$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: GfFBqmO7Z+Ft5/ntM6TazARMof6WqDhc9Keyzehv1/I= Subject key identifier: 8F:3C:0F:28:23:64:4D:99:D2:00:60:DA:A4:1A:4C:C9:3F:82:A2:09 Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: 2A91CE171D38E762814204201A78E44F3E7F34E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 04DE Signing time: Tue 05 Aug 2025 00:51:08 +0000 Manifest this update: Tue 05 Aug 2025 00:46:08 +0000 Manifest next update: Fri 08 Aug 2025 11:04:08 +0000 Files and hashes: 1: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: cS4xFcJiF1zKuj0BZNhYothbCLKeaVj2VbTjqbuS5CU=) 2: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: IONelb4wZWYJXCLJmNN2vYsUxTXybPkI+NyrImjUvsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 11:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:91:ce:17:1d:38:e7:62:81:42:04:20:1a:78:e4:4f:3e:7f:34:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: Aug 5 00:46:08 2025 GMT Not After : Aug 8 11:04:08 2025 GMT Subject: CN=8F3C0F2823644D99D20060DAA41A4CC93F82A209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d1:9a:27:a4:14:f7:5f:d7:b0:89:1e:ff:5c: f7:bf:d4:c5:cb:bd:bd:97:62:5e:33:d7:22:2c:ea: fd:bf:ec:9c:c5:96:78:cd:f3:d3:33:08:b2:08:66: 5e:18:f5:f3:05:5c:47:7f:b0:35:fa:2d:6d:7a:97: e1:bf:17:40:9a:21:8c:6b:e1:c5:0c:dc:7e:b5:47: f0:e5:f9:cc:73:75:15:b1:3e:7f:14:16:fb:22:05: d7:dc:9d:ef:e2:63:d8:54:3e:a1:ab:b8:a0:d2:8f: 59:9d:38:a0:5c:ec:72:c6:7d:58:2d:60:d7:7b:8f: 73:77:7c:49:cc:69:fb:66:5b:de:74:63:57:69:9f: 4c:ac:9b:d3:d4:d3:25:88:07:12:52:ac:30:c3:b2: dd:85:0b:28:be:f2:86:12:9d:0f:96:2e:51:49:07: 62:f3:ec:96:df:d8:67:38:db:9a:62:ac:e0:51:23: 0d:ac:d3:89:c2:1a:25:9b:9f:61:b1:08:42:c7:34: 04:59:25:a6:84:eb:49:88:59:4c:e2:64:a0:22:69: 6e:b6:73:09:68:74:2a:3e:d0:50:fd:84:29:23:e5: 46:10:74:db:d0:de:80:e9:8b:28:e5:98:25:ee:d5: d1:4b:e8:7a:cb:b4:00:b5:51:ab:74:9d:ee:f3:77: b2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3C:0F:28:23:64:4D:99:D2:00:60:DA:A4:1A:4C:C9:3F:82:A2:09 X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1f:be:0a:a8:1c:13:20:8b:08:b5:5a:ca:d9:52:97:3f:7b: 0e:7a:96:eb:e5:7f:ca:ab:07:9f:c5:2f:b9:b0:1a:cc:78:76: 0c:ed:6b:a0:43:74:f5:7b:1d:98:e7:6f:9e:56:7a:b7:c5:6e: f7:be:57:55:ef:70:1a:24:b9:c5:60:7b:c5:9c:7e:fa:a6:ce: 8d:cb:a0:74:e8:d8:ec:00:b2:1e:7b:60:8b:63:9e:fd:13:f3: 7a:36:1d:25:de:65:72:4d:ae:b4:ca:9e:f6:e5:37:f8:dc:6e: 2f:82:01:37:15:b4:22:83:ba:51:bf:95:31:75:d4:e5:9a:0a: bf:9c:72:b4:1a:fc:0c:33:29:a7:61:c6:cb:ba:4a:a2:ed:20: f0:f4:fe:fb:c4:91:a3:14:ab:25:3c:5d:26:17:81:6c:a8:42: 89:bc:e0:ed:86:12:01:66:e3:ee:f0:41:04:a2:1e:08:a3:8b: c2:ff:71:88:fd:5e:03:80:13:34:85:ef:2e:a5:6b:eb:2f:d0: bf:0b:87:b9:81:12:8b:0a:3b:44:3a:cc:76:94:df:67:f3:cd: 8f:e9:34:de:cd:74:12:ea:4d:72:fd:03:d8:00:95:04:cd:c3: 80:2f:5a:4c:db:82:51:7f:1d:ec:4a:58:22:f8:9a:86:9f:cd: 1c:0b:37:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpHOFx0452KBQgQgGnjkTz5/NOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNTA4MDUwMDQ2MDhaFw0yNTA4MDgxMTA0MDhaMDMxMTAvBgNV BAMTKDhGM0MwRjI4MjM2NDREOTlEMjAwNjBEQUE0MUE0Q0M5M0Y4MkEyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm0ZonpBT3X9ewiR7/XPe/1MXL vb2XYl4z1yIs6v2/7JzFlnjN89MzCLIIZl4Y9fMFXEd/sDX6LW16l+G/F0CaIYxr 4cUM3H61R/Dl+cxzdRWxPn8UFvsiBdfcne/iY9hUPqGruKDSj1mdOKBc7HLGfVgt YNd7j3N3fEnMaftmW950Y1dpn0ysm9PU0yWIBxJSrDDDst2FCyi+8oYSnQ+WLlFJ B2Lz7Jbf2Gc425pirOBRIw2s04nCGiWbn2GxCELHNARZJaaE60mIWUziZKAiaW62 cwlodCo+0FD9hCkj5UYQdNvQ3oDpiyjlmCXu1dFL6HrLtAC1Uat0ne7zd7KjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjzwPKCNkTZnSAGDapBpMyT+CogkwHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4fvgqoHBMgiwi1WsrZUpc/ew56luvlf8qr B5/FL7mwGsx4dgzta6BDdPV7HZjnb55WerfFbve+V1XvcBokucVge8Wcfvqmzo3L oHTo2OwAsh57YItjnv0T83o2HSXeZXJNrrTKnvblN/jcbi+CATcVtCKDulG/lTF1 1OWaCr+ccrQa/AwzKadhxsu6SqLtIPD0/vvEkaMUqyU8XSYXgWyoQom84O2GEgFm 4+7wQQSiHgiji8L/cYj9XgOAEzSF7y6la+sv0L8Lh7mBEosKO0Q6zHaU32fzzY/p NN7NdBLqTXL9A9gAlQTNw4AvWkzbglF/HexKWCL4moafzRwLN+A= -----END CERTIFICATE-----Generated at Thu Aug 7 00:35:29 2025 by rpki-client