77:6b: b3:0d:0d:6a:1d:9c:71:96:f0:d5:f4:61:0e:ae:01: 70:f8:0c:e2:76:a3:e0:d1:9b:a8:01:7f:ab:0f:fd: 9d:37:c7:69:63:ca:28:ba:16:a5:bd:42:78:c2:a9: 8d:62:0e:91:eb:94:4e:d6:8a:d8:a8:59:2c:81:8b: ec:37:13:d9:de:02:a6:51:21:ea:d0:70:9c:fd:37: 40:56:11:35:60:69:8e:7f:ac:ed:88:b5:a0:0e:d6: 99:cf:73:63:24:7b:21:da:38:09:e5:fd:4a:23:ba: 06:50:ca:a9:e7:3d:e5:d4:21:ae:72:b2:d5:97:f0: 6f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B9:5D:B3:E0:AB:DC:39:38:12:29:47:EF:0A:1F:B3:C7:37:3D:28 X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:04:ff:65:1b:fe:2b:24:db:f5:17:b8:b1:c4:cd:a2:45:77: 2f:66:9e:48:5d:d3:ee:73:51:00:5a:61:ea:2f:11:29:95:49: 35:48:0e:ed:60:94:4a:75:e1:1b:bb:66:fa:a5:02:c5:ca:57: 1c:53:55:cd:44:bd:03:71:c6:58:3a:87:8b:d7:a0:83:f9:10: 73:81:ca:f5:d8:42:8b:59:be:f0:96:51:6c:21:54:8d:4e:90: a9:39:27:17:13:51:ba:e9:2f:39:42:72:6f:72:ea:a8:5f:2b: 8a:7c:df:a7:4e:5a:13:53:dc:c4:d9:63:d0:0c:10:f5:f8:30: 7c:05:03:c1:1b:d0:e6:89:e3:e2:91:a6:86:03:17:a3:10:1a: a9:e3:3f:09:02:ec:8b:20:00:8e:02:88:c7:e8:e1:80:66:88: b6:1c:d1:46:ac:77:46:38:67:ad:de:92:d3:02:28:89:08:3a: 85:99:d6:7a:59:76:64:d1:5a:0d:6c:08:26:a4:f0:87:98:c0: 0d:6a:72:11:de:55:38:ca:e4:87:81:ad:35:bb:d6:6f:0a:b4: 77:3f:9b:56:f7:8d:0a:21:fa:9a:f9:0a:df:bd:7b:97:10:09: 51:4c:f9:98:8d:c8:d6:b9:b1:0c:56:9e:08:2e:2d:8d:79:68: d6:e1:6c:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb2lajJHz/4K/9RGnmLFhkLFE/LkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNTA1MDUwNDA1NDJaFw0yNTA1MDgxNDMyNDJaMDMxMTAvBgNV BAMTKDk2Qjk1REIzRTBBQkRDMzkzODEyMjk0N0VGMEExRkIzQzczNzNEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaK5wtBSc4eTIn7XYM/7xpyCoq U1RnTWyVqi1Zn1Ks0eguhFJUTZcDmrV35JF8/jmQbBBpsY7RX98VCFkcc3GvQx7B jucVeqADgSxDAW+OJHNgYeNWqQxOAAKvW6ZsNlMjMVfpc1dL3Ayzjk0GS+mZI2+p qeHV83nM2/B8Wvt+64Wh1pB3a7MNDWodnHGW8NX0YQ6uAXD4DOJ2o+DRm6gBf6sP /Z03x2ljyii6FqW9QnjCqY1iDpHrlE7WitioWSyBi+w3E9neAqZRIerQcJz9N0BW ETVgaY5/rO2ItaAO1pnPc2MkeyHaOAnl/UojugZQyqnnPeXUIa5ystWX8G8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlrlds+Cr3Dk4EilH7wofs8c3PSgwHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUE/2Ub/isk2/UXuLHEzaJFdy9mnkhd0+5z UQBaYeovESmVSTVIDu1glEp14Ru7ZvqlAsXKVxxTVc1EvQNxxlg6h4vXoIP5EHOB yvXYQotZvvCWUWwhVI1OkKk5JxcTUbrpLzlCcm9y6qhfK4p836dOWhNT3MTZY9AM EPX4MHwFA8Eb0OaJ4+KRpoYDF6MQGqnjPwkC7IsgAI4CiMfo4YBmiLYc0Uasd0Y4 Z63ektMCKIkIOoWZ1npZdmTRWg1sCCak8IeYwA1qchHeVTjK5IeBrTW71m8KtHc/ m1b3jQoh+pr5Ct+9e5cQCVFM+ZiNyNa5sQxWngguLY15aNbhbGI= -----END CERTIFICATE-----Generated at Wed May 7 04:41:26 2025 by rpki-client