$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: /nm54ckQ+LlA0vB4OsIWM2IhKW0ga4Evb1pA45an5d4= Subject key identifier: 04:C5:D8:27:4B:87:7A:7F:08:F0:4E:18:A0:22:3D:70:55:95:84:DC Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 5288C7B46C29E7A20083288690AE9B020951D43E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: 91 Signing time: Sun 29 Jun 2025 21:30:01 +0000 Manifest this update: Sun 29 Jun 2025 21:25:01 +0000 Manifest next update: Wed 02 Jul 2025 22:31:01 +0000 Files and hashes: 1: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: HYE14bAhW9ZG7aCgyTeN5VI73LBln9nbWhzjJXyOxcM=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: Ga+yghCCzynYQRLXxC8Ud9CUE2ETMSKZ2vuWiIruJEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 22:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:88:c7:b4:6c:29:e7:a2:00:83:28:86:90:ae:9b:02:09:51:d4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Jun 29 21:25:01 2025 GMT Not After : Jul 2 22:31:01 2025 GMT Subject: CN=04C5D8274B877A7F08F04E18A0223D70559584DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:1f:e3:90:ca:5e:47:f2:76:1e:6b:88:bf: 7d:d1:e3:06:50:5d:13:be:69:9f:7f:f9:a9:be:cf: 30:74:18:8d:60:95:9d:5a:16:28:de:7d:e9:56:96: 9b:72:48:96:bc:d6:50:84:51:29:71:33:03:33:56: f9:36:e7:cb:e6:a1:83:40:9b:a3:2f:f4:06:f5:aa: ce:b0:87:e4:5f:44:b3:82:89:b7:36:ab:d2:ac:d6: fc:6c:24:74:ee:ae:e5:e0:d0:a9:ba:2e:c7:0f:79: fd:f7:04:ee:b4:27:a3:f4:59:23:2d:6c:38:5f:85: 0b:c2:cb:26:1e:6a:59:ce:57:2f:43:37:66:fa:a4: b5:51:08:99:58:83:f6:e3:10:7e:f6:9a:ae:ca:f1: 1d:07:66:b9:2d:11:cf:2e:08:99:68:5c:7f:32:d4: 9d:05:14:bf:15:e0:b7:df:eb:a0:a4:02:8c:1a:f8: de:74:e5:19:de:75:81:a4:83:5d:20:65:23:ec:34: b6:49:75:f3:38:4e:ba:a4:97:79:3c:45:83:06:fb: 0c:82:8c:8c:8b:b0:0c:9a:e7:33:c3:df:48:37:e6: d0:75:aa:84:90:95:1f:c8:e0:ac:8f:a8:b8:dc:2c: cd:26:59:8b:e1:61:f6:fd:99:c0:77:6d:45:91:b7: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C5:D8:27:4B:87:7A:7F:08:F0:4E:18:A0:22:3D:70:55:95:84:DC X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:5d:36:5b:d8:89:2d:1d:19:7a:a9:2a:58:46:b9:54:f9:0f: 82:e6:82:08:0f:8a:79:71:14:93:19:88:d2:1d:f3:b6:9a:6f: 57:70:97:21:27:ad:cc:66:71:9a:e8:4b:0d:b3:24:26:12:0f: 3b:95:d2:de:a8:c3:5d:4c:83:3d:81:ad:84:29:01:e8:7a:f5: d4:72:b9:fa:82:65:8f:57:e7:f9:97:a3:8c:f9:bc:d4:e4:02: c3:6b:e2:27:07:a3:5e:11:cd:62:79:ba:32:e9:0c:60:10:20: 4e:e9:c1:94:34:41:b9:29:c7:11:69:55:f2:19:c3:f9:eb:8f: 62:e1:e8:4b:54:89:6c:b7:55:1b:f2:42:32:46:0a:7c:53:89: ea:4f:ee:a2:ed:77:a7:f9:92:a4:2d:0d:fe:8f:79:f4:92:a8: 92:2c:a7:76:14:fb:91:b1:74:a3:6d:b8:50:7f:6e:0b:4a:8f: 9f:56:0c:03:34:2f:0f:c4:32:06:65:31:7b:70:74:27:10:4e: 4c:57:c3:b1:88:1d:6b:5b:43:0f:fe:3a:a6:23:36:d7:11:7f: 7c:59:95:cb:0d:ba:2c:88:f2:12:27:d6:3e:0f:29:8b:64:58: 2b:d2:2d:ff:40:73:70:b6:1c:64:6c:b8:3f:8d:33:48:f9:d0: 13:e3:1d:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUojHtGwp56IAgyiGkK6bAglR1D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNTA2MjkyMTI1MDFaFw0yNTA3MDIyMjMxMDFaMDMxMTAvBgNV BAMTKDA0QzVEODI3NEI4NzdBN0YwOEYwNEUxOEEwMjIzRDcwNTU5NTg0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJeh/jkMpeR/J2HmuIv33R4wZQ XRO+aZ9/+am+zzB0GI1glZ1aFijefelWlptySJa81lCEUSlxMwMzVvk258vmoYNA m6Mv9Ab1qs6wh+RfRLOCibc2q9Ks1vxsJHTuruXg0Km6LscPef33BO60J6P0WSMt bDhfhQvCyyYealnOVy9DN2b6pLVRCJlYg/bjEH72mq7K8R0HZrktEc8uCJloXH8y 1J0FFL8V4Lff66CkAowa+N505RnedYGkg10gZSPsNLZJdfM4Trqkl3k8RYMG+wyC jIyLsAya5zPD30g35tB1qoSQlR/I4KyPqLjcLM0mWYvhYfb9mcB3bUWRtzP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMXYJ0uHen8I8E4YoCI9cFWVhNwwHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMxdNlvYiS0dGXqpKlhGuVT5D4LmgggPinlx FJMZiNId87aab1dwlyEnrcxmcZroSw2zJCYSDzuV0t6ow11Mgz2BrYQpAeh69dRy ufqCZY9X5/mXo4z5vNTkAsNr4icHo14RzWJ5ujLpDGAQIE7pwZQ0QbkpxxFpVfIZ w/nrj2Lh6EtUiWy3VRvyQjJGCnxTiepP7qLtd6f5kqQtDf6PefSSqJIsp3YU+5Gx dKNtuFB/bgtKj59WDAM0Lw/EMgZlMXtwdCcQTkxXw7GIHWtbQw/+OqYjNtcRf3xZ lcsNuiyI8hIn1j4PKYtkWCvSLf9Ac3C2HGRsuD+NM0j50BPjHSg= -----END CERTIFICATE-----Generated at Tue Jul 1 23:28:02 2025 by rpki-client