$ rpki-client -vvf repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft File: 4515472806DD01B59715410103D51C05E4F28B96.mft (raw, json) Hash identifier: rCXlMb3zlEd7S1RaMbIwy++4Y7S0ysg/GcLNyj08KtM= Subject key identifier: 8D:FD:70:AA:7C:41:3D:55:AB:74:72:8B:54:80:A8:F7:CF:5E:2C:E4 Authority key identifier: 45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96 Certificate issuer: /CN=4515472806DD01B59715410103D51C05E4F28B96 Certificate serial: 4BE10A8C58FD1F758744A2836786C235B8D0F037 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft Manifest number: 01FC Signing time: Tue 13 May 2025 17:01:52 +0000 Manifest this update: Tue 13 May 2025 16:56:52 +0000 Manifest next update: Fri 16 May 2025 22:18:52 +0000 Files and hashes: 1: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: HBcmtBf124LaJLrEpyA0+OcG5c4rLC3yDarVnj9n8nQ=) 2: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: vRlgOXUVxZU3L35iv5K0e1tNJbS3jxz2tstDvvGIpOA=) 3: 4515472806DD01B59715410103D51C05E4F28B96.crl (hash: dYtnXNg+P4i5g4Q8VU+LJsT+QJvUu9jBnsY67hmGpiE=) 4: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: Tu/lmXG1SR10FA6Mlg+q8BJ0wAM8BZdiNc8TMtD2S9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 22:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e1:0a:8c:58:fd:1f:75:87:44:a2:83:67:86:c2:35:b8:d0:f0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4515472806DD01B59715410103D51C05E4F28B96 Validity Not Before: May 13 16:56:52 2025 GMT Not After : May 16 22:18:52 2025 GMT Subject: CN=8DFD70AA7C413D55AB74728B5480A8F7CF5E2CE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:71:a7:fb:61:5a:a2:7c:e7:9f:c6:1e:d6: 57:16:e0:e8:ab:1b:a0:9e:7e:03:5d:d0:e1:2e:6e: 86:a9:73:2f:3c:db:2b:a4:2a:c4:bd:51:da:39:a0: fc:27:59:ff:ba:74:04:61:30:1a:5c:77:6b:e3:d8: 3f:7b:ae:ce:0e:55:4e:3a:2e:bf:1d:bf:b2:14:44: 9b:21:1f:85:b1:ad:2c:f2:ef:be:f0:35:8b:d1:20: 21:5f:15:fa:01:5c:14:33:08:d8:09:b3:eb:59:eb: 18:b8:11:dd:e0:05:38:c0:8f:bd:da:a1:db:ed:a0: 9b:e6:17:9e:6f:81:fc:e2:31:46:d8:4a:bc:c5:57: 28:ec:5e:6a:71:e5:07:66:72:a0:a7:61:8a:9c:48: b4:7c:f2:53:9f:59:7e:47:64:2c:f8:c1:88:ad:76: c7:2a:2f:f9:95:bd:41:dd:8b:af:97:02:e2:6a:3f: 8f:3e:51:a9:47:17:ff:ea:31:fe:16:95:3f:2f:3c: 3f:10:13:b4:29:f4:c9:bb:3c:d1:89:b7:4f:4a:32: 7d:04:54:51:8c:bc:de:0b:8b:9e:de:81:f4:a8:91: 04:5f:53:42:30:e5:b3:81:34:26:f5:c0:af:bc:1a: 09:ab:a5:38:4b:55:24:31:fe:b5:c1:da:2b:e3:43: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FD:70:AA:7C:41:3D:55:AB:74:72:8B:54:80:A8:F7:CF:5E:2C:E4 X509v3 Authority Key Identifier: keyid:45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6a:04:52:ea:46:5e:ed:b1:da:f3:a5:9b:ec:33:e1:9d:d9: 9e:d2:51:ed:86:9a:ba:cd:85:60:df:ef:81:f9:59:c6:90:14: 15:a1:32:cd:2c:4d:fe:47:92:a3:a9:5b:4f:6c:b6:80:63:96: 08:69:d0:b4:6e:42:cc:94:9a:e7:be:25:b7:bb:20:f6:a4:d0: a4:5a:00:3b:98:d4:24:dc:e7:0b:3c:0e:15:74:71:00:0b:e2: fe:17:67:a8:ed:09:d2:bb:bc:ef:b1:7c:1b:9c:8a:1e:61:c7: 1e:77:3f:82:a7:1e:60:6d:c4:f5:f9:bc:3a:82:1a:6f:70:d1: f4:3b:fa:b5:f5:56:f4:79:3c:39:bc:bb:6c:71:cd:ad:33:13: e2:c4:49:cc:85:c4:93:4c:17:bb:ee:34:b3:91:77:f7:c0:26: 5e:a5:6a:5f:f8:96:83:e5:b1:fe:f8:cf:c7:50:16:70:af:a9: 37:03:1e:16:2a:b1:47:fa:39:3a:60:6d:f8:b3:49:ab:89:d9: 45:54:89:4f:68:85:06:c7:62:57:df:6f:00:e0:d6:1f:e7:e1: 2b:5e:6f:a7:3c:c9:df:b0:5a:c0:6c:ef:01:e9:87:57:38:4f: 87:70:27:36:53:4a:09:6c:16:1a:2a:93:ae:9d:f9:40:5d:4f: b6:fb:f3:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+EKjFj9H3WHRKKDZ4bCNbjQ8DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNTQ3MjgwNkREMDFCNTk3MTU0MTAxMDNENTFDMDVF NEYyOEI5NjAeFw0yNTA1MTMxNjU2NTJaFw0yNTA1MTYyMjE4NTJaMDMxMTAvBgNV BAMTKDhERkQ3MEFBN0M0MTNENTVBQjc0NzI4QjU0ODBBOEY3Q0Y1RTJDRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3HGn+2Faonznn8Ye1lcW4Oir G6CefgNd0OEuboapcy882yukKsS9Udo5oPwnWf+6dARhMBpcd2vj2D97rs4OVU46 Lr8dv7IURJshH4WxrSzy777wNYvRICFfFfoBXBQzCNgJs+tZ6xi4Ed3gBTjAj73a odvtoJvmF55vgfziMUbYSrzFVyjsXmpx5QdmcqCnYYqcSLR88lOfWX5HZCz4wYit dscqL/mVvUHdi6+XAuJqP48+UalHF//qMf4WlT8vPD8QE7Qp9Mm7PNGJt09KMn0E VFGMvN4Li57egfSokQRfU0Iw5bOBNCb1wK+8GgmrpThLVSQx/rXB2ivjQ58ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjf1wqnxBPVWrdHKLVICo989eLOQwHwYDVR0j BBgwFoAURRVHKAbdAbWXFUEBA9UcBeTyi5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGYxMzcyYy00M2E2LTRmZGEtYjUwZS1kMDFlYjQyYzY4OWYvMC80NTE1NDcyODA2 REQwMUI1OTcxNTQxMDEwM0Q1MUMwNUU0RjI4Qjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNTQ3MjgwNkREMDFCNTk3MTU0MTAxMDNENTFDMDVFNEYy OEI5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRmMTM3MmMtNDNhNi00ZmRhLWI1 MGUtZDAxZWI0MmM2ODlmLzAvNDUxNTQ3MjgwNkREMDFCNTk3MTU0MTAxMDNENTFD MDVFNEYyOEI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJqBFLqRl7tsdrzpZvsM+Gd2Z7SUe2GmrrN hWDf74H5WcaQFBWhMs0sTf5HkqOpW09stoBjlghp0LRuQsyUmue+Jbe7IPak0KRa ADuY1CTc5ws8DhV0cQAL4v4XZ6jtCdK7vO+xfBucih5hxx53P4KnHmBtxPX5vDqC Gm9w0fQ7+rX1VvR5PDm8u2xxza0zE+LEScyFxJNMF7vuNLORd/fAJl6lal/4loPl sf74z8dQFnCvqTcDHhYqsUf6OTpgbfizSauJ2UVUiU9ohQbHYlffbwDg1h/n4Ste b6c8yd+wWsBs7wHph1c4T4dwJzZTSglsFhoqk66d+UBdT7b782A= -----END CERTIFICATE-----Generated at Wed May 14 02:36:30 2025 by rpki-client