$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: 7SGQNkMXRpu862jV1c1ktHpQ4zF6kB7saK1TUcvaXsM= Subject key identifier: 66:86:DA:8E:EA:2F:4C:2A:85:95:C2:61:BA:63:10:53:E6:04:E3:20 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 5A8E5DF283612FA512637259B4CE9A3EBDEE7D53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 0210 Signing time: Mon 20 Oct 2025 00:31:56 +0000 Manifest this update: Mon 20 Oct 2025 00:26:56 +0000 Manifest next update: Thu 23 Oct 2025 06:29:56 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: IIT6Qq+WKHZT1FWNEwNGhar79TWVN7nggeNnhQjHiao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:8e:5d:f2:83:61:2f:a5:12:63:72:59:b4:ce:9a:3e:bd:ee:7d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Oct 20 00:26:56 2025 GMT Not After : Oct 23 06:29:56 2025 GMT Subject: CN=6686DA8EEA2F4C2A8595C261BA631053E604E320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:d5:2a:84:a6:f8:55:1b:5c:ef:f8:82:75: 87:45:cc:83:50:b0:3d:58:e0:41:91:0f:77:68:e5: 62:1e:23:90:05:c4:ad:55:df:09:27:1d:99:bc:55: 4c:20:84:af:a8:a6:84:66:22:f9:c1:87:37:56:28: f9:e6:34:ea:58:c8:6f:55:ec:80:b2:24:5b:9b:90: 0a:9a:4b:24:32:d9:3a:67:7d:06:de:7a:15:45:0c: ea:2f:13:cf:13:48:7b:58:b9:64:c1:e2:18:b8:f6: bb:cd:b2:6e:65:22:af:ae:3e:99:4a:3e:34:0c:6e: 26:6a:90:88:68:38:6e:03:5e:2e:fc:2d:33:2c:fc: 14:65:18:59:bd:79:6d:cf:ec:ed:62:19:10:d8:29: e4:d1:a4:5c:1c:6d:1c:50:98:2e:ee:f4:62:9c:5d: f1:c4:45:c1:14:58:63:a2:e0:bf:0e:fc:ee:35:0e: 1e:b0:8b:e0:43:91:1d:be:6d:13:5a:80:75:db:fe: 1c:91:8e:81:4c:58:af:e2:88:f0:34:a1:ce:76:c2: 3f:b7:4e:8a:25:24:4f:9a:55:7f:d3:6d:6a:5e:7f: e7:d9:09:72:2d:6e:7b:52:92:7e:5b:5c:5a:8a:3a: 3d:65:9a:86:94:8f:e5:d8:5c:f6:5f:e9:74:4b:4d: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:86:DA:8E:EA:2F:4C:2A:85:95:C2:61:BA:63:10:53:E6:04:E3:20 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:47:0a:da:e3:6b:01:25:0b:69:96:5a:14:3e:ab:79:13:70: aa:c3:04:2e:4b:f5:29:8b:47:b1:14:b3:82:37:8a:7f:e1:4b: 19:33:07:cc:3c:20:ba:03:35:06:f3:90:6e:1e:1f:22:76:37: 42:69:9c:7d:66:a1:e1:95:4d:3f:91:26:b8:4a:a4:86:d2:35: 35:51:f2:a7:06:47:4b:44:29:89:7f:2e:25:42:da:87:10:df: 0e:a8:e0:55:a2:ca:d5:aa:48:b4:2f:81:72:0e:d5:50:23:69: 1d:be:38:6a:9c:3c:09:a0:e8:4f:53:7c:53:33:fe:b1:cf:5c: 41:86:2d:6c:83:d1:54:9b:93:29:ef:81:61:53:29:79:b8:c1: a8:72:09:e3:68:c0:6f:17:7a:88:81:87:34:8e:3c:9d:bb:e6: d7:d4:c5:36:33:d8:b9:ac:17:03:70:3d:62:45:8e:fe:61:49: 5d:71:f8:3f:c0:81:9f:f0:fd:dc:3c:97:70:89:be:4e:1c:94: 96:41:14:43:25:75:13:85:cc:ec:1b:84:2b:46:a6:66:74:39: d4:b3:36:db:84:f4:a9:82:d9:b4:fc:b2:c7:f4:ac:5a:36:49: 78:b2:a4:79:4b:e7:ea:bf:b0:54:c1:ec:21:32:e8:23:c7:23: 56:1f:0d:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWo5d8oNhL6USY3JZtM6aPr3ufVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNTEwMjAwMDI2NTZaFw0yNTEwMjMwNjI5NTZaMDMxMTAvBgNV BAMTKDY2ODZEQThFRUEyRjRDMkE4NTk1QzI2MUJBNjMxMDUzRTYwNEUzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFdUqhKb4VRtc7/iCdYdFzINQ sD1Y4EGRD3do5WIeI5AFxK1V3wknHZm8VUwghK+opoRmIvnBhzdWKPnmNOpYyG9V 7ICyJFubkAqaSyQy2TpnfQbeehVFDOovE88TSHtYuWTB4hi49rvNsm5lIq+uPplK PjQMbiZqkIhoOG4DXi78LTMs/BRlGFm9eW3P7O1iGRDYKeTRpFwcbRxQmC7u9GKc XfHERcEUWGOi4L8O/O41Dh6wi+BDkR2+bRNagHXb/hyRjoFMWK/iiPA0oc52wj+3 ToolJE+aVX/TbWpef+fZCXItbntSkn5bXFqKOj1lmoaUj+XYXPZf6XRLTYRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZobajuovTCqFlcJhumMQU+YE4yAwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItHCtrjawElC2mWWhQ+q3kTcKrDBC5L9SmL R7EUs4I3in/hSxkzB8w8ILoDNQbzkG4eHyJ2N0JpnH1moeGVTT+RJrhKpIbSNTVR 8qcGR0tEKYl/LiVC2ocQ3w6o4FWiytWqSLQvgXIO1VAjaR2+OGqcPAmg6E9TfFMz /rHPXEGGLWyD0VSbkynvgWFTKXm4wahyCeNowG8XeoiBhzSOPJ275tfUxTYz2Lms FwNwPWJFjv5hSV1x+D/AgZ/w/dw8l3CJvk4clJZBFEMldROFzOwbhCtGpmZ0OdSz NtuE9KmC2bT8ssf0rFo2SXiypHlL5+q/sFTB7CEy6CPHI1YfDbY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:08 2025 by rpki-client