$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: ZPKI7lM+VkjngksFZ79rzFRUnP9Sk7sHfJkSosXg2w8= Subject key identifier: 5D:9F:0A:74:C4:89:D6:52:32:16:C1:78:F4:F1:BD:0B:EA:D4:1C:D2 Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 2900CB58D757578465EE1103D36B2A59F8279E5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 019D Signing time: Sat 18 Oct 2025 07:10:58 +0000 Manifest this update: Sat 18 Oct 2025 07:05:58 +0000 Manifest next update: Tue 21 Oct 2025 10:42:58 +0000 Files and hashes: 1: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: H3EtcLEE0IGvam9Auuq3QSB3PLABMBbWzZsAbxF8fnQ=) 2: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: JhgF1MSWlQxw36SgZrQfFzd6pgr9ZX5Xk0n79qTJS9I=) 3: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: CjqNtZpb9l9o6fMDnJarAYBDY13nVtRMoSs0BPoufXc=) 4: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: 907swenfI16Aft6qzAi5dpyEs6BxfNg+Ndea03NJnvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:00:cb:58:d7:57:57:84:65:ee:11:03:d3:6b:2a:59:f8:27:9e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Oct 18 07:05:58 2025 GMT Not After : Oct 21 10:42:58 2025 GMT Subject: CN=5D9F0A74C489D6523216C178F4F1BD0BEAD41CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:ea:e0:1e:be:49:c2:c4:e1:bb:1e:24:db: 24:3c:db:f1:57:de:49:e9:43:c9:f9:50:cb:ae:df: 2b:e5:31:05:11:ef:cf:f8:b1:b8:85:ed:7a:bf:03: 9b:cb:9a:80:83:a8:1e:d6:7e:60:64:21:bc:37:16: ee:af:94:f9:a8:ac:8d:c4:76:1d:16:3a:b9:3b:68: 60:30:52:f2:d6:55:39:11:e9:52:e5:42:1c:59:49: 3c:df:94:5b:df:01:c8:c2:9a:09:c2:51:0f:8d:21: 88:5b:a4:e8:da:52:6b:c9:5f:64:49:49:17:38:05: 8e:40:7d:68:3b:9c:6c:79:cc:00:bc:88:6d:44:1c: 0a:c3:27:67:68:52:f9:8f:2b:21:c1:3f:8f:70:00: e4:fe:c2:25:b5:2c:57:d2:01:84:1b:49:bd:b2:25: 43:88:fa:c7:a9:ae:a4:01:bb:28:0f:6f:0a:4f:95: 5c:0c:41:05:fb:75:17:41:6f:97:4b:d9:c6:7a:75: 08:a8:5d:ea:f8:f5:85:1f:da:9f:b5:be:59:33:3a: 7e:13:4a:55:29:f9:12:39:d8:e5:5d:58:ba:0d:a7: 65:6f:e4:51:b4:04:e4:18:c8:a6:46:36:9c:63:17: fb:3b:4a:11:d4:da:df:24:0f:95:7a:72:f3:f2:a9: 67:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9F:0A:74:C4:89:D6:52:32:16:C1:78:F4:F1:BD:0B:EA:D4:1C:D2 X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6b:86:df:fe:d5:74:68:02:c8:93:ea:c9:ed:2d:f8:88:a9: d5:46:4b:74:de:e3:86:d7:bd:e9:4a:fc:e3:b6:57:95:d3:20: b8:88:ee:de:2c:c8:76:56:20:79:0b:17:48:0d:c5:81:f8:8d: 20:63:28:57:4b:bc:68:1d:e2:c1:24:7c:7f:29:36:6a:05:ba: 1d:9e:a5:37:c8:92:fd:14:e6:0d:43:22:b5:48:d8:6a:17:04: 5f:98:2c:a7:71:77:28:dd:c4:38:f5:ed:01:40:78:32:1b:63: 09:e4:01:0c:de:d6:79:a9:72:69:f5:7e:aa:01:fa:64:30:6c: 9e:4a:2a:44:b1:2b:2b:fa:f5:2a:28:e8:0b:8c:59:f9:0b:54: 91:2d:32:16:70:5b:ba:46:6c:13:89:fa:d3:5b:03:c5:3f:6b: 47:02:92:e1:9e:aa:64:3d:a9:6a:ee:c5:a8:9b:19:15:0c:77: b8:1a:38:14:e8:23:8b:bf:7e:ba:89:cf:4d:06:d9:e6:e3:60: 7f:93:2c:9b:51:f3:fc:69:a8:29:50:3e:4e:a8:9c:06:b5:ea: de:9d:12:91:36:ee:94:d5:18:11:e9:8f:6c:e7:e9:2c:c6:49: 9c:ee:fc:8d:6b:9c:01:9b:e1:f4:60:03:07:16:a9:3c:fd:9a: e8:db:d9:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKQDLWNdXV4Rl7hED02sqWfgnnl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNTEwMTgwNzA1NThaFw0yNTEwMjExMDQyNThaMDMxMTAvBgNV BAMTKDVEOUYwQTc0QzQ4OUQ2NTIzMjE2QzE3OEY0RjFCRDBCRUFENDFDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLA+rgHr5JwsThux4k2yQ82/FX 3knpQ8n5UMuu3yvlMQUR78/4sbiF7Xq/A5vLmoCDqB7WfmBkIbw3Fu6vlPmorI3E dh0WOrk7aGAwUvLWVTkR6VLlQhxZSTzflFvfAcjCmgnCUQ+NIYhbpOjaUmvJX2RJ SRc4BY5AfWg7nGx5zAC8iG1EHArDJ2doUvmPKyHBP49wAOT+wiW1LFfSAYQbSb2y JUOI+seprqQBuygPbwpPlVwMQQX7dRdBb5dL2cZ6dQioXer49YUf2p+1vlkzOn4T SlUp+RI52OVdWLoNp2Vv5FG0BOQYyKZGNpxjF/s7ShHU2t8kD5V6cvPyqWfRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXZ8KdMSJ1lIyFsF49PG9C+rUHNIwHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxrht/+1XRoAsiT6sntLfiIqdVGS3Te44bX velK/OO2V5XTILiI7t4syHZWIHkLF0gNxYH4jSBjKFdLvGgd4sEkfH8pNmoFuh2e pTfIkv0U5g1DIrVI2GoXBF+YLKdxdyjdxDj17QFAeDIbYwnkAQze1nmpcmn1fqoB +mQwbJ5KKkSxKyv69Soo6AuMWfkLVJEtMhZwW7pGbBOJ+tNbA8U/a0cCkuGeqmQ9 qWruxaibGRUMd7gaOBToI4u/frqJz00G2ebjYH+TLJtR8/xpqClQPk6onAa16t6d EpE27pTVGBHpj2zn6SzGSZzu/I1rnAGb4fRgAwcWqTz9mujb2Tk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:30 2025 by rpki-client