$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: cw/BMovvCj9k7pUxkfuJ/ckfUFXDwDH33m/9U5J8wrk= Subject key identifier: F0:D6:F7:07:48:F2:AE:BB:04:36:D8:11:14:EF:0B:59:B6:CD:20:BF Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 3C2279AF42253FB874795A2839F81261F7E604DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 014F Signing time: Mon 28 Apr 2025 07:02:17 +0000 Manifest this update: Mon 28 Apr 2025 06:57:17 +0000 Manifest next update: Thu 01 May 2025 08:26:17 +0000 Files and hashes: 1: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: 907swenfI16Aft6qzAi5dpyEs6BxfNg+Ndea03NJnvc=) 2: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: H3EtcLEE0IGvam9Auuq3QSB3PLABMBbWzZsAbxF8fnQ=) 3: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: 2rg4mZTPmWY1vBCEWiV0rA5Qu83+kY4hjo0pvRTFWVU=) 4: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: paFKt6o0V+erS5HMhIrJfWgyUpdeSz8l0mwrNctd67E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 08:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:22:79:af:42:25:3f:b8:74:79:5a:28:39:f8:12:61:f7:e6:04:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Apr 28 06:57:17 2025 GMT Not After : May 1 08:26:17 2025 GMT Subject: CN=F0D6F70748F2AEBB0436D81114EF0B59B6CD20BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fc:53:e5:00:ec:ab:5b:33:1e:8f:b3:fb:6f: 7f:82:fd:e1:19:7c:f0:25:13:c3:88:9d:c2:9a:e4: a0:34:69:5f:cb:f0:8c:b5:21:9b:b9:bb:55:9c:d7: a5:51:46:a3:a1:0a:0a:63:8e:46:b8:79:32:c2:bc: f7:6f:53:21:38:ab:55:43:1c:fc:d7:b0:ad:25:37: 05:90:48:d9:28:a5:19:94:64:6a:ce:a0:ed:5c:41: 08:ff:aa:6f:92:0e:38:3e:4a:3b:60:9b:2b:e2:b6: 6b:36:9b:37:74:45:e4:f2:f0:c7:48:23:f6:e8:50: 15:6a:9f:8d:90:c9:12:06:2d:eb:f3:03:db:db:15: 14:ca:b0:56:cd:3a:7b:43:cb:bd:40:09:3f:65:92: 6e:c7:a0:c7:58:15:07:a0:a4:3b:30:50:32:55:2a: ad:e9:40:4a:9e:a4:9a:41:86:ed:77:32:d3:36:95: 82:67:f4:70:24:65:64:ee:55:08:23:ee:1e:5d:6c: b9:f6:bc:00:3b:57:13:40:52:9d:29:fa:a0:63:ab: 20:b0:5e:be:5c:bb:de:7a:d3:ee:36:1a:b3:d6:71: b6:2b:08:e5:60:6c:35:4a:69:52:45:e6:20:04:9c: ce:9c:b0:6d:a1:45:5e:e6:b3:f9:fb:96:69:8a:40: 28:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D6:F7:07:48:F2:AE:BB:04:36:D8:11:14:EF:0B:59:B6:CD:20:BF X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c6:2d:07:f3:43:03:ec:09:fd:69:21:07:6c:30:23:7d:64: 3f:12:06:19:22:4d:cf:1b:72:81:5d:76:9e:3f:4d:4e:da:8c: 34:82:9c:9f:d7:79:79:97:5b:d3:8a:c1:a7:ab:ae:d5:66:b1: 07:be:37:04:ef:42:ac:ed:bc:6d:be:e4:02:51:f5:1e:d8:31: 65:dc:d2:b7:61:0e:7f:dd:51:51:6a:65:74:42:5e:f6:ff:62: 6e:b4:1f:90:90:78:a0:5b:21:99:98:16:62:78:4a:a7:f7:e7: 5c:67:7a:ca:8a:2a:57:25:08:5e:2e:22:d1:71:db:11:c7:e2: 7c:ae:4a:61:1d:4b:1e:e5:ac:e2:82:3a:9b:29:18:5b:66:b7: 4a:c5:49:e6:05:80:0d:22:b1:00:1a:33:7f:43:75:85:13:6e: ed:1f:9e:e4:68:46:ff:9f:c2:2f:15:29:aa:69:b9:ff:fc:0f: 6b:b7:01:b1:d4:7e:43:89:61:d9:2d:be:ed:c0:08:02:e8:5c: 39:c6:43:1b:bb:6a:cf:b9:8f:7e:83:b7:63:30:89:ef:f1:79: d3:d4:3b:ff:1f:c2:67:00:83:03:66:42:76:8a:b7:e4:23:a7: 34:6b:ec:72:dd:80:ff:d3:af:6b:69:56:9e:71:92:3f:2d:f0: c9:dc:2a:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCJ5r0IlP7h0eVooOfgSYffmBNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNTA0MjgwNjU3MTdaFw0yNTA1MDEwODI2MTdaMDMxMTAvBgNV BAMTKEYwRDZGNzA3NDhGMkFFQkIwNDM2RDgxMTE0RUYwQjU5QjZDRDIwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/FPlAOyrWzMej7P7b3+C/eEZ fPAlE8OIncKa5KA0aV/L8Iy1IZu5u1Wc16VRRqOhCgpjjka4eTLCvPdvUyE4q1VD HPzXsK0lNwWQSNkopRmUZGrOoO1cQQj/qm+SDjg+Sjtgmyvitms2mzd0ReTy8MdI I/boUBVqn42QyRIGLevzA9vbFRTKsFbNOntDy71ACT9lkm7HoMdYFQegpDswUDJV Kq3pQEqepJpBhu13MtM2lYJn9HAkZWTuVQgj7h5dbLn2vAA7VxNAUp0p+qBjqyCw Xr5cu9560+42GrPWcbYrCOVgbDVKaVJF5iAEnM6csG2hRV7ms/n7lmmKQCg7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Nb3B0jyrrsENtgRFO8LWbbNIL8wHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3GLQfzQwPsCf1pIQdsMCN9ZD8SBhkiTc8b coFddp4/TU7ajDSCnJ/XeXmXW9OKwaerrtVmsQe+NwTvQqztvG2+5AJR9R7YMWXc 0rdhDn/dUVFqZXRCXvb/Ym60H5CQeKBbIZmYFmJ4Sqf351xnesqKKlclCF4uItFx 2xHH4nyuSmEdSx7lrOKCOpspGFtmt0rFSeYFgA0isQAaM39DdYUTbu0fnuRoRv+f wi8VKappuf/8D2u3AbHUfkOJYdktvu3ACALoXDnGQxu7as+5j36Dt2Mwie/xedPU O/8fwmcAgwNmQnaKt+QjpzRr7HLdgP/Tr2tpVp5xkj8t8MncKrE= -----END CERTIFICATE-----Generated at Tue Apr 29 12:12:47 2025 by rpki-client