$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: HmHdyeay4f5fugevrc7tHD1Ifj3140Xv+VBBd4QutYA= Subject key identifier: 0F:57:EA:57:18:C2:75:A8:D6:8B:B4:FB:C7:0A:78:4E:4A:CB:3A:1D Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 6BD5959656D05ABB36922924205532F1B6DDA65E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: 9E Signing time: Tue 29 Apr 2025 13:31:32 +0000 Manifest this update: Tue 29 Apr 2025 13:26:32 +0000 Manifest next update: Fri 02 May 2025 14:34:32 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 93YYxDDq8+f/Khx/2GnLN/kmjkNijzZ2VSNum/bWLqg=) 2: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: jkNMBxFUuAIRx2EYrUQJFpH6/9hwPo8whHChXwRBWU8=) 3: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: 5HetFGZszR8N+jVJsMmxP9KoRUdy7YyfVMX9PkmHTvY=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: THBM8LqDnCB9g6mrX4v3sCaW9RltHiaa0G5I3swxXAw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 14:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d5:95:96:56:d0:5a:bb:36:92:29:24:20:55:32:f1:b6:dd:a6:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Apr 29 13:26:32 2025 GMT Not After : May 2 14:34:32 2025 GMT Subject: CN=0F57EA5718C275A8D68BB4FBC70A784E4ACB3A1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d8:e5:68:3b:d8:92:17:bb:75:cb:e6:c4:bc: 06:7e:33:a9:ed:18:f6:d4:88:ab:b8:30:4a:3d:5e: 6f:32:29:37:9d:bf:e7:16:c5:e7:e8:0e:9a:61:d8: cb:f2:d9:43:4c:c6:f2:a0:81:a9:79:00:ae:6e:ad: d8:21:92:0c:e6:3a:74:24:30:0f:f0:c9:6b:a7:ec: ec:e8:7b:0d:11:15:eb:01:8f:d2:c8:a6:32:36:af: 55:21:65:61:86:1f:bc:de:1b:f2:17:61:3f:5a:f5: d9:c5:d8:4d:f7:ed:9c:75:5f:a8:d8:70:67:12:f4: 28:ca:f9:c6:68:29:c9:b6:9f:18:60:dd:09:0b:73: 06:3d:69:dc:5d:4f:29:c4:b4:c4:66:3b:8d:ba:3d: 01:84:69:9d:1b:22:8e:56:34:c0:09:36:8a:b6:62: 9c:8d:7f:e9:c1:97:76:41:a1:c7:27:7b:3c:5c:02: 51:04:f8:dc:e7:71:f5:f8:af:51:6a:95:34:f9:3e: b6:15:d2:e2:61:77:d0:9c:b6:c3:74:41:c7:57:bd: e7:d7:db:70:cf:2d:cb:eb:94:90:12:90:50:79:09: e3:67:00:4a:31:45:0d:16:94:1d:33:41:7e:51:90: e9:7a:b3:61:04:44:fb:61:1a:22:af:0c:47:03:e3: 9d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:57:EA:57:18:C2:75:A8:D6:8B:B4:FB:C7:0A:78:4E:4A:CB:3A:1D X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2f:de:c4:1a:33:29:74:e9:2a:26:8f:c5:17:e9:55:c7:aa: a9:74:86:21:16:38:52:1e:ca:23:51:94:c9:48:fd:ac:2e:2b: 34:cb:8f:50:2e:36:69:ac:c4:57:a4:f2:c8:cb:10:e5:8c:32: d2:fa:ed:44:a9:e7:0a:b9:9b:f1:58:0b:1c:ce:a3:38:70:e7: 20:99:a4:8c:12:4e:e1:fa:9d:0c:11:b8:f0:ec:51:4e:79:8f: 02:e1:e7:e7:04:91:3d:36:09:fa:fe:9e:32:df:da:0a:65:36: 10:d7:5a:52:1a:31:b0:d0:56:2b:72:bd:6a:a0:e5:f7:42:47: a1:77:0c:b5:a6:78:45:b1:f5:2f:c8:2b:0e:08:3a:7f:b7:a1: f4:4a:69:51:a2:27:81:4f:75:e2:da:ef:1d:70:bd:9a:b7:5d: 5b:69:4d:76:c9:14:36:8b:af:58:d5:b2:86:21:bf:0d:ba:1c: 86:a6:8d:5f:6d:df:98:a3:95:fc:1c:85:85:3c:f7:eb:aa:ac: e9:62:e2:79:17:45:00:f6:5b:5c:46:4c:88:ae:d6:5d:22:1b: 1b:b8:be:d9:09:67:d1:e7:e7:33:6f:6c:3a:1c:cb:f6:8e:68: 03:f1:27:84:74:00:61:ce:f2:d7:65:cd:a2:91:15:bb:dd:80: a8:59:cd:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa9WVllbQWrs2kikkIFUy8bbdpl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNTA0MjkxMzI2MzJaFw0yNTA1MDIxNDM0MzJaMDMxMTAvBgNV BAMTKDBGNTdFQTU3MThDMjc1QThENjhCQjRGQkM3MEE3ODRFNEFDQjNBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp2OVoO9iSF7t1y+bEvAZ+M6nt GPbUiKu4MEo9Xm8yKTedv+cWxefoDpph2Mvy2UNMxvKggal5AK5urdghkgzmOnQk MA/wyWun7Ozoew0RFesBj9LIpjI2r1UhZWGGH7zeG/IXYT9a9dnF2E337Zx1X6jY cGcS9CjK+cZoKcm2nxhg3QkLcwY9adxdTynEtMRmO426PQGEaZ0bIo5WNMAJNoq2 YpyNf+nBl3ZBoccnezxcAlEE+NzncfX4r1FqlTT5PrYV0uJhd9CctsN0QcdXvefX 23DPLcvrlJASkFB5CeNnAEoxRQ0WlB0zQX5RkOl6s2EERPthGiKvDEcD451PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD1fqVxjCdajWi7T7xwp4TkrLOh0wHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0v3sQaMyl06Somj8UX6VXHqql0hiEWOFIe yiNRlMlI/awuKzTLj1AuNmmsxFek8sjLEOWMMtL67USp5wq5m/FYCxzOozhw5yCZ pIwSTuH6nQwRuPDsUU55jwLh5+cEkT02Cfr+njLf2gplNhDXWlIaMbDQVityvWqg 5fdCR6F3DLWmeEWx9S/IKw4IOn+3ofRKaVGiJ4FPdeLa7x1wvZq3XVtpTXbJFDaL r1jVsoYhvw26HIamjV9t35ijlfwchYU89+uqrOli4nkXRQD2W1xGTIiu1l0iGxu4 vtkJZ9Hn5zNvbDocy/aOaAPxJ4R0AGHO8tdlzaKRFbvdgKhZzYI= -----END CERTIFICATE-----Generated at Wed Apr 30 08:16:21 2025 by rpki-client