$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: 39TP5oG18jgGDC3a9F0l6PTNAiO3F2NGcQy0GFV1v+U= Subject key identifier: 30:B4:FB:A8:8C:35:71:96:19:DF:1B:5C:FF:FE:F1:3F:1C:F0:9D:EA Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: 3BD834941BF855D1AC5BF8810D6F1F98065A2298 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 04E6 Signing time: Sat 23 Aug 2025 00:41:08 +0000 Manifest this update: Sat 23 Aug 2025 00:36:08 +0000 Manifest next update: Tue 26 Aug 2025 04:28:08 +0000 Files and hashes: 1: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: cS4xFcJiF1zKuj0BZNhYothbCLKeaVj2VbTjqbuS5CU=) 2: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: ic4/NvnRXU1bWmu1VGdSx/aOKgsocXm9bXT4hL9aNZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d8:34:94:1b:f8:55:d1:ac:5b:f8:81:0d:6f:1f:98:06:5a:22:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: Aug 23 00:36:08 2025 GMT Not After : Aug 26 04:28:08 2025 GMT Subject: CN=30B4FBA88C35719619DF1B5CFFFEF13F1CF09DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:26:66:4d:5f:47:11:67:ae:19:57:d7:6f: e1:56:90:36:08:99:fa:b1:e6:4a:5a:95:a1:e6:95: ba:ad:ae:04:7d:77:7d:01:4b:60:b3:79:4d:fe:04: 90:fa:cc:49:ad:87:7a:9d:22:1e:fd:f4:f6:50:4c: 25:c9:d6:86:f1:65:dc:c7:a5:16:0e:a4:31:a2:ab: fd:19:b5:16:c8:0c:62:94:94:a8:ad:2d:d1:4c:f0: fc:7d:58:34:3e:6f:8a:da:b1:1d:05:5d:f5:09:42: 23:33:80:2f:63:46:ae:8f:49:42:13:46:81:08:5a: 7e:f0:96:4c:1f:7f:31:8c:36:00:08:1e:34:50:98: bb:45:03:7f:c3:89:18:2b:92:2f:68:6f:cb:3b:66: b7:95:f5:7f:74:be:f1:f1:bf:01:1a:38:f6:8c:64: d9:22:c2:bf:54:70:f1:be:14:1c:e1:50:10:13:4b: 5c:96:c3:e7:39:63:64:aa:ef:eb:e1:05:a4:5f:0a: ba:45:62:87:22:d6:24:e4:42:73:b9:07:2a:8f:4c: 9a:aa:2c:7f:69:44:23:92:04:ab:b3:e3:23:34:85: 05:4a:d8:fe:f9:87:e3:75:0b:a8:ca:a5:4f:78:4a: 67:f8:48:4d:2c:64:1d:50:49:53:a7:46:32:c7:2b: cc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B4:FB:A8:8C:35:71:96:19:DF:1B:5C:FF:FE:F1:3F:1C:F0:9D:EA X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:1c:8c:0d:e7:10:41:0e:55:3c:11:83:a3:96:63:51:27:4c: 6f:3e:f7:f2:36:a8:cb:be:af:49:7e:3a:95:a3:dc:86:36:4c: f1:f9:89:d2:ae:98:db:1f:fb:5e:32:15:b0:94:0e:79:03:a0: 30:86:6f:d9:1b:f3:2d:86:fb:88:58:b3:d8:a0:73:c9:3f:e6: 74:32:cd:f5:ae:8e:34:7c:0f:42:65:29:89:8f:53:e0:e5:60: 88:37:fc:43:eb:37:27:bd:d7:95:f3:da:46:6b:3d:bb:ef:8b: 3d:2d:7d:e8:e0:61:82:bc:b9:20:38:0c:b2:c6:2d:33:13:8b: 56:89:26:00:8e:ef:32:f9:b8:a7:3c:cb:f5:7c:56:c2:87:6c: 39:8e:c1:65:7f:b8:de:67:89:c7:1e:8f:ba:f0:f1:04:57:15: 33:c8:1e:41:dd:5f:4c:5a:7f:27:d8:04:58:5d:ec:44:77:e1: db:7d:72:94:e1:5d:66:22:77:10:15:cd:cc:0d:d8:a3:37:a0: 64:d9:cd:5f:6b:db:bb:82:dd:bb:4b:40:6d:3d:1e:75:f1:6d: 36:06:1a:c1:c8:13:bf:06:cd:af:4f:83:1e:a4:e9:f2:de:11: 72:61:d1:5f:ca:0c:f5:f7:2b:87:6f:59:c0:58:ce:2b:3d:15: 22:f4:2c:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9g0lBv4VdGsW/iBDW8fmAZaIpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNTA4MjMwMDM2MDhaFw0yNTA4MjYwNDI4MDhaMDMxMTAvBgNV BAMTKDMwQjRGQkE4OEMzNTcxOTYxOURGMUI1Q0ZGRkVGMTNGMUNGMDlERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsISZmTV9HEWeuGVfXb+FWkDYI mfqx5kpalaHmlbqtrgR9d30BS2CzeU3+BJD6zEmth3qdIh799PZQTCXJ1obxZdzH pRYOpDGiq/0ZtRbIDGKUlKitLdFM8Px9WDQ+b4rasR0FXfUJQiMzgC9jRq6PSUIT RoEIWn7wlkwffzGMNgAIHjRQmLtFA3/DiRgrki9ob8s7ZreV9X90vvHxvwEaOPaM ZNkiwr9UcPG+FBzhUBATS1yWw+c5Y2Sq7+vhBaRfCrpFYoci1iTkQnO5ByqPTJqq LH9pRCOSBKuz4yM0hQVK2P75h+N1C6jKpU94Smf4SE0sZB1QSVOnRjLHK8znAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMLT7qIw1cZYZ3xtc//7xPxzwneowHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYcjA3nEEEOVTwRg6OWY1EnTG8+9/I2qMu+ r0l+OpWj3IY2TPH5idKumNsf+14yFbCUDnkDoDCGb9kb8y2G+4hYs9igc8k/5nQy zfWujjR8D0JlKYmPU+DlYIg3/EPrNye915Xz2kZrPbvviz0tfejgYYK8uSA4DLLG LTMTi1aJJgCO7zL5uKc8y/V8VsKHbDmOwWV/uN5niccej7rw8QRXFTPIHkHdX0xa fyfYBFhd7ER34dt9cpThXWYidxAVzcwN2KM3oGTZzV9r27uC3btLQG09HnXxbTYG GsHIE78Gza9Pgx6k6fLeEXJh0V/KDPX3K4dvWcBYzis9FSL0LCU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:14 2025 by rpki-client