$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: hEmz2h6LbC/werTqzBJ1p6/SPfe9PuRvvppZ9tyxQsM= Subject key identifier: 65:79:F6:E6:A3:DA:46:93:B6:7B:71:DC:C0:C2:FF:EC:0C:E7:3E:B9 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 0CC9D609E4A43A2AB13A81A8E26F73208E33B46F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 0397 Signing time: Sat 28 Jun 2025 16:32:09 +0000 Manifest this update: Sat 28 Jun 2025 16:27:09 +0000 Manifest next update: Tue 01 Jul 2025 21:55:09 +0000 Files and hashes: 1: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: e17Rl26MM5qvIha39adk17z3MvTRO3bI7Z9fYgoyOq0=) 2: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c9:d6:09:e4:a4:3a:2a:b1:3a:81:a8:e2:6f:73:20:8e:33:b4:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Jun 28 16:27:09 2025 GMT Not After : Jul 1 21:55:09 2025 GMT Subject: CN=6579F6E6A3DA4693B67B71DCC0C2FFEC0CE73EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:11:cc:69:f7:92:e4:af:fc:70:49:01:50: 5a:cd:a6:28:fa:af:7c:5f:80:dd:4e:32:6d:90:98: 23:47:ce:5e:88:31:f3:85:a4:fd:8d:0d:ad:9d:b7: 2f:f8:85:20:4b:d4:25:32:56:36:02:11:c3:d2:c9: 6d:e4:ce:a3:15:d1:0c:24:c4:7f:59:c0:87:7a:5f: f4:8e:b2:6a:1d:1a:a6:6b:1c:18:c4:e7:9f:63:56: 83:8c:ea:c7:5b:41:be:7a:bd:5c:62:28:d7:ec:f8: d2:2b:c3:01:e7:93:88:78:ae:33:02:a4:90:5a:de: 95:fb:82:ac:4a:52:bf:32:5b:7e:84:27:e0:c1:ed: 20:ed:83:5f:d7:91:fa:3e:02:d2:70:c6:9b:19:f8: 73:a5:4a:fc:a1:a8:5b:75:55:c1:42:10:15:68:2d: 13:fa:a1:20:dd:ab:86:20:9c:45:d5:32:9e:f3:c6: b6:1a:ad:ef:22:cb:ee:4a:1b:2e:bf:ba:60:80:3b: 8b:01:0a:5f:92:9a:69:26:90:84:b3:db:db:d0:e4: 4a:83:60:a5:d2:ef:0d:34:c9:14:7d:48:d9:27:bf: 65:de:30:5d:22:69:d8:00:58:38:27:c7:05:99:39: 87:ba:f5:dc:0f:e6:ff:35:04:f9:90:5b:92:d7:b8: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:79:F6:E6:A3:DA:46:93:B6:7B:71:DC:C0:C2:FF:EC:0C:E7:3E:B9 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ee:33:48:8f:59:1b:29:27:f6:d1:23:c5:6d:7c:7b:32:f4: ff:64:c8:6f:22:2f:d9:a1:15:00:15:dc:1c:fe:97:8a:da:66: 87:b2:9d:b0:0a:59:8a:91:63:a0:bf:80:02:bd:74:13:a5:7f: 2b:df:82:72:cd:29:62:82:c7:94:70:c1:43:27:50:d3:91:98: 7f:ab:9f:43:03:2b:b5:c7:40:9b:97:65:de:bb:02:09:49:7b: 70:48:83:8d:31:e5:f5:ec:d3:3f:ba:d9:0b:41:d5:d4:e3:aa: 1d:62:51:12:6d:44:e0:e8:cc:96:f7:ab:6b:7e:43:f5:d1:ff: 16:c8:b7:5f:2e:9f:3f:30:ef:0d:20:12:99:46:7e:cd:ef:31: 68:47:24:3c:d2:3b:e9:b9:d2:f6:61:b1:56:1e:9e:c5:60:b6: b4:db:56:3f:6a:5b:59:19:e0:35:83:dd:d9:13:39:b2:79:28: f9:0d:99:56:35:00:76:84:30:41:13:af:fd:59:a6:eb:3d:34: 53:cb:6b:45:14:a3:41:ab:99:1b:3d:8b:03:dc:cf:40:09:c1: 48:12:14:cc:fe:e1:fd:7c:67:8b:27:40:bf:36:cd:f5:b3:ff: 4f:1a:97:d3:32:5e:dd:c7:ab:f5:41:13:b7:41:b6:bb:bb:8c: 75:4d:1f:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMnWCeSkOiqxOoGo4m9zII4ztG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNTA2MjgxNjI3MDlaFw0yNTA3MDEyMTU1MDlaMDMxMTAvBgNV BAMTKDY1NzlGNkU2QTNEQTQ2OTNCNjdCNzFEQ0MwQzJGRkVDMENFNzNFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNBHMafeS5K/8cEkBUFrNpij6 r3xfgN1OMm2QmCNHzl6IMfOFpP2NDa2dty/4hSBL1CUyVjYCEcPSyW3kzqMV0Qwk xH9ZwId6X/SOsmodGqZrHBjE559jVoOM6sdbQb56vVxiKNfs+NIrwwHnk4h4rjMC pJBa3pX7gqxKUr8yW36EJ+DB7SDtg1/Xkfo+AtJwxpsZ+HOlSvyhqFt1VcFCEBVo LRP6oSDdq4YgnEXVMp7zxrYare8iy+5KGy6/umCAO4sBCl+SmmkmkISz29vQ5EqD YKXS7w00yRR9SNknv2XeMF0iadgAWDgnxwWZOYe69dwP5v81BPmQW5LXuGDjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZXn25qPaRpO2e3HcwML/7AznPrkwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHuM0iPWRspJ/bRI8VtfHsy9P9kyG8iL9mh FQAV3Bz+l4raZoeynbAKWYqRY6C/gAK9dBOlfyvfgnLNKWKCx5RwwUMnUNORmH+r n0MDK7XHQJuXZd67AglJe3BIg40x5fXs0z+62QtB1dTjqh1iURJtRODozJb3q2t+ Q/XR/xbIt18unz8w7w0gEplGfs3vMWhHJDzSO+m50vZhsVYensVgtrTbVj9qW1kZ 4DWD3dkTObJ5KPkNmVY1AHaEMEETr/1Zpus9NFPLa0UUo0GrmRs9iwPcz0AJwUgS FMz+4f18Z4snQL82zfWz/08al9MyXt3Hq/VBE7dBtru7jHVNH/g= -----END CERTIFICATE-----Generated at Mon Jun 30 13:06:06 2025 by rpki-client