$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: Hq+Yjbr4Hard6DteugWRRV3a8iH8EsxmCawLqSXdPcM= Subject key identifier: 90:BF:FD:58:05:BA:DD:08:0D:13:14:22:0A:42:D2:83:03:00:67:3A Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 75531E6CAE0F6B123D7B559C20507277E7156D05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: AE Signing time: Wed 04 Jun 2025 11:11:35 +0000 Manifest this update: Wed 04 Jun 2025 11:06:35 +0000 Manifest next update: Sat 07 Jun 2025 12:56:35 +0000 Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: THBM8LqDnCB9g6mrX4v3sCaW9RltHiaa0G5I3swxXAw=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 93YYxDDq8+f/Khx/2GnLN/kmjkNijzZ2VSNum/bWLqg=) 3: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: u3vBJ5pT9o0aGCazHu1lKgnMD11s93ufJ8bbhgJmJOo=) 4: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: 5HetFGZszR8N+jVJsMmxP9KoRUdy7YyfVMX9PkmHTvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:53:1e:6c:ae:0f:6b:12:3d:7b:55:9c:20:50:72:77:e7:15:6d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Jun 4 11:06:35 2025 GMT Not After : Jun 7 12:56:35 2025 GMT Subject: CN=90BFFD5805BADD080D1314220A42D2830300673A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:a9:83:b5:ae:4c:d1:3c:1e:59:b2:f5:7a: ed:62:ff:34:45:e2:13:0a:6c:9d:db:a6:22:ee:72: 65:87:1d:24:92:ed:24:d6:9b:75:57:f6:88:3b:3e: ba:34:4c:68:a4:f5:58:27:4c:32:62:33:bb:53:6f: 1e:95:73:ac:9b:1a:33:fc:b9:29:e6:0d:00:2a:db: c7:ba:3f:e3:b6:5f:99:ba:fe:c1:ab:95:57:1e:e3: 28:43:d0:1e:a8:cc:fe:78:1e:f0:04:cd:e9:09:52: 81:5b:4f:4d:cd:79:a3:f5:21:c5:6b:e9:f5:08:c0: 0c:4b:d6:8b:23:b3:78:5c:be:4a:73:cf:b1:3c:c9: 97:74:71:46:7c:e7:e4:40:02:38:18:a9:b9:80:c4: fa:57:79:2f:a9:65:2c:c2:ed:af:08:e5:7d:da:f8: 7b:c1:a8:55:3d:d5:dc:04:fa:f2:43:b1:15:f6:cc: 4c:76:d2:16:6a:99:d9:6a:15:f7:57:ec:2c:b8:d0: 90:f2:65:c7:42:db:09:18:d3:bf:cf:aa:13:3d:24: 6b:09:05:05:4e:74:a4:4e:6c:82:42:c1:a2:df:32: f4:ae:0a:b7:34:25:bb:a9:d3:29:a8:b2:ab:5d:24: 04:90:0b:85:60:e9:4b:be:ca:3e:d3:67:ab:e1:17: b1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BF:FD:58:05:BA:DD:08:0D:13:14:22:0A:42:D2:83:03:00:67:3A X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:cd:32:a0:84:24:2c:b2:36:77:03:0d:05:2a:b6:fc:f3:0c: 9e:0a:32:f8:a4:c9:28:96:84:13:3f:4b:a0:81:c5:53:21:c9: 09:16:ba:f7:29:22:92:35:1c:8d:d7:7b:b4:46:57:0b:10:9d: 8b:c2:6c:8d:10:01:d3:37:44:0a:fc:a4:b3:64:2e:f9:fa:f7: 7d:42:8c:33:5f:39:44:71:8e:a0:e4:85:c1:b1:06:d3:07:f0: 8e:5a:2e:0f:bb:f2:08:dd:49:d4:99:7b:d6:65:e1:da:26:f1: 05:3e:6f:df:2d:0a:b1:bb:d6:9d:aa:ed:8b:da:e9:1d:54:f1: 95:6e:f2:15:97:d4:a9:0f:e5:c4:e4:75:75:db:29:d0:f0:34: 24:1a:fd:b6:42:26:b6:b5:60:e0:17:c5:f1:5e:c4:33:e2:cf: 37:e1:16:32:49:a7:ba:2f:48:6d:0a:b4:b2:9d:8c:c0:3c:8f: 84:18:77:6a:0e:84:e4:0e:bf:ad:a6:3c:ab:b4:4d:7c:57:3a: 29:6a:e2:4f:bd:54:ab:39:91:34:71:37:70:b7:bb:7b:79:16: 3e:8e:54:5d:ea:20:6d:e6:15:d7:33:d2:ca:72:a4:70:d9:5c: 66:ca:d4:15:27:82:4b:01:24:5d:5c:65:79:78:52:2b:bc:25: 6b:a4:01:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVMebK4PaxI9e1WcIFByd+cVbQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNTA2MDQxMTA2MzVaFw0yNTA2MDcxMjU2MzVaMDMxMTAvBgNV BAMTKDkwQkZGRDU4MDVCQUREMDgwRDEzMTQyMjBBNDJEMjgzMDMwMDY3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuOKmDta5M0TweWbL1eu1i/zRF 4hMKbJ3bpiLucmWHHSSS7STWm3VX9og7Pro0TGik9VgnTDJiM7tTbx6Vc6ybGjP8 uSnmDQAq28e6P+O2X5m6/sGrlVce4yhD0B6ozP54HvAEzekJUoFbT03NeaP1IcVr 6fUIwAxL1osjs3hcvkpzz7E8yZd0cUZ85+RAAjgYqbmAxPpXeS+pZSzC7a8I5X3a +HvBqFU91dwE+vJDsRX2zEx20hZqmdlqFfdX7Cy40JDyZcdC2wkY07/PqhM9JGsJ BQVOdKRObIJCwaLfMvSuCrc0Jbup0ymosqtdJASQC4Vg6Uu+yj7TZ6vhF7EjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkL/9WAW63QgNExQiCkLSgwMAZzowHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPNMqCEJCyyNncDDQUqtvzzDJ4KMvikySiW hBM/S6CBxVMhyQkWuvcpIpI1HI3Xe7RGVwsQnYvCbI0QAdM3RAr8pLNkLvn6931C jDNfOURxjqDkhcGxBtMH8I5aLg+78gjdSdSZe9Zl4dom8QU+b98tCrG71p2q7Yva 6R1U8ZVu8hWX1KkP5cTkdXXbKdDwNCQa/bZCJra1YOAXxfFexDPizzfhFjJJp7ov SG0KtLKdjMA8j4QYd2oOhOQOv62mPKu0TXxXOilq4k+9VKs5kTRxN3C3u3t5Fj6O VF3qIG3mFdcz0spypHDZXGbK1BUngksBJF1cZXl4Uiu8JWukAUY= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:44 2025 by rpki-client