$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: KVD4cGIzftU0mr4DJ4JUy4S+H2TozaUMYGsVtNO4mFU= Subject key identifier: 21:3B:10:BB:ED:0B:EC:69:19:0F:0D:3B:F5:0D:E4:7C:EE:08:EB:68 Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 55471E749117AAF4FED2E64EC1D9AFB4E712418C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 0150 Signing time: Mon 30 Jun 2025 12:31:38 +0000 Manifest this update: Mon 30 Jun 2025 12:26:38 +0000 Manifest next update: Thu 03 Jul 2025 17:49:38 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: E4T0PDjwEBHhZ8rTA7NcZIYLEz1fBZeS9wMtn/x/Srs=) 2: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: B0UDV4I9imcsnKEi3UgXOb1kmxS8eCnKZg/PZOOpFbQ=) 3: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: eebbaU9D24srRwLLDjhH3Gb9Ffk+0AMZdq/x3Fci1NA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 17:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:47:1e:74:91:17:aa:f4:fe:d2:e6:4e:c1:d9:af:b4:e7:12:41:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: Jun 30 12:26:38 2025 GMT Not After : Jul 3 17:49:38 2025 GMT Subject: CN=213B10BBED0BEC69190F0D3BF50DE47CEE08EB68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:9a:1e:65:50:52:c3:9a:b8:d6:2f:87:18: 56:78:f0:5b:d2:d0:cf:b8:e9:89:00:7c:e4:6a:68: 8f:3d:4a:a3:29:57:54:e8:a3:a7:5d:99:52:9f:71: 8e:d7:94:51:e2:0c:57:09:6d:c3:02:54:df:de:6e: 4d:dc:83:97:1d:3a:b4:96:43:20:1c:99:c3:28:4a: 05:a4:eb:27:5d:47:4a:77:ba:89:03:34:2c:fb:79: 65:3a:03:83:6f:e4:cc:87:5e:ef:1c:ea:ec:76:7f: 72:8b:dd:47:3a:ce:4d:83:5e:6c:bb:26:91:c6:d8: ea:45:25:42:ac:c5:84:68:84:20:de:99:11:13:0e: 0c:10:99:d8:60:59:bf:46:1e:52:81:a1:51:2a:55: 14:62:31:c0:15:cc:9c:6c:6d:6e:a9:e8:4c:52:60: c1:80:8b:1b:d9:e9:92:b9:df:df:46:40:0d:02:b8: 41:1f:53:43:de:9a:c7:a5:a0:44:f8:aa:36:52:bd: 68:9f:fc:fe:1d:76:3f:b0:93:23:81:f2:10:8a:6c: 09:e2:2c:00:f6:cc:a9:78:38:b2:c5:c1:35:2d:42: bd:ce:c6:c6:b6:e1:7c:02:bb:2e:69:13:b5:79:9e: 6d:0b:c2:6e:07:8c:cd:63:21:1f:05:4f:73:8e:04: 2b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3B:10:BB:ED:0B:EC:69:19:0F:0D:3B:F5:0D:E4:7C:EE:08:EB:68 X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:85:e5:3c:d0:e3:6c:b1:e1:ee:11:c5:76:50:f0:f4:d3:16: 33:7f:b4:21:87:1a:a2:8c:75:ed:49:3e:a1:be:d6:f0:67:36: 21:7c:57:9a:e0:24:70:fd:2a:6f:15:bd:9d:6b:d4:bf:73:5c: d2:05:dd:71:b0:00:32:dd:2a:5c:dd:6c:d7:34:55:1c:e4:dd: 53:af:2a:8a:8f:91:21:36:f9:68:0a:9f:19:a8:24:d8:ed:da: 84:03:b9:3f:96:2b:f5:b3:5e:82:e6:d5:7a:40:ac:ad:14:bb: 78:be:0d:0f:d1:cf:ea:d0:61:ea:c8:77:7c:8f:3b:d7:a2:3d: a3:44:aa:4b:27:c3:32:9f:d7:b9:4c:84:c4:04:3a:59:f6:12: b5:3a:cb:bc:09:e6:83:3f:d0:40:37:38:32:7d:af:35:9a:da: ab:71:ca:f5:d7:73:a4:a9:32:87:2f:8e:27:0d:9a:61:32:9a: 06:82:02:91:17:7d:57:b3:ff:37:d6:ce:f4:41:42:99:11:e2: 7f:c2:c0:ae:3d:7c:48:41:84:3c:be:40:a7:eb:74:47:aa:18: f1:7a:b3:5c:be:eb:1a:55:8d:8e:d6:2e:3e:ad:28:f0:cf:7d: 34:ee:d3:53:82:58:cd:4c:54:ac:6f:ac:90:58:67:7f:3e:2c: a3:db:ac:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVUcedJEXqvT+0uZOwdmvtOcSQYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2 QUNEODcxNzAeFw0yNTA2MzAxMjI2MzhaFw0yNTA3MDMxNzQ5MzhaMDMxMTAvBgNV BAMTKDIxM0IxMEJCRUQwQkVDNjkxOTBGMEQzQkY1MERFNDdDRUUwOEVCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdZoeZVBSw5q41i+HGFZ48FvS 0M+46YkAfORqaI89SqMpV1Too6ddmVKfcY7XlFHiDFcJbcMCVN/ebk3cg5cdOrSW QyAcmcMoSgWk6yddR0p3uokDNCz7eWU6A4Nv5MyHXu8c6ux2f3KL3Uc6zk2DXmy7 JpHG2OpFJUKsxYRohCDemRETDgwQmdhgWb9GHlKBoVEqVRRiMcAVzJxsbW6p6ExS YMGAixvZ6ZK5399GQA0CuEEfU0PemseloET4qjZSvWif/P4ddj+wkyOB8hCKbAni LAD2zKl4OLLFwTUtQr3Oxsa24XwCuy5pE7V5nm0Lwm4HjM1jIR8FT3OOBCtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUITsQu+0L7GkZDw079Q3kfO4I62gwHwYDVR0j BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqF5TzQ42yx4e4RxXZQ8PTTFjN/tCGHGqKM de1JPqG+1vBnNiF8V5rgJHD9Km8VvZ1r1L9zXNIF3XGwADLdKlzdbNc0VRzk3VOv KoqPkSE2+WgKnxmoJNjt2oQDuT+WK/WzXoLm1XpArK0Uu3i+DQ/Rz+rQYerId3yP O9eiPaNEqksnwzKf17lMhMQEOln2ErU6y7wJ5oM/0EA3ODJ9rzWa2qtxyvXXc6Sp MocvjicNmmEymgaCApEXfVez/zfWzvRBQpkR4n/CwK49fEhBhDy+QKfrdEeqGPF6 s1y+6xpVjY7WLj6tKPDPfTTu01OCWM1MVKxvrJBYZ38+LKPbrCM= -----END CERTIFICATE-----Generated at Tue Jul 1 23:23:39 2025 by rpki-client