$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: sB8IbCKDz2RFpEAU5kCc/dPp9x5qhxmKkWoz0CxH/uI= Subject key identifier: D1:BE:00:C6:98:4C:8D:46:86:ED:51:6D:54:1C:DC:77:6A:5B:11:98 Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 0FE5DB5EE6F8C1CBF78CED76BEDD00B5D7EC5194 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 0149 Signing time: Sat 14 Jun 2025 14:31:40 +0000 Manifest this update: Sat 14 Jun 2025 14:26:40 +0000 Manifest next update: Wed 18 Jun 2025 01:25:40 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: eebbaU9D24srRwLLDjhH3Gb9Ffk+0AMZdq/x3Fci1NA=) 2: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: E4T0PDjwEBHhZ8rTA7NcZIYLEz1fBZeS9wMtn/x/Srs=) 3: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: /Wx2tUp4yK4+FcoJ34dQdvaHp/bfeChiFIObpcJVJi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e5:db:5e:e6:f8:c1:cb:f7:8c:ed:76:be:dd:00:b5:d7:ec:51:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: Jun 14 14:26:40 2025 GMT Not After : Jun 18 01:25:40 2025 GMT Subject: CN=D1BE00C6984C8D4686ED516D541CDC776A5B1198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a5:aa:4b:11:de:97:fd:5b:66:c2:6e:8e:2b: 6a:63:c6:6f:c6:bc:9a:25:b0:68:cd:a9:d5:a0:3a: c9:0d:26:cf:63:76:71:51:da:b4:38:be:66:bb:51: dd:ec:0f:60:3c:e4:28:3f:72:69:3d:ea:db:79:4a: 04:c0:76:cb:95:37:b9:c0:ae:81:0d:1d:fa:7d:a0: 62:b9:aa:04:eb:d1:f7:96:b5:2f:b6:a7:00:a3:98: ce:4c:3f:17:32:8f:5b:05:28:41:6d:69:6f:b2:da: ec:6a:34:83:4e:b4:62:65:fb:72:f1:4a:cf:6c:86: 52:fa:6c:c7:d4:6c:b6:75:46:26:fd:b5:1c:17:50: c2:2e:8e:1c:67:eb:6c:7e:e2:f2:c9:48:f2:b8:28: 69:e0:d4:0a:af:9f:39:ae:94:53:b4:b1:71:91:fc: 76:d2:76:37:41:ce:c6:07:57:9d:e8:7d:88:45:7c: 03:00:ba:64:40:38:71:5c:85:3d:93:41:27:d5:dd: 28:7c:84:1c:98:65:11:59:90:15:7f:33:65:0e:33: 79:99:7d:5e:b6:dc:51:e3:9e:f7:4a:c3:ad:29:e3: 0f:39:39:be:f3:c6:13:f1:47:b2:f1:0b:3b:fd:86: 8e:7a:20:c7:a5:a9:38:d5:d4:fa:78:d6:c9:75:71: cc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BE:00:C6:98:4C:8D:46:86:ED:51:6D:54:1C:DC:77:6A:5B:11:98 X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4a:48:1b:46:fe:a3:58:81:41:7f:d8:18:57:4b:4f:b7:ae: fe:9c:87:84:dc:79:a9:dd:c3:86:38:87:8b:ba:1c:31:64:ea: c2:aa:36:4f:6d:58:b1:8f:8d:96:5c:c2:2e:de:03:3e:c7:9a: d9:15:3b:2a:ac:7e:fe:2e:70:04:22:91:76:92:be:28:5d:b5: 49:67:b1:41:7b:bb:fa:97:02:6f:d7:00:33:26:40:37:f7:b9: 0d:49:e7:3c:88:65:03:b3:49:f0:b0:b2:2a:3b:43:eb:4e:5a: b5:e7:71:67:fc:60:5f:23:91:3c:e8:aa:f1:ea:ca:37:d5:84: ec:32:63:4f:c1:69:e0:92:4e:4b:d9:52:9e:a2:83:33:fe:be: 0b:4d:77:0e:f0:e1:00:33:90:60:67:95:cd:80:d8:17:0b:b0: aa:87:f5:84:3d:a5:e1:05:af:02:2d:50:75:2f:cf:78:d6:fa: e6:69:eb:42:cd:70:06:fd:7c:3b:97:15:90:e6:35:2f:4a:90: 82:a1:e3:47:fb:51:4f:d9:ed:55:df:7a:f0:b4:91:e9:43:b0: 65:4b:88:80:d4:f2:d1:2f:11:c6:de:c0:a2:ae:0d:7b:4e:d7: fc:62:bd:cf:ab:49:3b:68:b2:17:c8:22:ac:18:79:d6:12:3f: 42:db:e4:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+XbXub4wcv3jO12vt0AtdfsUZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2 QUNEODcxNzAeFw0yNTA2MTQxNDI2NDBaFw0yNTA2MTgwMTI1NDBaMDMxMTAvBgNV BAMTKEQxQkUwMEM2OTg0QzhENDY4NkVENTE2RDU0MUNEQzc3NkE1QjExOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDupapLEd6X/Vtmwm6OK2pjxm/G vJolsGjNqdWgOskNJs9jdnFR2rQ4vma7Ud3sD2A85Cg/cmk96tt5SgTAdsuVN7nA roENHfp9oGK5qgTr0feWtS+2pwCjmM5MPxcyj1sFKEFtaW+y2uxqNINOtGJl+3Lx Ss9shlL6bMfUbLZ1Rib9tRwXUMIujhxn62x+4vLJSPK4KGng1AqvnzmulFO0sXGR /HbSdjdBzsYHV53ofYhFfAMAumRAOHFchT2TQSfV3Sh8hByYZRFZkBV/M2UOM3mZ fV623FHjnvdKw60p4w85Ob7zxhPxR7LxCzv9ho56IMelqTjV1Pp41sl1ccxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0b4AxphMjUaG7VFtVBzcd2pbEZgwHwYDVR0j BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdKSBtG/qNYgUF/2BhXS0+3rv6ch4Tceand w4Y4h4u6HDFk6sKqNk9tWLGPjZZcwi7eAz7HmtkVOyqsfv4ucAQikXaSvihdtUln sUF7u/qXAm/XADMmQDf3uQ1J5zyIZQOzSfCwsio7Q+tOWrXncWf8YF8jkTzoqvHq yjfVhOwyY0/BaeCSTkvZUp6igzP+vgtNdw7w4QAzkGBnlc2A2BcLsKqH9YQ9peEF rwItUHUvz3jW+uZp60LNcAb9fDuXFZDmNS9KkIKh40f7UU/Z7VXfevC0kelDsGVL iIDU8tEvEcbewKKuDXtO1/xivc+rSTtoshfIIqwYedYSP0Lb5GY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:24:06 2025 by rpki-client