$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: mSTNfxEO7t/hVHVKFVKc79DeepDZAxGZYGa5G4wM0mI= Subject key identifier: B8:E7:1D:5C:52:EA:90:00:7D:65:36:62:7F:7D:5F:CF:AA:5B:E3:53 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 64F0050AA32E66ED46237440ECB8829857421158 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: 6D Signing time: Sat 14 Jun 2025 12:32:18 +0000 Manifest this update: Sat 14 Jun 2025 12:27:18 +0000 Manifest next update: Tue 17 Jun 2025 23:39:18 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: C/eQpXS1FL2/uRM5yW4FJhP7RGRcdJRCrZp3lfFC1uQ=) 2: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: wHJw/dNouZOylrybdR1eTj0FGNAHB79i0gOvc0SNSbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 23:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f0:05:0a:a3:2e:66:ed:46:23:74:40:ec:b8:82:98:57:42:11:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Jun 14 12:27:18 2025 GMT Not After : Jun 17 23:39:18 2025 GMT Subject: CN=B8E71D5C52EA90007D6536627F7D5FCFAA5BE353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:f2:e9:e2:be:bd:f1:c7:a1:89:75:9a:d8: 36:88:26:1e:7b:12:d8:a2:32:cc:fa:d2:64:41:4a: 43:99:ea:80:5c:33:0f:93:b2:c0:7c:20:38:30:d0: 5f:03:7b:6a:d8:ee:40:b0:cd:77:ae:fb:28:76:24: 7c:d1:ea:ce:ae:ac:25:21:26:39:a2:cf:71:c6:75: 88:52:6a:18:9d:dd:ee:0f:cc:16:ae:f3:fa:9d:be: f2:62:77:e7:05:57:06:7a:f1:bd:a8:b4:d5:fb:7c: f8:87:4f:31:21:22:5d:1d:b5:1b:75:b0:12:67:8c: 7c:67:3d:96:ea:80:4e:ae:64:4d:78:bb:a8:58:bc: 91:51:4b:5d:ec:c2:42:c5:9c:d7:0b:ec:71:f9:c4: 69:0e:c9:e8:c9:47:4a:d9:fc:08:a2:64:11:a4:09: ad:e5:97:53:eb:9f:65:38:30:e3:88:93:52:fd:fd: c5:18:c2:4f:cf:c2:63:8f:0a:91:ce:6f:45:aa:45: 6c:58:6f:46:47:79:e2:b8:b8:fb:20:de:8f:27:d7: a3:4d:55:1a:94:18:b4:6b:52:58:e1:7f:d0:af:9d: 20:c7:85:30:71:9e:ad:b9:79:43:d1:61:4d:b5:3f: 3d:49:02:09:3e:16:f6:f4:e5:79:53:a2:84:83:44: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E7:1D:5C:52:EA:90:00:7D:65:36:62:7F:7D:5F:CF:AA:5B:E3:53 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:64:8f:14:ea:1c:01:03:df:8e:fd:e8:32:df:b9:e0:83:aa: 8e:9c:ab:9c:3c:31:f8:2e:f3:0e:bf:e2:78:6e:de:e1:c6:b6: a2:c3:29:f1:7b:2d:36:53:89:db:98:fd:79:e3:18:29:b8:12: a6:60:db:86:25:28:77:e0:48:c0:9c:ff:5e:9a:f9:36:03:bd: 30:ba:d4:5b:8d:49:38:b1:66:7c:8e:66:be:34:3f:79:80:e3: 15:e2:26:c5:fe:dd:41:41:92:aa:41:c2:44:c8:40:18:d9:42: 5e:18:43:a0:a6:5b:27:ec:ca:27:3b:37:de:2d:51:2c:0f:0b: ba:c6:f4:b4:dc:b5:28:59:f6:bf:19:69:f7:8d:d5:1a:69:07: 6e:d8:b7:0a:7d:50:82:5d:97:79:4f:70:86:9e:39:a9:8c:7a: 0c:df:2f:89:58:57:e3:dc:d8:11:e0:5d:d8:05:af:fd:92:08: 21:cf:54:1b:40:85:85:ab:e2:18:f0:4e:17:69:3a:bb:1f:f4: 3b:53:d0:9f:40:f3:c8:03:42:1a:73:f5:ac:48:09:5c:5d:4a: 32:8a:20:3b:3c:8e:74:ea:c7:9c:39:79:3d:d3:e9:89:fb:62: 44:7a:e1:e5:2e:4d:d8:a4:86:b1:56:57:3c:d4:a7:ba:89:72: 76:0b:62:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZPAFCqMuZu1GI3RA7LiCmFdCEVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTA2MTQxMjI3MThaFw0yNTA2MTcyMzM5MThaMDMxMTAvBgNV BAMTKEI4RTcxRDVDNTJFQTkwMDA3RDY1MzY2MjdGN0Q1RkNGQUE1QkUzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sfLp4r698cehiXWa2DaIJh57 EtiiMsz60mRBSkOZ6oBcMw+TssB8IDgw0F8De2rY7kCwzXeu+yh2JHzR6s6urCUh Jjmiz3HGdYhSahid3e4PzBau8/qdvvJid+cFVwZ68b2otNX7fPiHTzEhIl0dtRt1 sBJnjHxnPZbqgE6uZE14u6hYvJFRS13swkLFnNcL7HH5xGkOyejJR0rZ/AiiZBGk Ca3ll1Prn2U4MOOIk1L9/cUYwk/PwmOPCpHOb0WqRWxYb0ZHeeK4uPsg3o8n16NN VRqUGLRrUljhf9CvnSDHhTBxnq25eUPRYU21Pz1JAgk+Fvb05XlTooSDRFY3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuOcdXFLqkAB9ZTZif31fz6pb41MwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1kjxTqHAED34796DLfueCDqo6cq5w8Mfgu 8w6/4nhu3uHGtqLDKfF7LTZTiduY/XnjGCm4EqZg24YlKHfgSMCc/16a+TYDvTC6 1FuNSTixZnyOZr40P3mA4xXiJsX+3UFBkqpBwkTIQBjZQl4YQ6CmWyfsyic7N94t USwPC7rG9LTctShZ9r8ZafeN1RppB27Ytwp9UIJdl3lPcIaeOamMegzfL4lYV+Pc 2BHgXdgFr/2SCCHPVBtAhYWr4hjwThdpOrsf9DtT0J9A88gDQhpz9axICVxdSjKK IDs8jnTqx5w5eT3T6Yn7YkR64eUuTdikhrFWVzzUp7qJcnYLYpQ= -----END CERTIFICATE-----Generated at Mon Jun 16 19:57:24 2025 by rpki-client