$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft File: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft (raw, json) Hash identifier: fxK2/PP3fu6FliqVKkDVktv3uG+X0grh/ZlJ4yuJKk4= Subject key identifier: B9:3B:0C:6F:68:D1:19:38:D6:1C:D4:D9:B6:16:BE:44:6A:B4:C4:D6 Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Certificate serial: 30815E2EDB9D5677EDEB11682A92D1D9D92B2E10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft Manifest number: 04BA Signing time: Sun 19 Oct 2025 10:01:18 +0000 Manifest this update: Sun 19 Oct 2025 09:56:18 +0000 Manifest next update: Wed 22 Oct 2025 19:52:18 +0000 Files and hashes: 1: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: yIuwDJ7Q95tfvD77KhegvlF4CTHEd3Lu6i61741Xn4E=) 2: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: AO7wu2Q7QW+RPhPuz6APgWm6cf6PGEEupVDtRJV53rE=) 3: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl (hash: oHf2FTkYsOsMXhGny/pZNHTSRXGRJkvjRZgs9jsrtr4=) 4: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: MItE47EaO9IAk0e+oiW0dyxlfEYvief1VP6PIxAt77c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:81:5e:2e:db:9d:56:77:ed:eb:11:68:2a:92:d1:d9:d9:2b:2e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Validity Not Before: Oct 19 09:56:18 2025 GMT Not After : Oct 22 19:52:18 2025 GMT Subject: CN=B93B0C6F68D11938D61CD4D9B616BE446AB4C4D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:85:2c:9d:f2:0a:19:b5:5e:d9:18:c6:7e: 10:e0:bb:a6:7f:ba:b1:0e:26:93:94:4d:2b:ba:d2: 57:20:99:8e:75:b8:9e:b5:bd:ac:be:74:9e:6f:f8: ec:88:f8:02:77:f3:c6:d1:34:bb:31:d2:9e:56:6b: 2c:af:d3:d0:76:cc:fe:ca:08:3d:c1:64:6b:08:b1: a1:0b:58:2f:6a:7d:4e:46:15:01:b8:7e:80:0b:b1: 08:84:fb:2d:56:a8:63:21:3b:3e:b6:85:a9:2f:2d: fd:c7:55:71:ae:d2:f6:22:41:58:1d:a6:54:65:1c: b7:f0:3b:43:d9:16:a1:31:bb:e6:df:ba:6c:2a:f1: 76:ff:98:07:e8:2c:96:14:c6:d8:a3:a2:ae:52:8f: 11:b4:52:8c:b8:48:be:35:1b:a9:78:9e:93:7b:3c: aa:5c:fe:98:b3:bd:d4:24:c1:8c:0d:6a:40:4d:06: 2c:c4:b3:6d:32:26:f8:91:74:6a:9e:ac:4e:e5:68: f8:d3:dd:e7:42:2c:88:24:ed:ab:27:98:b8:73:22: 6b:24:9a:c8:a2:de:5c:5f:e8:59:a4:12:00:73:e5: 9e:fc:07:46:5b:f4:c8:e3:77:83:cf:db:0b:80:34: af:90:96:f2:8a:75:88:51:3a:bb:27:02:ef:24:1f: ce:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3B:0C:6F:68:D1:19:38:D6:1C:D4:D9:B6:16:BE:44:6A:B4:C4:D6 X509v3 Authority Key Identifier: keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:87:21:6a:33:c1:ef:44:bf:b5:ab:8e:77:2b:63:ef:7a:0c: ee:44:51:8f:9a:69:8b:c0:3b:51:48:96:a8:0f:2c:d2:eb:7e: 9b:71:6e:a7:13:81:b6:af:bf:c9:04:66:a0:ea:e9:bf:da:4d: ef:3b:d0:76:ff:57:ed:b3:d7:71:ae:20:38:6e:a2:f2:e2:77: 09:0a:6a:c5:ff:e6:a3:5d:df:c9:6d:87:9f:49:6f:d5:38:7d: d6:e8:42:9a:22:42:f1:85:73:2a:8c:ef:6c:96:90:60:02:2b: a2:b8:6a:be:26:74:c3:44:0e:72:e3:a1:3a:73:29:cb:7a:0b: 81:01:41:7a:f2:16:c8:76:41:6b:a4:7c:16:bc:30:3d:4e:65: f3:83:34:f5:96:57:6f:26:5b:cd:0f:da:ed:ca:cc:8a:2b:d2: 1f:2d:22:fa:e7:1a:9e:4a:bc:b4:ea:49:99:3d:93:f2:1d:fc: d2:01:3f:80:7d:f6:96:0c:1f:5b:ce:f0:b1:76:d0:46:a5:66: 91:98:e8:eb:e5:b2:58:3c:b1:b4:c8:d8:22:c5:74:90:c3:17: e7:cf:9f:8d:74:3a:81:40:d2:31:62:63:c6:6f:5c:cf:de:e3: 22:2b:ee:5b:50:e5:b3:c2:49:23:63:7d:82:b7:79:15:db:83: 0b:dd:47:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMIFeLtudVnft6xFoKpLR2dkrLhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3 QjQ1Q0IzNTAeFw0yNTEwMTkwOTU2MThaFw0yNTEwMjIxOTUyMThaMDMxMTAvBgNV BAMTKEI5M0IwQzZGNjhEMTE5MzhENjFDRDREOUI2MTZCRTQ0NkFCNEM0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDYUsnfIKGbVe2RjGfhDgu6Z/ urEOJpOUTSu60lcgmY51uJ61vay+dJ5v+OyI+AJ388bRNLsx0p5Wayyv09B2zP7K CD3BZGsIsaELWC9qfU5GFQG4foALsQiE+y1WqGMhOz62hakvLf3HVXGu0vYiQVgd plRlHLfwO0PZFqExu+bfumwq8Xb/mAfoLJYUxtijoq5SjxG0Uoy4SL41G6l4npN7 PKpc/pizvdQkwYwNakBNBizEs20yJviRdGqerE7laPjT3edCLIgk7asnmLhzImsk msii3lxf6FmkEgBz5Z78B0Zb9Mjjd4PP2wuANK+QlvKKdYhROrsnAu8kH87FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuTsMb2jRGTjWHNTZtha+RGq0xNYwHwYDVR0j BBgwFoAUFbfr+Ss1/bW8aZC7jsosKXtFyzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjU1MWFiOS04MDQxLTRhOWEtOWI1MC1jN2M2ZGVjMjE2NmYvMC8xNUI3RUJGOTJC MzVGREI1QkM2OTkwQkI4RUNBMkMyOTdCNDVDQjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3QjQ1 Q0IzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJD Mjk3QjQ1Q0IzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuHIWozwe9Ev7WrjncrY+96DO5EUY+aaYvA O1FIlqgPLNLrfptxbqcTgbavv8kEZqDq6b/aTe870Hb/V+2z13GuIDhuovLidwkK asX/5qNd38lth59Jb9U4fdboQpoiQvGFcyqM72yWkGACK6K4ar4mdMNEDnLjoTpz Kct6C4EBQXryFsh2QWukfBa8MD1OZfODNPWWV28mW80P2u3KzIor0h8tIvrnGp5K vLTqSZk9k/Id/NIBP4B99pYMH1vO8LF20EalZpGY6Ovlslg8sbTI2CLFdJDDF+fP n410OoFA0jFiY8ZvXM/e4yIr7ltQ5bPCSSNjfYK3eRXbgwvdR/4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:36:37 2025 by rpki-client