$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json) Hash identifier: 1eAiIWpcwv+veqeD6Q7oJuMk7c2TKAy31Xbf6/b0JwY= Subject key identifier: 91:ED:8E:AC:82:FF:31:3D:15:05:90:84:17:54:A8:42:B5:59:BF:6D Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Certificate serial: 707B7BF324A2E947D268AF5E1B600814CEA7D99F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft Manifest number: 0422 Signing time: Sat 14 Jun 2025 09:00:36 +0000 Manifest this update: Sat 14 Jun 2025 08:55:36 +0000 Manifest next update: Tue 17 Jun 2025 16:34:36 +0000 Files and hashes: 1: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: M7rTu+x3u6qUQ5YcgymxtkFlr+zcSjgyy/tqc60RCYc=) 2: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: neKnrwavxILMQRApJ1CWiwNqhKDuQZ+D8nVVXA0bCPo=) 3: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: hvScsFU3gyKuZF4ZLSU+Pil08L9tuR9DBWDpcMUJ6M8=) 4: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: FPq/J2wRAjS89GyiaYlBp0d9JuDryTtq4ncVN9be0LA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 16:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7b:7b:f3:24:a2:e9:47:d2:68:af:5e:1b:60:08:14:ce:a7:d9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Validity Not Before: Jun 14 08:55:36 2025 GMT Not After : Jun 17 16:34:36 2025 GMT Subject: CN=91ED8EAC82FF313D150590841754A842B559BF6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1c:4d:81:c9:c6:b0:7e:e6:cc:90:6b:52:94: f4:0e:15:7f:23:77:50:e2:99:0a:09:8e:5c:d2:8b: 2c:52:ad:0c:51:93:a5:23:9f:b1:7a:c5:5b:42:32: 60:c7:4b:2b:84:e7:84:b6:d5:65:ba:e1:74:c6:ea: 3e:5a:81:c1:44:52:0a:66:e9:d2:f1:95:8c:b8:80: eb:31:84:76:6d:79:06:48:71:69:82:ca:be:d4:57: b1:88:7f:f3:53:b3:ba:ae:6f:0e:47:37:3f:e3:94: bd:fb:ad:75:26:2f:cf:9a:c7:92:af:86:cc:3e:35: 31:09:5b:a3:3a:4f:27:1c:ef:b4:3c:bd:dc:d6:9d: 07:42:15:c0:10:78:97:92:62:a2:49:e8:f6:2f:82: fb:9a:be:9a:0b:70:c2:8c:af:de:2b:89:7f:9a:e1: ab:96:6b:2e:9c:82:68:9a:e5:b4:cb:0f:d4:5c:45: 8d:49:fb:f3:93:44:df:99:99:19:d9:19:92:c1:09: ca:89:bf:03:b4:d9:18:1f:fb:3b:65:20:cb:16:29: 28:59:05:8a:d0:c3:92:a1:bf:d3:83:0d:77:28:fe: d8:42:29:17:b9:7b:5f:3b:b4:8a:4b:d4:74:3f:83: 37:c7:bc:60:8d:ee:67:7e:b1:05:2c:a9:d5:67:61: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:ED:8E:AC:82:FF:31:3D:15:05:90:84:17:54:A8:42:B5:59:BF:6D X509v3 Authority Key Identifier: keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9c:a9:fd:9c:19:64:57:a0:b0:04:9c:63:e5:90:8f:15:4f: 02:1b:d4:8b:90:3e:a1:30:a2:b2:6e:46:ab:a9:2a:fe:0a:8f: 21:11:3d:a9:a5:1b:7b:85:36:bd:f3:58:19:8a:33:29:7f:4d: ab:2f:c5:af:bd:35:70:0e:ea:0f:90:0f:2d:3d:35:f3:23:8d: 3a:7f:f4:7f:f9:c2:42:f7:c0:1a:1e:25:5f:92:47:fe:20:d4: e0:b0:9d:f8:07:80:4b:4c:0e:40:29:bd:77:2b:f3:7e:52:7c: f9:75:b7:94:40:d7:d0:dc:9b:75:d7:56:44:95:33:32:bf:05: 98:95:29:d5:e8:e5:5b:25:56:5a:39:45:49:55:2f:9f:ca:e1: bc:b2:0e:d8:0d:2a:e8:9e:f4:06:2c:50:7f:20:a5:ab:89:7b: d7:67:22:55:36:d4:71:01:6c:ce:c8:a3:f5:d4:68:43:fb:c7: ad:c5:cc:9d:2e:73:d4:44:4a:34:f3:55:b8:2b:60:84:d1:c6: 94:06:9b:4c:1d:33:d5:5a:31:44:6e:89:7b:6a:07:c9:a4:dc: 89:3b:6e:06:2d:01:d0:03:29:d5:05:92:4a:cd:5e:2d:cf:e2: fe:6d:5e:e6:52:d2:28:75:62:40:60:46:af:35:1d:0b:6d:dc: 51:73:e5:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHt78ySi6UfSaK9eG2AIFM6n2Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1 Qzc3RTJDMTAeFw0yNTA2MTQwODU1MzZaFw0yNTA2MTcxNjM0MzZaMDMxMTAvBgNV BAMTKDkxRUQ4RUFDODJGRjMxM0QxNTA1OTA4NDE3NTRBODQyQjU1OUJGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjHE2BycawfubMkGtSlPQOFX8j d1DimQoJjlzSiyxSrQxRk6Ujn7F6xVtCMmDHSyuE54S21WW64XTG6j5agcFEUgpm 6dLxlYy4gOsxhHZteQZIcWmCyr7UV7GIf/NTs7qubw5HNz/jlL37rXUmL8+ax5Kv hsw+NTEJW6M6Tycc77Q8vdzWnQdCFcAQeJeSYqJJ6PYvgvuavpoLcMKMr94riX+a 4auWay6cgmia5bTLD9RcRY1J+/OTRN+ZmRnZGZLBCcqJvwO02Rgf+ztlIMsWKShZ BYrQw5Khv9ODDXco/thCKRe5e187tIpL1HQ/gzfHvGCN7md+sQUsqdVnYWvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUke2OrIL/MT0VBZCEF1SoQrVZv20wHwYDVR0j BBgwFoAUcV3G3qgP5dif3GgsGcezD1x34sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMC83MTVEQzZERUE4 MEZFNUQ4OUZEQzY4MkMxOUM3QjMwRjVDNzdFMkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1Qzc3 RTJDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0Iz MEY1Qzc3RTJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6cqf2cGWRXoLAEnGPlkI8VTwIb1IuQPqEw orJuRqupKv4KjyERPamlG3uFNr3zWBmKMyl/Tasvxa+9NXAO6g+QDy09NfMjjTp/ 9H/5wkL3wBoeJV+SR/4g1OCwnfgHgEtMDkApvXcr835SfPl1t5RA19Dcm3XXVkSV MzK/BZiVKdXo5VslVlo5RUlVL5/K4byyDtgNKuie9AYsUH8gpauJe9dnIlU21HEB bM7Io/XUaEP7x63FzJ0uc9RESjTzVbgrYITRxpQGm0wdM9VaMURuiXtqB8mk3Ik7 bgYtAdADKdUFkkrNXi3P4v5tXuZS0ih1YkBgRq81HQtt3FFz5fA= -----END CERTIFICATE-----Generated at Mon Jun 16 12:31:26 2025 by rpki-client