$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: Z8wsMnZEnT8kJEIikxtpD+N97aCiiktJcm83hVFuzm8= Subject key identifier: 35:3F:43:58:59:F5:80:A9:1B:81:7A:22:00:32:9E:50:F0:28:52:68 Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: 391C33A084CBBDC9E96785C77D2B4B4330B8BD69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 04D7 Signing time: Sat 19 Jul 2025 19:31:13 +0000 Manifest this update: Sat 19 Jul 2025 19:26:13 +0000 Manifest next update: Wed 23 Jul 2025 00:11:13 +0000 Files and hashes: 1: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: cS4xFcJiF1zKuj0BZNhYothbCLKeaVj2VbTjqbuS5CU=) 2: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: yB6mQ4dfxn5aevBosJzngnweiZVEe/V5pSiAaxFctr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:1c:33:a0:84:cb:bd:c9:e9:67:85:c7:7d:2b:4b:43:30:b8:bd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: Jul 19 19:26:13 2025 GMT Not After : Jul 23 00:11:13 2025 GMT Subject: CN=353F435859F580A91B817A2200329E50F0285268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b4:f7:22:c6:d0:a4:1d:34:d4:30:f5:f7:aa: a0:c7:de:ce:8d:3d:42:b7:b0:e5:2e:98:12:cf:e8: 26:6c:7d:7c:b3:f7:65:e6:c0:74:30:f1:47:18:12: f1:fa:1f:6f:ca:a7:a8:a3:d2:72:df:9e:a2:8a:f3: 17:bd:e2:90:f6:db:b1:52:2d:9e:bd:ed:f9:52:d8: 41:26:14:ec:23:a0:27:35:e7:07:bd:2f:3a:dd:15: 86:6a:4a:b8:28:ce:9a:12:94:d6:af:3a:2b:6f:91: e2:7d:e8:d3:fb:42:d3:c2:84:a9:a0:91:9e:83:ec: 36:ae:0d:0e:b1:f0:72:e8:38:85:4b:a0:89:39:df: a7:39:36:20:5e:15:d6:5a:dc:fa:4f:5b:aa:a1:18: df:40:c4:8a:c3:94:18:02:95:85:9e:af:e1:bd:aa: 1b:05:14:a3:fb:28:78:47:d8:5c:a8:68:18:b1:7e: 2c:d3:fe:6d:9a:12:15:ca:c3:05:3e:cf:d1:58:e0: 8b:39:d0:76:f7:b8:86:84:91:c3:12:e5:d8:3f:2d: 1f:d7:63:42:0c:2c:3f:af:90:2f:9f:7f:82:26:b6: 63:37:6f:37:c2:5c:f4:1a:e1:95:65:f1:74:3d:4e: 99:eb:3f:c9:d4:49:a2:0f:9f:b1:47:b2:1c:dc:ab: cf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3F:43:58:59:F5:80:A9:1B:81:7A:22:00:32:9E:50:F0:28:52:68 X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:1b:1f:fd:1c:5c:17:fd:fc:da:09:ff:f8:3a:22:b2:55:ce: 92:22:16:ca:0d:0e:c9:05:5c:ae:d6:26:94:11:e5:09:0c:6d: 24:92:fa:f8:5f:30:93:6c:6f:92:da:67:d6:71:52:6b:fe:ef: 9f:93:18:93:63:0e:f5:9a:37:42:28:10:fb:77:c1:18:b1:58: 96:a0:dc:d8:e4:7b:5f:51:ab:00:65:cf:6b:bd:a5:6d:f1:14: 9f:20:65:7f:e3:ca:b1:9d:82:43:72:a2:cb:aa:f9:a5:82:73: 14:4f:4c:be:87:6d:40:d4:93:a2:35:db:a8:22:52:a7:f2:cb: 78:fa:5c:3a:5b:4b:15:a0:2b:01:33:ed:38:32:50:1c:94:50: 55:65:b7:2c:b9:be:6f:88:62:08:09:23:c0:d8:d6:25:8d:12: 20:96:00:92:8c:7c:6d:ce:da:99:e4:90:67:2c:99:3b:cb:af: 53:27:6a:2a:71:62:89:0e:89:12:a3:cf:ca:27:04:dc:f6:7c: 29:29:e2:1b:56:00:25:3e:cd:71:df:13:f2:b9:57:2a:d4:59: 3f:9c:c8:1e:be:b7:9f:be:4c:d5:8a:8d:f6:eb:c7:91:e1:d6: 18:e8:41:f9:6f:d6:a0:6a:a2:ec:d7:81:bf:6a:2e:79:cb:4b: f9:08:cb:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORwzoITLvcnpZ4XHfStLQzC4vWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNTA3MTkxOTI2MTNaFw0yNTA3MjMwMDExMTNaMDMxMTAvBgNV BAMTKDM1M0Y0MzU4NTlGNTgwQTkxQjgxN0EyMjAwMzI5RTUwRjAyODUyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtPcixtCkHTTUMPX3qqDH3s6N PUK3sOUumBLP6CZsfXyz92XmwHQw8UcYEvH6H2/Kp6ij0nLfnqKK8xe94pD227FS LZ697flS2EEmFOwjoCc15we9LzrdFYZqSrgozpoSlNavOitvkeJ96NP7QtPChKmg kZ6D7DauDQ6x8HLoOIVLoIk536c5NiBeFdZa3PpPW6qhGN9AxIrDlBgClYWer+G9 qhsFFKP7KHhH2FyoaBixfizT/m2aEhXKwwU+z9FY4Is50Hb3uIaEkcMS5dg/LR/X Y0IMLD+vkC+ff4ImtmM3bzfCXPQa4ZVl8XQ9TpnrP8nUSaIPn7FHshzcq8/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNT9DWFn1gKkbgXoiADKeUPAoUmgwHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMbH/0cXBf9/NoJ//g6IrJVzpIiFsoNDskF XK7WJpQR5QkMbSSS+vhfMJNsb5LaZ9ZxUmv+75+TGJNjDvWaN0IoEPt3wRixWJag 3Njke19RqwBlz2u9pW3xFJ8gZX/jyrGdgkNyosuq+aWCcxRPTL6HbUDUk6I126gi Uqfyy3j6XDpbSxWgKwEz7TgyUByUUFVltyy5vm+IYggJI8DY1iWNEiCWAJKMfG3O 2pnkkGcsmTvLr1MnaipxYokOiRKjz8onBNz2fCkp4htWACU+zXHfE/K5VyrUWT+c yB6+t5++TNWKjfbrx5Hh1hjoQflv1qBqouzXgb9qLnnLS/kIyxA= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:34 2025 by rpki-client