$ rpki-client -vvf repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft File: 4515472806DD01B59715410103D51C05E4F28B96.mft (raw, json) Hash identifier: E1AkWLNMCKvonZi2vEJoQ2aph/ASkQ9yz0ehJp9Rxmw= Subject key identifier: 6C:BA:AA:4A:43:C8:16:FC:C4:47:20:0F:7F:95:E2:BA:FF:D2:C4:FF Authority key identifier: 45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96 Certificate issuer: /CN=4515472806DD01B59715410103D51C05E4F28B96 Certificate serial: 1ACE841AB5F5824E0F79995102D28E52A17E391A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft Manifest number: 0243 Signing time: Mon 20 Oct 2025 04:41:52 +0000 Manifest this update: Mon 20 Oct 2025 04:36:52 +0000 Manifest next update: Thu 23 Oct 2025 07:03:52 +0000 Files and hashes: 1: 4515472806DD01B59715410103D51C05E4F28B96.crl (hash: w/hkXltMrApmldgpcA/k24dYg9J5ZUNqUBMRy5adM6w=) 2: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: HBcmtBf124LaJLrEpyA0+OcG5c4rLC3yDarVnj9n8nQ=) 3: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: vRlgOXUVxZU3L35iv5K0e1tNJbS3jxz2tstDvvGIpOA=) 4: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: Tu/lmXG1SR10FA6Mlg+q8BJ0wAM8BZdiNc8TMtD2S9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ce:84:1a:b5:f5:82:4e:0f:79:99:51:02:d2:8e:52:a1:7e:39:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4515472806DD01B59715410103D51C05E4F28B96 Validity Not Before: Oct 20 04:36:52 2025 GMT Not After : Oct 23 07:03:52 2025 GMT Subject: CN=6CBAAA4A43C816FCC447200F7F95E2BAFFD2C4FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:62:24:1c:d4:cc:61:f0:39:33:12:32:38:ab: 89:eb:55:c5:77:1e:f6:9d:f3:ff:6d:72:95:ec:90: 2f:ad:a9:6d:43:85:5f:7d:90:1f:7f:1b:57:80:4a: d0:44:28:99:48:cd:f5:d9:0e:43:25:34:29:c7:fa: 7f:0c:ca:61:d5:ff:6e:2c:f7:80:fa:0f:ec:4f:18: a3:6b:4c:b7:17:9d:98:16:fa:6f:6e:6b:04:07:2e: 42:6e:43:30:84:8c:c6:0b:dd:c6:3b:e8:77:24:18: 8c:49:af:90:30:42:00:d0:40:bf:b6:26:2c:6a:a4: 63:19:ee:c0:de:4f:81:71:52:8a:8c:cc:f6:61:fe: 3a:b7:88:fc:7f:1f:ff:0d:12:55:c8:f3:b4:54:9b: 38:f5:f5:7a:e5:3e:3c:f6:ba:77:56:34:d1:75:6c: d9:43:3a:cd:58:70:6c:24:41:c6:ef:68:8e:87:47: 23:22:93:a1:f0:23:87:2d:42:68:73:a8:61:de:5a: b1:ae:0e:73:d2:55:a0:2c:88:24:d1:d7:d3:40:01: 8b:af:6a:7a:aa:e9:d6:58:ca:d7:f5:47:45:ef:bf: 2e:b2:1d:72:5a:90:7d:42:82:a1:18:f5:6d:96:f0: a0:43:1f:1b:dd:80:ea:65:a6:86:cc:c9:5d:f1:8f: 31:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BA:AA:4A:43:C8:16:FC:C4:47:20:0F:7F:95:E2:BA:FF:D2:C4:FF X509v3 Authority Key Identifier: keyid:45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8f:3a:59:73:b1:76:c3:d9:dd:41:f6:30:89:85:4b:9f:4f: dd:f9:75:cb:18:2e:43:4a:4c:ae:db:6f:fb:66:07:79:3e:8f: 8f:78:f5:a6:1c:b7:9d:6e:37:24:fd:7d:3f:10:84:e4:85:ea: fc:4a:c0:b5:1d:60:e3:81:22:30:ab:63:94:70:0a:cf:9b:6e: f3:97:fa:b8:b0:41:e0:df:02:46:6a:6d:7c:95:ed:39:df:55: 92:83:6e:f7:a9:fd:2f:07:fc:cb:f4:a2:44:77:c3:f2:f6:2e: d5:d9:30:db:5e:ae:64:f0:94:43:12:df:46:60:cd:7c:d5:2f: b5:2f:48:a4:63:6a:c3:e1:d6:f0:9e:7f:81:c8:dc:a3:8f:ec: a7:67:b2:be:e2:48:a5:4a:ea:8f:52:0a:40:99:0f:c9:9a:66: c8:42:8a:de:4f:83:38:73:c2:f3:89:fc:86:a3:51:cc:1e:01: 5f:60:a2:4f:b8:52:5c:08:43:23:a9:76:5c:68:49:26:00:dc: 42:d0:bf:19:25:a1:af:3a:84:33:b4:64:2a:56:bd:e2:00:7e: cb:24:4a:ef:05:7d:d3:29:93:5c:4c:59:96:5c:38:08:40:c9: 11:b8:dc:fe:35:d9:46:28:26:c7:60:de:45:b1:42:ce:da:d9: f6:ba:11:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGs6EGrX1gk4PeZlRAtKOUqF+ORowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNTQ3MjgwNkREMDFCNTk3MTU0MTAxMDNENTFDMDVF NEYyOEI5NjAeFw0yNTEwMjAwNDM2NTJaFw0yNTEwMjMwNzAzNTJaMDMxMTAvBgNV BAMTKDZDQkFBQTRBNDNDODE2RkNDNDQ3MjAwRjdGOTVFMkJBRkZEMkM0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQYiQc1Mxh8DkzEjI4q4nrVcV3 Hvad8/9tcpXskC+tqW1DhV99kB9/G1eAStBEKJlIzfXZDkMlNCnH+n8MymHV/24s 94D6D+xPGKNrTLcXnZgW+m9uawQHLkJuQzCEjMYL3cY76HckGIxJr5AwQgDQQL+2 JixqpGMZ7sDeT4FxUoqMzPZh/jq3iPx/H/8NElXI87RUmzj19XrlPjz2undWNNF1 bNlDOs1YcGwkQcbvaI6HRyMik6HwI4ctQmhzqGHeWrGuDnPSVaAsiCTR19NAAYuv anqq6dZYytf1R0Xvvy6yHXJakH1CgqEY9W2W8KBDHxvdgOplpobMyV3xjzGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbLqqSkPIFvzERyAPf5Xiuv/SxP8wHwYDVR0j BBgwFoAURRVHKAbdAbWXFUEBA9UcBeTyi5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGYxMzcyYy00M2E2LTRmZGEtYjUwZS1kMDFlYjQyYzY4OWYvMC80NTE1NDcyODA2 REQwMUI1OTcxNTQxMDEwM0Q1MUMwNUU0RjI4Qjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNTQ3MjgwNkREMDFCNTk3MTU0MTAxMDNENTFDMDVFNEYy OEI5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRmMTM3MmMtNDNhNi00ZmRhLWI1 MGUtZDAxZWI0MmM2ODlmLzAvNDUxNTQ3MjgwNkREMDFCNTk3MTU0MTAxMDNENTFD MDVFNEYyOEI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGPOllzsXbD2d1B9jCJhUufT935dcsYLkNK TK7bb/tmB3k+j4949aYct51uNyT9fT8QhOSF6vxKwLUdYOOBIjCrY5RwCs+bbvOX +riwQeDfAkZqbXyV7TnfVZKDbvep/S8H/Mv0okR3w/L2LtXZMNtermTwlEMS30Zg zXzVL7UvSKRjasPh1vCef4HI3KOP7Kdnsr7iSKVK6o9SCkCZD8maZshCit5Pgzhz wvOJ/IajUcweAV9gok+4UlwIQyOpdlxoSSYA3ELQvxkloa86hDO0ZCpWveIAfssk Su8FfdMpk1xMWZZcOAhAyRG43P412UYoJsdg3kWxQs7a2fa6Eeo= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:21 2025 by rpki-client