$ rpki-client -vvf repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft File: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft (raw, json) Hash identifier: d+JwgzSQiR45aMPNeAu9cCyALQhABg5pc+Tl2D35ZRE= Subject key identifier: D0:96:69:5E:B2:C0:AA:CA:7A:57:CE:C1:2A:6D:24:1C:FB:44:48:D3 Authority key identifier: 21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE Certificate issuer: /CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Certificate serial: 0CF501F70FB1DBDA7EACA03BE398AF8C5D3FF547 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft Manifest number: 044B Signing time: Mon 28 Apr 2025 21:30:56 +0000 Manifest this update: Mon 28 Apr 2025 21:25:56 +0000 Manifest next update: Fri 02 May 2025 02:22:56 +0000 Files and hashes: 1: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: 2zgmqTCIaPAHYWPftqkFjb0hZ28cJ5grf2c4LX9qqic=) 2: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: mH+1VpWMh2xbaDJyAbOAhzGNCfmvCkGbF0WpIR3b6Fo=) 3: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl (hash: TUWiRsQOn7IX49k7/GgXUjgCrLdItYoBZuDTgR2hnvU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f5:01:f7:0f:b1:db:da:7e:ac:a0:3b:e3:98:af:8c:5d:3f:f5:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Validity Not Before: Apr 28 21:25:56 2025 GMT Not After : May 2 02:22:56 2025 GMT Subject: CN=D096695EB2C0AACA7A57CEC12A6D241CFB4448D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bd:8e:af:53:00:9a:e1:bf:d8:a5:1c:b8:38: 8a:ba:55:6d:88:9e:d1:4e:ca:40:02:0e:a2:66:51: 51:a2:54:9e:48:46:d1:ce:ca:0a:d6:fe:db:fd:f1: 1a:fd:6d:d4:cc:18:d5:db:9c:7f:91:44:a6:0c:af: 53:38:b1:a6:fc:87:e9:9a:e0:25:ae:5e:64:c5:d0: ba:50:24:73:a8:3f:1f:00:52:d1:65:4c:f7:f9:63: cc:fe:7f:e4:d7:3c:87:33:7d:4e:b8:e4:6f:56:c1: 88:06:15:cc:b6:dc:8d:4b:38:a1:db:b8:d0:84:2e: 81:dd:2a:21:5c:c2:52:e1:12:b0:03:17:45:11:fa: 4a:de:ea:90:24:95:32:c2:ce:e4:fc:4b:88:b7:79: 25:1c:d8:ff:0c:7a:b8:2c:e4:6a:7f:75:cb:24:42: 93:ea:be:c6:1a:78:9e:db:51:c2:47:f7:ab:3a:9e: 64:4e:a3:bc:70:98:fa:4b:5b:ce:4e:cd:fb:3e:24: 5b:f9:d3:fe:7a:31:ce:e1:3d:17:d1:e4:7b:d5:d4: df:1d:18:9e:c5:5e:92:d9:c4:d3:55:e2:e7:3d:28: 4b:c4:ab:8a:78:93:bf:3f:53:11:50:0c:dd:12:4c: 40:2e:b2:2a:0e:73:72:bb:2d:a0:08:bf:02:f5:eb: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:96:69:5E:B2:C0:AA:CA:7A:57:CE:C1:2A:6D:24:1C:FB:44:48:D3 X509v3 Authority Key Identifier: keyid:21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:43:e9:64:8a:31:55:a0:bc:00:5c:53:1a:30:67:67:aa:94: 4b:e0:df:ac:d6:2a:d6:7d:22:c0:66:54:6f:d1:52:cc:12:85: 1f:35:ab:40:f7:84:e7:f6:73:a0:45:79:14:e2:99:03:d0:d2: e5:cc:82:aa:85:16:93:61:e0:30:1f:62:98:ae:3e:a7:41:39: 00:db:0a:ef:56:e6:a2:ae:e9:db:8e:57:21:f9:25:76:be:03: bb:89:b6:e7:e5:d8:af:4d:21:6c:83:ad:31:0d:33:c0:28:69: 1b:a3:bb:f1:70:8a:7d:68:6d:ea:09:76:76:34:c2:a2:bd:85: 5f:27:ee:b1:df:13:66:d6:3e:2e:79:a6:06:9e:da:9a:2e:a4: 86:27:71:de:ff:cf:41:5b:24:76:e8:cb:d9:47:9f:f3:11:8e: e7:d7:3a:bf:ee:85:4d:84:84:6b:c8:9f:ce:41:25:63:14:04: c5:03:9c:79:34:54:d6:97:86:b3:2c:04:a8:2c:c2:cd:2e:6b: 9b:ca:31:fc:17:30:ec:87:3f:bc:4a:08:01:09:1f:d8:da:45: 25:d0:9a:45:26:26:6f:7f:22:62:c5:ab:45:81:7a:fb:14:c5: 55:a1:28:cb:05:a6:6a:3f:59:89:aa:21:8f:b8:53:2a:43:a8: 0e:5e:25:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPUB9w+x29p+rKA745ivjF0/9UcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNB MDk2QjJGRTAeFw0yNTA0MjgyMTI1NTZaFw0yNTA1MDIwMjIyNTZaMDMxMTAvBgNV BAMTKEQwOTY2OTVFQjJDMEFBQ0E3QTU3Q0VDMTJBNkQyNDFDRkI0NDQ4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvvY6vUwCa4b/YpRy4OIq6VW2I ntFOykACDqJmUVGiVJ5IRtHOygrW/tv98Rr9bdTMGNXbnH+RRKYMr1M4sab8h+ma 4CWuXmTF0LpQJHOoPx8AUtFlTPf5Y8z+f+TXPIczfU645G9WwYgGFcy23I1LOKHb uNCELoHdKiFcwlLhErADF0UR+kre6pAklTLCzuT8S4i3eSUc2P8Mergs5Gp/dcsk QpPqvsYaeJ7bUcJH96s6nmROo7xwmPpLW85Ozfs+JFv50/56Mc7hPRfR5HvV1N8d GJ7FXpLZxNNV4uc9KEvEq4p4k78/UxFQDN0STEAusioOc3K7LaAIvwL163wjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0JZpXrLAqsp6V87BKm0kHPtESNMwHwYDVR0j BBgwFoAUIV/H5eIrjEaRDU18ohTJI6CWsv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2VhYzljMC1kZTFiLTQ2ZGQtYmYzNy0xOGZlM2E4ZDVmYmYvMC8yMTVGQzdFNUUy MkI4QzQ2OTEwRDREN0NBMjE0QzkyM0EwOTZCMkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNBMDk2 QjJGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm MzctMThmZTNhOGQ1ZmJmLzAvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5 MjNBMDk2QjJGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRD6WSKMVWgvABcUxowZ2eqlEvg36zWKtZ9 IsBmVG/RUswShR81q0D3hOf2c6BFeRTimQPQ0uXMgqqFFpNh4DAfYpiuPqdBOQDb Cu9W5qKu6duOVyH5JXa+A7uJtufl2K9NIWyDrTENM8AoaRuju/Fwin1obeoJdnY0 wqK9hV8n7rHfE2bWPi55pgae2poupIYncd7/z0FbJHboy9lHn/MRjufXOr/uhU2E hGvIn85BJWMUBMUDnHk0VNaXhrMsBKgsws0ua5vKMfwXMOyHP7xKCAEJH9jaRSXQ mkUmJm9/ImLFq0WBevsUxVWhKMsFpmo/WYmqIY+4UypDqA5eJWo= -----END CERTIFICATE-----Generated at Wed Apr 30 00:04:01 2025 by rpki-client