$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: 7qe/XQ0+H7JHKIZ9paYexAnVNbt7/cu3mHB7ltunLYQ= Subject key identifier: 17:AC:01:A6:79:BE:89:E9:E7:8C:B3:4B:C1:CD:2D:0C:62:86:37:90 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 7D028EC9A65BFD413E57B38BE2BFE882C7115860 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 0215 Signing time: Mon 16 Jun 2025 23:20:36 +0000 Manifest this update: Mon 16 Jun 2025 23:15:36 +0000 Manifest next update: Fri 20 Jun 2025 03:00:36 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: wDDHmfXbcVqw0smbG6As8acn9RHt973MQSaDFYdjQNM=) 2: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) 3: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: pCpwD7H4KpxMAb+8aGig2lZOo9BkwBLNAGRFpKBmBW4=) 4: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:02:8e:c9:a6:5b:fd:41:3e:57:b3:8b:e2:bf:e8:82:c7:11:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Jun 16 23:15:36 2025 GMT Not After : Jun 20 03:00:36 2025 GMT Subject: CN=17AC01A679BE89E9E78CB34BC1CD2D0C62863790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:8b:83:5f:fe:75:e7:17:d5:81:e1:a1:58: 6b:f1:50:da:6e:f5:f6:0d:6e:48:ca:1c:28:23:47: 14:e3:42:e3:b8:cf:e2:fe:4b:32:98:b1:24:e5:53: 9e:59:7c:f9:e8:04:25:33:e2:f0:51:87:41:f1:b9: 45:ee:aa:2d:4d:f8:de:ec:66:b7:24:23:b8:93:2c: 29:7b:2e:43:ae:1e:7e:7e:ce:1f:d6:46:67:05:03: 11:d1:d5:81:0a:ed:74:92:5c:29:5f:37:b8:97:c0: 3e:11:ff:3d:37:e5:c7:ad:39:bc:12:c9:77:3b:a7: 4c:6e:2b:7a:7a:7e:f6:7c:97:5f:91:c5:95:ac:0e: 6a:76:40:c3:f2:e7:84:7a:e2:5d:00:7e:9c:fc:18: 95:90:d9:8d:2d:71:0c:04:75:bb:6a:d5:8a:08:da: 79:aa:3c:4e:ed:f1:8e:6c:3f:8b:63:5e:44:7b:18: 3f:3c:55:10:57:54:15:fb:bc:df:58:bb:99:f7:dd: 0d:8f:17:49:ed:e5:81:74:ce:9a:f7:d6:3b:86:ef: b8:c1:79:f7:85:bc:a1:57:fe:2f:dc:79:72:9d:92: 79:80:1d:30:aa:ec:b4:0e:e5:59:aa:76:ed:0b:7d: 07:ae:0c:95:47:d1:08:c4:b4:79:ca:4b:09:2d:73: 00:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AC:01:A6:79:BE:89:E9:E7:8C:B3:4B:C1:CD:2D:0C:62:86:37:90 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:04:aa:9a:e8:23:c9:81:24:45:b6:35:16:a5:99:55:00:d9: cd:ac:57:be:e0:38:21:0f:fb:29:ee:5d:ca:bf:f0:38:80:59: 71:ff:04:e1:a1:52:01:2e:cd:13:7b:95:33:36:9c:11:1b:f6: a8:7f:06:3a:36:95:e9:92:6e:b2:a2:32:6f:a7:d5:69:10:01: 15:8b:59:52:64:e9:db:55:19:9e:28:b2:26:e6:b0:59:76:71: e7:8e:14:ff:31:2d:2e:41:1b:f6:e5:8f:7d:f1:a0:6d:d9:2d: f7:04:b0:72:df:58:94:65:24:c7:90:7b:22:53:f6:63:8c:69: 7d:7b:35:49:c8:ad:44:b1:22:a4:0b:71:8b:59:fe:98:3f:15: 2f:04:ae:d4:6c:38:20:1c:e7:48:e3:b2:3b:e0:4b:f9:bc:03: de:5b:dd:b0:a6:73:67:dd:05:c0:00:bb:48:4f:e7:54:67:42: cc:05:50:02:83:39:0b:87:9b:67:18:a2:88:94:95:92:69:33: 67:ed:e5:c5:50:0f:9f:c6:f6:66:65:a7:03:f7:01:8a:96:72: 05:7a:6f:71:9c:53:6d:ae:ec:b1:e8:36:04:2c:7c:80:40:b8: 2f:ea:16:92:b3:cd:9e:27:c4:2a:bb:45:83:a7:ba:a3:d0:1e: a9:99:41:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQKOyaZb/UE+V7OL4r/ogscRWGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTA2MTYyMzE1MzZaFw0yNTA2MjAwMzAwMzZaMDMxMTAvBgNV BAMTKDE3QUMwMUE2NzlCRTg5RTlFNzhDQjM0QkMxQ0QyRDBDNjI4NjM3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkEouDX/515xfVgeGhWGvxUNpu 9fYNbkjKHCgjRxTjQuO4z+L+SzKYsSTlU55ZfPnoBCUz4vBRh0HxuUXuqi1N+N7s ZrckI7iTLCl7LkOuHn5+zh/WRmcFAxHR1YEK7XSSXClfN7iXwD4R/z035cetObwS yXc7p0xuK3p6fvZ8l1+RxZWsDmp2QMPy54R64l0Afpz8GJWQ2Y0tcQwEdbtq1YoI 2nmqPE7t8Y5sP4tjXkR7GD88VRBXVBX7vN9Yu5n33Q2PF0nt5YF0zpr31juG77jB efeFvKFX/i/ceXKdknmAHTCq7LQO5Vmqdu0LfQeuDJVH0QjEtHnKSwktcwCFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6wBpnm+iennjLNLwc0tDGKGN5AwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4EqproI8mBJEW2NRalmVUA2c2sV77gOCEP +ynuXcq/8DiAWXH/BOGhUgEuzRN7lTM2nBEb9qh/Bjo2lemSbrKiMm+n1WkQARWL WVJk6dtVGZ4osibmsFl2ceeOFP8xLS5BG/blj33xoG3ZLfcEsHLfWJRlJMeQeyJT 9mOMaX17NUnIrUSxIqQLcYtZ/pg/FS8ErtRsOCAc50jjsjvgS/m8A95b3bCmc2fd BcAAu0hP51RnQswFUAKDOQuHm2cYooiUlZJpM2ft5cVQD5/G9mZlpwP3AYqWcgV6 b3GcU22u7LHoNgQsfIBAuC/qFpKzzZ4nxCq7RYOnuqPQHqmZQbY= -----END CERTIFICATE-----Generated at Tue Jun 17 17:58:28 2025 by rpki-client