$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: 3XNIXQaJC0vyXCHAAqKsu3gNC56qI8P5UkK1ELQzBrI= Subject key identifier: CA:CA:41:46:89:2C:28:33:59:94:15:89:E5:22:11:5E:31:0E:E3:7C Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: A44B4A6FB63F690256B01B569AD3A825718A5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 0500 Signing time: Mon 20 Oct 2025 03:11:09 +0000 Manifest this update: Mon 20 Oct 2025 03:06:09 +0000 Manifest next update: Thu 23 Oct 2025 07:31:09 +0000 Files and hashes: 1: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: ZAhIXi328u04WP8lnyvwpbF4H/cC4QlqW180LsFAjsY=) 2: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: cS4xFcJiF1zKuj0BZNhYothbCLKeaVj2VbTjqbuS5CU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a4:4b:4a:6f:b6:3f:69:02:56:b0:1b:56:9a:d3:a8:25:71:8a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: Oct 20 03:06:09 2025 GMT Not After : Oct 23 07:31:09 2025 GMT Subject: CN=CACA4146892C283359941589E522115E310EE37C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:ef:2b:31:a8:da:0d:cf:67:3b:18:35:0f: b5:27:61:e4:86:c5:46:4b:80:7a:1c:98:74:48:fe: 6a:fd:b0:ba:2e:d1:b5:46:12:c2:0a:f7:95:72:62: 2e:95:97:77:f8:dc:50:3a:f9:0a:ab:8e:a9:02:5d: 5e:50:b4:8f:ee:56:22:65:ab:18:1c:3b:a0:3f:06: 76:72:50:ca:c8:31:71:f4:ab:08:ce:60:16:95:1f: a5:b5:5b:6e:3e:8d:b4:0e:ac:30:95:34:9f:51:ad: 0a:7b:41:12:d9:f4:00:26:6a:50:60:2d:1d:62:bb: 7f:1d:2b:4e:1d:42:63:f0:3e:1a:27:10:16:e3:a9: d7:d9:17:72:ef:47:63:78:87:60:03:33:4f:a7:b4: aa:79:04:85:90:33:c8:f6:66:d4:ef:b9:8e:bb:eb: a9:d9:9f:73:58:35:fa:86:b5:0f:1e:86:79:f5:1a: e4:a6:a2:96:c4:84:53:79:a2:30:9b:bd:a0:b8:bf: 9b:84:7b:6c:2c:d9:63:28:0c:76:89:3b:76:29:6e: 25:92:9c:63:49:98:94:31:22:4e:ed:3a:64:c1:0f: fd:00:ee:b6:90:1a:7a:6b:1c:92:ea:f2:12:4d:96: cd:1f:07:bd:61:8f:5c:69:9f:81:31:2f:71:50:5c: ff:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CA:41:46:89:2C:28:33:59:94:15:89:E5:22:11:5E:31:0E:E3:7C X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:0d:ab:37:39:a5:43:7b:b9:d3:7b:0f:c6:44:ae:64:66:e8: de:f2:fb:21:bd:02:c4:03:29:e8:0b:f5:00:1b:49:65:bd:78: 55:f2:d9:05:11:55:95:98:ec:2c:a0:8a:84:03:74:16:e0:65: 45:ff:5e:17:0f:41:6c:e8:72:97:ea:ba:82:47:9d:3f:46:11: e7:0a:e6:f5:ac:c3:4a:58:0d:91:1c:c5:02:f7:18:f0:a5:f1: 66:c7:a3:ab:81:2c:96:0c:05:78:67:d6:91:d2:35:fc:2c:71: 68:d4:24:00:b3:25:f8:14:07:9b:cc:f9:ff:28:8b:02:70:5d: 4d:51:a4:e8:86:c8:1d:d5:2e:6d:35:cb:1a:75:2e:0c:e6:9d: bc:c3:17:56:c6:b7:1b:a5:c9:1b:03:d1:2e:57:b0:01:cf:6f: 58:fc:45:1e:f2:8f:8f:66:88:2e:1d:68:8c:80:58:91:9b:3e: b6:20:c6:58:c3:32:cc:bb:0a:01:22:e9:e1:e4:cd:cb:e4:6e: e1:2e:39:59:52:c0:aa:cb:6a:78:36:e9:b2:cf:b1:bb:7a:3b: 3b:70:e7:8b:e8:de:39:b5:be:82:0d:3e:b6:05:c2:44:09:e9: d8:99:98:91:46:d1:6b:7e:13:1a:30:e4:75:d5:10:f3:e1:b4: 24:bd:04:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKRLSm+2P2kCVrAbVprTqCVxil8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNTEwMjAwMzA2MDlaFw0yNTEwMjMwNzMxMDlaMDMxMTAvBgNV BAMTKENBQ0E0MTQ2ODkyQzI4MzM1OTk0MTU4OUU1MjIxMTVFMzEwRUUzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEe8rMajaDc9nOxg1D7UnYeSG xUZLgHocmHRI/mr9sLou0bVGEsIK95VyYi6Vl3f43FA6+QqrjqkCXV5QtI/uViJl qxgcO6A/BnZyUMrIMXH0qwjOYBaVH6W1W24+jbQOrDCVNJ9RrQp7QRLZ9AAmalBg LR1iu38dK04dQmPwPhonEBbjqdfZF3LvR2N4h2ADM0+ntKp5BIWQM8j2ZtTvuY67 66nZn3NYNfqGtQ8ehnn1GuSmopbEhFN5ojCbvaC4v5uEe2ws2WMoDHaJO3YpbiWS nGNJmJQxIk7tOmTBD/0A7raQGnprHJLq8hJNls0fB71hj1xpn4ExL3FQXP/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyspBRoksKDNZlBWJ5SIRXjEO43wwHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMgNqzc5pUN7udN7D8ZErmRm6N7y+yG9AsQD KegL9QAbSWW9eFXy2QURVZWY7CygioQDdBbgZUX/XhcPQWzocpfquoJHnT9GEecK 5vWsw0pYDZEcxQL3GPCl8WbHo6uBLJYMBXhn1pHSNfwscWjUJACzJfgUB5vM+f8o iwJwXU1RpOiGyB3VLm01yxp1LgzmnbzDF1bGtxulyRsD0S5XsAHPb1j8RR7yj49m iC4daIyAWJGbPrYgxljDMsy7CgEi6eHkzcvkbuEuOVlSwKrLang26bLPsbt6Oztw 54vo3jm1voINPrYFwkQJ6diZmJFG0Wt+Exow5HXVEPPhtCS9BJ4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:26 2025 by rpki-client