$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: j4oWAK0zEuUV3oK1G9JschVILcXri9LFmWvoMLArMbA= Subject key identifier: 34:EB:63:C3:F4:90:07:53:CF:12:FE:95:78:EC:DF:E8:87:43:1C:B8 Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 41DE80938F12F2F9BFC62CD0F80851E7CC525E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 0139 Signing time: Fri 09 May 2025 00:51:38 +0000 Manifest this update: Fri 09 May 2025 00:46:38 +0000 Manifest next update: Mon 12 May 2025 11:10:38 +0000 Files and hashes: 1: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: /2ezWagugYmnsww4enWGuS45sLlc/0gO4lpS0niEz9E=) 2: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: eebbaU9D24srRwLLDjhH3Gb9Ffk+0AMZdq/x3Fci1NA=) 3: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: E4T0PDjwEBHhZ8rTA7NcZIYLEz1fBZeS9wMtn/x/Srs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:de:80:93:8f:12:f2:f9:bf:c6:2c:d0:f8:08:51:e7:cc:52:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: May 9 00:46:38 2025 GMT Not After : May 12 11:10:38 2025 GMT Subject: CN=34EB63C3F4900753CF12FE9578ECDFE887431CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:57:47:0f:2a:62:83:18:42:94:ed:d1:e4: 27:3b:d8:20:bb:58:b9:22:bc:32:7a:ea:21:91:09: d0:36:bb:9f:84:43:9c:dd:d6:a4:0b:27:f7:38:f5: 8c:d8:39:64:20:c5:60:7a:2a:09:4d:e9:7c:80:c7: cc:9b:80:32:86:47:e9:d6:8f:3b:ee:be:b4:d9:18: b7:ec:b5:d0:a6:21:f2:cd:04:ca:09:e1:1c:4d:6a: 29:4e:f6:92:79:5f:91:70:34:a5:72:85:18:27:59: 2f:9a:c8:ff:b5:92:86:65:95:54:81:72:4b:db:9b: 95:b2:10:0b:c8:fa:33:5a:52:31:c5:6d:c7:dc:51: 08:c0:67:e2:54:66:57:05:57:40:71:c2:b3:ab:a2: fa:06:e0:3c:51:7c:e7:bb:1a:87:f0:0d:6a:ba:c7: 3f:3d:80:d0:5c:e9:7e:90:ad:a5:de:18:56:48:2e: 65:2a:ce:bd:93:2a:f3:60:8d:76:76:f3:71:59:d6: 3a:bb:ab:65:ef:12:cf:2a:f1:71:23:f3:57:22:7f: b6:a6:9f:3e:3d:1e:6e:d0:de:59:d5:c2:23:ae:08: 7a:3c:e8:fd:c6:49:52:ab:a3:d3:81:09:55:32:6f: 7c:8b:0d:d6:de:2b:17:d9:2e:23:c6:6b:92:0a:22: 22:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EB:63:C3:F4:90:07:53:CF:12:FE:95:78:EC:DF:E8:87:43:1C:B8 X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:33:e1:e4:e2:67:0d:b6:fa:26:5c:f5:fb:34:4d:60:05:c5: 60:55:e3:7a:37:4e:24:76:cb:63:35:a4:e3:33:ee:44:4c:b6: c7:46:40:96:91:21:05:34:ee:e1:7d:d9:7d:9e:84:d0:15:39: df:f3:9c:71:aa:ed:f9:e3:8a:8d:cd:68:24:8b:a3:49:e1:59: 7f:e0:6d:21:ae:a4:4b:32:61:7a:5b:be:f6:10:45:d0:7e:1e: 53:48:33:ac:8b:53:36:fa:e1:bb:cb:b3:8a:fa:29:2d:13:2a: 69:cd:14:70:d8:c7:12:19:2c:ea:d0:e9:47:8b:3c:56:95:4a: 1f:99:71:49:ae:85:3c:7a:8d:f4:f0:36:c5:ed:dc:dd:01:5c: fa:27:15:48:4f:d2:1e:c6:af:4a:80:1d:9b:03:20:76:8c:59: 2b:f5:b5:51:9e:2e:c6:07:f6:3c:71:b1:9d:0f:14:57:bb:3c: 30:5f:57:3a:35:31:0a:9b:0d:a5:f3:a2:1c:bd:8b:b4:46:a3: 40:ba:df:20:79:fd:98:4b:c7:ca:6c:c2:56:f6:a7:5d:ab:bc: 5f:4b:36:a9:74:de:88:23:94:bf:e1:7e:c4:41:3f:22:4f:9d: 02:6f:49:e1:a9:6d:d2:dd:3c:1f:44:57:ef:96:29:6a:e3:ee: 75:e5:63:25 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITQd6Ak48S8vm/xizQ+AhR58xSXjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxNUI5NkEzQkNFNEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZB Q0Q4NzE3MB4XDTI1MDUwOTAwNDYzOFoXDTI1MDUxMjExMTAzOFowMzExMC8GA1UE AxMoMzRFQjYzQzNGNDkwMDc1M0NGMTJGRTk1NzhFQ0RGRTg4NzQzMUNCODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKlWV0cPKmKDGEKU7dHkJzvYILtY uSK8MnrqIZEJ0Da7n4RDnN3WpAsn9zj1jNg5ZCDFYHoqCU3pfIDHzJuAMoZH6daP O+6+tNkYt+y10KYh8s0EygnhHE1qKU72knlfkXA0pXKFGCdZL5rI/7WShmWVVIFy S9ublbIQC8j6M1pSMcVtx9xRCMBn4lRmVwVXQHHCs6ui+gbgPFF857sah/ANarrH Pz2A0FzpfpCtpd4YVkguZSrOvZMq82CNdnbzcVnWOrurZe8SzyrxcSPzVyJ/tqaf Pj0ebtDeWdXCI64Iejzo/cZJUquj04EJVTJvfIsN1t4rF9kuI8ZrkgoiIh0CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQ062PD9JAHU88S/pV47N/oh0McuDAfBgNVHSME GDAWgBQVuWo7zkwQwX9L23cAoz+Ias2HFzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Mz MGM4Zjg2LWJjZDUtNGI3YS1hOWIxLTQ2NWVmMGM5Zjg3YS8wLzE1Qjk2QTNCQ0U0 QzEwQzE3RjRCREI3NzAwQTMzRjg4NkFDRDg3MTcuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8xNUI5NkEzQkNFNEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4 NzE3LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9jMzBjOGY4Ni1iY2Q1LTRiN2EtYTli MS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNFNEMxMEMxN0Y0QkRCNzcwMEEzM0Y4 ODZBQ0Q4NzE3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAjjPh5OJnDbb6Jlz1+zRNYAXFYFXjejdOJHbL YzWk4zPuREy2x0ZAlpEhBTTu4X3ZfZ6E0BU53/Occart+eOKjc1oJIujSeFZf+Bt Ia6kSzJhelu+9hBF0H4eU0gzrItTNvrhu8uzivopLRMqac0UcNjHEhks6tDpR4s8 VpVKH5lxSa6FPHqN9PA2xe3c3QFc+icVSE/SHsavSoAdmwMgdoxZK/W1UZ4uxgf2 PHGxnQ8UV7s8MF9XOjUxCpsNpfOiHL2LtEajQLrfIHn9mEvHymzCVvanXau8X0s2 qXTeiCOUv+F+xEE/Ik+dAm9J4alt0t08H0RX75YpauPudeVjJQ== -----END CERTIFICATE-----Generated at Sun May 11 05:21:34 2025 by rpki-client