$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: BbEzRSEA7YnxKPrWN/ctnDi318T48Idl9nDfOcK8AIw= Subject key identifier: 0C:81:B6:BC:C5:A7:E0:99:F3:B2:7F:74:D5:13:37:CB:AD:44:EB:8E Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 4340BFCD4B99BAB154BC64DE7195211E630F975C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: C2 Signing time: Sun 20 Jul 2025 02:01:33 +0000 Manifest this update: Sun 20 Jul 2025 01:56:33 +0000 Manifest next update: Wed 23 Jul 2025 09:41:33 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 93YYxDDq8+f/Khx/2GnLN/kmjkNijzZ2VSNum/bWLqg=) 2: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: 5HwtCYpXut8wDnMp12XDOkMjo2VkcBv4F0TNa0hAM0c=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: THBM8LqDnCB9g6mrX4v3sCaW9RltHiaa0G5I3swxXAw=) 4: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: 5HetFGZszR8N+jVJsMmxP9KoRUdy7YyfVMX9PkmHTvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:40:bf:cd:4b:99:ba:b1:54:bc:64:de:71:95:21:1e:63:0f:97:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Jul 20 01:56:33 2025 GMT Not After : Jul 23 09:41:33 2025 GMT Subject: CN=0C81B6BCC5A7E099F3B27F74D51337CBAD44EB8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:4a:c2:71:e5:c6:71:f9:4a:64:17:d2:d7: a9:08:8c:c2:02:4a:bc:43:61:2b:95:ea:8e:b0:3f: 49:8c:4d:58:9e:c0:50:fe:ab:4a:df:99:8a:b4:dd: 0c:d6:2d:9f:46:63:ae:d9:21:7a:b2:72:4c:02:40: 53:2c:7f:cf:b7:9e:e1:52:2f:85:16:d5:6e:d4:b9: c1:87:61:2d:1e:9b:2c:b6:b8:3b:cc:7d:34:62:9b: 80:9f:c7:62:b1:44:c6:e6:61:8f:e1:e9:ce:8c:dd: 61:15:6d:a3:63:db:04:ba:33:3b:ff:12:4e:ad:21: a9:79:49:63:51:17:bc:25:d4:83:dc:76:cf:9d:70: c2:47:ff:47:35:f2:04:91:8d:a8:da:d6:22:56:03: 17:65:51:2d:0d:16:aa:21:45:87:a6:3f:59:f6:22: 8c:08:00:06:2c:ab:4a:4e:93:ad:e9:41:f5:dd:b5: c9:8c:b3:a3:d2:d5:d7:9b:67:a3:39:44:69:19:43: 12:56:7d:1b:8b:49:04:7d:94:6e:89:c4:3c:95:88: 45:01:4c:e6:c8:75:5b:9f:bf:63:2f:0b:cc:ea:d5: fc:ce:b2:61:e5:ff:96:dd:66:87:66:2c:67:10:05: 76:d4:73:5e:28:b0:e9:4e:89:91:5b:ae:97:aa:d7: 76:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:81:B6:BC:C5:A7:E0:99:F3:B2:7F:74:D5:13:37:CB:AD:44:EB:8E X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e3:33:8c:fa:f9:5a:d2:f4:da:b8:03:85:fd:5b:bb:7e:3c: f4:bf:05:11:92:30:32:8f:af:e8:14:bf:28:63:d7:0e:e1:9c: 70:66:06:2b:07:db:97:4d:1d:45:c1:ea:f2:f4:51:37:25:5b: f3:d8:c5:21:bb:b7:16:d9:f3:91:b2:97:d0:68:d4:ee:66:f7: a1:6a:ef:40:a4:08:e0:1e:0c:c5:ae:0e:68:46:c7:27:d8:80: ec:6a:28:e7:39:b2:29:10:f8:d0:64:cd:d8:6a:9c:01:c6:fb: da:e9:20:98:49:74:bd:4e:1f:f3:6e:16:b5:5b:ec:44:83:af: e8:cb:69:1b:87:bf:9f:43:61:82:fb:9a:d6:ea:ae:16:a7:c4: aa:c2:f5:fe:e4:ba:c2:53:43:d3:cf:2e:1b:ea:a0:f5:d8:3d: 06:07:a0:6e:1c:68:d1:03:9e:ac:e3:94:3a:7c:be:56:c1:09: 14:2a:e8:d8:93:14:0f:82:2f:d6:72:bb:b9:ec:bc:e0:92:6a: 5f:01:79:d6:3f:c6:59:6b:ed:70:d1:5b:b2:fe:05:f7:08:e6: 60:7d:9b:a6:87:67:7e:3b:01:a9:bd:33:11:0e:78:5d:87:46: 57:aa:c2:20:d7:eb:2f:7c:65:ab:b4:cc:25:02:83:ac:29:6d: 4d:f5:ab:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0C/zUuZurFUvGTecZUhHmMPl1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNTA3MjAwMTU2MzNaFw0yNTA3MjMwOTQxMzNaMDMxMTAvBgNV BAMTKDBDODFCNkJDQzVBN0UwOTlGM0IyN0Y3NEQ1MTMzN0NCQUQ0NEVCOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBckrCceXGcflKZBfS16kIjMIC SrxDYSuV6o6wP0mMTViewFD+q0rfmYq03QzWLZ9GY67ZIXqyckwCQFMsf8+3nuFS L4UW1W7UucGHYS0emyy2uDvMfTRim4Cfx2KxRMbmYY/h6c6M3WEVbaNj2wS6Mzv/ Ek6tIal5SWNRF7wl1IPcds+dcMJH/0c18gSRjaja1iJWAxdlUS0NFqohRYemP1n2 IowIAAYsq0pOk63pQfXdtcmMs6PS1debZ6M5RGkZQxJWfRuLSQR9lG6JxDyViEUB TObIdVufv2MvC8zq1fzOsmHl/5bdZodmLGcQBXbUc14osOlOiZFbrpeq13bBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDIG2vMWn4Jnzsn901RM3y61E644wHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLjM4z6+VrS9Nq4A4X9W7t+PPS/BRGSMDKP r+gUvyhj1w7hnHBmBisH25dNHUXB6vL0UTclW/PYxSG7txbZ85Gyl9Bo1O5m96Fq 70CkCOAeDMWuDmhGxyfYgOxqKOc5sikQ+NBkzdhqnAHG+9rpIJhJdL1OH/NuFrVb 7ESDr+jLaRuHv59DYYL7mtbqrhanxKrC9f7kusJTQ9PPLhvqoPXYPQYHoG4caNED nqzjlDp8vlbBCRQq6NiTFA+CL9Zyu7nsvOCSal8BedY/xllr7XDRW7L+BfcI5mB9 m6aHZ347Aam9MxEOeF2HRleqwiDX6y98Zau0zCUCg6wpbU31qxo= -----END CERTIFICATE-----Generated at Mon Jul 21 18:03:56 2025 by rpki-client