$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json) Hash identifier: 1dVCNBOJgxrm0ozHMzrqdmZyKfgbfaUqDtIrYVIjuiU= Subject key identifier: 3F:FF:1E:96:DA:85:B6:FD:1B:91:77:78:C8:B6:33:39:15:3D:B0:F7 Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Certificate serial: 3637A820620AB10676B1C2AD0B0B31B00F73EC45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft Manifest number: FD Signing time: Thu 08 May 2025 15:51:04 +0000 Manifest this update: Thu 08 May 2025 15:46:04 +0000 Manifest next update: Sun 11 May 2025 17:19:04 +0000 Files and hashes: 1: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: 8ZySa7O3bqbEDCPqfR8YYHegreqOri6w++xZ3QBwEmo=) 2: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: yyvOSuJ6EquLIxsFIaOuF4FfX3PA8e054pdmMj30y8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:37:a8:20:62:0a:b1:06:76:b1:c2:ad:0b:0b:31:b0:0f:73:ec:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Validity Not Before: May 8 15:46:04 2025 GMT Not After : May 11 17:19:04 2025 GMT Subject: CN=3FFF1E96DA85B6FD1B917778C8B63339153DB0F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:61:16:96:e4:ea:e9:06:45:67:a3:c3:a8:9d: 0a:eb:3d:dd:84:c4:5d:f2:eb:8a:7c:19:cf:eb:e6: 8f:91:31:aa:64:8f:f4:04:c9:35:81:e1:f0:e6:01: 9f:c7:d4:a4:96:46:61:cd:53:8f:57:c6:dc:db:68: 91:4f:58:48:b9:2f:60:7e:49:e4:a1:62:28:ce:5c: 5b:6b:dc:98:6c:07:a3:f3:68:e4:02:c1:7d:44:71: aa:19:57:a6:05:8e:20:d1:f5:78:d8:4f:d2:31:2b: a8:50:1d:85:79:41:ae:91:53:24:51:52:ee:61:a3: c3:68:98:64:10:b3:3f:ae:60:4b:7a:0d:14:ab:ec: ed:27:34:c1:ac:91:d5:98:d7:df:00:c2:99:14:6a: 5f:e8:15:74:8b:6f:bb:65:32:00:ab:0a:fd:b6:6b: d1:ff:5f:6c:c3:b3:c9:75:9a:6c:bc:fe:ae:ca:4e: 72:ad:26:d5:e0:8c:2c:87:91:74:19:cf:91:c1:c4: c0:63:e4:f0:1c:89:dd:2e:da:5e:b9:9b:14:25:a5: 82:c6:81:5b:76:4a:8d:e5:81:35:79:16:80:b4:c1: 6c:92:a4:98:f5:ac:c5:e9:b3:37:b7:12:5c:85:0b: 66:92:30:4d:de:d5:34:74:48:bd:21:4e:2e:f7:f1: 21:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FF:1E:96:DA:85:B6:FD:1B:91:77:78:C8:B6:33:39:15:3D:B0:F7 X509v3 Authority Key Identifier: keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:dd:20:b1:b4:d1:bf:aa:3d:7d:08:44:27:17:d6:d4:83:6a: 81:0f:1a:99:00:ad:61:7b:67:e9:7c:66:a8:de:fe:5e:6a:76: 0a:e4:40:ef:5f:30:70:d3:c5:a0:24:ca:cc:8c:0f:09:47:45: 23:ba:bb:e9:4e:25:f8:8b:e4:ba:61:b1:6c:40:ff:00:de:fe: ca:64:e6:f0:8f:e7:9f:dc:0b:54:5e:33:77:8d:c2:42:40:e1: 15:ef:08:b5:3a:2e:05:58:15:45:27:e1:64:a7:78:fb:a0:f8: 99:c3:bb:25:47:41:9a:7a:dc:70:4b:6c:02:c9:68:5c:12:00: a4:39:1d:c0:c5:df:14:43:a4:c3:a7:5d:8f:d2:5c:18:4f:3a: fa:59:30:a3:34:dd:e7:dd:2a:58:27:11:1c:48:02:61:69:3d: 13:b1:8b:25:7b:ac:bc:cf:cc:5a:f2:2f:91:c8:10:46:38:d2: 43:c7:0c:32:d8:e7:73:cc:a3:5d:97:fc:7d:d8:52:5e:23:ba: 27:8a:ca:50:4d:71:42:41:b8:aa:50:8d:1b:5d:48:8f:cd:bd: 0e:a8:f8:4b:8c:6e:f4:6c:e2:4b:f8:57:2c:05:27:11:db:f2: 23:21:7e:dd:75:10:f4:bc:a8:a1:b5:63:72:60:d6:c5:4b:d6: b6:52:2a:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjeoIGIKsQZ2scKtCwsxsA9z7EUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJC NjI2Q0E0RDAeFw0yNTA1MDgxNTQ2MDRaFw0yNTA1MTExNzE5MDRaMDMxMTAvBgNV BAMTKDNGRkYxRTk2REE4NUI2RkQxQjkxNzc3OEM4QjYzMzM5MTUzREIwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYRaW5OrpBkVno8OonQrrPd2E xF3y64p8Gc/r5o+RMapkj/QEyTWB4fDmAZ/H1KSWRmHNU49XxtzbaJFPWEi5L2B+ SeShYijOXFtr3JhsB6PzaOQCwX1EcaoZV6YFjiDR9XjYT9IxK6hQHYV5Qa6RUyRR Uu5ho8NomGQQsz+uYEt6DRSr7O0nNMGskdWY198AwpkUal/oFXSLb7tlMgCrCv22 a9H/X2zDs8l1mmy8/q7KTnKtJtXgjCyHkXQZz5HBxMBj5PAcid0u2l65mxQlpYLG gVt2So3lgTV5FoC0wWySpJj1rMXpsze3ElyFC2aSME3e1TR0SL0hTi738SEzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP/8eltqFtv0bkXd4yLYzORU9sPcwHwYDVR0j BBgwFoAUrOLauqJJ1WrZaK19YKCWQrYmyk0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC9BQ0UyREFCQUEy NDlENTZBRDk2OEFEN0Q2MEEwOTY0MkI2MjZDQTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJCNjI2 Q0E0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2 NDJCNjI2Q0E0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzdILG00b+qPX0IRCcX1tSDaoEPGpkArWF7 Z+l8Zqje/l5qdgrkQO9fMHDTxaAkysyMDwlHRSO6u+lOJfiL5LphsWxA/wDe/spk 5vCP55/cC1ReM3eNwkJA4RXvCLU6LgVYFUUn4WSnePug+JnDuyVHQZp63HBLbALJ aFwSAKQ5HcDF3xRDpMOnXY/SXBhPOvpZMKM03efdKlgnERxIAmFpPROxiyV7rLzP zFryL5HIEEY40kPHDDLY53PMo12X/H3YUl4juieKylBNcUJBuKpQjRtdSI/NvQ6o +EuMbvRs4kv4VywFJxHb8iMhft11EPS8qKG1Y3Jg1sVL1rZSKpw= -----END CERTIFICATE-----Generated at Thu May 8 20:18:59 2025 by rpki-client