$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json) Hash identifier: GSZIv36doivdI4DlN5Kw9eoW5rYnxGv+JZcAiXBm7vQ= Subject key identifier: B4:30:08:57:B0:BF:24:EF:FA:D7:C5:78:80:34:02:CE:DB:DE:81:6B Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Certificate serial: 255060F5670084F05545383DBF0E8E958905A18E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft Manifest number: 0403 Signing time: Fri 04 Apr 2025 04:40:36 +0000 Manifest this update: Fri 04 Apr 2025 04:35:36 +0000 Manifest next update: Mon 07 Apr 2025 05:00:36 +0000 Files and hashes: 1: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: FPq/J2wRAjS89GyiaYlBp0d9JuDryTtq4ncVN9be0LA=) 2: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: PDy/GJWTMLU0IIsS9RdwbENLMDh2aZsntFwe39HTxKk=) 3: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: M7rTu+x3u6qUQ5YcgymxtkFlr+zcSjgyy/tqc60RCYc=) 4: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: hvScsFU3gyKuZF4ZLSU+Pil08L9tuR9DBWDpcMUJ6M8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:50:60:f5:67:00:84:f0:55:45:38:3d:bf:0e:8e:95:89:05:a1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Validity Not Before: Apr 4 04:35:36 2025 GMT Not After : Apr 7 05:00:36 2025 GMT Subject: CN=B4300857B0BF24EFFAD7C578803402CEDBDE816B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:29:1e:8d:6a:38:4a:5c:5c:0e:1f:19:51:ba: 79:03:d9:52:5c:ba:0c:da:1b:e3:d1:06:81:bc:54: 71:a2:c6:0c:bb:99:ec:20:e3:52:5d:50:09:c9:c3: f1:b6:85:5c:0c:87:b8:dd:b4:8a:8d:f1:8f:a9:17: e7:ac:05:ab:cd:1c:c0:06:bc:03:24:28:d1:c0:f2: 2b:7f:3c:a1:de:21:6a:3f:0e:04:e3:71:75:c3:6b: 5c:36:8d:40:bf:a8:9c:79:aa:3e:c0:d2:1d:b2:21: 72:15:28:30:d2:cb:4f:9e:57:01:9a:d3:f5:ac:36: 1d:63:4b:7f:65:42:34:11:ff:fd:e2:5d:b5:81:00: 1c:99:3e:57:9a:2a:0c:07:bd:60:f8:f8:dc:da:4a: 90:5d:a4:f4:97:e1:71:7a:1a:93:80:34:76:dc:9b: f6:9d:19:14:27:b8:d1:64:68:7e:c5:d5:81:2c:54: c9:43:ee:11:9b:7a:95:d7:ce:5d:06:da:96:7f:fa: d7:ee:9f:ce:32:bc:40:66:d7:99:a2:00:29:f6:ac: 44:5e:71:80:16:b5:80:12:36:b4:ee:0b:f7:70:51: 26:ba:44:f8:4c:b1:eb:eb:12:01:a8:ed:67:43:ec: 01:58:15:2e:48:b8:90:67:2a:b4:ba:ab:2e:11:43: ba:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:30:08:57:B0:BF:24:EF:FA:D7:C5:78:80:34:02:CE:DB:DE:81:6B X509v3 Authority Key Identifier: keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:5b:7a:af:41:17:1d:4a:44:a6:06:c1:b2:72:6b:5e:ea:0f: 9e:d7:21:93:7f:49:21:e8:c8:86:0e:f1:9c:93:6c:29:c2:0c: 05:6e:da:5a:1a:df:26:c2:97:f5:41:de:25:a9:d9:de:44:72: 12:56:7e:6f:04:76:c9:4e:e1:ad:fd:90:61:d9:ff:17:57:a2: 13:d8:a7:9c:5c:c3:05:c1:4e:e7:c0:7d:17:78:55:d5:5c:c4: 2f:78:40:80:0c:c9:3b:d2:c1:f1:b9:ab:6f:6c:5d:0f:47:9a: 85:83:af:da:e7:d2:23:de:15:fa:b5:4b:d9:ec:9a:ef:8f:2d: a6:88:f3:b9:23:44:02:fb:76:59:27:44:54:65:54:e8:b3:0e: df:41:3a:71:d9:5f:da:7e:16:ed:e1:5c:03:d0:13:84:0d:61: 54:fb:da:f7:28:78:7c:3d:30:b6:34:21:f8:8c:56:58:42:f3: 8a:c8:b5:43:dc:df:ae:60:3d:78:9e:e0:dc:00:2a:11:54:f7: 8c:40:09:55:d9:0a:d1:b7:8a:8b:f4:1d:a2:3a:c2:87:f1:d6: b9:72:ad:47:14:6d:6f:68:fc:1d:a5:44:82:06:c8:01:d5:2a: d2:ce:92:da:aa:24:87:a9:65:ea:ee:0c:7e:7e:a8:7f:de:5c: 0a:e0:4b:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVBg9WcAhPBVRTg9vw6OlYkFoY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1 Qzc3RTJDMTAeFw0yNTA0MDQwNDM1MzZaFw0yNTA0MDcwNTAwMzZaMDMxMTAvBgNV BAMTKEI0MzAwODU3QjBCRjI0RUZGQUQ3QzU3ODgwMzQwMkNFREJERTgxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSKR6NajhKXFwOHxlRunkD2VJc ugzaG+PRBoG8VHGixgy7mewg41JdUAnJw/G2hVwMh7jdtIqN8Y+pF+esBavNHMAG vAMkKNHA8it/PKHeIWo/DgTjcXXDa1w2jUC/qJx5qj7A0h2yIXIVKDDSy0+eVwGa 0/WsNh1jS39lQjQR//3iXbWBAByZPleaKgwHvWD4+NzaSpBdpPSX4XF6GpOANHbc m/adGRQnuNFkaH7F1YEsVMlD7hGbepXXzl0G2pZ/+tfun84yvEBm15miACn2rERe cYAWtYASNrTuC/dwUSa6RPhMsevrEgGo7WdD7AFYFS5IuJBnKrS6qy4RQ7qLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtDAIV7C/JO/618V4gDQCztvegWswHwYDVR0j BBgwFoAUcV3G3qgP5dif3GgsGcezD1x34sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMC83MTVEQzZERUE4 MEZFNUQ4OUZEQzY4MkMxOUM3QjMwRjVDNzdFMkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1Qzc3 RTJDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0Iz MEY1Qzc3RTJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBbeq9BFx1KRKYGwbJya17qD57XIZN/SSHo yIYO8ZyTbCnCDAVu2loa3ybCl/VB3iWp2d5EchJWfm8EdslO4a39kGHZ/xdXohPY p5xcwwXBTufAfRd4VdVcxC94QIAMyTvSwfG5q29sXQ9HmoWDr9rn0iPeFfq1S9ns mu+PLaaI87kjRAL7dlknRFRlVOizDt9BOnHZX9p+Fu3hXAPQE4QNYVT72vcoeHw9 MLY0IfiMVlhC84rItUPc365gPXie4NwAKhFU94xACVXZCtG3iov0HaI6wofx1rly rUcUbW9o/B2lRIIGyAHVKtLOktqqJIepZeruDH5+qH/eXArgSw0= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:35 2025 by rpki-client