$ rpki-client -vvf repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft File: 5715F968646EAE08576ECCEF3FABAC250A40A47B.mft (raw, json) Hash identifier: UQ34wYjXMGC2TXpQYJx7DS6qzTAZu4HVWt2jktMaubQ= Subject key identifier: 7C:55:6C:69:4C:C7:CC:1F:22:35:5F:77:1A:D2:9F:C9:02:47:CC:8B Authority key identifier: 57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B Certificate issuer: /CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Certificate serial: 4FD2A08BB1B87559D9D58689DE34B696CC246DC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft Manifest number: 0515 Signing time: Sun 19 Oct 2025 10:20:46 +0000 Manifest this update: Sun 19 Oct 2025 10:15:46 +0000 Manifest next update: Wed 22 Oct 2025 11:02:46 +0000 Files and hashes: 1: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: +tOUCMAfkXBUrsG+mslHnjPzs7jefLznwIgLOB3xtdM=) 2: 5715F968646EAE08576ECCEF3FABAC250A40A47B.crl (hash: 7DmB2eZdV/BLcpAKYWy3mSH93s4GFkInohiYJrGFijw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d2:a0:8b:b1:b8:75:59:d9:d5:86:89:de:34:b6:96:cc:24:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Validity Not Before: Oct 19 10:15:46 2025 GMT Not After : Oct 22 11:02:46 2025 GMT Subject: CN=7C556C694CC7CC1F22355F771AD29FC90247CC8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:c7:bc:a6:95:f5:9c:5e:a7:35:64:9f:b4: 58:9a:4d:dd:ac:af:85:b4:81:d0:6f:22:da:ff:36: 5b:c8:64:65:b7:e0:8c:65:d3:36:f1:28:da:5a:a0: 37:26:85:b1:f5:fc:17:31:9c:cc:6a:c3:a5:97:b6: 44:90:ad:1e:8c:77:26:b1:71:62:45:8d:43:5a:ef: 71:f9:27:54:06:04:ce:76:5e:c9:05:43:f2:c1:ea: 9b:04:16:4a:22:37:01:2c:14:b5:11:0d:b4:7a:35: 16:15:66:00:dc:ab:65:3c:71:dd:40:e1:fb:f1:a8: 32:3d:6d:73:3d:31:09:25:61:c4:2a:02:ad:d8:8c: f8:c7:80:86:6f:3a:8d:69:a2:4b:a2:c1:9b:b4:59: 4c:6d:d1:01:24:72:3d:4b:e7:bc:e8:dc:2a:3e:ac: ab:a5:d1:f1:9e:01:fb:bb:2e:19:d2:d2:d5:88:04: 64:5a:6a:e5:21:81:d9:4a:73:fc:ae:da:30:7d:93: 46:a3:77:09:73:63:6b:b8:e5:79:91:35:ec:16:9e: 27:ad:1c:b8:b1:77:6c:ee:8c:4a:67:a4:57:39:26: 98:b3:2a:f0:14:a3:cd:cd:73:54:9e:95:68:ad:7d: bd:ff:60:70:6b:62:b5:de:c1:a3:53:42:f4:a6:0f: 27:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:55:6C:69:4C:C7:CC:1F:22:35:5F:77:1A:D2:9F:C9:02:47:CC:8B X509v3 Authority Key Identifier: keyid:57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:87:f1:96:d1:ac:dc:b9:2e:d6:f0:5b:f4:6e:69:f8:19:ed: 10:9a:ee:79:ac:d6:87:3f:db:fd:1a:a8:89:b4:6d:7b:6e:d7: 66:50:1c:24:26:77:22:ae:71:75:d2:31:87:dd:1d:aa:54:9a: 63:19:f3:97:57:47:b0:7a:3a:98:be:5e:17:44:a5:9e:50:1e: ca:20:1a:ac:93:64:1b:2b:ee:dd:53:a3:1c:f0:b5:30:52:39: a3:01:ed:89:d0:5c:7a:c8:31:f6:ab:61:23:f5:8a:23:08:7c: 3b:f8:64:3e:4c:6b:b8:b1:06:ef:0f:67:48:f7:f9:70:73:c9: d6:92:45:17:67:08:d6:59:19:82:48:b7:b2:f2:bc:af:8a:bc: e9:fa:95:fa:17:23:d7:3b:ed:4a:78:93:9c:1b:5d:31:dc:80: b3:17:59:08:e8:b2:31:66:a8:33:c0:7c:8e:ae:af:a1:53:9a: ff:18:ed:56:66:d3:c6:d2:ee:fa:1a:df:7b:8b:88:18:3c:93: 6b:bc:01:4d:a1:20:e4:fc:2d:4b:74:29:e6:b3:24:ae:84:98: 49:9a:5a:5f:49:3f:f3:59:22:56:f6:91:1b:40:46:5a:57:ea: e0:a1:db:2c:ca:27:66:b2:44:d5:b6:77:4c:fd:f0:04:4a:ab: 72:f7:6b:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9Kgi7G4dVnZ1YaJ3jS2lswkbcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUw QTQwQTQ3QjAeFw0yNTEwMTkxMDE1NDZaFw0yNTEwMjIxMTAyNDZaMDMxMTAvBgNV BAMTKDdDNTU2QzY5NENDN0NDMUYyMjM1NUY3NzFBRDI5RkM5MDI0N0NDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62ce8ppX1nF6nNWSftFiaTd2s r4W0gdBvItr/NlvIZGW34Ixl0zbxKNpaoDcmhbH1/BcxnMxqw6WXtkSQrR6Mdyax cWJFjUNa73H5J1QGBM52XskFQ/LB6psEFkoiNwEsFLURDbR6NRYVZgDcq2U8cd1A 4fvxqDI9bXM9MQklYcQqAq3YjPjHgIZvOo1pokuiwZu0WUxt0QEkcj1L57zo3Co+ rKul0fGeAfu7LhnS0tWIBGRaauUhgdlKc/yu2jB9k0ajdwlzY2u45XmRNewWniet HLixd2zujEpnpFc5JpizKvAUo83Nc1SelWitfb3/YHBrYrXewaNTQvSmDyc1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfFVsaUzHzB8iNV93GtKfyQJHzIswHwYDVR0j BBgwFoAUVxX5aGRurghXbszvP6usJQpApHswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTUxNGQ2MS05OWZmLTQyYTktYmE5YS01OTYxZGQ2OGRiNjUvMC81NzE1Rjk2ODY0 NkVBRTA4NTc2RUNDRUYzRkFCQUMyNTBBNDBBNDdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUwQTQw QTQ3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFD MjUwQTQwQTQ3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2H8ZbRrNy5LtbwW/RuafgZ7RCa7nms1oc/ 2/0aqIm0bXtu12ZQHCQmdyKucXXSMYfdHapUmmMZ85dXR7B6Opi+XhdEpZ5QHsog GqyTZBsr7t1ToxzwtTBSOaMB7YnQXHrIMfarYSP1iiMIfDv4ZD5Ma7ixBu8PZ0j3 +XBzydaSRRdnCNZZGYJIt7LyvK+KvOn6lfoXI9c77Up4k5wbXTHcgLMXWQjosjFm qDPAfI6ur6FTmv8Y7VZm08bS7voa33uLiBg8k2u8AU2hIOT8LUt0KeazJK6EmEma Wl9JP/NZIlb2kRtARlpX6uCh2yzKJ2ayRNW2d0z98ARKq3L3a/Y= -----END CERTIFICATE-----Generated at Mon Oct 20 18:53:27 2025 by rpki-client