$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: z8cMoyrXu5uzVm1v2Yy3vrgOpxsJiGNavK1YDn1vhwY= Subject key identifier: C4:84:6C:86:AB:7A:BA:35:01:A1:32:5A:CE:EA:74:39:3F:B4:DC:0E Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: 37E6DE613D72668962DB837AD844042EEFD11D26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 04C2 Signing time: Wed 04 Jun 2025 11:41:09 +0000 Manifest this update: Wed 04 Jun 2025 11:36:09 +0000 Manifest next update: Sat 07 Jun 2025 18:30:09 +0000 Files and hashes: 1: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: zwHOHBI2oAxzWhaLSwG8fhj7D4Y2DeYXfPoHxgb3IhQ=) 2: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: cWZkcZM8qj4SueOfK1RRhoGHgcvSo+qyXFVh/3HFJTk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e6:de:61:3d:72:66:89:62:db:83:7a:d8:44:04:2e:ef:d1:1d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: Jun 4 11:36:09 2025 GMT Not After : Jun 7 18:30:09 2025 GMT Subject: CN=C4846C86AB7ABA3501A1325ACEEA74393FB4DC0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:fd:ba:be:b4:2a:0a:03:8f:54:cd:30:cb: c7:29:d0:dd:2c:0c:0f:36:ca:65:d8:ff:e3:88:e0: 19:53:ab:97:7f:55:5c:89:93:a3:56:fc:18:2a:fc: 69:f9:0b:bc:95:9d:71:37:54:c3:6c:42:cc:b1:20: 92:79:10:6c:b4:81:dd:9b:82:1d:31:a7:58:8a:91: 75:27:f1:6f:90:d0:37:f7:96:cd:7a:5b:ae:46:ad: 8b:e1:20:50:c8:b8:0e:3e:5d:18:31:e7:82:e6:43: bf:cd:15:37:5a:68:88:aa:75:04:46:29:9e:62:75: 46:0c:61:54:5b:61:b4:d4:65:fa:35:1c:36:86:cb: 80:fe:53:73:3c:ee:fc:58:17:94:f4:a2:a1:14:77: 23:5e:61:df:7e:80:98:54:0e:2f:54:9b:5b:d1:04: dd:f7:23:de:b6:bf:53:7d:32:e7:29:e3:28:22:cc: 6c:55:00:16:ed:a1:5e:d9:54:97:d2:7d:01:b3:d4: 0d:d2:6f:3b:66:5c:51:61:a2:8e:e1:82:9a:f2:77: dc:dc:27:0c:30:ab:ef:5a:02:ab:ff:ec:7c:8a:b9: dc:59:90:f0:db:41:1f:21:6e:a4:46:fd:8c:74:95: 02:c4:3c:f2:b6:02:a0:54:ad:f6:5e:bc:cd:64:ca: 17:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:84:6C:86:AB:7A:BA:35:01:A1:32:5A:CE:EA:74:39:3F:B4:DC:0E X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:01:1a:c8:24:ff:d0:2a:ce:4c:23:0c:28:bc:66:80:da:9e: ea:2d:de:28:67:64:3d:a1:81:f4:76:0f:0f:f3:c7:ef:db:7d: 29:32:68:0a:d7:8f:5f:9b:b2:75:37:70:ca:1b:8f:93:c7:8d: f2:d6:8c:c3:d5:b0:df:d9:18:5a:40:c7:65:f6:8f:80:17:0f: 5f:20:b5:c9:71:bc:4a:b1:7f:83:9b:19:02:1a:8d:2f:e3:20: ff:76:70:a2:71:a4:76:30:a4:26:77:ec:6e:62:23:99:0e:5c: 5d:c8:08:81:1b:ed:c2:48:7d:5d:2d:72:4a:61:64:1a:a0:65: 18:c5:2c:d7:3c:fd:31:71:97:d2:72:6a:a1:c5:18:8b:28:d6: 89:c4:bb:bf:0d:4e:65:25:3e:b0:ef:7b:76:08:5d:7a:f8:0c: 05:a1:7d:25:b2:ac:e5:4c:cc:4e:86:8e:2f:df:5c:77:7b:ae: 62:02:63:de:38:8a:2e:cc:d5:2a:78:e8:7a:48:06:91:c9:ab: d3:dd:70:38:8a:ab:b7:e9:01:41:28:3e:ce:fd:8c:0f:16:24: 9e:5c:a5:eb:e5:9d:6e:6d:d8:4d:70:27:2c:bd:3d:76:2b:7e: 56:23:09:7c:5b:56:e1:ac:b3:57:c2:4a:b3:22:33:14:22:2d: 82:9f:41:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+beYT1yZoli24N62EQELu/RHSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNTA2MDQxMTM2MDlaFw0yNTA2MDcxODMwMDlaMDMxMTAvBgNV BAMTKEM0ODQ2Qzg2QUI3QUJBMzUwMUExMzI1QUNFRUE3NDM5M0ZCNERDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFW/26vrQqCgOPVM0wy8cp0N0s DA82ymXY/+OI4BlTq5d/VVyJk6NW/Bgq/Gn5C7yVnXE3VMNsQsyxIJJ5EGy0gd2b gh0xp1iKkXUn8W+Q0Df3ls16W65GrYvhIFDIuA4+XRgx54LmQ7/NFTdaaIiqdQRG KZ5idUYMYVRbYbTUZfo1HDaGy4D+U3M87vxYF5T0oqEUdyNeYd9+gJhUDi9Um1vR BN33I962v1N9Mucp4ygizGxVABbtoV7ZVJfSfQGz1A3SbztmXFFhoo7hgpryd9zc Jwwwq+9aAqv/7HyKudxZkPDbQR8hbqRG/Yx0lQLEPPK2AqBUrfZevM1kyhfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxIRshqt6ujUBoTJazup0OT+03A4wHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMoBGsgk/9AqzkwjDCi8ZoDanuot3ihnZD2h gfR2Dw/zx+/bfSkyaArXj1+bsnU3cMobj5PHjfLWjMPVsN/ZGFpAx2X2j4AXD18g tclxvEqxf4ObGQIajS/jIP92cKJxpHYwpCZ37G5iI5kOXF3ICIEb7cJIfV0tckph ZBqgZRjFLNc8/TFxl9JyaqHFGIso1onEu78NTmUlPrDve3YIXXr4DAWhfSWyrOVM zE6Gji/fXHd7rmICY944ii7M1Sp46HpIBpHJq9PdcDiKq7fpAUEoPs79jA8WJJ5c pevlnW5t2E1wJyy9PXYrflYjCXxbVuGss1fCSrMiMxQiLYKfQaI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:07 2025 by rpki-client