$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json) Hash identifier: PPm3D1/rknVnQrjsf8Sp1jBVOOxDWUIDgSwm8csK6tA= Subject key identifier: 1A:C8:28:62:EF:EB:02:5B:67:19:53:8D:FF:51:CF:6A:95:F5:CC:17 Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Certificate serial: 04B548908D37D31DCF4639DFB184D393F7A5603E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft Manifest number: 045B Signing time: Mon 20 Oct 2025 08:20:38 +0000 Manifest this update: Mon 20 Oct 2025 08:15:38 +0000 Manifest next update: Thu 23 Oct 2025 08:25:38 +0000 Files and hashes: 1: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: VxefFZgWI5c/pD2K54a+qsp93JWBpKKK6skpBEjofyw=) 2: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: inNvDvxX4hbCC8+Dho69jFxrO3UdsZFxdsWq+NYPKcc=) 3: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: KGskRiaq/+lRAEP6f41FobsVw96uMstK/fLzsAVB4eg=) 4: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: ghtilaMZ6RJAQvHOL9rJ7eLcuLTYk5ZeH+7mykIlzjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b5:48:90:8d:37:d3:1d:cf:46:39:df:b1:84:d3:93:f7:a5:60:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Validity Not Before: Oct 20 08:15:38 2025 GMT Not After : Oct 23 08:25:38 2025 GMT Subject: CN=1AC82862EFEB025B6719538DFF51CF6A95F5CC17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:f4:9d:de:9f:15:0d:36:f7:c7:59:d7:46: dc:d7:26:c0:e4:c5:93:c1:47:d1:0b:e4:7c:e9:51: e7:9e:87:63:04:6d:f5:dc:d0:53:6a:70:3d:75:0f: 05:89:9a:34:a2:ef:4f:aa:a0:74:bf:71:cc:58:d4: 25:5b:c7:38:7d:54:c0:b7:67:b9:87:3b:91:eb:11: 35:74:00:04:6c:8f:e8:7a:cd:56:94:34:58:ee:a1: 6a:00:ed:5c:97:bd:3b:4b:4c:ee:83:05:17:f8:63: 94:ea:96:35:23:8b:e9:a5:44:a2:bd:ee:0a:ce:fe: 81:f0:47:ca:cd:14:78:63:08:fe:e9:d0:51:8b:31: fe:bb:5e:b0:2c:f2:0f:2a:d0:72:df:c2:89:0a:f6: 23:f4:e2:4d:3f:fc:05:26:15:ed:67:3e:75:a4:c2: ce:13:49:25:50:01:0f:57:76:02:3c:ef:ea:93:2a: 06:31:53:b3:99:cb:7c:d1:32:d3:e1:45:4d:90:5d: a8:9d:03:d7:6e:7f:10:d3:f9:d8:6c:f5:0c:8b:d0: 18:0b:55:5a:f8:8e:30:a2:e6:98:4c:15:b0:47:e2: 45:55:7a:16:7b:37:b4:bb:26:55:2d:55:f9:b6:d6: 54:ab:18:a1:05:f3:cd:70:ab:87:6b:81:b2:b8:66: ce:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C8:28:62:EF:EB:02:5B:67:19:53:8D:FF:51:CF:6A:95:F5:CC:17 X509v3 Authority Key Identifier: keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7a:be:36:a5:60:0f:2a:66:1d:64:35:0a:31:4a:66:c9:01: 44:97:23:03:6c:d3:84:c9:7c:35:b8:5a:da:ce:7e:af:16:36: bb:35:b9:8b:9e:ef:31:85:5b:43:c4:4d:49:ab:10:c0:aa:e1: 79:d2:dc:4f:57:a0:64:81:87:9e:ca:26:9a:fa:e9:30:a0:c2: 86:2e:bd:ac:91:fa:13:29:21:12:9c:03:53:5e:38:b2:b6:9d: c9:fd:50:6e:29:db:c3:7b:9f:f8:63:a4:fd:6c:cc:79:4f:63: 6b:2d:d7:42:8b:2e:3e:58:d6:49:c6:1c:ad:52:2d:85:ac:5d: 14:06:75:fb:be:c3:da:b0:62:76:80:2a:02:9a:55:c3:bb:8d: 19:3f:da:30:b8:c5:ce:cb:37:e6:22:48:c7:cc:f4:67:7e:69: c6:dc:5e:91:78:d6:ed:b9:e9:a0:e1:71:7b:52:65:2a:cb:c8: 3c:e0:97:45:8c:b8:38:3f:33:7c:a5:ee:1f:da:22:63:54:7c: 23:d2:b5:cb:ca:cd:e2:d4:b7:1e:13:f4:8a:14:7d:cf:2a:3c: f5:e8:93:98:87:f4:49:22:03:6c:db:46:01:b5:48:c7:a0:e3: c1:44:5f:a3:7a:db:de:24:2a:64:d5:b4:87:92:e4:8b:f8:f5: 88:0e:de:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLVIkI030x3PRjnfsYTTk/elYD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1 Qzc3RTJDMTAeFw0yNTEwMjAwODE1MzhaFw0yNTEwMjMwODI1MzhaMDMxMTAvBgNV BAMTKDFBQzgyODYyRUZFQjAyNUI2NzE5NTM4REZGNTFDRjZBOTVGNUNDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTvSd3p8VDTb3x1nXRtzXJsDk xZPBR9EL5HzpUeeeh2MEbfXc0FNqcD11DwWJmjSi70+qoHS/ccxY1CVbxzh9VMC3 Z7mHO5HrETV0AARsj+h6zVaUNFjuoWoA7VyXvTtLTO6DBRf4Y5TqljUji+mlRKK9 7grO/oHwR8rNFHhjCP7p0FGLMf67XrAs8g8q0HLfwokK9iP04k0//AUmFe1nPnWk ws4TSSVQAQ9XdgI87+qTKgYxU7OZy3zRMtPhRU2QXaidA9dufxDT+dhs9QyL0BgL VVr4jjCi5phMFbBH4kVVehZ7N7S7JlUtVfm21lSrGKEF881wq4drgbK4Zs5fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGsgoYu/rAltnGVON/1HPapX1zBcwHwYDVR0j BBgwFoAUcV3G3qgP5dif3GgsGcezD1x34sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMC83MTVEQzZERUE4 MEZFNUQ4OUZEQzY4MkMxOUM3QjMwRjVDNzdFMkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1Qzc3 RTJDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0Iz MEY1Qzc3RTJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI96vjalYA8qZh1kNQoxSmbJAUSXIwNs04TJ fDW4WtrOfq8WNrs1uYue7zGFW0PETUmrEMCq4XnS3E9XoGSBh57KJpr66TCgwoYu vayR+hMpIRKcA1NeOLK2ncn9UG4p28N7n/hjpP1szHlPY2st10KLLj5Y1knGHK1S LYWsXRQGdfu+w9qwYnaAKgKaVcO7jRk/2jC4xc7LN+YiSMfM9Gd+acbcXpF41u25 6aDhcXtSZSrLyDzgl0WMuDg/M3yl7h/aImNUfCPStcvKzeLUtx4T9IoUfc8qPPXo k5iH9EkiA2zbRgG1SMeg48FEX6N6294kKmTVtIeS5Iv49YgO3i0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:19 2025 by rpki-client