$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: xszNTLQfOI1/ZJgkjsgjt7bbv9R2NcJK2QheXB210ig= Subject key identifier: 80:59:F4:72:86:5E:01:EC:7A:9D:48:D6:70:D3:22:EE:51:7D:F9:FC Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 7CA8D0E148F448A2E60E4408426BD89DBED1F7FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: 0134 Signing time: Sun 02 Nov 2025 21:41:03 +0000 Manifest this update: Sun 02 Nov 2025 21:36:03 +0000 Manifest next update: Thu 06 Nov 2025 07:01:03 +0000 Files and hashes: 1: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: gnJk2WMuY0BVbB2mM7zhbBzJGZif31C8JrJjsRTG9ow=) 2: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: k7T1WAVGcP47xdl7c6BR+kqOTO8TZ63OjE6rrNOkvf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a8:d0:e1:48:f4:48:a2:e6:0e:44:08:42:6b:d8:9d:be:d1:f7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Nov 2 21:36:03 2025 GMT Not After : Nov 6 07:01:03 2025 GMT Subject: CN=8059F472865E01EC7A9D48D670D322EE517DF9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:f2:df:36:d1:50:96:4d:7f:c0:04:e4:a7: d3:83:c0:08:03:cd:d9:c9:ca:a8:93:c6:3f:0c:3d: 62:d0:9c:ce:b6:f4:72:0c:27:dd:a6:8f:f9:59:a7: 50:d1:30:25:60:ec:08:82:94:23:a6:23:ba:8b:a6: 0b:c0:5e:96:b9:34:d0:36:90:f8:c0:a3:cd:ff:3e: af:02:93:31:c3:30:cf:75:3f:65:7b:79:43:22:0f: 34:8f:39:24:af:68:fd:4f:6f:3f:14:c3:1e:31:58: 4b:12:29:20:62:20:24:48:62:9d:e6:7d:91:c9:88: 44:5c:e8:5d:9b:b0:c3:1f:8c:f4:72:ea:83:07:0d: 29:03:7b:6f:2a:0c:e6:86:61:2c:68:d1:b5:da:73: ee:56:5c:ec:82:fb:4c:4c:ae:57:ca:fd:3d:5d:00: 7c:36:5b:fc:7a:83:da:48:7c:ee:8f:29:b0:a3:cb: 7e:9e:d0:ff:51:01:ea:bc:62:4d:cc:e1:8b:1e:7a: 37:7b:f6:1f:5d:ca:74:a0:d9:9f:d0:41:6b:3b:a1: 8a:c6:3b:67:a9:2c:af:ff:33:bb:9c:36:c8:6d:57: e7:f1:b6:60:bc:7c:79:5f:8e:dc:3c:56:e6:03:75: 47:1c:1f:b9:53:a4:18:cb:39:8f:d9:5e:59:97:01: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:59:F4:72:86:5E:01:EC:7A:9D:48:D6:70:D3:22:EE:51:7D:F9:FC X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5c:e4:f8:2e:b6:a1:93:55:e2:3c:d5:5d:fa:3c:e3:ef:d0: 1e:f1:1e:11:d1:ad:73:e6:90:73:0c:2b:d5:d8:33:d8:ad:9a: b6:20:d2:a9:82:48:a1:82:6d:ae:f8:33:df:e2:96:86:69:39: 7a:79:3f:cb:2f:a1:35:18:b9:d6:48:ce:16:77:b6:71:b6:06: b3:3f:0b:e5:23:62:25:27:60:5d:e3:a8:ad:62:57:0c:e2:3f: 74:bf:af:08:30:ab:48:fd:63:a5:a4:83:ae:9d:3e:8c:b2:12: 46:fb:59:d9:b7:c5:3e:15:53:b9:b0:49:27:05:df:6e:42:c3: 11:8c:4c:07:50:5f:b0:1b:ae:96:c4:f9:97:8a:03:50:f6:5c: 30:55:98:a8:3d:a3:df:94:6d:53:d0:73:f0:76:15:25:d1:31: 7c:69:44:e0:b1:a3:88:ac:b2:8f:76:19:c9:12:c7:a2:c6:ba: f9:c4:51:21:fc:df:aa:89:4d:76:78:61:d2:8c:2f:d2:4c:a5: b0:ad:3c:6d:d5:a7:e6:bc:fd:09:c8:3a:39:9c:61:7f:5d:36: ab:87:aa:c2:d9:14:31:a5:28:44:2e:ab:a0:0c:19:56:26:5e: 73:f9:60:af:36:17:1d:25:ef:0e:d3:c1:18:3a:84:59:ca:63: e0:2c:02:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfKjQ4Uj0SKLmDkQIQmvYnb7R9/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNTExMDIyMTM2MDNaFw0yNTExMDYwNzAxMDNaMDMxMTAvBgNV BAMTKDgwNTlGNDcyODY1RTAxRUM3QTlENDhENjcwRDMyMkVFNTE3REY5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSFfLfNtFQlk1/wATkp9ODwAgD zdnJyqiTxj8MPWLQnM629HIMJ92mj/lZp1DRMCVg7AiClCOmI7qLpgvAXpa5NNA2 kPjAo83/Pq8CkzHDMM91P2V7eUMiDzSPOSSvaP1Pbz8Uwx4xWEsSKSBiICRIYp3m fZHJiERc6F2bsMMfjPRy6oMHDSkDe28qDOaGYSxo0bXac+5WXOyC+0xMrlfK/T1d AHw2W/x6g9pIfO6PKbCjy36e0P9RAeq8Yk3M4Yseejd79h9dynSg2Z/QQWs7oYrG O2epLK//M7ucNshtV+fxtmC8fHlfjtw8VuYDdUccH7lTpBjLOY/ZXlmXARHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgFn0coZeAex6nUjWcNMi7lF9+fwwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9c5PgutqGTVeI81V36POPv0B7xHhHRrXPm kHMMK9XYM9itmrYg0qmCSKGCba74M9/iloZpOXp5P8svoTUYudZIzhZ3tnG2BrM/ C+UjYiUnYF3jqK1iVwziP3S/rwgwq0j9Y6Wkg66dPoyyEkb7Wdm3xT4VU7mwSScF 325CwxGMTAdQX7AbrpbE+ZeKA1D2XDBVmKg9o9+UbVPQc/B2FSXRMXxpROCxo4is so92GckSx6LGuvnEUSH836qJTXZ4YdKML9JMpbCtPG3Vp+a8/QnIOjmcYX9dNquH qsLZFDGlKEQuq6AMGVYmXnP5YK82Fx0l7w7TwRg6hFnKY+AsAm8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:12 2025 by rpki-client