$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json) Hash identifier: hGZEVOyWb7sdX5Tcz3JQeH8zNVdrK+LIfZLjX4/J+xo= Subject key identifier: 0C:2F:71:2B:B9:E7:46:78:24:0A:59:0B:67:01:88:FE:A3:9D:AE:AC Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Certificate serial: 678425304CF7C04648E8EFDA2616ABF93FD3D6C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft Manifest number: 0428 Signing time: Sat 28 Jun 2025 02:40:36 +0000 Manifest this update: Sat 28 Jun 2025 02:35:36 +0000 Manifest next update: Tue 01 Jul 2025 13:34:36 +0000 Files and hashes: 1: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: hvScsFU3gyKuZF4ZLSU+Pil08L9tuR9DBWDpcMUJ6M8=) 2: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: M7rTu+x3u6qUQ5YcgymxtkFlr+zcSjgyy/tqc60RCYc=) 3: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: OxAVEveeGp3fjYyarjRll3hCamBkF4CXVAGSm9Ag6aM=) 4: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: FPq/J2wRAjS89GyiaYlBp0d9JuDryTtq4ncVN9be0LA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 13:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:84:25:30:4c:f7:c0:46:48:e8:ef:da:26:16:ab:f9:3f:d3:d6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Validity Not Before: Jun 28 02:35:36 2025 GMT Not After : Jul 1 13:34:36 2025 GMT Subject: CN=0C2F712BB9E74678240A590B670188FEA39DAEAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:94:2d:82:3e:cb:1a:c5:bf:de:87:c2:33: ce:7f:18:fe:72:dd:40:d3:69:b6:ee:df:e5:bd:5e: 0d:ae:f5:24:37:cf:0a:c8:b1:c3:f8:05:35:cd:94: 46:08:ef:ac:17:a1:7e:cf:29:66:d1:0f:94:40:95: 21:66:54:21:e7:c0:13:92:66:f7:28:03:5e:fe:e8: 23:f6:ca:50:b6:b5:9b:dc:a2:12:4c:74:83:09:56: 46:9d:ac:3a:78:c1:7a:0e:43:48:a6:f5:59:bf:3d: 7a:60:10:3e:43:d9:76:35:f3:f2:ee:10:6f:a5:e1: 2b:4f:5d:a2:1d:51:0d:26:97:2b:d2:cc:2b:fc:b3: 26:d7:4b:ad:d2:29:31:b3:c2:db:cc:1e:9d:fc:27: a0:89:f7:9e:88:e2:f0:58:a2:ab:12:e5:18:33:37: 39:c0:1b:3f:ef:c2:fc:9a:5f:fe:08:f3:a9:78:0a: eb:94:83:7c:4c:61:da:ee:3d:24:73:ee:d2:43:be: 45:2a:dd:dd:da:da:ab:b7:5b:1e:b6:d6:64:67:e1: fe:d9:fc:3c:d6:a0:3b:b5:69:0c:f7:89:72:cc:20: e5:33:37:bb:45:84:49:65:e8:c7:6f:e1:38:63:e6: b2:65:08:c2:43:ca:d0:d2:8f:95:41:25:67:e2:c0: e1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2F:71:2B:B9:E7:46:78:24:0A:59:0B:67:01:88:FE:A3:9D:AE:AC X509v3 Authority Key Identifier: keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:68:56:d3:b7:e5:6f:7a:1e:1e:7c:2a:5e:b6:75:6a:78:70: 62:50:c0:be:7e:f3:93:74:4f:24:26:0d:1f:77:d5:9d:91:bf: 14:ea:b2:5a:a5:97:6e:62:03:09:67:8b:ec:8d:0f:c2:99:f9: a8:2e:0d:02:7c:24:ef:a6:a0:25:b0:b1:92:aa:60:77:cd:aa: c3:b4:49:bc:fa:19:d9:9f:94:33:f8:cb:b1:46:1e:c1:31:64: 66:6e:f4:22:17:87:c3:09:74:f4:be:e3:60:f2:ed:08:cc:a1: 2a:d2:2b:28:c1:f6:40:e3:25:05:51:8c:d4:1e:75:aa:03:be: ca:06:6d:31:77:02:63:0c:bd:86:24:16:96:ba:c4:61:fa:b5: 12:ac:f3:3e:de:4d:ac:7d:16:4b:58:34:81:27:d2:a4:55:d1: 21:d0:72:31:e1:04:68:a2:a8:42:93:89:93:99:49:a3:fd:8c: 1a:1f:81:cf:92:41:2e:80:0c:9c:11:91:3f:4f:b7:5d:cc:cc: a7:81:e7:1b:df:44:93:15:e7:10:92:93:4c:a4:c0:48:3f:cc: eb:26:4f:f1:2e:8e:21:2e:d7:b2:5a:04:31:fa:8d:12:27:1a: 2f:f3:b2:e0:43:19:b7:79:fd:29:2d:f9:e3:40:cb:fe:4f:ec: b8:3a:e4:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4QlMEz3wEZI6O/aJhar+T/T1skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1 Qzc3RTJDMTAeFw0yNTA2MjgwMjM1MzZaFw0yNTA3MDExMzM0MzZaMDMxMTAvBgNV BAMTKDBDMkY3MTJCQjlFNzQ2NzgyNDBBNTkwQjY3MDE4OEZFQTM5REFFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPcJQtgj7LGsW/3ofCM85/GP5y 3UDTabbu3+W9Xg2u9SQ3zwrIscP4BTXNlEYI76wXoX7PKWbRD5RAlSFmVCHnwBOS ZvcoA17+6CP2ylC2tZvcohJMdIMJVkadrDp4wXoOQ0im9Vm/PXpgED5D2XY18/Lu EG+l4StPXaIdUQ0mlyvSzCv8sybXS63SKTGzwtvMHp38J6CJ956I4vBYoqsS5Rgz NznAGz/vwvyaX/4I86l4CuuUg3xMYdruPSRz7tJDvkUq3d3a2qu3Wx621mRn4f7Z /DzWoDu1aQz3iXLMIOUzN7tFhEll6Mdv4Thj5rJlCMJDytDSj5VBJWfiwOHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDC9xK7nnRngkClkLZwGI/qOdrqwwHwYDVR0j BBgwFoAUcV3G3qgP5dif3GgsGcezD1x34sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMC83MTVEQzZERUE4 MEZFNUQ4OUZEQzY4MkMxOUM3QjMwRjVDNzdFMkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1Qzc3 RTJDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0Iz MEY1Qzc3RTJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9oVtO35W96Hh58Kl62dWp4cGJQwL5+85N0 TyQmDR931Z2RvxTqslqll25iAwlni+yND8KZ+aguDQJ8JO+moCWwsZKqYHfNqsO0 Sbz6GdmflDP4y7FGHsExZGZu9CIXh8MJdPS+42Dy7QjMoSrSKyjB9kDjJQVRjNQe daoDvsoGbTF3AmMMvYYkFpa6xGH6tRKs8z7eTax9FktYNIEn0qRV0SHQcjHhBGii qEKTiZOZSaP9jBofgc+SQS6ADJwRkT9Pt13MzKeB5xvfRJMV5xCSk0ykwEg/zOsm T/EujiEu17JaBDH6jRInGi/zsuBDGbd5/Skt+eNAy/5P7Lg65BA= -----END CERTIFICATE-----Generated at Mon Jun 30 08:06:38 2025 by rpki-client