$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: 9naOVZojTl1W10wnGyA1jLOJ1zTTMijwACAn0VIzUUg= Subject key identifier: 1E:15:29:29:8F:1F:23:C3:47:F1:6E:EC:8C:D6:6C:BD:1E:C5:77:02 Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 1567046BCE1923312953200F782D212DBD127297 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 01A4 Signing time: Mon 03 Nov 2025 04:40:56 +0000 Manifest this update: Mon 03 Nov 2025 04:35:56 +0000 Manifest next update: Thu 06 Nov 2025 07:48:56 +0000 Files and hashes: 1: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: H3EtcLEE0IGvam9Auuq3QSB3PLABMBbWzZsAbxF8fnQ=) 2: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: 907swenfI16Aft6qzAi5dpyEs6BxfNg+Ndea03NJnvc=) 3: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: QZQdkY65fg+CIyJVerJnUDYDEcN8Cdd7LVSrUAY7ziU=) 4: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: JhgF1MSWlQxw36SgZrQfFzd6pgr9ZX5Xk0n79qTJS9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:67:04:6b:ce:19:23:31:29:53:20:0f:78:2d:21:2d:bd:12:72:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Nov 3 04:35:56 2025 GMT Not After : Nov 6 07:48:56 2025 GMT Subject: CN=1E1529298F1F23C347F16EEC8CD66CBD1EC57702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1f:f6:ae:95:0f:67:ac:58:70:42:f5:d3:91: fe:ce:9b:94:f7:33:42:d7:6c:1d:e0:45:99:9a:74: 92:aa:c7:2f:bc:a7:b2:2b:37:3f:d4:ed:ed:00:d0: 8d:c2:cc:b1:6c:5a:ac:ae:c7:49:3e:f2:31:2f:2c: f9:44:5c:43:8a:8b:d9:21:a7:e9:9a:f8:c7:0c:92: 72:3b:eb:ed:d8:8f:98:ab:e5:f5:fb:d2:a4:18:4e: 51:09:32:ab:48:c7:8b:25:20:79:ce:d1:d6:89:5c: 82:d6:81:43:74:7c:1e:79:af:1b:03:81:25:42:4c: 02:ac:e6:92:1d:18:89:fb:93:e0:0a:86:b3:ce:90: d3:b4:48:e5:3d:76:03:3f:03:95:15:92:fc:6e:40: 86:c9:04:2b:ef:67:2d:91:93:a5:a6:aa:df:5d:f9: 1f:90:05:eb:45:a8:05:01:ac:1b:ad:65:c6:60:ba: 9d:82:4d:8f:b6:5c:90:14:23:3e:e1:03:44:7e:65: 99:3e:27:48:ec:6d:1e:5b:1c:46:7a:d9:7b:d1:0d: c1:8b:10:23:ef:6f:1f:51:b7:37:18:d0:c1:b8:ed: 2c:e0:e7:39:64:9b:b4:6e:ca:b1:b7:eb:5e:c4:3a: e5:da:0c:4e:da:63:a2:2f:21:cc:16:59:7e:33:5c: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:15:29:29:8F:1F:23:C3:47:F1:6E:EC:8C:D6:6C:BD:1E:C5:77:02 X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:97:95:d1:5d:bb:a9:e0:31:d4:fe:e3:4d:ae:c0:b3:3d:0f: c9:63:0f:cb:c0:5b:36:d4:2b:9e:5f:64:5d:fd:cd:62:fd:d6: 3c:d8:c3:2e:e7:6f:3d:aa:43:fe:c6:42:48:09:3b:b2:d3:9e: 36:5d:7a:72:36:50:ef:a7:45:b2:43:9c:ba:11:47:de:18:35: 12:76:77:09:87:4b:6a:02:db:34:cc:f5:5d:57:78:d1:63:a6: 71:26:4f:9d:15:bc:64:3d:3b:d6:b2:71:fd:f0:4e:1c:f9:4d: fa:79:c3:f1:5c:a0:38:37:fc:b4:00:5c:ae:be:b9:08:74:aa: fb:1d:fe:df:42:20:3f:6b:dc:5b:c4:fe:9b:12:a5:5e:f5:80: 0e:36:94:78:e3:09:dc:02:01:04:d1:ae:a7:3a:e6:5e:63:5d: 99:7b:9d:84:13:ad:80:2f:db:5b:8e:d6:9c:04:ab:bb:26:71: 35:d6:1d:95:cb:04:f7:06:69:6d:2e:85:14:37:aa:49:2b:f0: 87:35:22:5f:f7:87:d1:c6:15:23:01:28:08:a8:34:ca:6b:21: 32:9e:24:49:c4:1b:ee:e8:dc:8f:08:4a:72:cf:e7:1d:9b:f1: bd:fe:a1:a8:a6:29:41:8d:90:17:02:36:4c:3b:07:3e:ee:3d: 19:03:69:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWcEa84ZIzEpUyAPeC0hLb0ScpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNTExMDMwNDM1NTZaFw0yNTExMDYwNzQ4NTZaMDMxMTAvBgNV BAMTKDFFMTUyOTI5OEYxRjIzQzM0N0YxNkVFQzhDRDY2Q0JEMUVDNTc3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZH/aulQ9nrFhwQvXTkf7Om5T3 M0LXbB3gRZmadJKqxy+8p7IrNz/U7e0A0I3CzLFsWqyux0k+8jEvLPlEXEOKi9kh p+ma+McMknI76+3Yj5ir5fX70qQYTlEJMqtIx4slIHnO0daJXILWgUN0fB55rxsD gSVCTAKs5pIdGIn7k+AKhrPOkNO0SOU9dgM/A5UVkvxuQIbJBCvvZy2Rk6Wmqt9d +R+QBetFqAUBrButZcZgup2CTY+2XJAUIz7hA0R+ZZk+J0jsbR5bHEZ62XvRDcGL ECPvbx9RtzcY0MG47Szg5zlkm7RuyrG3617EOuXaDE7aY6IvIcwWWX4zXHY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHhUpKY8fI8NH8W7sjNZsvR7FdwIwHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiXldFdu6ngMdT+402uwLM9D8ljD8vAWzbU K55fZF39zWL91jzYwy7nbz2qQ/7GQkgJO7LTnjZdenI2UO+nRbJDnLoRR94YNRJ2 dwmHS2oC2zTM9V1XeNFjpnEmT50VvGQ9O9aycf3wThz5Tfp5w/FcoDg3/LQAXK6+ uQh0qvsd/t9CID9r3FvE/psSpV71gA42lHjjCdwCAQTRrqc65l5jXZl7nYQTrYAv 21uO1pwEq7smcTXWHZXLBPcGaW0uhRQ3qkkr8Ic1Il/3h9HGFSMBKAioNMprITKe JEnEG+7o3I8ISnLP5x2b8b3+oaimKUGNkBcCNkw7Bz7uPRkDaWA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:27:24 2025 by rpki-client