$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: qyKcewF6s0Vy2vwS3TrWu0hFafio04J/sLDHca5s4OE= Subject key identifier: BC:49:DD:F4:05:34:95:8E:87:6B:83:78:FA:81:BA:CF:3F:34:0F:24 Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: 13B10EB9C48669208A158B470582626300AA84C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 04C7 Signing time: Sun 15 Jun 2025 10:51:07 +0000 Manifest this update: Sun 15 Jun 2025 10:46:07 +0000 Manifest next update: Wed 18 Jun 2025 22:19:07 +0000 Files and hashes: 1: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: FBmWTe9HWr9MZDoQn5EDI0qf5wv/uc05RqfU4JkZU+U=) 2: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: zwHOHBI2oAxzWhaLSwG8fhj7D4Y2DeYXfPoHxgb3IhQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 22:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b1:0e:b9:c4:86:69:20:8a:15:8b:47:05:82:62:63:00:aa:84:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: Jun 15 10:46:07 2025 GMT Not After : Jun 18 22:19:07 2025 GMT Subject: CN=BC49DDF40534958E876B8378FA81BACF3F340F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:38:e8:77:5a:a5:e5:4d:76:25:c6:50:73:23: fe:fe:ef:7b:45:34:1f:34:a6:42:53:4f:2c:f9:87: fd:6d:c4:3a:88:50:ad:52:ff:55:c6:5b:a3:dc:3b: 6f:88:54:6c:92:ed:a0:25:01:05:36:a0:8a:e6:20: da:94:01:43:0b:42:0c:b0:92:97:34:72:9e:ea:b8: f1:b8:2a:9c:61:1f:f8:73:42:a2:04:43:c9:53:dc: 50:d8:4d:71:29:40:30:4c:ce:f2:27:33:63:93:42: 64:6d:fb:29:f8:f1:4d:c6:a3:68:33:48:e7:9b:e7: 86:ab:42:37:59:ce:64:0b:da:ed:28:90:e9:d8:20: a1:47:1b:9e:63:f3:0e:eb:8e:ed:7f:b3:bf:f7:f2: c1:7d:02:b9:89:90:83:c3:72:86:9b:98:37:89:b0: d5:f1:a9:32:dd:f0:8f:69:c9:76:9b:36:7e:ab:5a: 7b:83:2a:19:eb:6d:c1:08:a3:db:48:d1:13:64:ee: 7c:95:63:7d:40:75:4b:0a:e0:a7:f3:f2:aa:c5:79: 73:fe:3f:c1:dc:51:b0:37:29:71:4e:03:57:a3:df: ca:b5:49:d5:82:82:9e:74:1e:5a:cb:78:d5:eb:f1: 85:cf:d8:c6:ad:c0:e9:57:9d:97:49:88:ed:49:7e: 3a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:49:DD:F4:05:34:95:8E:87:6B:83:78:FA:81:BA:CF:3F:34:0F:24 X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:95:cf:8f:09:6a:7b:6d:08:f6:68:fc:1d:1e:a0:88:83:01: 18:4a:19:35:4d:48:b9:99:83:15:e0:bd:06:07:5d:25:5c:e0: 24:fc:42:81:07:4e:46:59:c7:23:75:bb:66:29:ef:ad:60:41: 98:2c:44:bb:82:48:53:0e:da:d4:ba:c9:ad:fc:24:68:66:18: 88:ad:fb:1a:48:46:0a:f8:91:dd:58:1d:ef:d0:93:d5:91:e3: 1f:60:02:8d:f6:83:43:e6:22:3c:9a:7a:e9:2e:ef:f9:d9:f0: f8:35:88:ba:8b:59:cf:6b:ad:74:e5:af:d0:f2:82:73:5d:a9: ec:92:6e:4c:a9:6e:05:67:71:a2:97:94:76:ec:dc:19:6a:f7: 26:08:d6:2a:ba:68:3a:d0:80:33:da:a5:ca:aa:a5:57:94:e4: d3:01:18:5d:2a:28:66:b4:d1:7b:8b:43:84:02:f0:df:c1:dd: 19:2a:87:ff:d7:6d:de:eb:fa:a8:11:45:dd:a8:46:6c:76:42: e5:6e:ee:96:36:d8:07:90:19:ec:2e:f9:7f:81:bd:18:76:db: 6a:bf:8b:c3:53:5c:a9:9f:9b:27:be:4d:fb:d0:ed:2d:45:b5: 59:48:b9:78:1f:e9:7b:95:6b:c0:b2:da:ba:6d:d3:d4:eb:fb: d4:8e:1b:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7EOucSGaSCKFYtHBYJiYwCqhMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNTA2MTUxMDQ2MDdaFw0yNTA2MTgyMjE5MDdaMDMxMTAvBgNV BAMTKEJDNDlEREY0MDUzNDk1OEU4NzZCODM3OEZBODFCQUNGM0YzNDBGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxOOh3WqXlTXYlxlBzI/7+73tF NB80pkJTTyz5h/1txDqIUK1S/1XGW6PcO2+IVGyS7aAlAQU2oIrmINqUAUMLQgyw kpc0cp7quPG4KpxhH/hzQqIEQ8lT3FDYTXEpQDBMzvInM2OTQmRt+yn48U3Go2gz SOeb54arQjdZzmQL2u0okOnYIKFHG55j8w7rju1/s7/38sF9ArmJkIPDcoabmDeJ sNXxqTLd8I9pyXabNn6rWnuDKhnrbcEIo9tI0RNk7nyVY31AdUsK4Kfz8qrFeXP+ P8HcUbA3KXFOA1ej38q1SdWCgp50HlrLeNXr8YXP2MatwOlXnZdJiO1JfjrbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvEnd9AU0lY6Ha4N4+oG6zz80DyQwHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeVz48JanttCPZo/B0eoIiDARhKGTVNSLmZ gxXgvQYHXSVc4CT8QoEHTkZZxyN1u2Yp761gQZgsRLuCSFMO2tS6ya38JGhmGIit +xpIRgr4kd1YHe/Qk9WR4x9gAo32g0PmIjyaeuku7/nZ8Pg1iLqLWc9rrXTlr9Dy gnNdqeySbkypbgVncaKXlHbs3Blq9yYI1iq6aDrQgDPapcqqpVeU5NMBGF0qKGa0 0XuLQ4QC8N/B3Rkqh//Xbd7r+qgRRd2oRmx2QuVu7pY22AeQGewu+X+BvRh222q/ i8NTXKmfmye+TfvQ7S1FtVlIuXgf6XuVa8Cy2rpt09Tr+9SOG9U= -----END CERTIFICATE-----Generated at Mon Jun 16 18:13:23 2025 by rpki-client