$ rpki-client -vvf repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft File: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft (raw, json) Hash identifier: WS6MAuxL89PPFKz1p8VMK5TbcDgappTSAGL9OCLY6CQ= Subject key identifier: D2:BF:C6:19:D8:74:5C:73:1B:CB:01:FA:8A:31:48:51:FE:6F:7C:4D Authority key identifier: 21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE Certificate issuer: /CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Certificate serial: 6572271EBCB4DAC11E69C181020A85BC0DB7640F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft Manifest number: 045C Signing time: Thu 05 Jun 2025 07:40:53 +0000 Manifest this update: Thu 05 Jun 2025 07:35:53 +0000 Manifest next update: Sun 08 Jun 2025 18:07:53 +0000 Files and hashes: 1: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl (hash: wNmcMvY7YMiHn8POzUn007ZSEn4DKJbRqchYununYFY=) 2: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: mH+1VpWMh2xbaDJyAbOAhzGNCfmvCkGbF0WpIR3b6Fo=) 3: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: 2zgmqTCIaPAHYWPftqkFjb0hZ28cJ5grf2c4LX9qqic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 18:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:72:27:1e:bc:b4:da:c1:1e:69:c1:81:02:0a:85:bc:0d:b7:64:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Validity Not Before: Jun 5 07:35:53 2025 GMT Not After : Jun 8 18:07:53 2025 GMT Subject: CN=D2BFC619D8745C731BCB01FA8A314851FE6F7C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:67:36:14:84:dc:26:23:ab:c1:27:9c:55: a5:33:68:d9:0e:17:bd:5d:4b:d3:21:2d:5e:1a:7c: 46:3a:f5:fb:c6:20:9d:ae:e0:33:17:b6:b3:01:85: 72:9a:99:16:fc:63:6c:64:75:66:11:fb:87:c2:3c: 80:38:f3:e7:2f:69:47:83:0d:d8:dc:2d:ea:44:d7: 14:f3:05:ff:01:64:4d:ed:20:40:5e:14:57:4c:cf: 34:8f:5e:f4:41:07:9d:b6:01:f2:b2:8d:f1:38:6a: d3:e3:e4:8b:0e:13:26:ef:3a:f2:62:0b:fa:4d:39: 76:c4:2a:97:99:05:68:80:fd:55:de:49:58:6f:f8: 75:c1:30:51:eb:2d:d7:87:d4:66:5f:54:d5:91:34: 02:9e:cf:54:63:5a:08:4e:c1:a9:1c:bf:31:d8:d7: 3d:8c:00:94:8c:31:8e:32:2a:ac:25:ce:f1:9b:6e: 81:f5:df:1d:e0:d4:21:d2:b1:0b:64:c0:c8:dc:06: 0c:35:b7:64:fc:e2:76:0d:2a:a8:e4:1b:89:37:96: 27:89:27:d8:f2:d1:da:bd:aa:fd:4d:b0:b6:da:79: 51:34:5e:d6:2d:73:97:f0:96:90:61:b0:b1:ee:82: de:b2:c9:f4:e8:cf:0f:30:99:7e:b3:5f:35:90:c6: aa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BF:C6:19:D8:74:5C:73:1B:CB:01:FA:8A:31:48:51:FE:6F:7C:4D X509v3 Authority Key Identifier: keyid:21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b2:2a:6e:cd:36:8b:1a:9e:d9:a5:c7:5b:4f:2d:d3:7c:12: 3d:89:05:f6:42:1f:db:91:98:3b:f9:ca:12:27:d7:6f:25:88: 03:6a:5b:60:65:bd:26:7c:4b:47:f0:de:07:56:25:3d:4a:c1: ad:d1:8f:b2:2d:bc:cf:00:c8:53:26:06:67:b1:2e:96:5a:5a: be:ef:5b:68:82:41:c9:2d:b8:48:01:dc:0e:76:91:40:22:e0: 45:29:2e:74:65:7d:0d:ed:5d:79:91:60:30:ac:26:d1:ba:5c: 54:1a:22:d3:c7:90:e9:d4:12:ad:cb:91:40:e5:7a:62:b0:c6: 93:26:38:b2:59:8e:71:97:37:18:c8:90:d9:10:78:37:2f:89: 49:57:3b:af:44:a9:e8:86:32:b1:6c:b8:ae:21:d5:5a:1c:3d: 76:5c:c3:a7:54:c3:23:b6:75:e1:f6:7e:6c:bd:05:a9:bd:eb: b7:d3:da:29:47:3b:30:bc:51:f7:8d:44:ed:5a:09:38:02:68: c1:2e:3e:a9:37:a3:af:e7:e8:db:c0:f9:f3:ab:0f:59:29:b2: 2c:b3:70:82:05:20:91:ae:c5:a2:89:8e:39:ed:96:19:e1:2c: c7:6e:a4:bc:5e:9e:20:d4:6f:11:ed:28:41:cf:73:7c:69:99: 07:ab:cc:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZXInHry02sEeacGBAgqFvA23ZA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNB MDk2QjJGRTAeFw0yNTA2MDUwNzM1NTNaFw0yNTA2MDgxODA3NTNaMDMxMTAvBgNV BAMTKEQyQkZDNjE5RDg3NDVDNzMxQkNCMDFGQThBMzE0ODUxRkU2RjdDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NWc2FITcJiOrwSecVaUzaNkO F71dS9MhLV4afEY69fvGIJ2u4DMXtrMBhXKamRb8Y2xkdWYR+4fCPIA48+cvaUeD DdjcLepE1xTzBf8BZE3tIEBeFFdMzzSPXvRBB522AfKyjfE4atPj5IsOEybvOvJi C/pNOXbEKpeZBWiA/VXeSVhv+HXBMFHrLdeH1GZfVNWRNAKez1RjWghOwakcvzHY 1z2MAJSMMY4yKqwlzvGbboH13x3g1CHSsQtkwMjcBgw1t2T84nYNKqjkG4k3lieJ J9jy0dq9qv1NsLbaeVE0XtYtc5fwlpBhsLHugt6yyfTozw8wmX6zXzWQxqp/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0r/GGdh0XHMbywH6ijFIUf5vfE0wHwYDVR0j BBgwFoAUIV/H5eIrjEaRDU18ohTJI6CWsv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2VhYzljMC1kZTFiLTQ2ZGQtYmYzNy0xOGZlM2E4ZDVmYmYvMC8yMTVGQzdFNUUy MkI4QzQ2OTEwRDREN0NBMjE0QzkyM0EwOTZCMkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNBMDk2 QjJGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm MzctMThmZTNhOGQ1ZmJmLzAvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5 MjNBMDk2QjJGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGyKm7NNosantmlx1tPLdN8Ej2JBfZCH9uR mDv5yhIn128liANqW2BlvSZ8S0fw3gdWJT1Kwa3Rj7ItvM8AyFMmBmexLpZaWr7v W2iCQcktuEgB3A52kUAi4EUpLnRlfQ3tXXmRYDCsJtG6XFQaItPHkOnUEq3LkUDl emKwxpMmOLJZjnGXNxjIkNkQeDcviUlXO69EqeiGMrFsuK4h1VocPXZcw6dUwyO2 deH2fmy9Bam967fT2ilHOzC8UfeNRO1aCTgCaMEuPqk3o6/n6NvA+fOrD1kpsiyz cIIFIJGuxaKJjjntlhnhLMdupLxeniDUbxHtKEHPc3xpmQerzMM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:19 2025 by rpki-client