$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: CAJOnhT9DsAtLiWMjEjn1XAGK/04JL3iquLeXHm3PsY= Subject key identifier: 80:E8:67:5F:94:D7:D1:FC:4A:1C:D1:EF:83:93:96:0A:79:95:97:41 Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 7FF59D12A2F6413B6788C19CCD3D0459D72C35BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 013A Signing time: Tue 11 Mar 2025 23:30:52 +0000 Manifest this update: Tue 11 Mar 2025 23:25:52 +0000 Manifest next update: Fri 14 Mar 2025 23:47:52 +0000 Files and hashes: 1: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: paFKt6o0V+erS5HMhIrJfWgyUpdeSz8l0mwrNctd67E=) 2: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: H3EtcLEE0IGvam9Auuq3QSB3PLABMBbWzZsAbxF8fnQ=) 3: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: P9RGEcb1zmPzOBTrNP3hcWmxLjpbC6+BtpLQsBbt0hQ=) 4: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: 907swenfI16Aft6qzAi5dpyEs6BxfNg+Ndea03NJnvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 23:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f5:9d:12:a2:f6:41:3b:67:88:c1:9c:cd:3d:04:59:d7:2c:35:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Mar 11 23:25:52 2025 GMT Not After : Mar 14 23:47:52 2025 GMT Subject: CN=80E8675F94D7D1FC4A1CD1EF8393960A79959741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:6a:6e:9e:f3:84:e1:b9:21:04:11:59:4e: 1f:83:45:2c:4a:aa:64:e2:e4:8b:d0:dc:44:5c:09: 85:bf:a1:00:c6:07:e5:f5:52:0d:b1:9d:7f:eb:ae: d2:44:89:34:df:f6:75:26:4c:00:20:5c:b5:97:4c: 9c:6d:16:c2:a7:72:39:24:ec:16:f2:f6:8f:c1:e4: df:c4:b5:89:5d:0c:6b:81:6e:ef:45:73:02:c9:e1: e8:2f:e7:6b:b8:5e:b6:45:9f:cc:58:2a:88:90:76: 30:9f:e0:41:d8:76:14:7f:61:44:5e:10:31:d1:e4: 01:0c:76:bb:8d:c3:9f:80:bd:97:61:e0:24:fb:11: 52:ef:38:75:61:e4:98:ec:1d:de:83:d5:81:b8:85: e6:cd:5b:10:13:64:38:a6:fc:98:2e:c5:28:c4:ff: 41:60:f9:4c:d2:63:c6:84:33:0f:9c:c0:98:dc:0c: 9e:52:e1:06:18:40:3a:7a:e5:32:fd:48:a6:a0:a5: 94:31:24:e9:86:e8:f8:64:e7:40:b0:11:af:bf:bb: 04:e6:db:29:8d:53:08:0f:3d:49:5b:6a:4e:27:83: b0:e4:73:e3:cb:28:57:ca:95:3b:da:90:6e:fc:0b: 24:85:58:81:10:4e:b5:5c:37:35:e4:b9:d2:2b:07: 13:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E8:67:5F:94:D7:D1:FC:4A:1C:D1:EF:83:93:96:0A:79:95:97:41 X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a9:b9:4c:5c:e8:bc:b0:79:2e:ff:fc:ed:55:41:48:ac:c4: f2:3d:e2:e4:2b:cf:f3:a6:72:06:a5:a6:97:88:be:13:a6:b3: 34:2e:cf:8c:c5:0c:c3:8d:76:b8:a1:64:6c:3d:7d:16:da:98: 18:db:73:2a:c5:ce:a9:5a:8f:34:f2:46:0b:fe:f7:f2:34:6c: e3:ab:9b:e5:c6:c6:b1:88:0a:d5:a2:36:b9:d2:75:b5:e9:91: 6a:b5:f0:d3:52:d9:81:39:4e:de:55:74:1e:5d:1b:17:1e:02: ed:e9:cf:d3:86:1c:83:ae:14:23:3b:b1:e5:64:b7:28:13:b1: ae:b3:e5:f2:a9:6f:bc:53:49:85:50:f0:2c:3f:9c:0f:8d:cd: e2:fb:b2:ea:55:db:9b:8a:b0:07:e6:2d:d1:5d:fe:14:2d:10: a8:7b:cd:f9:7e:df:9f:d1:2b:a8:26:20:f0:bf:f9:84:00:b1: 6f:b2:66:ba:38:1c:ad:59:55:2b:20:d2:d7:92:5f:75:42:b6: a2:3e:e2:9e:3d:36:3f:2a:32:3d:63:5a:c4:38:27:5d:e2:ae: dc:ed:69:8e:ff:b3:a9:e2:56:72:7e:9b:af:bd:c7:0a:46:2b: 81:55:0e:99:78:45:ad:7d:37:02:ac:43:e8:b4:ee:e1:21:5f: 28:74:5d:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/WdEqL2QTtniMGczT0EWdcsNb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNTAzMTEyMzI1NTJaFw0yNTAzMTQyMzQ3NTJaMDMxMTAvBgNV BAMTKDgwRTg2NzVGOTREN0QxRkM0QTFDRDFFRjgzOTM5NjBBNzk5NTk3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgWpunvOE4bkhBBFZTh+DRSxK qmTi5IvQ3ERcCYW/oQDGB+X1Ug2xnX/rrtJEiTTf9nUmTAAgXLWXTJxtFsKncjkk 7Bby9o/B5N/EtYldDGuBbu9FcwLJ4egv52u4XrZFn8xYKoiQdjCf4EHYdhR/YURe EDHR5AEMdruNw5+AvZdh4CT7EVLvOHVh5JjsHd6D1YG4hebNWxATZDim/JguxSjE /0Fg+UzSY8aEMw+cwJjcDJ5S4QYYQDp65TL9SKagpZQxJOmG6Phk50CwEa+/uwTm 2ymNUwgPPUlbak4ng7Dkc+PLKFfKlTvakG78CySFWIEQTrVcNzXkudIrBxNPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgOhnX5TX0fxKHNHvg5OWCnmVl0EwHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOpuUxc6LyweS7//O1VQUisxPI94uQrz/Om cgalppeIvhOmszQuz4zFDMONdrihZGw9fRbamBjbcyrFzqlajzTyRgv+9/I0bOOr m+XGxrGICtWiNrnSdbXpkWq18NNS2YE5Tt5VdB5dGxceAu3pz9OGHIOuFCM7seVk tygTsa6z5fKpb7xTSYVQ8Cw/nA+NzeL7supV25uKsAfmLdFd/hQtEKh7zfl+35/R K6gmIPC/+YQAsW+yZro4HK1ZVSsg0teSX3VCtqI+4p49Nj8qMj1jWsQ4J13irtzt aY7/s6niVnJ+m6+9xwpGK4FVDpl4Ra19NwKsQ+i07uEhXyh0XfU= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:36 2025 by rpki-client