$ rpki-client -vvf repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft File: A715B65580762207B94EC6527AFBEDD69970A868.mft (raw, json) Hash identifier: ADW6yBL0Ajg1xMxDx6lCANN1C4BNCqTts5JFocIkCXo= Subject key identifier: 94:5F:79:64:72:AE:F4:95:CE:5F:3B:25:F6:B1:9A:67:7F:AB:7D:A6 Authority key identifier: A7:15:B6:55:80:76:22:07:B9:4E:C6:52:7A:FB:ED:D6:99:70:A8:68 Certificate issuer: /CN=A715B65580762207B94EC6527AFBEDD69970A868 Certificate serial: 7DBB72C6C4737D63FE57FB03A519278898E5A261 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft Manifest number: 0518 Signing time: Mon 20 Oct 2025 03:12:19 +0000 Manifest this update: Mon 20 Oct 2025 03:07:19 +0000 Manifest next update: Thu 23 Oct 2025 14:01:19 +0000 Files and hashes: 1: A715B65580762207B94EC6527AFBEDD69970A868.crl (hash: Qn3MJ0db0bcvwZOjx1AHgWTPC2Gj+tDFRvsMPzPLy7A=) 2: 3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa (hash: 6s+35i1PbBgpAAj3R2PbueLOCnOhVKs2T7rEnDWSY6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.crl rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:bb:72:c6:c4:73:7d:63:fe:57:fb:03:a5:19:27:88:98:e5:a2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A715B65580762207B94EC6527AFBEDD69970A868 Validity Not Before: Oct 20 03:07:19 2025 GMT Not After : Oct 23 14:01:19 2025 GMT Subject: CN=945F796472AEF495CE5F3B25F6B19A677FAB7DA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:8f:ce:93:9b:f7:e2:d8:ed:ea:1e:5e:cb: 98:10:ec:e4:c4:80:e1:aa:f9:d1:e9:bb:14:fc:6a: c3:d3:e4:ea:58:47:bd:5f:87:32:04:0c:8c:28:24: 62:55:af:9c:b9:d3:2d:72:51:03:88:60:cd:7a:ed: f1:18:4d:da:b6:86:96:5a:69:46:66:26:60:9b:7a: e8:26:89:5e:84:93:1a:98:c0:e7:b9:c6:3e:b8:f7: b0:90:d3:ed:6f:c9:01:86:e1:fe:a2:6d:d2:ed:e0: 53:ed:4a:a6:2d:62:26:f1:c0:ec:0c:05:1b:ad:c5: dd:ca:e4:7d:bf:2b:9b:a2:e4:7c:1e:8b:02:e9:8a: a1:e3:aa:c8:33:d8:69:f2:31:df:4a:4a:09:91:4c: 51:1b:cb:76:df:0f:83:7f:99:5b:0f:8b:9f:69:85: c2:35:18:ae:99:8b:a9:ae:7e:7e:21:d9:93:b4:6e: 39:af:e0:fe:b9:5b:32:3f:73:e5:4a:23:8f:78:65: f6:cc:1f:33:53:35:9c:50:3d:b3:3a:56:7c:c0:80: 3e:9e:e4:88:75:6b:17:8e:c4:19:b7:89:de:85:fd: 45:29:b4:13:96:43:76:97:6b:7f:99:40:82:4b:a9: 63:4d:10:fd:a4:c5:08:4d:1f:42:fe:d8:06:89:05: da:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5F:79:64:72:AE:F4:95:CE:5F:3B:25:F6:B1:9A:67:7F:AB:7D:A6 X509v3 Authority Key Identifier: keyid:A7:15:B6:55:80:76:22:07:B9:4E:C6:52:7A:FB:ED:D6:99:70:A8:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:44:a2:e2:da:2b:0a:51:fd:ec:cd:e1:7e:ba:c4:19:b8:6b: 7e:15:22:2a:79:57:a9:43:85:3b:ee:20:4b:7b:ff:16:cf:6f: 36:ea:67:16:08:f5:91:4e:24:65:37:e5:80:e7:bc:3a:83:e3: 62:5b:63:71:12:69:97:f3:2e:23:c1:22:c6:d5:75:19:2f:0b: dd:77:21:cf:7b:83:2d:68:a4:d4:7c:3a:68:d7:65:13:d2:5a: 31:f2:89:d0:d2:71:5c:6c:5c:07:89:fc:cc:56:22:68:89:47: 15:a9:cc:2d:b8:d3:cc:fe:23:93:1a:e6:e0:91:61:60:f2:aa: 21:77:83:dc:b4:05:a1:15:8c:8e:20:56:4e:67:40:42:67:b8: 31:66:bd:be:35:19:f0:79:d9:2b:9a:fb:52:b5:cd:10:26:4d: 90:a4:c0:98:2c:0c:b1:b3:f4:aa:17:38:8e:c7:41:60:97:54: 36:3d:87:42:db:f7:ec:e0:81:d5:2b:96:b7:32:a6:af:10:76: ee:6c:f7:44:78:eb:26:9d:a9:59:cb:92:f2:63:44:19:51:80: ed:bd:f7:8c:2f:3a:c7:34:e9:b1:5a:7a:15:ed:b3:71:65:cd: 51:95:58:06:fe:f5:18:e8:f3:ac:24:cf:c5:8c:d6:e1:f9:a2: 59:8e:b8:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbtyxsRzfWP+V/sDpRkniJjlomEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxNUI2NTU4MDc2MjIwN0I5NEVDNjUyN0FGQkVERDY5 OTcwQTg2ODAeFw0yNTEwMjAwMzA3MTlaFw0yNTEwMjMxNDAxMTlaMDMxMTAvBgNV BAMTKDk0NUY3OTY0NzJBRUY0OTVDRTVGM0IyNUY2QjE5QTY3N0ZBQjdEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzE4/Ok5v34tjt6h5ey5gQ7OTE gOGq+dHpuxT8asPT5OpYR71fhzIEDIwoJGJVr5y50y1yUQOIYM167fEYTdq2hpZa aUZmJmCbeugmiV6EkxqYwOe5xj6497CQ0+1vyQGG4f6ibdLt4FPtSqYtYibxwOwM BRutxd3K5H2/K5ui5HweiwLpiqHjqsgz2GnyMd9KSgmRTFEby3bfD4N/mVsPi59p hcI1GK6Zi6mufn4h2ZO0bjmv4P65WzI/c+VKI494ZfbMHzNTNZxQPbM6VnzAgD6e 5Ih1axeOxBm3id6F/UUptBOWQ3aXa3+ZQIJLqWNNEP2kxQhNH0L+2AaJBdrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlF95ZHKu9JXOXzsl9rGaZ3+rfaYwHwYDVR0j BBgwFoAUpxW2VYB2Ige5TsZSevvt1plwqGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzRiY2NkNS0yNTJjLTQ5NDctODcxYi0xNTZkZmZmZTc3MTcvMC9BNzE1QjY1NTgw NzYyMjA3Qjk0RUM2NTI3QUZCRURENjk5NzBBODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcxNUI2NTU4MDc2MjIwN0I5NEVDNjUyN0FGQkVERDY5OTcw QTg2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc0YmNjZDUtMjUyYy00OTQ3LTg3 MWItMTU2ZGZmZmU3NzE3LzAvQTcxNUI2NTU4MDc2MjIwN0I5NEVDNjUyN0FGQkVE RDY5OTcwQTg2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhEouLaKwpR/ezN4X66xBm4a34VIip5V6lD hTvuIEt7/xbPbzbqZxYI9ZFOJGU35YDnvDqD42JbY3ESaZfzLiPBIsbVdRkvC913 Ic97gy1opNR8OmjXZRPSWjHyidDScVxsXAeJ/MxWImiJRxWpzC2408z+I5Ma5uCR YWDyqiF3g9y0BaEVjI4gVk5nQEJnuDFmvb41GfB52Sua+1K1zRAmTZCkwJgsDLGz 9KoXOI7HQWCXVDY9h0Lb9+zggdUrlrcypq8Qdu5s90R46yadqVnLkvJjRBlRgO29 94wvOsc06bFaehXts3FlzVGVWAb+9Rjo86wkz8WM1uH5olmOuDE= -----END CERTIFICATE-----Generated at Mon Oct 20 14:42:53 2025 by rpki-client