$ rpki-client -vvf repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft File: 5715F968646EAE08576ECCEF3FABAC250A40A47B.mft (raw, json) Hash identifier: A440CDO8PsW2bB4pynGQmxPwk2fHwrf617JM37VTBPM= Subject key identifier: 6C:81:56:2A:E0:90:68:5E:2B:DC:5D:0D:7C:C4:5C:3B:F1:1E:72:D7 Authority key identifier: 57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B Certificate issuer: /CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Certificate serial: 62810FA6AC4114C47D5309FA0DD9B76DA9C6F490 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft Manifest number: 04ED Signing time: Mon 21 Jul 2025 02:01:32 +0000 Manifest this update: Mon 21 Jul 2025 01:56:32 +0000 Manifest next update: Thu 24 Jul 2025 08:00:32 +0000 Files and hashes: 1: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: +tOUCMAfkXBUrsG+mslHnjPzs7jefLznwIgLOB3xtdM=) 2: 5715F968646EAE08576ECCEF3FABAC250A40A47B.crl (hash: xcXl2KFjdOI9BEeCT4qjCowF0ud7ATduEulRLu3Toa8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:81:0f:a6:ac:41:14:c4:7d:53:09:fa:0d:d9:b7:6d:a9:c6:f4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Validity Not Before: Jul 21 01:56:32 2025 GMT Not After : Jul 24 08:00:32 2025 GMT Subject: CN=6C81562AE090685E2BDC5D0D7CC45C3BF11E72D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:e2:1d:60:dc:0d:c1:fb:64:9f:a5:dc:b1: 31:25:52:5f:cc:b3:88:4b:20:b2:07:e7:9b:fb:eb: e9:78:55:6e:f7:58:49:8a:3f:17:e5:9c:26:3f:7e: db:cc:3c:c1:76:e2:f7:8c:5e:32:44:e5:c3:99:6e: 19:13:58:db:e0:20:b2:c9:d1:39:8c:54:87:fd:ff: cb:81:cc:77:a7:40:62:43:c1:f7:6c:7e:14:fc:0f: c3:72:01:bf:a7:09:0a:24:84:23:cc:07:a1:b6:92: 85:18:4c:43:89:15:47:27:f9:6e:33:d2:20:ed:c0: a9:f2:5d:8a:58:a0:fe:55:96:a0:f9:ae:f7:57:68: 1a:ec:28:cc:23:52:e9:43:13:37:f7:36:cd:52:71: 9e:6f:49:ea:12:1e:8c:82:12:e0:5a:66:d1:b7:29: cf:72:bd:0d:b3:43:99:f5:46:af:e1:22:dc:85:a8: ad:92:c9:16:36:69:a2:52:a0:59:4e:d2:e5:b6:bc: 31:c2:63:aa:d8:7b:24:a1:21:43:c9:a7:f9:ce:b6: 25:56:3f:cb:2f:f9:1d:97:e6:29:5e:e9:fd:f0:a8: eb:a2:d8:5f:3b:73:fe:6b:65:cc:05:66:75:78:e7: 1e:76:ce:d7:02:d0:34:30:89:81:32:2f:36:92:43: 91:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:81:56:2A:E0:90:68:5E:2B:DC:5D:0D:7C:C4:5C:3B:F1:1E:72:D7 X509v3 Authority Key Identifier: keyid:57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:25:9a:3d:7c:c3:78:2f:26:81:ac:19:d0:81:e6:c5:dc:37: 41:12:5e:07:f0:10:35:1f:83:68:ce:ed:40:bb:37:87:72:66: d0:ea:c2:de:36:4a:b2:7b:52:3f:c6:30:85:81:b9:46:cc:e2: 2a:28:0c:c6:a2:38:5b:73:84:c9:04:58:f5:e8:65:0c:b5:f0: 5a:24:97:a5:1b:b2:92:b5:bc:97:fd:34:48:69:45:29:e8:0c: e1:c7:e4:a7:f4:60:e2:1e:9c:90:55:f8:5c:a9:dd:f7:0b:58: e4:22:a5:4b:93:0f:78:0a:2d:31:21:07:f9:12:b7:77:5c:79: cc:68:83:29:4b:a1:55:00:3a:bb:65:f5:c3:1b:9b:67:45:62: 54:d9:61:e4:bf:54:0b:b7:8a:b4:d7:1b:67:4a:f9:ad:81:36: 08:45:42:8e:49:b3:5f:98:00:3f:c6:fb:18:97:88:71:7b:17: b0:2a:f0:9b:96:70:07:7e:8b:14:7c:62:3c:40:a7:5a:ad:87: 44:cc:50:69:eb:5a:5e:30:e0:95:a8:f0:03:f0:55:f4:ce:b8: cd:c8:2e:6e:92:d0:2a:4c:a1:85:a1:22:f1:c0:0b:05:d1:fd: 25:6c:4d:33:ed:71:a2:ed:35:83:9d:5f:cc:a9:fd:ab:39:0e: 5e:59:69:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYoEPpqxBFMR9Uwn6Ddm3banG9JAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUw QTQwQTQ3QjAeFw0yNTA3MjEwMTU2MzJaFw0yNTA3MjQwODAwMzJaMDMxMTAvBgNV BAMTKDZDODE1NjJBRTA5MDY4NUUyQkRDNUQwRDdDQzQ1QzNCRjExRTcyRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjReIdYNwNwftkn6XcsTElUl/M s4hLILIH55v76+l4VW73WEmKPxflnCY/ftvMPMF24veMXjJE5cOZbhkTWNvgILLJ 0TmMVIf9/8uBzHenQGJDwfdsfhT8D8NyAb+nCQokhCPMB6G2koUYTEOJFUcn+W4z 0iDtwKnyXYpYoP5VlqD5rvdXaBrsKMwjUulDEzf3Ns1ScZ5vSeoSHoyCEuBaZtG3 Kc9yvQ2zQ5n1Rq/hItyFqK2SyRY2aaJSoFlO0uW2vDHCY6rYeyShIUPJp/nOtiVW P8sv+R2X5ile6f3wqOui2F87c/5rZcwFZnV45x52ztcC0DQwiYEyLzaSQ5HxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbIFWKuCQaF4r3F0NfMRcO/EectcwHwYDVR0j BBgwFoAUVxX5aGRurghXbszvP6usJQpApHswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTUxNGQ2MS05OWZmLTQyYTktYmE5YS01OTYxZGQ2OGRiNjUvMC81NzE1Rjk2ODY0 NkVBRTA4NTc2RUNDRUYzRkFCQUMyNTBBNDBBNDdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUwQTQw QTQ3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFD MjUwQTQwQTQ3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUlmj18w3gvJoGsGdCB5sXcN0ESXgfwEDUf g2jO7UC7N4dyZtDqwt42SrJ7Uj/GMIWBuUbM4iooDMaiOFtzhMkEWPXoZQy18Fok l6UbspK1vJf9NEhpRSnoDOHH5Kf0YOIenJBV+Fyp3fcLWOQipUuTD3gKLTEhB/kS t3dcecxogylLoVUAOrtl9cMbm2dFYlTZYeS/VAu3irTXG2dK+a2BNghFQo5Js1+Y AD/G+xiXiHF7F7Aq8JuWcAd+ixR8YjxAp1qth0TMUGnrWl4w4JWo8APwVfTOuM3I Lm6S0CpMoYWhIvHACwXR/SVsTTPtcaLtNYOdX8yp/as5Dl5ZadE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:46 2025 by rpki-client