$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json) Hash identifier: XCToggRmObXVdvpmsjWwfMCU7PF2mp+m2YkIbpk6DGM= Subject key identifier: 15:75:60:C0:62:6D:6F:41:9D:15:5F:2C:97:F7:E9:FD:8E:6B:6B:96 Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Certificate serial: 5BAED5946F953517C8DD868DD00FE5E8EF79C230 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft Manifest number: 0412 Signing time: Thu 08 May 2025 16:50:35 +0000 Manifest this update: Thu 08 May 2025 16:45:35 +0000 Manifest next update: Sun 11 May 2025 20:07:35 +0000 Files and hashes: 1: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: hvScsFU3gyKuZF4ZLSU+Pil08L9tuR9DBWDpcMUJ6M8=) 2: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: M7rTu+x3u6qUQ5YcgymxtkFlr+zcSjgyy/tqc60RCYc=) 3: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: rEDAq6fLqtxUEpOWUrd7XQNC5GBIV8qbLX6JfZEN2e8=) 4: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: FPq/J2wRAjS89GyiaYlBp0d9JuDryTtq4ncVN9be0LA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ae:d5:94:6f:95:35:17:c8:dd:86:8d:d0:0f:e5:e8:ef:79:c2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Validity Not Before: May 8 16:45:35 2025 GMT Not After : May 11 20:07:35 2025 GMT Subject: CN=157560C0626D6F419D155F2C97F7E9FD8E6B6B96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:c7:34:4e:c5:c7:6d:b6:18:b2:9a:59:34: 50:24:60:50:4f:8a:60:3d:ad:2b:8a:1f:29:84:c1: bd:05:c9:71:d9:c8:60:28:9f:fa:31:8b:ae:14:15: fc:cc:7a:62:57:c5:97:16:36:62:45:63:b7:51:58: af:7c:47:52:44:16:a3:01:b2:18:17:2c:c9:db:1c: d9:4c:e4:f3:d2:a2:0a:05:ae:a7:a9:bc:90:3d:65: 07:f8:c8:36:cc:bf:03:69:8d:ed:4d:93:18:ed:11: f1:3a:93:c7:f4:ce:96:ad:bb:d3:7e:81:87:20:64: c6:58:70:f2:9d:64:74:f1:d1:e6:be:af:b0:16:a0: 7b:85:6b:56:22:7d:42:3a:84:7b:02:11:64:ef:67: 32:da:11:81:66:ca:68:7b:b1:a7:55:04:f7:53:6c: 59:8e:4c:91:60:7c:4e:a4:d5:e3:57:a9:61:91:27: a1:9a:ff:39:ad:d1:35:3e:86:1f:73:85:f8:a7:05: c2:a0:bf:ab:3e:9f:91:2b:ed:9d:0d:91:0e:03:43: ea:69:87:9d:c1:49:bc:4b:56:c5:f8:71:b2:b3:a7: 19:e1:b6:73:57:46:01:a9:00:d8:29:10:96:fa:db: 89:1e:28:d0:59:f8:6f:10:70:e4:11:fc:c8:e3:ba: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:75:60:C0:62:6D:6F:41:9D:15:5F:2C:97:F7:E9:FD:8E:6B:6B:96 X509v3 Authority Key Identifier: keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:8c:05:b0:80:dd:5a:94:c9:cc:45:0c:8f:45:f2:bc:d5:76: 78:c3:c4:f4:39:98:6e:3e:a7:b3:b0:06:16:d2:d9:4b:cd:04: 3c:b8:2a:f3:a6:3d:d6:9d:7d:6d:8d:82:32:b9:50:a9:ba:c9: bd:35:f0:22:d4:7a:7c:7b:94:66:14:2a:1b:1a:8a:b9:d6:73: 89:8e:cf:48:d9:c3:59:14:45:30:af:73:6f:79:bf:88:30:dc: 3a:d5:8c:9b:8e:05:a6:0e:44:91:e9:9c:80:6a:f4:9e:6d:65: 83:c0:7a:32:4f:9a:1a:df:9d:98:d2:aa:72:da:01:b3:05:fb: f8:2c:af:2d:49:42:d8:fd:e8:67:f1:d2:13:f2:21:a3:41:29: 5c:90:d0:ce:e7:13:32:92:0a:b5:7d:4a:42:dd:a9:20:67:4e: 95:5d:86:b8:09:0c:b0:54:08:6a:5a:43:7e:3f:34:8d:93:5c: 20:03:37:0d:a0:ff:82:63:32:4f:6d:7f:ed:a3:91:c3:1d:ef: e5:bf:f3:41:09:fa:b9:d5:d0:83:07:e6:33:01:f9:71:43:cb: ee:2e:55:a3:66:75:c2:1f:d8:6f:3e:41:e1:92:56:24:54:07: 36:6f:79:1f:60:92:e7:f8:f8:f5:ac:64:7e:b8:ba:19:d3:67: a3:35:78:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW67VlG+VNRfI3YaN0A/l6O95wjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1 Qzc3RTJDMTAeFw0yNTA1MDgxNjQ1MzVaFw0yNTA1MTEyMDA3MzVaMDMxMTAvBgNV BAMTKDE1NzU2MEMwNjI2RDZGNDE5RDE1NUYyQzk3RjdFOUZEOEU2QjZCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75Mc0TsXHbbYYsppZNFAkYFBP imA9rSuKHymEwb0FyXHZyGAon/oxi64UFfzMemJXxZcWNmJFY7dRWK98R1JEFqMB shgXLMnbHNlM5PPSogoFrqepvJA9ZQf4yDbMvwNpje1NkxjtEfE6k8f0zpatu9N+ gYcgZMZYcPKdZHTx0ea+r7AWoHuFa1YifUI6hHsCEWTvZzLaEYFmymh7sadVBPdT bFmOTJFgfE6k1eNXqWGRJ6Ga/zmt0TU+hh9zhfinBcKgv6s+n5Er7Z0NkQ4DQ+pp h53BSbxLVsX4cbKzpxnhtnNXRgGpANgpEJb624keKNBZ+G8QcOQR/MjjupDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFXVgwGJtb0GdFV8sl/fp/Y5ra5YwHwYDVR0j BBgwFoAUcV3G3qgP5dif3GgsGcezD1x34sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMC83MTVEQzZERUE4 MEZFNUQ4OUZEQzY4MkMxOUM3QjMwRjVDNzdFMkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1Qzc3 RTJDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0Iz MEY1Qzc3RTJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKMBbCA3VqUycxFDI9F8rzVdnjDxPQ5mG4+ p7OwBhbS2UvNBDy4KvOmPdadfW2NgjK5UKm6yb018CLUenx7lGYUKhsairnWc4mO z0jZw1kURTCvc295v4gw3DrVjJuOBaYORJHpnIBq9J5tZYPAejJPmhrfnZjSqnLa AbMF+/gsry1JQtj96Gfx0hPyIaNBKVyQ0M7nEzKSCrV9SkLdqSBnTpVdhrgJDLBU CGpaQ34/NI2TXCADNw2g/4JjMk9tf+2jkcMd7+W/80EJ+rnV0IMH5jMB+XFDy+4u VaNmdcIf2G8+QeGSViRUBzZveR9gkuf4+PWsZH64uhnTZ6M1eFg= -----END CERTIFICATE-----Generated at Fri May 9 11:56:06 2025 by rpki-client