$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft File: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft (raw, json) Hash identifier: tgQ7w0FEeS1KIjg1RAslOdDBlqAGPF30NAHuhLL/Oqw= Subject key identifier: B7:AC:C4:35:27:70:F3:66:49:45:7E:3F:5F:7F:7D:FC:3F:F6:AE:94 Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Certificate serial: 31C5ECEFB67042456BB53236F255D8EC4B80E013 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft Manifest number: 015C Signing time: Tue 06 May 2025 09:41:09 +0000 Manifest this update: Tue 06 May 2025 09:36:09 +0000 Manifest next update: Fri 09 May 2025 13:19:09 +0000 Files and hashes: 1: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: j6euL0Vp2FBJXahOIaUhC8x72rtC7wYxKwq9D/ZeZp8=) 2: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl (hash: onNUCu6PVKNVFi47gwvUk0smQCjNgylJmVjUqiWCE0w=) 3: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: sALgAcrv6GTHzHXKVXP7PsSP+NYmqiEn9G9dF74k/j0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 13:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c5:ec:ef:b6:70:42:45:6b:b5:32:36:f2:55:d8:ec:4b:80:e0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Validity Not Before: May 6 09:36:09 2025 GMT Not After : May 9 13:19:09 2025 GMT Subject: CN=B7ACC4352770F36649457E3F5F7F7DFC3FF6AE94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:1b:a8:c5:b9:fc:68:e0:1f:4c:bc:44:2c: 17:64:d2:6f:03:d6:f0:be:13:af:56:39:b5:ae:95: 44:2c:b2:36:65:81:c9:11:98:e0:b8:2d:e3:f6:ce: 53:39:17:bc:0f:71:ca:e7:27:6d:d3:41:c5:b3:18: 3b:0a:84:81:dc:5c:ac:d2:96:a7:fa:b0:29:3f:42: 41:4e:b6:ae:eb:02:b2:02:e2:88:cb:f6:2b:7c:78: bd:7c:7f:48:22:d5:3f:79:ee:f6:62:ad:93:e5:61: 7b:21:f8:ca:a4:e9:18:57:57:d6:70:fa:2b:44:85: fa:6e:be:7f:e9:3f:45:c5:f0:96:a8:97:7e:84:0c: 6c:6e:2f:5a:4b:c6:e2:88:b2:4e:1a:4a:ff:fa:d0: 1e:b9:a2:51:bc:f7:8c:66:54:20:4a:2c:c6:04:ce: 27:f8:cc:88:03:0e:ed:2f:96:be:a8:65:2d:e3:09: a9:1d:e2:f7:f6:f4:24:3e:6a:10:d7:5b:0b:0b:9b: a2:94:a0:5c:29:47:3e:35:4a:9d:d6:be:14:e3:1f: 00:2a:4d:b7:63:30:98:ec:1a:d1:4b:8c:3f:4f:80: ba:24:f6:38:3d:43:ba:7e:e9:18:69:db:cf:10:09: 41:e6:32:b2:c9:7a:90:e1:4c:52:32:4d:07:4e:af: a9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AC:C4:35:27:70:F3:66:49:45:7E:3F:5F:7F:7D:FC:3F:F6:AE:94 X509v3 Authority Key Identifier: keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f2:89:4c:8d:25:31:42:04:67:26:08:97:1e:b0:83:85:4f: bf:33:15:3f:09:53:2f:c0:2c:e8:b3:ad:3c:ba:be:39:b0:e2: fb:5c:94:29:83:0f:de:b9:88:11:b4:60:7b:d4:47:00:19:81: c1:e8:2e:4f:f7:dd:aa:0c:58:c1:d0:d9:e6:3b:a8:a9:df:47: 16:6a:2b:67:67:6c:31:65:5d:a7:79:b4:86:09:13:a6:9b:cf: 2b:18:12:9c:a9:2b:b2:ff:30:d5:4f:70:f5:34:16:cf:47:a1: 41:27:9a:62:ea:6e:a2:8e:31:b3:20:3c:da:6d:b4:f6:04:fc: 07:d5:bf:5c:12:a7:6a:59:0e:e4:3f:e5:f1:7f:36:75:90:d3: e5:1c:c1:ec:24:1c:88:aa:6e:e1:9d:54:40:7c:1b:a0:71:36: ee:05:e4:fd:b5:84:ea:0e:8b:b2:21:70:c9:7c:1e:f8:e8:2a: 3d:ec:8f:97:7d:90:71:13:f8:70:f9:c4:47:f6:8a:6b:db:51: 61:26:01:94:72:cc:a2:72:48:a3:94:f1:04:1f:6e:24:52:b0: 2b:c9:6f:5f:42:0e:38:74:86:77:45:0f:fd:fa:7c:b8:8f:14: bd:8d:76:15:6f:93:e5:cd:40:16:7b:02:3f:c7:af:2b:da:f1: 37:da:cb:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMcXs77ZwQkVrtTI28lXY7EuA4BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBG QTIyMzFGNTAeFw0yNTA1MDYwOTM2MDlaFw0yNTA1MDkxMzE5MDlaMDMxMTAvBgNV BAMTKEI3QUNDNDM1Mjc3MEYzNjY0OTQ1N0UzRjVGN0Y3REZDM0ZGNkFFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4xuoxbn8aOAfTLxELBdk0m8D 1vC+E69WObWulUQssjZlgckRmOC4LeP2zlM5F7wPccrnJ23TQcWzGDsKhIHcXKzS lqf6sCk/QkFOtq7rArIC4ojL9it8eL18f0gi1T957vZirZPlYXsh+Mqk6RhXV9Zw +itEhfpuvn/pP0XF8Jaol36EDGxuL1pLxuKIsk4aSv/60B65olG894xmVCBKLMYE zif4zIgDDu0vlr6oZS3jCakd4vf29CQ+ahDXWwsLm6KUoFwpRz41Sp3WvhTjHwAq TbdjMJjsGtFLjD9PgLok9jg9Q7p+6Rhp288QCUHmMrLJepDhTFIyTQdOr6ntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt6zENSdw82ZJRX4/X399/D/2rpQwHwYDVR0j BBgwFoAUoBtnFaWynyPTPHC05ZE1sPoiMfUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDkxMmM5Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9BMDFCNjcxNUE1 QjI5RjIzRDMzQzcwQjRFNTkxMzVCMEZBMjIzMUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBGQTIy MzFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1 QjBGQTIyMzFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfyiUyNJTFCBGcmCJcesIOFT78zFT8JUy/A LOizrTy6vjmw4vtclCmDD965iBG0YHvURwAZgcHoLk/33aoMWMHQ2eY7qKnfRxZq K2dnbDFlXad5tIYJE6abzysYEpypK7L/MNVPcPU0Fs9HoUEnmmLqbqKOMbMgPNpt tPYE/AfVv1wSp2pZDuQ/5fF/NnWQ0+UcwewkHIiqbuGdVEB8G6BxNu4F5P21hOoO i7IhcMl8HvjoKj3sj5d9kHET+HD5xEf2imvbUWEmAZRyzKJySKOU8QQfbiRSsCvJ b19CDjh0hndFD/36fLiPFL2NdhVvk+XNQBZ7Aj/Hryva8Tfay1o= -----END CERTIFICATE-----Generated at Thu May 8 11:15:03 2025 by rpki-client