$ rpki-client -vvf repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft File: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft (raw, json) Hash identifier: V6kKYKw4FGKGLInUt0FIuX7oJw745OsdGS+uN41RO1Y= Subject key identifier: 2D:80:EB:79:B1:75:21:0A:24:77:5A:AF:BA:F5:40:20:A9:EE:93:EB Authority key identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 Certificate issuer: /CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Certificate serial: 4C87E1EE0E6A3D69DEB0A2949C8D0628C9555795 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft Manifest number: 8B Signing time: Sat 23 Aug 2025 15:10:45 +0000 Manifest this update: Sat 23 Aug 2025 15:05:45 +0000 Manifest next update: Tue 26 Aug 2025 21:34:45 +0000 Files and hashes: 1: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: TUftzXS+oj2AbovNghTdsk7dvgxd67++ktxO9Txg2ME=) 2: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl (hash: 3GayH0Q42H+a5tUroe/ewE5JCPueOttC032LQN7+Ocg=) 3: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: HECbSGD9YK53jdSJKp91llPoIm35SiyeV/gqkOqJG/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:87:e1:ee:0e:6a:3d:69:de:b0:a2:94:9c:8d:06:28:c9:55:57:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Validity Not Before: Aug 23 15:05:45 2025 GMT Not After : Aug 26 21:34:45 2025 GMT Subject: CN=2D80EB79B175210A24775AAFBAF54020A9EE93EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:05:86:77:81:a1:12:cb:49:1e:5b:0b:1c: 7d:ba:2d:17:cf:a1:cb:19:97:e6:d5:54:fe:f4:e9: a6:07:91:d3:53:dc:08:a6:04:ba:78:d2:cd:cc:13: 90:ad:e2:43:69:b7:e9:00:df:17:8e:53:72:e0:87: bc:7b:28:fe:c7:b1:9e:5d:ee:62:f7:e2:e6:59:b9: a1:04:3e:0b:ff:6e:48:a1:df:59:1f:c7:c7:7f:c6: d7:c3:54:41:d5:01:89:ca:2a:6f:8c:55:20:8a:05: 59:32:da:17:4a:73:2b:77:b7:e0:ec:af:34:aa:bb: a5:52:11:bb:52:6b:71:52:2d:30:d1:b1:d0:9a:46: 3c:75:b0:ea:df:74:40:8f:c7:ca:44:b9:ed:3d:06: 1c:57:f1:f8:c3:05:75:e2:05:d9:1a:91:fb:ab:2a: 79:83:ec:7a:1d:1d:a3:a8:f6:a3:b6:2f:d5:b5:bc: 98:b6:79:e2:22:88:4d:f5:2f:30:76:3e:0e:18:39: 2a:e5:6f:96:23:36:ed:f9:65:98:3b:ec:54:93:37: 02:cf:b3:08:87:61:e2:8a:2f:10:d8:6f:9a:63:1e: 9a:88:06:46:48:c7:39:b5:f8:b0:03:a0:e9:0f:4f: 13:33:45:d7:19:5b:ef:d5:64:ad:98:a7:28:b3:dd: 91:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:80:EB:79:B1:75:21:0A:24:77:5A:AF:BA:F5:40:20:A9:EE:93:EB X509v3 Authority Key Identifier: keyid:4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:99:c0:e6:1f:cb:0b:94:47:cb:ce:2e:4e:83:a9:84:83:42: 84:de:71:ef:a6:38:c4:eb:95:a4:1b:7a:fc:00:dc:bb:6f:1b: bb:1c:cb:c8:f1:b4:d7:b3:b1:f2:06:99:71:21:e7:9f:fa:c2: c3:8c:88:35:51:d0:e7:93:f4:d6:6f:e1:ac:26:24:83:00:ed: 93:39:37:7a:d4:53:1c:bf:df:c3:8c:88:43:d3:1b:a1:07:8f: 69:78:e2:a2:5a:48:7b:6e:04:b0:43:50:27:bd:02:81:0b:bb: f7:17:b9:65:4a:65:a2:de:22:c4:0f:f2:46:99:cb:89:af:59: 0c:e3:88:aa:2d:4e:c1:12:e6:90:8d:7d:75:2e:91:87:49:0d: 02:8a:c7:11:bf:d8:2e:b5:c2:74:7e:0b:95:90:e6:4c:5d:33: b7:4d:00:48:b6:19:0e:fa:af:6c:97:8e:6e:52:93:f0:89:e9: b5:41:0a:3e:e5:40:a0:89:0a:e0:d1:5d:06:89:17:5d:32:f2: da:18:f3:e1:0b:80:a6:6d:fa:40:cd:e2:9c:06:08:38:1a:63: 63:ed:7f:17:16:66:5e:c5:b4:a2:e6:5f:ef:da:e8:de:f6:a3: 23:3f:d6:38:aa:5a:9b:ef:60:9b:17:34:71:99:fe:70:54:7a: 8a:d1:ba:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIfh7g5qPWnesKKUnI0GKMlVV5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZC MzM0QTY1OTAeFw0yNTA4MjMxNTA1NDVaFw0yNTA4MjYyMTM0NDVaMDMxMTAvBgNV BAMTKDJEODBFQjc5QjE3NTIxMEEyNDc3NUFBRkJBRjU0MDIwQTlFRTkzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWQWGd4GhEstJHlsLHH26LRfP ocsZl+bVVP706aYHkdNT3AimBLp40s3ME5Ct4kNpt+kA3xeOU3Lgh7x7KP7HsZ5d 7mL34uZZuaEEPgv/bkih31kfx8d/xtfDVEHVAYnKKm+MVSCKBVky2hdKcyt3t+Ds rzSqu6VSEbtSa3FSLTDRsdCaRjx1sOrfdECPx8pEue09BhxX8fjDBXXiBdkakfur KnmD7HodHaOo9qO2L9W1vJi2eeIiiE31LzB2Pg4YOSrlb5YjNu35ZZg77FSTNwLP swiHYeKKLxDYb5pjHpqIBkZIxzm1+LADoOkPTxMzRdcZW+/VZK2Ypyiz3ZEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULYDrebF1IQokd1qvuvVAIKnuk+swHwYDVR0j BBgwFoAUSs4K3btb87SbHNpaIxDPBrM0plkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjY5ZDY2Ny0xN2E0LTRmZGQtOWM1Ny0xMTIyMDMzZWY5OTkvMC80QUNFMEFEREJC NUJGM0I0OUIxQ0RBNUEyMzEwQ0YwNkIzMzRBNjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZCMzM0 QTY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENG MDZCMzM0QTY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCZwOYfywuUR8vOLk6DqYSDQoTece+mOMTr laQbevwA3LtvG7scy8jxtNezsfIGmXEh55/6wsOMiDVR0OeT9NZv4awmJIMA7ZM5 N3rUUxy/38OMiEPTG6EHj2l44qJaSHtuBLBDUCe9AoELu/cXuWVKZaLeIsQP8kaZ y4mvWQzjiKotTsES5pCNfXUukYdJDQKKxxG/2C61wnR+C5WQ5kxdM7dNAEi2GQ76 r2yXjm5Sk/CJ6bVBCj7lQKCJCuDRXQaJF10y8toY8+ELgKZt+kDN4pwGCDgaY2Pt fxcWZl7FtKLmX+/a6N72oyM/1jiqWpvvYJsXNHGZ/nBUeorRuqI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:29:09 2025 by rpki-client