$ rpki-client -vvf repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft File: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft (raw, json) Hash identifier: 3V2ApaqoJqs/Xq913NEB23ijicl5IqRLbGdHyYTRHb0= Subject key identifier: 15:41:AC:AB:5A:83:94:73:DD:DF:A9:4A:A3:E7:3C:C8:16:EF:47:92 Authority key identifier: 21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE Certificate issuer: /CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Certificate serial: 09AF53AC125C4A9B11BA5F8153046F1B0837009C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft Manifest number: 0498 Signing time: Sat 18 Oct 2025 11:10:54 +0000 Manifest this update: Sat 18 Oct 2025 11:05:54 +0000 Manifest next update: Tue 21 Oct 2025 16:31:54 +0000 Files and hashes: 1: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: beBQaTk2//EAP6NnfuhmfkJxxOAnhB8nJqrnoVbonBA=) 2: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl (hash: KMoTahdXfOEocf9tYoXJEXDRXF2RSnXKZiXwx9+QqDs=) 3: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: NxUfSTs+o4y49KJqzzCvLvRJmV1ctiR4iGydszaWllw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:af:53:ac:12:5c:4a:9b:11:ba:5f:81:53:04:6f:1b:08:37:00:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Validity Not Before: Oct 18 11:05:54 2025 GMT Not After : Oct 21 16:31:54 2025 GMT Subject: CN=1541ACAB5A839473DDDFA94AA3E73CC816EF4792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b6:27:ad:c9:46:40:cb:72:cc:32:6a:e6:97: b9:4a:e1:bf:6f:b2:0e:e0:1f:a0:27:fe:c9:12:40: 22:3c:d9:55:13:d5:93:7e:15:ec:74:d3:72:af:3d: 92:65:62:fb:42:1d:b7:62:6c:f2:8d:9e:c2:c6:d3: 9c:c6:f4:a0:e2:4d:50:50:b6:e8:4c:2f:eb:58:92: db:39:51:3c:9b:55:87:f2:f2:6e:f3:18:5c:2f:a4: 2a:52:ac:79:45:7b:f2:39:44:a8:fe:87:29:63:81: af:d3:cf:1b:8d:98:b2:e7:4b:12:8b:4f:fe:87:02: dd:53:4d:8e:d3:46:13:3d:2b:75:85:fd:ad:b6:95: 2c:d2:ec:87:e6:dd:6d:63:52:d1:3f:46:93:62:df: 31:6d:34:0c:8d:26:78:b3:cc:c3:ea:d5:8d:67:05: 48:f6:6f:16:0a:e5:14:3c:9a:e7:f9:63:21:c1:f1: dd:be:6c:df:b5:f8:3d:ab:3b:3d:31:01:0e:71:62: 5d:8e:6e:e7:e2:ed:9c:1e:3e:8b:51:e9:20:17:70: cf:c2:07:ae:45:bc:d2:a2:a1:9a:86:4a:33:f0:46: 66:03:72:7d:55:aa:9f:18:6b:a0:aa:54:d5:96:89: ec:a5:08:4f:af:82:ea:7e:33:5c:d6:b3:11:48:6d: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:41:AC:AB:5A:83:94:73:DD:DF:A9:4A:A3:E7:3C:C8:16:EF:47:92 X509v3 Authority Key Identifier: keyid:21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:49:a2:ae:a3:aa:fb:e8:e6:9e:cf:52:4b:17:e5:57:a1:fe: 19:55:38:db:01:40:de:d1:e1:82:42:d8:47:98:16:e7:12:0f: e5:c5:6c:08:4e:d2:1e:4a:40:0a:3a:90:58:1a:bc:04:a8:a6: cd:45:14:9f:74:26:78:c7:1f:e0:89:13:27:70:ef:d9:2c:c7: 3a:be:45:46:95:f1:9e:c3:61:9e:d6:5c:b8:6e:1e:df:62:be: ba:4c:44:c7:b5:16:e4:ff:94:54:55:53:7a:58:a8:e3:5a:20: 9e:65:94:93:66:a8:a5:0d:15:9f:cc:83:7e:da:45:63:ca:50: 5a:f3:05:34:8f:04:0f:75:c9:06:de:39:ab:f4:94:7b:2f:45: ec:55:20:e4:68:07:36:3b:e3:f0:1b:bd:02:e4:da:c7:6e:80: 86:62:c9:0d:ad:1a:47:59:0c:f2:87:8b:3c:e3:47:29:b2:ab: 88:df:4e:4f:65:0d:6a:f5:79:b5:2c:6a:b2:49:f2:b8:3d:df: ab:79:bc:04:c7:2f:ac:fa:1c:db:b4:1d:50:8a:56:47:e4:77: 94:24:a7:d4:f9:94:dd:9b:4a:aa:21:17:a1:b3:87:94:26:22: 75:8d:2e:df:b9:66:04:a4:02:9c:ef:8e:ea:e9:e2:10:b2:2c: 9e:50:2c:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCa9TrBJcSpsRul+BUwRvGwg3AJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNB MDk2QjJGRTAeFw0yNTEwMTgxMTA1NTRaFw0yNTEwMjExNjMxNTRaMDMxMTAvBgNV BAMTKDE1NDFBQ0FCNUE4Mzk0NzNERERGQTk0QUEzRTczQ0M4MTZFRjQ3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYtietyUZAy3LMMmrml7lK4b9v sg7gH6An/skSQCI82VUT1ZN+Fex003KvPZJlYvtCHbdibPKNnsLG05zG9KDiTVBQ tuhML+tYkts5UTybVYfy8m7zGFwvpCpSrHlFe/I5RKj+hyljga/TzxuNmLLnSxKL T/6HAt1TTY7TRhM9K3WF/a22lSzS7Ifm3W1jUtE/RpNi3zFtNAyNJnizzMPq1Y1n BUj2bxYK5RQ8muf5YyHB8d2+bN+1+D2rOz0xAQ5xYl2Obufi7ZwePotR6SAXcM/C B65FvNKioZqGSjPwRmYDcn1Vqp8Ya6CqVNWWieylCE+vgup+M1zWsxFIbZ35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUGsq1qDlHPd36lKo+c8yBbvR5IwHwYDVR0j BBgwFoAUIV/H5eIrjEaRDU18ohTJI6CWsv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2VhYzljMC1kZTFiLTQ2ZGQtYmYzNy0xOGZlM2E4ZDVmYmYvMC8yMTVGQzdFNUUy MkI4QzQ2OTEwRDREN0NBMjE0QzkyM0EwOTZCMkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNBMDk2 QjJGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm MzctMThmZTNhOGQ1ZmJmLzAvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5 MjNBMDk2QjJGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZJoq6jqvvo5p7PUksX5Veh/hlVONsBQN7R 4YJC2EeYFucSD+XFbAhO0h5KQAo6kFgavASops1FFJ90JnjHH+CJEydw79ksxzq+ RUaV8Z7DYZ7WXLhuHt9ivrpMRMe1FuT/lFRVU3pYqONaIJ5llJNmqKUNFZ/Mg37a RWPKUFrzBTSPBA91yQbeOav0lHsvRexVIORoBzY74/AbvQLk2sdugIZiyQ2tGkdZ DPKHizzjRymyq4jfTk9lDWr1ebUsarJJ8rg936t5vATHL6z6HNu0HVCKVkfkd5Qk p9T5lN2bSqohF6Gzh5QmInWNLt+5ZgSkApzvjurp4hCyLJ5QLF8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:44 2025 by rpki-client