$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: 36UBvbPHa8TfDsjHi0lvfsLd85WXylzPZhAzyuuHjXc= Subject key identifier: AE:4E:07:BE:B6:B7:8F:D5:46:0E:44:BB:E2:31:78:20:26:2B:9E:32 Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 1DFA59950F3F601ACA9903AE8EE23D3F78998C42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: 7A Signing time: Fri 09 May 2025 18:00:01 +0000 Manifest this update: Fri 09 May 2025 17:55:01 +0000 Manifest next update: Mon 12 May 2025 19:51:01 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: Ga+yghCCzynYQRLXxC8Ud9CUE2ETMSKZ2vuWiIruJEs=) 2: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: ZolmnG0V8nkjoG2aEZ7Mw97FXLXjAdYDyoxFwGcaQkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fa:59:95:0f:3f:60:1a:ca:99:03:ae:8e:e2:3d:3f:78:99:8c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: May 9 17:55:01 2025 GMT Not After : May 12 19:51:01 2025 GMT Subject: CN=AE4E07BEB6B78FD5460E44BBE2317820262B9E32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:19:2e:33:0d:0d:da:a9:e6:07:f2:3e:1c: 5d:67:88:63:7c:37:cc:12:56:12:92:0b:f0:82:3c: 96:dc:60:ca:45:03:dc:7a:d2:52:90:f4:8f:cb:7a: 79:25:f8:f6:e9:70:cc:99:dc:02:d5:3f:cb:d6:4a: 02:79:b5:d7:fd:af:91:e7:49:f6:c1:78:40:f1:71: a7:cd:3e:0e:86:ab:37:ac:5d:f6:0a:95:f0:5f:7d: e5:e3:43:50:16:87:b9:c5:b8:ba:8f:bf:b5:fc:52: 61:96:28:35:75:1b:b2:e4:41:eb:a9:32:20:1f:6a: 53:58:0f:07:3e:9e:ae:cf:a9:39:0b:63:a4:ee:9f: c6:bb:15:3c:fb:15:ba:33:7a:d2:e6:18:ca:28:00: c1:4f:d9:63:90:ee:6c:b8:81:90:93:67:b0:2a:d9: f3:93:41:7f:5c:97:37:ee:96:47:1b:5b:2a:e2:10: 97:e3:7a:9a:dc:ae:15:dc:8e:3d:33:cc:a4:ae:13: 8f:e2:92:0a:b4:62:29:8f:ef:d3:08:3e:a6:96:b3: 3b:40:eb:77:f8:16:4a:6a:c6:2f:c5:03:ea:3f:04: 84:e9:e7:e6:4f:bf:e1:26:5a:c2:55:f2:6d:45:a4: 29:18:5f:48:3a:2a:59:21:cf:2d:ea:57:06:ba:d7: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4E:07:BE:B6:B7:8F:D5:46:0E:44:BB:E2:31:78:20:26:2B:9E:32 X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:35:df:44:6d:de:ac:88:85:2e:18:4e:92:61:d2:21:ac:12: 43:2a:f9:57:d4:ca:33:12:a7:6f:2f:b8:da:90:7e:60:de:4a: b1:c9:bd:e3:fb:fc:2d:f0:45:7b:1a:76:24:53:17:bb:d3:e5: 53:b9:7c:c8:e4:4e:ba:f9:f9:c0:ce:1e:f8:f2:44:d7:35:1a: 19:6b:7c:68:14:69:06:c0:09:48:69:ac:0e:35:80:7f:4b:f2: 76:b9:a5:d9:d5:44:cd:6e:b7:19:ea:a2:3d:79:4f:a8:e3:1c: 86:70:a3:c6:1b:dd:c0:78:35:b7:4f:2e:a6:f3:46:0b:aa:f9: b7:3d:a7:08:54:c8:79:96:0a:e3:bf:46:9e:ed:e8:a6:88:0a: 28:4f:06:2f:ae:39:85:c2:e8:e4:d8:9a:db:8c:63:a3:df:a6: 7b:94:80:f4:29:9b:d1:6b:6b:5d:e4:5a:b3:1c:ba:38:0b:ab: 39:f7:fb:43:ea:62:a7:5e:cc:03:ef:29:39:56:88:ec:34:a1: 00:b0:6e:b2:f1:59:30:53:cb:bc:e0:85:f5:ac:ad:0c:a9:d3: f8:48:a6:7b:2e:23:6d:e1:24:17:ab:ff:69:16:10:e5:3d:35: b3:91:f4:c1:52:5f:a3:9f:26:e9:0d:fb:db:1c:48:e5:2f:03: f4:89:46:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHfpZlQ8/YBrKmQOujuI9P3iZjEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNTA1MDkxNzU1MDFaFw0yNTA1MTIxOTUxMDFaMDMxMTAvBgNV BAMTKEFFNEUwN0JFQjZCNzhGRDU0NjBFNDRCQkUyMzE3ODIwMjYyQjlFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIcBkuMw0N2qnmB/I+HF1niGN8 N8wSVhKSC/CCPJbcYMpFA9x60lKQ9I/Lenkl+PbpcMyZ3ALVP8vWSgJ5tdf9r5Hn SfbBeEDxcafNPg6GqzesXfYKlfBffeXjQ1AWh7nFuLqPv7X8UmGWKDV1G7LkQeup MiAfalNYDwc+nq7PqTkLY6Tun8a7FTz7FbozetLmGMooAMFP2WOQ7my4gZCTZ7Aq 2fOTQX9clzfulkcbWyriEJfjeprcrhXcjj0zzKSuE4/ikgq0YimP79MIPqaWsztA 63f4Fkpqxi/FA+o/BITp5+ZPv+EmWsJV8m1FpCkYX0g6Klkhzy3qVwa615JTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrk4Hvra3j9VGDkS74jF4ICYrnjIwHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKw130Rt3qyIhS4YTpJh0iGsEkMq+VfUyjMS p28vuNqQfmDeSrHJveP7/C3wRXsadiRTF7vT5VO5fMjkTrr5+cDOHvjyRNc1Ghlr fGgUaQbACUhprA41gH9L8na5pdnVRM1utxnqoj15T6jjHIZwo8Yb3cB4NbdPLqbz Rguq+bc9pwhUyHmWCuO/Rp7t6KaICihPBi+uOYXC6OTYmtuMY6PfpnuUgPQpm9Fr a13kWrMcujgLqzn3+0PqYqdezAPvKTlWiOw0oQCwbrLxWTBTy7zghfWsrQyp0/hI pnsuI23hJBer/2kWEOU9NbOR9MFSX6OfJukN+9scSOUvA/SJRmI= -----END CERTIFICATE-----Generated at Sun May 11 08:27:28 2025 by rpki-client