$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: 9h1A04v7yefaHJERpvMjbKqOfIkNHPrRnSfxUGYQCMc= Subject key identifier: D0:7A:C0:34:44:34:9E:7B:E5:C4:82:A8:E5:63:5B:01:27:3E:05:44 Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 1E11E92D8AB2ACDB150854585D3A621D60332A66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 0129 Signing time: Fri 04 Apr 2025 03:01:39 +0000 Manifest this update: Fri 04 Apr 2025 02:56:39 +0000 Manifest next update: Mon 07 Apr 2025 13:45:39 +0000 Files and hashes: 1: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: Vg3IvT2t+p60RekIPn/496iXQ0Zx3pmQ9FsDwlvhec0=) 2: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: ZUTOx7YNxEInj7Wkz7eXTYYR8S5djP8YvIzTcnFDwLU=) 3: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: wkWxkGCvb2rTempfxb5c6tVP5YHeTQgrEi6mm/Sfr3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 13:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:11:e9:2d:8a:b2:ac:db:15:08:54:58:5d:3a:62:1d:60:33:2a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: Apr 4 02:56:39 2025 GMT Not After : Apr 7 13:45:39 2025 GMT Subject: CN=D07AC03444349E7BE5C482A8E5635B01273E0544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:31:35:8a:f2:d1:d8:9a:ce:ba:ad:cf:dc: 05:ba:e5:79:b0:37:52:86:02:91:70:47:79:2a:aa: a3:1f:32:83:76:d8:07:7b:98:ee:87:ad:d4:6e:f5: 1c:6d:cd:45:6d:bf:ba:d9:f1:d1:fe:62:dc:07:c5: 2c:f3:bf:80:93:1c:35:69:f7:f2:00:7b:44:ae:d8: 66:79:47:5d:88:c7:4c:2d:01:cf:43:48:16:06:2c: b1:23:04:d6:be:db:de:05:d9:1a:38:7b:e9:8a:a6: 01:5a:d3:2d:7f:a9:8e:15:1b:39:54:8f:14:0a:07: ef:c0:fd:9a:3e:ab:60:10:99:7d:8c:19:9c:00:3e: c9:34:14:d4:d4:2b:14:a4:88:87:85:ee:1d:a0:4f: ef:45:1c:7b:d8:37:21:2e:f3:8b:c1:50:ab:ed:58: 92:3e:84:25:92:5b:b9:c6:7b:27:c3:93:1c:9e:20: 5d:e8:d2:20:38:52:25:06:9e:12:f0:4f:53:a6:08: 2a:b4:75:17:ba:5b:39:44:ef:69:31:50:a3:6d:c4: 1d:83:b3:4b:8a:54:7a:c1:ab:7c:71:05:c0:3a:c6: fd:3d:e2:c5:1c:ff:10:4f:f7:6f:04:ba:17:c9:ad: 0b:11:00:fd:4f:c7:06:4b:6b:a0:0c:31:b5:4b:c2: 7a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7A:C0:34:44:34:9E:7B:E5:C4:82:A8:E5:63:5B:01:27:3E:05:44 X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ca:87:dc:8c:65:32:f1:ce:5e:35:0b:1a:1b:af:3d:98:fe: 0f:84:7f:00:07:20:73:d6:dc:4b:ae:1a:51:6b:9f:18:52:10: 79:cb:10:2f:3c:3a:b4:71:52:3b:0a:2c:1e:29:75:c1:ec:5b: 9a:66:5b:52:0d:3d:08:40:83:4b:99:33:46:d0:6b:9c:84:ea: aa:b1:3e:2d:84:33:34:ac:b7:83:23:20:34:3a:a6:8d:83:e6: be:9d:98:83:9e:26:e3:cb:8b:c7:3d:f5:0c:97:0b:13:9f:86: 26:79:7f:f8:e1:b5:a3:ef:f3:6e:12:9c:d1:91:8d:d5:97:ea: b7:c4:2f:ac:67:7c:b8:ac:e0:5e:7b:d7:18:f6:b4:6d:92:60: 03:3a:1c:6e:73:a0:cf:b4:32:59:a3:8f:2d:8d:3e:f1:d8:34: d9:8e:e4:a6:19:fe:b5:68:7b:63:25:04:e1:42:aa:ed:68:00: 01:56:37:2f:09:df:4e:43:36:79:a9:23:3c:91:7f:33:72:27: 13:85:20:4d:f4:c4:05:d8:d5:bc:82:d6:58:5f:f6:86:f4:8c: 63:10:be:81:05:01:d2:2c:53:bd:81:5c:43:db:59:1e:10:da: d8:cd:ce:bc:00:ab:c6:25:9b:0a:d9:a6:8e:3f:68:3f:5d:7d: af:bb:11:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhHpLYqyrNsVCFRYXTpiHWAzKmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2 QUNEODcxNzAeFw0yNTA0MDQwMjU2MzlaFw0yNTA0MDcxMzQ1MzlaMDMxMTAvBgNV BAMTKEQwN0FDMDM0NDQzNDlFN0JFNUM0ODJBOEU1NjM1QjAxMjczRTA1NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeSjE1ivLR2JrOuq3P3AW65Xmw N1KGApFwR3kqqqMfMoN22Ad7mO6HrdRu9RxtzUVtv7rZ8dH+YtwHxSzzv4CTHDVp 9/IAe0Su2GZ5R12Ix0wtAc9DSBYGLLEjBNa+294F2Ro4e+mKpgFa0y1/qY4VGzlU jxQKB+/A/Zo+q2AQmX2MGZwAPsk0FNTUKxSkiIeF7h2gT+9FHHvYNyEu84vBUKvt WJI+hCWSW7nGeyfDkxyeIF3o0iA4UiUGnhLwT1OmCCq0dRe6WzlE72kxUKNtxB2D s0uKVHrBq3xxBcA6xv094sUc/xBP928EuhfJrQsRAP1PxwZLa6AMMbVLwnq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0HrANEQ0nnvlxIKo5WNbASc+BUQwHwYDVR0j BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLKh9yMZTLxzl41Cxobrz2Y/g+EfwAHIHPW 3EuuGlFrnxhSEHnLEC88OrRxUjsKLB4pdcHsW5pmW1INPQhAg0uZM0bQa5yE6qqx Pi2EMzSst4MjIDQ6po2D5r6dmIOeJuPLi8c99QyXCxOfhiZ5f/jhtaPv824SnNGR jdWX6rfEL6xnfLis4F571xj2tG2SYAM6HG5zoM+0Mlmjjy2NPvHYNNmO5KYZ/rVo e2MlBOFCqu1oAAFWNy8J305DNnmpIzyRfzNyJxOFIE30xAXY1byC1lhf9ob0jGMQ voEFAdIsU72BXEPbWR4Q2tjNzrwAq8YlmwrZpo4/aD9dfa+7EeI= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:02 2025 by rpki-client