$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: dsTaLGTfPLdbQlATpOQ0VBxW2s8KSOF8hvWQNSpHvVY= Subject key identifier: B8:F0:8B:F4:7C:61:B6:8A:6A:5E:4F:9C:99:7E:C1:68:AC:38:27:F2 Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: 1B7994F1E890145C2FEC49DB5D3FA77E17131222 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 04A7 Signing time: Fri 04 Apr 2025 02:11:06 +0000 Manifest this update: Fri 04 Apr 2025 02:06:06 +0000 Manifest next update: Mon 07 Apr 2025 07:39:06 +0000 Files and hashes: 1: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: zwHOHBI2oAxzWhaLSwG8fhj7D4Y2DeYXfPoHxgb3IhQ=) 2: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: FEExGy4hAyohDylgvLd7pIztxE6Bi6MUFNInAokLieA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 07:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:79:94:f1:e8:90:14:5c:2f:ec:49:db:5d:3f:a7:7e:17:13:12:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: Apr 4 02:06:06 2025 GMT Not After : Apr 7 07:39:06 2025 GMT Subject: CN=B8F08BF47C61B68A6A5E4F9C997EC168AC3827F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:fb:8e:9d:50:77:36:87:7c:f9:4f:5f:82: 26:70:e7:6a:d6:1b:df:e5:3d:9c:f6:27:e1:cb:28: 43:3f:53:da:46:5e:67:31:2b:7a:a5:af:7a:c5:7d: 7e:e0:4c:5b:cb:94:a1:4f:d7:5a:bb:ec:e3:fb:8d: 0a:f9:da:48:df:51:c8:16:99:16:75:ad:39:e0:e7: a5:e0:4b:c8:1e:44:46:ff:5a:62:a9:09:eb:0e:13: 63:02:2b:90:04:d5:55:82:28:0e:ee:d8:90:c9:05: cb:8a:36:93:13:ab:a5:d1:9f:05:e7:71:f6:a1:74: c5:41:d3:b9:12:5f:8e:c2:f9:8a:38:8f:b2:f6:0d: e5:90:ba:88:43:bf:dd:c7:51:23:87:92:36:87:39: f5:bb:07:88:f7:78:c7:00:05:d5:e1:f1:9f:3c:80: dc:7e:dd:ba:36:33:d2:02:fa:f4:5f:4c:5d:b5:8c: d3:7e:c0:c5:07:82:9c:d0:e5:3f:89:e3:21:a2:4c: a4:7f:96:ab:16:89:85:96:44:da:7e:19:40:4b:5b: f2:58:ef:74:4c:9e:6f:ab:4b:c1:2f:84:0b:4d:f9: 21:6a:f4:2e:c9:5a:4a:2a:cb:44:a6:4c:05:42:9f: 0e:75:d9:84:a6:6e:8d:4a:96:98:e1:a8:c9:a8:ac: d7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F0:8B:F4:7C:61:B6:8A:6A:5E:4F:9C:99:7E:C1:68:AC:38:27:F2 X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ea:88:57:cb:b3:96:b6:4a:69:15:4b:94:80:c5:ea:49:49: e9:0f:f0:3d:d3:bc:3f:a2:e5:a3:4a:fe:59:8a:b8:22:3f:8d: 2d:80:ec:81:26:b7:a3:9a:a0:25:24:a3:5c:54:2f:eb:9f:92: 2d:6f:19:4e:ac:03:84:5d:e3:57:0c:3b:5e:08:b9:a0:fc:72: 40:28:a1:24:ee:93:d9:b7:e4:a6:a7:c9:23:a4:00:29:1f:16: 0f:34:5b:db:37:d7:e0:64:4d:9d:2d:a8:69:a4:89:32:23:39: ed:36:38:9a:36:04:26:63:84:0e:96:69:71:b0:41:03:d1:ab: 29:86:e9:9d:db:7e:a9:22:4c:63:8c:ea:31:9f:35:01:43:56: 25:1a:3a:77:24:d8:12:9e:6f:43:1c:a9:ad:82:d2:ef:eb:69: f8:c8:cd:43:e1:49:ca:26:dc:a8:f6:52:f7:6b:fa:9a:ca:3f: 68:b9:43:2d:c1:5e:da:14:5e:f1:3b:d3:26:cd:98:00:1d:06: f6:6b:47:4f:65:f0:1d:18:00:55:6e:95:63:99:79:21:ef:ef: 41:e5:b6:1d:20:7f:b4:a2:7d:1d:2e:4f:a2:a1:e3:c9:e3:59: 79:91:9d:59:51:e8:18:8a:5e:05:11:e6:d3:7e:16:41:bd:d6: 72:36:c6:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3mU8eiQFFwv7EnbXT+nfhcTEiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNTA0MDQwMjA2MDZaFw0yNTA0MDcwNzM5MDZaMDMxMTAvBgNV BAMTKEI4RjA4QkY0N0M2MUI2OEE2QTVFNEY5Qzk5N0VDMTY4QUMzODI3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2vuOnVB3Nod8+U9fgiZw52rW G9/lPZz2J+HLKEM/U9pGXmcxK3qlr3rFfX7gTFvLlKFP11q77OP7jQr52kjfUcgW mRZ1rTng56XgS8geREb/WmKpCesOE2MCK5AE1VWCKA7u2JDJBcuKNpMTq6XRnwXn cfahdMVB07kSX47C+Yo4j7L2DeWQuohDv93HUSOHkjaHOfW7B4j3eMcABdXh8Z88 gNx+3bo2M9IC+vRfTF21jNN+wMUHgpzQ5T+J4yGiTKR/lqsWiYWWRNp+GUBLW/JY 73RMnm+rS8EvhAtN+SFq9C7JWkoqy0SmTAVCnw512YSmbo1KlpjhqMmorNe7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuPCL9HxhtopqXk+cmX7BaKw4J/IwHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXqiFfLs5a2SmkVS5SAxepJSekP8D3TvD+i 5aNK/lmKuCI/jS2A7IEmt6OaoCUko1xUL+ufki1vGU6sA4Rd41cMO14IuaD8ckAo oSTuk9m35KanySOkACkfFg80W9s31+BkTZ0tqGmkiTIjOe02OJo2BCZjhA6WaXGw QQPRqymG6Z3bfqkiTGOM6jGfNQFDViUaOnck2BKeb0Mcqa2C0u/rafjIzUPhScom 3Kj2Uvdr+prKP2i5Qy3BXtoUXvE70ybNmAAdBvZrR09l8B0YAFVulWOZeSHv70Hl th0gf7SifR0uT6Kh48njWXmRnVlR6BiKXgUR5tN+FkG91nI2xk4= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:29 2025 by rpki-client