$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: TIhijOzH+Yz6LaLX2aNDgwZ17IuRv3+zbUFJgnn2g/0= Subject key identifier: C5:00:E0:CC:12:C7:87:24:F8:6D:7F:ED:AC:7A:34:55:6B:8C:25:F9 Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: 49318B58B0C781EAAD982782C416200395A73577 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 04CE Signing time: Sun 29 Jun 2025 23:51:07 +0000 Manifest this update: Sun 29 Jun 2025 23:46:06 +0000 Manifest next update: Thu 03 Jul 2025 07:24:06 +0000 Files and hashes: 1: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: cS4xFcJiF1zKuj0BZNhYothbCLKeaVj2VbTjqbuS5CU=) 2: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: nJKtcTAtq66fxY2zGenbC7wylNU9ZkvgOxxV8EMSgZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 07:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:31:8b:58:b0:c7:81:ea:ad:98:27:82:c4:16:20:03:95:a7:35:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: Jun 29 23:46:06 2025 GMT Not After : Jul 3 07:24:06 2025 GMT Subject: CN=C500E0CC12C78724F86D7FEDAC7A34556B8C25F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d6:d9:52:e7:20:89:b0:a6:57:d8:f1:31:29: 10:05:67:99:ce:96:b1:82:0a:39:2b:5a:58:ca:c6: 86:08:33:fd:09:76:a1:7c:59:f7:38:19:e0:f6:4b: 6d:43:b7:e6:ca:35:f1:a8:d1:19:2f:1b:c8:7e:b2: a2:03:65:bd:5c:24:2f:f8:fe:90:02:ba:d5:b0:fb: ef:f5:0b:4f:42:91:4f:e3:58:27:f7:e7:bd:98:f5: 17:3a:71:1a:c9:20:5a:bf:15:a0:d8:cf:06:23:63: 6c:1d:5e:0d:a6:b2:02:69:db:d1:f7:24:ac:82:83: c7:a3:2c:55:29:26:9e:15:1d:aa:b6:35:2d:4d:f0: 07:79:08:a6:a1:01:e1:70:e1:c3:69:31:7c:a2:80: 3c:c5:8f:29:38:f3:92:e8:a1:f5:8e:a3:9f:43:3d: 22:8e:e3:3c:b7:1e:54:90:59:2d:55:be:db:23:83: 49:5c:41:a9:87:1a:f4:63:df:8f:13:1f:c2:3d:fc: 14:1e:af:5b:c0:b0:8b:5e:5a:cc:6f:84:ac:5e:fe: 8e:03:69:24:19:f8:9b:6b:0d:37:0a:ff:87:36:eb: a6:f3:c3:81:4e:d7:6e:1f:ad:c2:14:cd:19:08:08: ac:20:23:5d:fd:fb:35:62:29:63:99:a9:34:cf:f9: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:00:E0:CC:12:C7:87:24:F8:6D:7F:ED:AC:7A:34:55:6B:8C:25:F9 X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d1:7e:bf:d5:1a:a5:26:e0:15:b4:da:61:6a:38:36:a6:e9: 99:2c:85:ea:9f:e2:83:d9:10:66:fd:92:f4:da:37:9b:4b:00: d7:e3:30:29:1d:2b:f8:5d:0c:82:51:c0:28:54:d9:5c:2f:e5: 40:96:41:79:e6:2f:66:58:1b:3d:17:c4:3d:e8:81:d3:80:9f: 7b:26:9c:cc:55:24:2a:70:b1:cf:c7:b0:4a:5c:9b:c6:75:d5: 2d:01:6e:91:9a:12:0d:fb:f0:7a:f6:72:7e:61:58:23:d0:e5: 7a:b1:a7:ad:da:ad:d0:f5:a9:65:53:9c:28:67:5a:92:43:75: ec:f0:a1:1a:cb:94:0f:4e:a8:4c:11:1b:34:85:cb:00:2b:f8: 24:c1:c7:a3:7a:94:07:5a:54:79:fd:96:47:44:75:67:ff:7a: e7:b1:34:a8:77:b4:fb:f8:5f:22:cf:7b:ff:b1:2b:d0:23:94: cf:31:b5:f2:e0:e7:a1:d9:01:e9:39:19:77:5a:91:f0:79:1f: 53:1c:57:29:9e:09:d7:9a:c6:89:25:0f:9b:81:0c:5d:96:4d: 7f:87:b5:50:ec:93:28:a2:34:7a:fa:bb:14:c9:68:69:1a:09: bf:e6:56:84:8b:a8:54:a3:c7:e4:f2:c4:b1:27:f7:c6:82:da: 3c:a2:7d:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTGLWLDHgeqtmCeCxBYgA5WnNXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNTA2MjkyMzQ2MDZaFw0yNTA3MDMwNzI0MDZaMDMxMTAvBgNV BAMTKEM1MDBFMENDMTJDNzg3MjRGODZEN0ZFREFDN0EzNDU1NkI4QzI1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO1tlS5yCJsKZX2PExKRAFZ5nO lrGCCjkrWljKxoYIM/0JdqF8Wfc4GeD2S21Dt+bKNfGo0RkvG8h+sqIDZb1cJC/4 /pACutWw++/1C09CkU/jWCf3572Y9Rc6cRrJIFq/FaDYzwYjY2wdXg2msgJp29H3 JKyCg8ejLFUpJp4VHaq2NS1N8Ad5CKahAeFw4cNpMXyigDzFjyk485LoofWOo59D PSKO4zy3HlSQWS1Vvtsjg0lcQamHGvRj348TH8I9/BQer1vAsIteWsxvhKxe/o4D aSQZ+JtrDTcK/4c266bzw4FO124frcIUzRkICKwgI139+zViKWOZqTTP+aJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxQDgzBLHhyT4bX/trHo0VWuMJfkwHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArRfr/VGqUm4BW02mFqODam6Zksheqf4oPZ EGb9kvTaN5tLANfjMCkdK/hdDIJRwChU2Vwv5UCWQXnmL2ZYGz0XxD3ogdOAn3sm nMxVJCpwsc/HsEpcm8Z11S0BbpGaEg378Hr2cn5hWCPQ5Xqxp63ardD1qWVTnChn WpJDdezwoRrLlA9OqEwRGzSFywAr+CTBx6N6lAdaVHn9lkdEdWf/euexNKh3tPv4 XyLPe/+xK9AjlM8xtfLg56HZAek5GXdakfB5H1McVymeCdeaxoklD5uBDF2WTX+H tVDskyiiNHr6uxTJaGkaCb/mVoSLqFSjx+TyxLEn98aC2jyifUE= -----END CERTIFICATE-----Generated at Mon Jun 30 10:46:10 2025 by rpki-client