$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: wMjKUZP7aEYlIZwZiz7hzjH2P0A19jxkqPLWYsJCUNU= Subject key identifier: 58:95:47:92:C1:8A:47:8E:84:D5:82:9A:C2:52:10:85:5A:BF:92:E4 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 78D7A105358BFD4DA9073D82C624A3AE785E9743 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: 68 Signing time: Tue 03 Jun 2025 11:52:21 +0000 Manifest this update: Tue 03 Jun 2025 11:47:21 +0000 Manifest next update: Fri 06 Jun 2025 18:16:21 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: C/eQpXS1FL2/uRM5yW4FJhP7RGRcdJRCrZp3lfFC1uQ=) 2: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: M0If4pRgvwJqCwKGsMYdoZSyOdE0hqTeKYQgeQzsOx4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d7:a1:05:35:8b:fd:4d:a9:07:3d:82:c6:24:a3:ae:78:5e:97:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Jun 3 11:47:21 2025 GMT Not After : Jun 6 18:16:21 2025 GMT Subject: CN=58954792C18A478E84D5829AC25210855ABF92E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:04:b4:2b:49:56:0d:6b:15:a8:48:0d:74: f0:76:d4:4b:d1:bd:1b:64:22:ba:6d:6c:2e:f9:ad: 06:65:6b:a5:f1:24:68:c4:69:72:9b:f0:7b:9f:c7: 19:e7:86:9a:39:ea:0a:e1:ac:53:cd:53:9d:b3:a9: 3e:9c:a0:2d:43:a3:fb:c2:17:ec:4c:d2:95:05:56: 34:e6:bf:96:45:eb:31:fa:78:9d:c5:04:0f:1f:4f: 90:dd:fc:95:35:71:6b:78:64:a4:f4:2a:76:c7:fe: d4:c4:60:c2:c9:ed:7b:57:cd:60:f2:47:b1:cf:66: 76:4d:d3:2b:e5:bf:d8:6d:ec:59:1a:17:19:96:21: bf:d7:43:37:62:23:b3:17:81:13:f1:7c:15:12:09: 6d:a9:e9:be:65:da:35:da:cc:1e:e8:c6:f7:82:68: d2:16:71:f0:5b:85:f1:a0:11:eb:af:31:39:47:b1: 1e:3e:69:51:28:5b:dc:96:c0:25:78:53:7c:ee:cf: d1:80:45:82:3e:80:70:52:c0:3b:3a:47:6a:b6:3a: ab:95:f3:87:4a:92:6c:75:e5:93:47:1a:7c:08:4e: 63:48:d6:d9:cc:3d:73:8d:31:54:bf:7d:54:94:36: 48:9a:e9:0a:1f:c5:6b:80:36:bf:1c:f2:0b:0c:ad: a8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:95:47:92:C1:8A:47:8E:84:D5:82:9A:C2:52:10:85:5A:BF:92:E4 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:48:f4:ee:e0:c5:19:8f:4d:57:ba:df:f4:c5:09:4a:71:31: c9:17:f0:d4:84:9b:32:6a:d5:3e:a8:e8:cf:15:f7:44:88:da: e2:31:ca:78:e1:34:b8:23:6d:11:db:6b:0f:22:80:e8:2f:70: 05:d7:f8:f0:67:d7:79:39:96:3f:f8:d4:a0:d1:5f:cc:9b:5c: c8:5a:a8:c5:82:90:8a:46:2a:71:4d:94:ac:71:e6:0f:0f:47: e8:7c:66:1b:d7:e9:17:9a:5e:16:31:83:4c:08:93:9d:e1:e0: 48:e4:e2:c1:bd:66:89:a5:30:69:83:d4:62:1c:69:ec:e8:2a: b3:c6:dc:3a:54:89:52:4d:22:73:53:17:d5:1a:80:5b:d8:45: 27:36:01:8b:96:3a:37:11:97:cc:84:8f:61:1f:4e:9d:83:df: a4:20:d6:c4:de:6c:4a:f0:80:60:b9:b9:bb:04:a4:f8:36:cf: 35:ff:75:36:8d:09:c4:f0:c1:fe:a2:b0:21:44:b4:64:50:8e: aa:34:70:6e:12:d7:98:dc:20:1a:f8:a6:7f:fb:f4:99:cb:a7: 33:89:12:22:db:8b:e9:94:8d:71:42:ce:3f:b8:d8:9e:d7:d8: db:5a:25:99:16:25:3b:c1:5a:a3:2f:0d:7b:eb:e2:8e:f1:35: 80:6d:b0:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNehBTWL/U2pBz2CxiSjrnhel0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTA2MDMxMTQ3MjFaFw0yNTA2MDYxODE2MjFaMDMxMTAvBgNV BAMTKDU4OTU0NzkyQzE4QTQ3OEU4NEQ1ODI5QUMyNTIxMDg1NUFCRjkyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvQS0K0lWDWsVqEgNdPB21EvR vRtkIrptbC75rQZla6XxJGjEaXKb8Hufxxnnhpo56grhrFPNU52zqT6coC1Do/vC F+xM0pUFVjTmv5ZF6zH6eJ3FBA8fT5Dd/JU1cWt4ZKT0KnbH/tTEYMLJ7XtXzWDy R7HPZnZN0yvlv9ht7FkaFxmWIb/XQzdiI7MXgRPxfBUSCW2p6b5l2jXazB7oxveC aNIWcfBbhfGgEeuvMTlHsR4+aVEoW9yWwCV4U3zuz9GARYI+gHBSwDs6R2q2OquV 84dKkmx15ZNHGnwITmNI1tnMPXONMVS/fVSUNkia6QofxWuANr8c8gsMrajPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWJVHksGKR46E1YKawlIQhVq/kuQwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhI9O7gxRmPTVe63/TFCUpxMckX8NSEmzJq 1T6o6M8V90SI2uIxynjhNLgjbRHbaw8igOgvcAXX+PBn13k5lj/41KDRX8ybXMha qMWCkIpGKnFNlKxx5g8PR+h8ZhvX6ReaXhYxg0wIk53h4Ejk4sG9ZomlMGmD1GIc aezoKrPG3DpUiVJNInNTF9UagFvYRSc2AYuWOjcRl8yEj2EfTp2D36Qg1sTebErw gGC5ubsEpPg2zzX/dTaNCcTwwf6isCFEtGRQjqo0cG4S15jcIBr4pn/79JnLpzOJ EiLbi+mUjXFCzj+42J7X2NtaJZkWJTvBWqMvDXvr4o7xNYBtsOg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:43 2025 by rpki-client