$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: b7gBLJabkUnO4QF6AfdYhxFAmS6JmiZ5MJBlLDpbhig= Subject key identifier: 27:6E:D2:B1:6B:7F:11:8E:23:0C:1F:04:30:0C:9C:43:E6:E8:22:0F Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 4C6AE17B2E0E43E1CB4ED14AC54FBD0A05F2E099 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 016B Signing time: Sun 29 Jun 2025 08:10:54 +0000 Manifest this update: Sun 29 Jun 2025 08:05:54 +0000 Manifest next update: Wed 02 Jul 2025 15:33:54 +0000 Files and hashes: 1: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: 907swenfI16Aft6qzAi5dpyEs6BxfNg+Ndea03NJnvc=) 2: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: qGxrnVoi/TVhaADL6HZ+ZHEwiQ5EREjpZMX6e/3kHAs=) 3: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: paFKt6o0V+erS5HMhIrJfWgyUpdeSz8l0mwrNctd67E=) 4: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: H3EtcLEE0IGvam9Auuq3QSB3PLABMBbWzZsAbxF8fnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 15:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6a:e1:7b:2e:0e:43:e1:cb:4e:d1:4a:c5:4f:bd:0a:05:f2:e0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Jun 29 08:05:54 2025 GMT Not After : Jul 2 15:33:54 2025 GMT Subject: CN=276ED2B16B7F118E230C1F04300C9C43E6E8220F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:00:b7:31:fc:5d:d6:a4:6a:3e:0e:15:21:d5: 5f:08:f6:9e:21:8b:08:70:bd:a0:dd:20:22:1f:88: da:54:dc:95:50:00:c1:ac:0b:40:b6:27:72:93:83: f2:b7:38:ed:17:80:47:2d:e4:1b:3c:3c:6a:62:1d: f4:0e:3f:07:a7:55:d2:83:00:67:50:5b:9f:8b:22: da:9b:aa:2c:20:ef:13:8d:eb:07:e6:10:3b:81:31: 01:c9:75:fe:e6:5f:bf:e2:71:c2:0f:e3:09:15:c3: 75:db:e2:ad:95:05:f8:3a:80:33:37:22:88:2d:59: 8c:f7:91:ca:22:36:0f:e6:b3:b8:61:0e:01:3c:cb: a0:62:e4:e1:97:4d:bc:d2:9d:e3:d8:13:39:85:67: e1:5c:9e:0a:aa:c7:d6:dc:d0:29:73:4e:c0:25:b0: 3d:65:97:35:f8:ae:68:43:12:85:18:97:3e:9b:e6: 47:f8:92:ed:51:e7:1d:c5:b4:fe:1b:42:f1:0e:24: 07:20:f3:1c:3f:23:a4:7d:bd:fa:2e:0e:b1:e8:b2: 19:e1:ea:44:01:a0:e6:e6:8c:0d:19:30:68:34:24: 23:63:d4:07:67:0c:be:f1:1e:cb:b0:d9:79:7b:34: 14:a2:67:50:5c:f8:67:c7:96:2d:bc:b2:32:f0:a0: 9b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6E:D2:B1:6B:7F:11:8E:23:0C:1F:04:30:0C:9C:43:E6:E8:22:0F X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6e:25:14:1f:ac:de:32:d4:48:b4:e5:e2:63:01:4e:57:2e: 28:37:4f:b3:0c:5a:e6:52:d5:d6:c7:a9:aa:5c:dd:a7:ec:ee: 18:11:d1:b5:d4:f1:5f:58:78:27:d3:c1:99:7e:d5:c6:c2:18: 47:c1:39:57:8f:b1:16:69:86:50:78:31:f5:1e:b0:44:cf:d1: d1:c3:58:5e:58:8d:39:24:c5:38:27:53:a8:5b:94:50:7d:69: 5f:97:07:57:dc:89:53:13:94:fd:f6:d0:d1:40:df:95:ba:09: b0:15:01:a6:ea:3f:4d:65:f4:ea:d6:d5:81:44:4e:12:75:72: d8:c5:fb:c5:78:3d:5f:5c:8a:ac:d4:af:2b:a7:53:1a:f3:44: 0c:ce:8f:15:55:3c:3a:a2:6b:3b:2d:86:6f:8c:7f:f5:df:35: e3:b8:71:22:9b:43:43:2e:2a:10:f3:75:1c:12:df:57:eb:08: 89:9c:a7:49:a1:b6:83:8c:da:74:d5:98:4e:24:d5:3f:58:46: 03:ef:d0:59:23:8b:32:66:34:dd:7e:a6:c2:a9:7f:fc:cc:14: 0d:66:64:72:3e:49:05:73:42:f5:41:81:ba:92:89:f8:5f:5d: e7:43:fc:b1:6b:7b:a5:cb:6e:fe:2f:46:4e:0a:fd:9c:dc:6b: fd:00:52:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGrhey4OQ+HLTtFKxU+9CgXy4JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNTA2MjkwODA1NTRaFw0yNTA3MDIxNTMzNTRaMDMxMTAvBgNV BAMTKDI3NkVEMkIxNkI3RjExOEUyMzBDMUYwNDMwMEM5QzQzRTZFODIyMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWALcx/F3WpGo+DhUh1V8I9p4h iwhwvaDdICIfiNpU3JVQAMGsC0C2J3KTg/K3OO0XgEct5Bs8PGpiHfQOPwenVdKD AGdQW5+LItqbqiwg7xON6wfmEDuBMQHJdf7mX7/iccIP4wkVw3Xb4q2VBfg6gDM3 IogtWYz3kcoiNg/ms7hhDgE8y6Bi5OGXTbzSnePYEzmFZ+Fcngqqx9bc0ClzTsAl sD1llzX4rmhDEoUYlz6b5kf4ku1R5x3FtP4bQvEOJAcg8xw/I6R9vfouDrHoshnh 6kQBoObmjA0ZMGg0JCNj1AdnDL7xHsuw2Xl7NBSiZ1Bc+GfHli28sjLwoJvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ27SsWt/EY4jDB8EMAycQ+boIg8wHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1uJRQfrN4y1Ei05eJjAU5XLig3T7MMWuZS 1dbHqapc3afs7hgR0bXU8V9YeCfTwZl+1cbCGEfBOVePsRZphlB4MfUesETP0dHD WF5YjTkkxTgnU6hblFB9aV+XB1fciVMTlP320NFA35W6CbAVAabqP01l9OrW1YFE ThJ1ctjF+8V4PV9ciqzUryunUxrzRAzOjxVVPDqiazsthm+Mf/XfNeO4cSKbQ0Mu KhDzdRwS31frCImcp0mhtoOM2nTVmE4k1T9YRgPv0FkjizJmNN1+psKpf/zMFA1m ZHI+SQVzQvVBgbqSifhfXedD/LFre6XLbv4vRk4K/Zzca/0AUn8= -----END CERTIFICATE-----Generated at Tue Jul 1 09:57:20 2025 by rpki-client