$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: X7VI/xUcKkvb6kTy9CF84A8pXxm1ot4sDzkcypmJStA= Subject key identifier: 76:DB:2F:2B:D8:9E:D7:24:99:86:2B:67:85:7F:CD:0B:01:15:8B:15 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 4BF8969FC5D6C3FCAE92721142B38B71CFD3D01C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 0317 Signing time: Sun 19 Oct 2025 04:40:54 +0000 Manifest this update: Sun 19 Oct 2025 04:35:54 +0000 Manifest next update: Wed 22 Oct 2025 07:34:54 +0000 Files and hashes: 1: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: D/PcBq4zPTe/Zjy08SZNg2157schOHqd2g9fhyBR7Qk=) 2: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=) 3: 3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (hash: NPTNkAFeiU4perz1lh+B9xb1IjABewQG5b/Cldme2U8=) 4: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: z85xof54DRtz327x0y44Pw+jx9DlTvA8Q/kbbufAMJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f8:96:9f:c5:d6:c3:fc:ae:92:72:11:42:b3:8b:71:cf:d3:d0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Oct 19 04:35:54 2025 GMT Not After : Oct 22 07:34:54 2025 GMT Subject: CN=76DB2F2BD89ED72499862B67857FCD0B01158B15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:74:ca:5d:d5:f7:7b:9a:b6:57:fc:4f:b7: f1:dc:9c:54:18:c9:01:e2:61:fc:41:f9:36:69:82: 02:1a:4a:81:b3:3a:ce:2c:0d:eb:a7:e2:7e:b4:0f: cd:3b:22:9d:87:74:c8:04:1c:c3:da:06:aa:70:be: 65:4e:6a:f9:ea:22:6c:e5:ca:ad:58:30:62:c3:16: 40:ae:99:52:bb:fe:12:ad:9d:6c:49:81:0f:01:de: 88:31:62:a1:5b:18:27:ed:ab:07:3f:34:af:0a:db: b0:7c:b2:cb:b4:e9:b3:c3:da:7b:f9:37:49:ae:a2: 47:fa:80:78:77:48:51:ed:6b:4d:57:f2:84:80:eb: dc:6a:8b:5f:61:3f:f7:80:e6:4b:37:80:49:ad:14: 89:9c:3f:40:fb:bf:64:c6:8b:13:2e:31:20:1a:0a: 9c:aa:dd:47:ff:36:f3:aa:1e:dd:b4:15:c6:98:01: d4:1a:a3:a1:f1:78:7d:be:3c:50:6b:3f:5a:b2:c0: b5:66:01:30:9e:5a:34:ef:03:26:4a:88:01:6b:cc: a9:66:23:dd:eb:0a:a7:3c:ab:c3:e5:ba:79:89:38: e0:9b:5d:9a:51:f8:88:59:b8:be:e2:98:f4:a3:06: 36:7a:08:8f:dd:d9:48:e8:71:d4:96:c3:39:bc:ae: 1c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DB:2F:2B:D8:9E:D7:24:99:86:2B:67:85:7F:CD:0B:01:15:8B:15 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:19:ae:91:36:09:ed:30:c0:4a:26:90:81:a2:a4:49:d1:4a: ed:a5:f6:c7:ec:09:fe:e1:69:48:62:06:aa:6e:ce:d4:0f:0e: d8:ea:ed:2a:0e:c7:1c:58:d9:94:e1:29:ae:03:20:ad:52:4a: 78:54:f8:f4:d3:6e:24:77:65:a2:d0:1e:c2:38:a9:ac:04:a3: 6a:53:cf:f3:6f:95:76:da:14:43:a7:93:6b:8b:b0:e3:a9:d2: 44:61:ef:57:9b:2a:f0:27:77:b1:db:da:95:5d:01:db:22:c7: 82:1c:e2:57:3f:10:12:03:86:93:9a:1e:63:2d:2e:e3:eb:70: 79:31:43:0e:81:a4:80:9e:71:07:e2:c1:a8:c1:91:e8:f0:3a: 5b:0f:4e:8f:e8:85:3a:a0:08:19:82:96:08:63:40:41:e6:65: 65:b9:96:ec:dd:66:82:0b:1e:15:e1:d3:2d:22:25:dd:c6:ac: 59:9e:65:41:1f:53:f4:42:0f:10:17:f0:12:05:ae:fe:5a:7e: 4b:ab:32:28:8c:24:5a:ec:43:46:40:17:cd:ed:dd:a9:f7:1b: db:6c:c8:5b:c2:be:64:ee:c0:b5:60:f9:74:7d:09:53:af:ac: 67:d2:9e:89:e1:dc:83:5a:92:68:ec:af:ff:4c:6a:bd:08:ec: 87:c7:a4:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/iWn8XWw/yuknIRQrOLcc/T0BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTEwMTkwNDM1NTRaFw0yNTEwMjIwNzM0NTRaMDMxMTAvBgNV BAMTKDc2REIyRjJCRDg5RUQ3MjQ5OTg2MkI2Nzg1N0ZDRDBCMDExNThCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9D3TKXdX3e5q2V/xPt/HcnFQY yQHiYfxB+TZpggIaSoGzOs4sDeun4n60D807Ip2HdMgEHMPaBqpwvmVOavnqImzl yq1YMGLDFkCumVK7/hKtnWxJgQ8B3ogxYqFbGCftqwc/NK8K27B8ssu06bPD2nv5 N0muokf6gHh3SFHta01X8oSA69xqi19hP/eA5ks3gEmtFImcP0D7v2TGixMuMSAa Cpyq3Uf/NvOqHt20FcaYAdQao6HxeH2+PFBrP1qywLVmATCeWjTvAyZKiAFrzKlm I93rCqc8q8PlunmJOOCbXZpR+IhZuL7imPSjBjZ6CI/d2UjocdSWwzm8rhxnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdtsvK9ie1ySZhitnhX/NCwEVixUwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsZrpE2Ce0wwEomkIGipEnRSu2l9sfsCf7h aUhiBqpuztQPDtjq7SoOxxxY2ZThKa4DIK1SSnhU+PTTbiR3ZaLQHsI4qawEo2pT z/NvlXbaFEOnk2uLsOOp0kRh71ebKvAnd7Hb2pVdAdsix4Ic4lc/EBIDhpOaHmMt LuPrcHkxQw6BpICecQfiwajBkejwOlsPTo/ohTqgCBmClghjQEHmZWW5luzdZoIL HhXh0y0iJd3GrFmeZUEfU/RCDxAX8BIFrv5afkurMiiMJFrsQ0ZAF83t3an3G9ts yFvCvmTuwLVg+XR9CVOvrGfSnonh3INakmjsr/9Mar0I7IfHpDE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:23 2025 by rpki-client