$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: krGhF9WSHW9WBlV5GDEvBZq9MgivF1liUDxpXgqlFLQ= Subject key identifier: D3:C8:C0:BE:C4:AC:A6:C8:22:86:AC:D9:82:8D:D5:3A:98:12:D1:03 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 02CB34C967801BF34BB5795D812B4AC3F8425413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 0381 Signing time: Fri 09 May 2025 21:42:07 +0000 Manifest this update: Fri 09 May 2025 21:37:07 +0000 Manifest next update: Mon 12 May 2025 23:31:07 +0000 Files and hashes: 1: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=) 2: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: 9V6BW+DXJ5P8KvI2dwajAWLUtLFk+vWfIKR0Hh+OOTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 23:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cb:34:c9:67:80:1b:f3:4b:b5:79:5d:81:2b:4a:c3:f8:42:54:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: May 9 21:37:07 2025 GMT Not After : May 12 23:31:07 2025 GMT Subject: CN=D3C8C0BEC4ACA6C82286ACD9828DD53A9812D103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a9:57:b0:97:5d:4f:9c:41:45:4b:f5:c1:9e: f5:e6:61:a1:60:db:cd:d8:12:ec:4b:7b:5e:c5:a3: 57:dc:c0:08:8e:6f:f4:a8:f1:12:06:05:b4:d4:d9: 74:b3:df:20:09:f3:cd:da:7a:65:ee:73:05:04:df: af:03:f3:19:f1:ee:a7:fe:f5:e1:64:92:9b:8f:c3: 0f:4c:c2:f3:b3:67:93:08:a0:42:45:4e:78:66:d5: 9d:99:20:2d:20:11:03:90:8b:97:96:d9:42:88:55: 5f:a3:b8:29:d4:77:52:0f:88:1f:55:ef:c7:d6:f9: 31:db:7e:01:5f:4c:5e:6e:b3:26:25:63:2b:21:bb: af:4b:2a:7e:fe:88:fc:93:6f:57:3d:d2:ef:f5:3e: 7b:0b:f5:44:d5:77:1c:fb:a1:75:6b:b7:d8:83:ca: 81:44:05:56:b0:3e:f5:58:10:c4:6c:82:89:34:c0: ba:19:9b:1b:e7:d8:65:33:de:21:19:52:b5:00:82: 95:88:30:f4:2e:00:17:16:f0:b7:9d:43:44:f0:5a: 35:1b:8c:db:55:32:39:27:93:53:e6:ee:51:06:12: fc:2e:32:25:52:93:2f:a6:e1:f5:fd:58:7d:c7:ca: 14:45:f4:10:16:36:66:26:9d:9c:7b:80:1b:c5:ef: 99:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C8:C0:BE:C4:AC:A6:C8:22:86:AC:D9:82:8D:D5:3A:98:12:D1:03 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a4:92:47:00:f1:82:42:1b:5e:a7:d9:30:e1:49:3f:4b:42: b3:32:e9:1e:4b:f3:c1:2c:71:d5:04:6d:6b:5a:7f:07:d3:1f: ec:c4:29:27:09:21:0c:d0:a2:7f:df:1d:9f:4e:50:7a:a2:3f: f9:9b:e3:22:16:e7:41:2b:3b:22:8b:12:9e:88:8d:6b:76:f0: aa:b5:39:19:d6:89:44:3f:59:ba:8a:2f:0e:ef:d2:59:7b:b7: 6d:bf:3e:7f:6b:76:c3:a6:38:43:97:b1:55:dd:77:a8:8f:15: 28:b9:fe:36:8c:1d:63:d3:ec:4d:e9:19:4a:3e:cd:90:e2:12: 89:60:09:21:7c:8e:86:4f:56:b6:77:fc:5d:4e:25:45:b0:fe: 3b:8c:c7:30:da:e1:92:77:71:0b:3a:bb:68:ae:65:15:38:78: 57:d2:b6:a4:34:f1:0e:1e:2a:0e:cb:e0:be:0d:2b:e7:27:42: 4b:fb:da:27:f3:75:bd:50:aa:76:f8:75:2d:38:64:f7:76:57: 60:cb:0b:86:e3:3f:94:cc:bb:f1:81:7c:08:fe:28:29:52:c9: 16:4c:59:40:2b:7b:7b:dc:5a:b8:43:7a:69:f0:0b:fc:61:1c: 00:58:87:b7:ab:73:a7:ea:39:9e:00:34:60:a8:e6:da:c9:03: 48:46:86:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAss0yWeAG/NLtXldgStKw/hCVBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNTA1MDkyMTM3MDdaFw0yNTA1MTIyMzMxMDdaMDMxMTAvBgNV BAMTKEQzQzhDMEJFQzRBQ0E2QzgyMjg2QUNEOTgyOERENTNBOTgxMkQxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqVewl11PnEFFS/XBnvXmYaFg 283YEuxLe17Fo1fcwAiOb/So8RIGBbTU2XSz3yAJ883aemXucwUE368D8xnx7qf+ 9eFkkpuPww9MwvOzZ5MIoEJFTnhm1Z2ZIC0gEQOQi5eW2UKIVV+juCnUd1IPiB9V 78fW+THbfgFfTF5usyYlYyshu69LKn7+iPyTb1c90u/1PnsL9UTVdxz7oXVrt9iD yoFEBVawPvVYEMRsgok0wLoZmxvn2GUz3iEZUrUAgpWIMPQuABcW8LedQ0TwWjUb jNtVMjknk1Pm7lEGEvwuMiVSky+m4fX9WH3HyhRF9BAWNmYmnZx7gBvF75nXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU08jAvsSspsgihqzZgo3VOpgS0QMwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6kkkcA8YJCG16n2TDhST9LQrMy6R5L88Es cdUEbWtafwfTH+zEKScJIQzQon/fHZ9OUHqiP/mb4yIW50ErOyKLEp6IjWt28Kq1 ORnWiUQ/WbqKLw7v0ll7t22/Pn9rdsOmOEOXsVXdd6iPFSi5/jaMHWPT7E3pGUo+ zZDiEolgCSF8joZPVrZ3/F1OJUWw/juMxzDa4ZJ3cQs6u2iuZRU4eFfStqQ08Q4e Kg7L4L4NK+cnQkv72ifzdb1Qqnb4dS04ZPd2V2DLC4bjP5TMu/GBfAj+KClSyRZM WUAre3vcWrhDemnwC/xhHABYh7erc6fqOZ4ANGCo5trJA0hGhp0= -----END CERTIFICATE-----Generated at Sat May 10 20:02:03 2025 by rpki-client