$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: H9ZGKNvfRmY83reHMy7T656ZXGV4LhHhyqwZC/e3bak= Subject key identifier: 6A:9F:E3:7F:07:8E:EF:45:3D:BD:83:69:1C:8F:5E:02:A1:90:77:AE Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 2F15E1A6FB24499D2EBCD43E6B075E15A711C5F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: 5D Signing time: Fri 09 May 2025 11:52:17 +0000 Manifest this update: Fri 09 May 2025 11:47:17 +0000 Manifest next update: Mon 12 May 2025 17:00:17 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: C/eQpXS1FL2/uRM5yW4FJhP7RGRcdJRCrZp3lfFC1uQ=) 2: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: t95YAg3egcEPQyqAoPnxcV7CDwK4ClPrzEiGwKdYmVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 17:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:15:e1:a6:fb:24:49:9d:2e:bc:d4:3e:6b:07:5e:15:a7:11:c5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: May 9 11:47:17 2025 GMT Not After : May 12 17:00:17 2025 GMT Subject: CN=6A9FE37F078EEF453DBD83691C8F5E02A19077AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a4:da:c9:55:39:74:74:77:d9:24:3f:08:7a: 6b:4e:e7:66:6c:c7:aa:6c:1f:3a:59:29:e7:fb:7a: e8:78:8d:80:61:b0:e1:22:06:64:67:06:a6:a6:0c: a6:8f:12:5e:cf:57:e0:bb:e7:d3:16:47:62:b7:0e: 52:a0:dd:8c:2e:bd:f6:4d:45:a9:01:31:fc:9f:55: 8e:9f:15:3d:52:01:cf:56:b2:79:73:48:03:2b:5e: 43:22:b1:89:14:e7:0a:c0:02:0f:0e:29:f4:53:f0: df:7e:bb:27:56:56:44:a8:8b:65:69:7a:c3:30:23: 68:0e:89:a7:7f:4c:28:e9:a0:23:8b:0f:70:21:2a: fe:ec:3a:17:60:b7:cc:fc:b9:46:0c:44:37:d4:af: 78:d1:e4:7b:aa:55:7f:a5:08:c6:fc:46:72:3a:9c: 2b:ad:5b:83:ba:fc:0b:5d:ab:6b:5e:55:f1:bd:0b: 67:29:a3:43:d8:51:46:63:cc:8f:b2:d7:e5:39:60: 3d:a2:4c:08:bd:be:51:5f:e7:f8:6d:85:b9:13:4d: 82:fa:78:9b:d4:4e:5b:06:77:ed:4b:bc:94:44:9f: c8:c8:ab:ab:23:f4:62:d7:43:40:9b:fd:17:b6:14: 60:72:0b:94:61:a7:f7:a9:3f:71:81:9e:9e:83:f2: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9F:E3:7F:07:8E:EF:45:3D:BD:83:69:1C:8F:5E:02:A1:90:77:AE X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:95:74:3f:14:7b:d7:04:86:5d:22:ed:d3:6d:1d:ec:aa:7f: ac:d0:54:d5:11:ab:7e:95:af:7b:68:a1:11:db:33:cf:11:30: b1:47:ef:6d:93:76:4f:8a:5b:e0:6a:5e:50:1f:c6:88:77:c0: 56:9b:99:30:75:c4:f6:0e:ab:23:b1:1c:4f:de:8c:11:ac:14: d4:62:be:6e:74:62:f0:17:ac:4d:12:36:1a:cb:03:90:57:c4: 95:f7:42:0b:44:08:d7:82:b5:32:bf:15:35:e6:b1:8b:72:2b: 82:c2:d6:e1:5b:71:bf:aa:eb:ec:17:a6:b0:8e:15:bf:96:a4: 70:b3:61:a3:98:06:3d:89:72:4f:6d:4b:61:e9:6f:e9:6a:5e: 20:07:ee:f9:2e:67:93:b6:82:cb:7f:dc:09:ad:f3:30:dc:04: 77:ac:aa:c1:73:f4:8c:a4:55:16:cb:24:b8:ba:8f:98:86:9e: bd:7b:b4:11:33:eb:c6:da:46:20:1a:f5:b7:fc:f3:35:92:d2: f9:56:8c:1f:ff:ba:55:86:cb:e4:af:c2:f8:fb:16:d2:77:53: 7b:b2:af:9c:ef:4b:a0:ea:19:7c:44:d0:f7:5c:97:b0:4a:81: 05:49:7d:e8:3d:c4:24:a6:33:1a:1c:4f:25:07:8e:9b:53:52: f0:c8:20:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxXhpvskSZ0uvNQ+awdeFacRxfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTA1MDkxMTQ3MTdaFw0yNTA1MTIxNzAwMTdaMDMxMTAvBgNV BAMTKDZBOUZFMzdGMDc4RUVGNDUzREJEODM2OTFDOEY1RTAyQTE5MDc3QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtpNrJVTl0dHfZJD8IemtO52Zs x6psHzpZKef7euh4jYBhsOEiBmRnBqamDKaPEl7PV+C759MWR2K3DlKg3YwuvfZN RakBMfyfVY6fFT1SAc9WsnlzSAMrXkMisYkU5wrAAg8OKfRT8N9+uydWVkSoi2Vp esMwI2gOiad/TCjpoCOLD3AhKv7sOhdgt8z8uUYMRDfUr3jR5HuqVX+lCMb8RnI6 nCutW4O6/Atdq2teVfG9C2cpo0PYUUZjzI+y1+U5YD2iTAi9vlFf5/hthbkTTYL6 eJvUTlsGd+1LvJREn8jIq6sj9GLXQ0Cb/Re2FGByC5Rhp/epP3GBnp6D8k93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUap/jfweO70U9vYNpHI9eAqGQd64wHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyVdD8Ue9cEhl0i7dNtHeyqf6zQVNURq36V r3tooRHbM88RMLFH722Tdk+KW+BqXlAfxoh3wFabmTB1xPYOqyOxHE/ejBGsFNRi vm50YvAXrE0SNhrLA5BXxJX3QgtECNeCtTK/FTXmsYtyK4LC1uFbcb+q6+wXprCO Fb+WpHCzYaOYBj2Jck9tS2Hpb+lqXiAH7vkuZ5O2gst/3Amt8zDcBHesqsFz9Iyk VRbLJLi6j5iGnr17tBEz68baRiAa9bf88zWS0vlWjB//ulWGy+Svwvj7FtJ3U3uy r5zvS6DqGXxE0Pdcl7BKgQVJfeg9xCSmMxocTyUHjptTUvDIIFI= -----END CERTIFICATE-----Generated at Sun May 11 02:12:51 2025 by rpki-client