$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: IRKchhbh7qxM2FvHehUt3Lp50W8imnRmvMq8UOw71EU= Subject key identifier: 7B:C6:01:39:71:B6:4B:A6:44:BD:2F:1C:53:D6:AE:AD:06:1D:6F:10 Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 76D7E78C904ADB2CBD0EA2AEE8AE2E5DABCE7F90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: C9 Signing time: Tue 05 Aug 2025 00:41:35 +0000 Manifest this update: Tue 05 Aug 2025 00:36:35 +0000 Manifest next update: Fri 08 Aug 2025 07:42:35 +0000 Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: THBM8LqDnCB9g6mrX4v3sCaW9RltHiaa0G5I3swxXAw=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 93YYxDDq8+f/Khx/2GnLN/kmjkNijzZ2VSNum/bWLqg=) 3: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: kP1Njr15xvS2ktXlN8vHqeGYwq0MUHoBDsiKKotvvfY=) 4: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: 5HetFGZszR8N+jVJsMmxP9KoRUdy7YyfVMX9PkmHTvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 07:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d7:e7:8c:90:4a:db:2c:bd:0e:a2:ae:e8:ae:2e:5d:ab:ce:7f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Aug 5 00:36:35 2025 GMT Not After : Aug 8 07:42:35 2025 GMT Subject: CN=7BC6013971B64BA644BD2F1C53D6AEAD061D6F10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:d2:aa:9e:19:31:22:b0:6e:9f:00:3f:98: c6:67:9e:a6:49:ee:75:35:43:aa:9b:0f:be:a1:46: f4:3c:80:12:d6:98:c2:73:b0:f5:10:19:d6:94:67: 61:95:85:94:6f:91:9f:72:e2:96:54:51:85:30:e9: a7:24:f2:c6:1d:e4:49:2c:cb:f2:a2:c7:ac:96:fd: 0b:13:34:7e:32:28:4f:fe:b3:a1:1a:74:61:97:55: 2e:34:80:96:31:fa:50:ac:68:00:4a:98:db:56:9e: dd:b3:17:1e:73:e0:0d:f6:ae:37:5e:50:47:bd:fb: e5:b3:f9:a6:9e:e2:5a:f2:17:97:3f:b7:d8:43:28: 71:d8:e2:02:31:0a:5b:3f:57:31:76:b9:8c:04:a6: b3:64:d4:2e:d8:36:df:29:b5:98:a8:7b:e2:82:95: 77:10:9e:d6:12:73:c9:b7:34:6e:01:68:a3:cb:7d: d9:bf:c0:e5:03:04:c6:f2:cb:43:d2:77:8b:2b:a3: 94:a1:5c:8c:4a:7b:ab:93:c6:09:dc:8d:07:27:f2: 04:2f:78:da:5a:6d:91:3c:82:27:d2:16:32:48:92: 89:90:a3:2e:f6:bf:2a:f6:e5:97:b4:34:2d:fc:af: 96:fc:c2:05:92:e1:a6:39:f2:88:c1:83:5a:2e:bf: 20:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C6:01:39:71:B6:4B:A6:44:BD:2F:1C:53:D6:AE:AD:06:1D:6F:10 X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:39:52:b0:aa:e4:e7:76:cd:b1:de:73:3b:5b:4c:1e:41:89: 78:fe:1f:aa:1e:02:2e:fe:1f:a8:1e:45:0e:12:9c:9b:ed:e2: cb:87:b0:c1:df:5a:e7:4c:f8:49:39:61:90:a0:58:2f:96:33: 67:45:5c:89:c8:8e:03:7d:9c:f1:65:c3:25:63:43:ef:3b:75: d0:b1:c3:94:29:58:f6:a5:61:74:72:ac:f8:c0:95:82:51:e7: 30:ac:5c:2b:5e:36:cd:90:ed:0a:0d:60:74:b9:11:08:5f:6f: 49:51:d0:2f:91:a3:75:08:75:61:ea:94:77:6b:7b:1e:5f:4d: 24:18:19:74:10:d7:c0:46:e5:cb:46:cc:ca:b4:2e:57:43:5c: 04:7d:a2:26:1c:08:dc:87:bd:87:49:2f:ba:c8:01:b5:75:b1: 9c:1c:d7:fb:08:29:86:cf:5b:a8:6d:a9:ac:5b:09:7f:cf:28: 6c:3e:b5:96:b8:fa:db:0a:cf:e8:3e:ba:c9:54:e0:43:9d:fd: 03:7c:44:c4:ad:de:d1:97:d0:6a:a8:78:fb:bd:c7:5d:35:08: f8:a0:c3:8a:7c:07:4b:34:20:a7:cf:18:02:41:4b:58:d8:d5: 88:c2:88:13:8d:4f:fd:b2:ae:32:fc:8c:f4:25:d2:a4:3d:48: 59:17:33:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdtfnjJBK2yy9DqKu6K4uXavOf5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNTA4MDUwMDM2MzVaFw0yNTA4MDgwNzQyMzVaMDMxMTAvBgNV BAMTKDdCQzYwMTM5NzFCNjRCQTY0NEJEMkYxQzUzRDZBRUFEMDYxRDZGMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5i9KqnhkxIrBunwA/mMZnnqZJ 7nU1Q6qbD76hRvQ8gBLWmMJzsPUQGdaUZ2GVhZRvkZ9y4pZUUYUw6ack8sYd5Eks y/Kix6yW/QsTNH4yKE/+s6EadGGXVS40gJYx+lCsaABKmNtWnt2zFx5z4A32rjde UEe9++Wz+aae4lryF5c/t9hDKHHY4gIxCls/VzF2uYwEprNk1C7YNt8ptZioe+KC lXcQntYSc8m3NG4BaKPLfdm/wOUDBMbyy0PSd4sro5ShXIxKe6uTxgncjQcn8gQv eNpabZE8gifSFjJIkomQoy72vyr25Ze0NC38r5b8wgWS4aY58ojBg1ouvyB7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe8YBOXG2S6ZEvS8cU9aurQYdbxAwHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABo5UrCq5Od2zbHecztbTB5BiXj+H6oeAi7+ H6geRQ4SnJvt4suHsMHfWudM+Ek5YZCgWC+WM2dFXInIjgN9nPFlwyVjQ+87ddCx w5QpWPalYXRyrPjAlYJR5zCsXCteNs2Q7QoNYHS5EQhfb0lR0C+Ro3UIdWHqlHdr ex5fTSQYGXQQ18BG5ctGzMq0LldDXAR9oiYcCNyHvYdJL7rIAbV1sZwc1/sIKYbP W6htqaxbCX/PKGw+tZa4+tsKz+g+uslU4EOd/QN8RMSt3tGX0GqoePu9x101CPig w4p8B0s0IKfPGAJBS1jY1YjCiBONT/2yrjL8jPQl0qQ9SFkXM+U= -----END CERTIFICATE-----Generated at Tue Aug 5 20:00:32 2025 by rpki-client