$ rpki-client -vvf repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft File: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft (raw, json) Hash identifier: vc/rCEcOyGmY7EQneZhlTyQmeCKpJQroqOoYjS4EEx0= Subject key identifier: C6:10:78:1C:55:4B:83:A1:BF:09:D0:7B:14:22:30:E2:2F:BD:CF:29 Authority key identifier: 21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE Certificate issuer: /CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Certificate serial: 5DCF86FAE8B40CD4B76FBB3A7266EAF7CC2CE242 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft Manifest number: 0477 Signing time: Tue 05 Aug 2025 05:30:56 +0000 Manifest this update: Tue 05 Aug 2025 05:25:56 +0000 Manifest next update: Fri 08 Aug 2025 17:08:56 +0000 Files and hashes: 1: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl (hash: rzkheP2Gk55HvgT6n+GDZLk+rspw8gBkTjgBGu7s9xQ=) 2: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: 2zgmqTCIaPAHYWPftqkFjb0hZ28cJ5grf2c4LX9qqic=) 3: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: mH+1VpWMh2xbaDJyAbOAhzGNCfmvCkGbF0WpIR3b6Fo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:cf:86:fa:e8:b4:0c:d4:b7:6f:bb:3a:72:66:ea:f7:cc:2c:e2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Validity Not Before: Aug 5 05:25:56 2025 GMT Not After : Aug 8 17:08:56 2025 GMT Subject: CN=C610781C554B83A1BF09D07B142230E22FBDCF29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:01:2b:4b:79:9e:04:2a:fa:5a:5d:b7:13:5d: 5d:f2:d7:39:b7:e1:89:75:0d:7a:f3:d5:57:99:17: cc:2c:77:96:2b:d2:b9:34:86:43:3e:c9:be:8e:5b: 48:84:6d:1b:fb:60:0e:30:6a:28:ca:61:91:84:9f: 3c:0e:7e:bf:00:5e:2c:10:60:31:69:94:5e:74:09: 26:8a:0a:a3:23:3a:6b:80:5a:c1:96:88:91:22:d1: 56:df:b8:56:b8:aa:a5:b9:54:41:86:37:b2:1e:e5: 73:53:57:5f:7e:0b:be:8d:ac:88:c3:4e:69:98:2c: 3d:c2:4f:fc:44:87:e6:ce:a3:a8:28:da:8c:22:c3: 40:08:75:48:4b:b9:26:f7:3e:8a:b4:5c:b8:d4:8b: 00:ed:b5:2e:ab:82:e0:20:6a:c9:b6:45:e7:71:99: 52:5f:21:91:45:ff:67:54:e7:45:a2:d5:12:a7:63: e1:70:70:aa:4c:79:e1:60:72:a0:4d:12:d1:60:ee: ff:a6:ee:f1:5b:d0:5d:8e:2c:6f:99:d7:9f:3d:38: 9a:58:f3:87:83:18:3d:db:79:3f:4f:8a:b9:07:9f: 54:04:d1:e1:02:cd:65:a8:6d:fb:01:2a:7b:a2:64: 5c:f3:58:c6:72:4b:09:2c:62:33:2c:f4:26:d0:e0: 3b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:10:78:1C:55:4B:83:A1:BF:09:D0:7B:14:22:30:E2:2F:BD:CF:29 X509v3 Authority Key Identifier: keyid:21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:00:83:16:73:a5:b9:56:03:aa:c3:83:28:66:84:68:7e:16: 98:cd:12:9c:b2:80:bb:31:ac:d9:10:61:45:52:61:74:93:5f: c0:b8:87:d4:d7:35:a1:30:95:a7:46:ef:46:dd:22:21:fc:00: 8c:07:f1:2e:73:17:10:dc:0e:5b:41:73:7f:9e:8b:2a:89:ca: 78:51:0e:6e:b8:e8:24:1d:a6:ab:38:37:55:e6:9b:13:30:c8: cc:cc:91:8e:17:2f:fa:f0:8a:14:22:15:43:c7:d4:b3:b0:8b: 80:17:2a:47:a8:b7:4f:d7:68:4f:65:14:1c:12:5e:2e:58:88: 92:c3:69:16:46:e8:70:1f:29:90:18:05:52:10:b9:ff:6d:8a: 5f:79:6b:ee:dc:91:39:c1:79:9f:80:60:d1:8a:92:c3:60:5b: fa:0e:c1:ee:51:01:79:2a:d9:13:da:ae:f3:0e:06:f9:a8:0a: 77:12:8b:fb:fc:66:f1:60:bb:9e:ec:b8:49:68:b9:47:d8:ae: 54:94:db:4d:d9:fb:24:1b:46:d7:05:67:49:14:0d:b8:f3:02: e4:3c:a3:81:24:c4:9e:dc:1a:93:23:0e:83:43:a6:b0:c6:66: a6:93:a6:c8:4f:f0:31:23:00:01:a2:ae:b7:89:9e:c9:6f:c4: 2b:84:04:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXc+G+ui0DNS3b7s6cmbq98ws4kIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNB MDk2QjJGRTAeFw0yNTA4MDUwNTI1NTZaFw0yNTA4MDgxNzA4NTZaMDMxMTAvBgNV BAMTKEM2MTA3ODFDNTU0QjgzQTFCRjA5RDA3QjE0MjIzMEUyMkZCRENGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxAStLeZ4EKvpaXbcTXV3y1zm3 4Yl1DXrz1VeZF8wsd5Yr0rk0hkM+yb6OW0iEbRv7YA4waijKYZGEnzwOfr8AXiwQ YDFplF50CSaKCqMjOmuAWsGWiJEi0VbfuFa4qqW5VEGGN7Ie5XNTV19+C76NrIjD TmmYLD3CT/xEh+bOo6go2owiw0AIdUhLuSb3Poq0XLjUiwDttS6rguAgasm2Redx mVJfIZFF/2dU50Wi1RKnY+FwcKpMeeFgcqBNEtFg7v+m7vFb0F2OLG+Z1589OJpY 84eDGD3beT9PirkHn1QE0eECzWWobfsBKnuiZFzzWMZySwksYjMs9CbQ4DvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxhB4HFVLg6G/CdB7FCIw4i+9zykwHwYDVR0j BBgwFoAUIV/H5eIrjEaRDU18ohTJI6CWsv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2VhYzljMC1kZTFiLTQ2ZGQtYmYzNy0xOGZlM2E4ZDVmYmYvMC8yMTVGQzdFNUUy MkI4QzQ2OTEwRDREN0NBMjE0QzkyM0EwOTZCMkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNBMDk2 QjJGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm MzctMThmZTNhOGQ1ZmJmLzAvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5 MjNBMDk2QjJGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANQAgxZzpblWA6rDgyhmhGh+FpjNEpyygLsx rNkQYUVSYXSTX8C4h9TXNaEwladG70bdIiH8AIwH8S5zFxDcDltBc3+eiyqJynhR Dm646CQdpqs4N1XmmxMwyMzMkY4XL/rwihQiFUPH1LOwi4AXKkeot0/XaE9lFBwS Xi5YiJLDaRZG6HAfKZAYBVIQuf9til95a+7ckTnBeZ+AYNGKksNgW/oOwe5RAXkq 2RParvMOBvmoCncSi/v8ZvFgu57suElouUfYrlSU203Z+yQbRtcFZ0kUDbjzAuQ8 o4EkxJ7cGpMjDoNDprDGZqaTpshP8DEjAAGirreJnslvxCuEBMs= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:09 2025 by rpki-client