$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: HiY/zy+Y60duDf4pFc3eV1N+WMeyA531aOHKE8eXmOI= Subject key identifier: E1:C9:22:6D:68:1F:F8:B5:34:D8:DF:85:1B:83:A5:E3:14:B8:BF:CC Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 52F50E54E82CDEF14D0B35DAF9F88A5F8AF64973 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: D7 Signing time: Fri 05 Sep 2025 02:01:34 +0000 Manifest this update: Fri 05 Sep 2025 01:56:34 +0000 Manifest next update: Mon 08 Sep 2025 05:51:34 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: 5HetFGZszR8N+jVJsMmxP9KoRUdy7YyfVMX9PkmHTvY=) 2: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: THBM8LqDnCB9g6mrX4v3sCaW9RltHiaa0G5I3swxXAw=) 3: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 93YYxDDq8+f/Khx/2GnLN/kmjkNijzZ2VSNum/bWLqg=) 4: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: grVt2QztfYksZshkOCjXSPLvVhtUkE/VME6rxTkl678=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f5:0e:54:e8:2c:de:f1:4d:0b:35:da:f9:f8:8a:5f:8a:f6:49:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Sep 5 01:56:34 2025 GMT Not After : Sep 8 05:51:34 2025 GMT Subject: CN=E1C9226D681FF8B534D8DF851B83A5E314B8BFCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:67:f8:87:ef:bf:a4:70:c8:7c:e5:f1:34: a9:cc:04:e7:6d:c4:98:a3:70:ba:84:87:a6:41:86: a6:66:1b:be:b3:91:4a:03:41:4e:5f:06:c1:b4:0c: 4c:ac:3a:99:df:15:5e:62:45:c0:09:68:9d:aa:22: f9:67:53:b3:45:90:b8:d6:5a:a8:42:4a:ad:72:c1: d7:1a:c7:8c:04:b6:8e:e5:22:3c:b7:ba:d9:fe:a9: 0e:a4:67:96:97:05:66:c3:1e:72:9d:a0:ab:05:d1: 10:52:ac:a4:40:33:84:33:3f:94:15:d1:ac:b9:52: cf:ba:2a:86:2f:00:9b:20:0d:5f:c0:c3:ac:fc:4f: 7a:29:99:bd:f0:17:fb:88:ba:34:d9:ae:b2:e9:e5: 1e:69:b9:d6:ca:56:3f:f7:d5:3e:ca:df:99:5c:29: bd:36:7f:ec:5a:5e:76:59:be:fa:69:3a:48:3e:48: f2:34:74:0d:56:86:18:ab:13:ab:62:b4:a6:4d:e1: ea:1d:e1:7e:22:6e:8a:ed:a7:1a:0e:2f:0c:ef:43: d4:95:64:74:c6:ef:5e:07:3a:29:61:a2:8b:58:a9: 8c:17:03:f3:9c:c2:d0:17:9b:4f:1d:ed:7e:e4:62: 7b:d1:a4:82:e2:b3:72:ab:04:c7:74:b1:a7:b0:15: ca:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:22:6D:68:1F:F8:B5:34:D8:DF:85:1B:83:A5:E3:14:B8:BF:CC X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d3:3d:ab:64:67:48:b0:a5:28:d3:db:ac:42:ca:20:b7:b6: 66:14:3b:62:77:ab:2d:93:72:5c:c7:10:bd:20:97:aa:a3:f8: fa:4a:42:fa:e7:65:f0:2e:2b:15:9f:a9:fc:ba:d6:0c:4f:80: 5a:4c:b6:bd:77:b4:92:04:ba:04:d1:34:92:b8:43:ae:99:2c: 77:85:c4:f5:b2:46:52:d4:ae:3d:a4:78:e8:14:0d:81:6d:85: f3:8d:81:24:3a:1a:42:f6:12:90:bd:24:ab:11:ec:43:f8:32: 38:ac:20:6c:50:0f:31:f3:f9:a5:d6:b6:ad:ca:4f:9a:fd:dd: 5d:3c:9c:04:f6:a0:16:4f:ca:a6:c6:6f:8a:27:9f:35:4f:43: 93:8a:22:38:ea:f3:b1:92:f6:25:00:84:04:1b:ce:f2:c9:40: 90:42:4f:82:c6:0f:7d:8e:e8:cb:44:a7:9f:92:43:e2:0e:ea: 33:94:7e:15:e5:74:f5:04:5e:3d:cc:77:cc:79:37:b8:15:4e: 50:6d:2b:62:76:84:9e:90:b0:db:4a:7f:c0:2b:65:98:61:70: 25:08:1c:84:e9:ce:e7:0e:08:e7:51:87:22:fd:87:43:37:a9: 84:9b:eb:d2:05:f8:72:54:7f:3d:8e:d3:d4:47:66:49:03:24: 58:a4:72:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUvUOVOgs3vFNCzXa+fiKX4r2SXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNTA5MDUwMTU2MzRaFw0yNTA5MDgwNTUxMzRaMDMxMTAvBgNV BAMTKEUxQzkyMjZENjgxRkY4QjUzNEQ4REY4NTFCODNBNUUzMTRCOEJGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB62f4h++/pHDIfOXxNKnMBOdt xJijcLqEh6ZBhqZmG76zkUoDQU5fBsG0DEysOpnfFV5iRcAJaJ2qIvlnU7NFkLjW WqhCSq1ywdcax4wEto7lIjy3utn+qQ6kZ5aXBWbDHnKdoKsF0RBSrKRAM4QzP5QV 0ay5Us+6KoYvAJsgDV/Aw6z8T3opmb3wF/uIujTZrrLp5R5pudbKVj/31T7K35lc Kb02f+xaXnZZvvppOkg+SPI0dA1WhhirE6titKZN4eod4X4ibortpxoOLwzvQ9SV ZHTG714HOilhootYqYwXA/OcwtAXm08d7X7kYnvRpILis3KrBMd0saewFcpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ckibWgf+LU02N+FG4Ol4xS4v8wwHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDTPatkZ0iwpSjT26xCyiC3tmYUO2J3qy2T clzHEL0gl6qj+PpKQvrnZfAuKxWfqfy61gxPgFpMtr13tJIEugTRNJK4Q66ZLHeF xPWyRlLUrj2keOgUDYFthfONgSQ6GkL2EpC9JKsR7EP4MjisIGxQDzHz+aXWtq3K T5r93V08nAT2oBZPyqbGb4onnzVPQ5OKIjjq87GS9iUAhAQbzvLJQJBCT4LGD32O 6MtEp5+SQ+IO6jOUfhXldPUEXj3Md8x5N7gVTlBtK2J2hJ6QsNtKf8ArZZhhcCUI HITpzucOCOdRhyL9h0M3qYSb69IF+HJUfz2O09RHZkkDJFikcrc= -----END CERTIFICATE-----Generated at Sun Sep 7 01:41:57 2025 by rpki-client