$ rpki-client -vvf repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft File: 15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft (raw, json) Hash identifier: STIl6MKrKEunuowrLs+4UDiWk5M9lSyStCVIyoFeqwY= Subject key identifier: DB:7C:C3:17:05:C2:5A:7E:96:70:2B:D1:00:5D:4A:75:50:AD:D2:50 Authority key identifier: 15:B7:AA:B4:83:55:A9:8C:76:1D:D2:7A:58:9D:F6:02:A4:D3:8E:3D Certificate issuer: /CN=15B7AAB48355A98C761DD27A589DF602A4D38E3D Certificate serial: 1BEAAA78B34A8DA2A7842A1ACE6A7ACB0F9866E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft Manifest number: 0191 Signing time: Sun 02 Nov 2025 09:31:30 +0000 Manifest this update: Sun 02 Nov 2025 09:26:30 +0000 Manifest next update: Wed 05 Nov 2025 13:46:30 +0000 Files and hashes: 1: 3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa (hash: 7kydv1XIv8/JAr4nfh+b4R84/a7ZfF4+fcId+aE1Hhc=) 2: 15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl (hash: d9RBB1g2lVC2rUp/LRbT9cekeeheYSuFXOhE/derfUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 13:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ea:aa:78:b3:4a:8d:a2:a7:84:2a:1a:ce:6a:7a:cb:0f:98:66:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B7AAB48355A98C761DD27A589DF602A4D38E3D Validity Not Before: Nov 2 09:26:30 2025 GMT Not After : Nov 5 13:46:30 2025 GMT Subject: CN=DB7CC31705C25A7E96702BD1005D4A7550ADD250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c4:c9:c8:31:5d:8e:9c:ed:b7:14:75:fa:32: 07:e1:78:2c:8e:fd:3a:44:16:f6:96:e8:e1:fd:61: 82:84:0e:8e:21:52:97:f3:16:64:be:20:2e:df:67: 3f:aa:5b:5e:8b:e5:88:2c:4f:3c:ce:52:ee:20:2c: f7:e2:d2:4f:a9:dd:aa:b9:fe:b7:6d:f1:18:89:0a: e1:f2:c9:bc:64:7e:ad:18:4e:ea:91:d2:ef:f5:b8: 79:08:97:34:54:e9:9b:2e:71:3c:cc:e7:30:1c:ce: 44:fe:78:4c:3f:cf:7c:96:63:32:5d:c1:e1:3b:c8: b6:ad:c1:48:f1:2d:f0:39:0d:08:ad:29:51:66:bd: 92:16:ed:7f:a7:f2:79:0b:0f:df:a1:0d:cc:2c:7e: d5:7f:2c:20:2e:77:12:99:13:f7:e3:0b:d5:10:0e: 7b:72:a5:b7:20:04:2a:3d:95:d6:4f:2e:51:76:fb: 22:18:f9:db:3a:25:5b:b0:e0:2c:17:df:2a:1b:f3: 3f:da:65:2f:e4:9f:3e:8d:27:98:bd:db:9c:9c:9e: e5:09:56:82:2e:d7:58:f5:44:ad:c2:f9:56:82:45: 15:cb:61:63:5f:1a:93:e6:7a:1e:b0:49:6d:d7:fe: fa:c6:3d:85:03:cd:f7:06:07:1e:d8:76:da:18:a6: 5c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7C:C3:17:05:C2:5A:7E:96:70:2B:D1:00:5D:4A:75:50:AD:D2:50 X509v3 Authority Key Identifier: keyid:15:B7:AA:B4:83:55:A9:8C:76:1D:D2:7A:58:9D:F6:02:A4:D3:8E:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:8f:28:15:12:03:af:b6:d5:7b:15:5b:54:ce:1e:95:eb:1c: 52:23:c1:1c:fe:27:68:7a:a1:b1:97:35:4f:4b:cd:2f:39:9b: 07:c1:9f:4d:44:b2:d7:d9:b2:9d:53:f8:6e:45:5d:f0:16:40: 16:5f:cd:4a:96:a9:5e:db:1e:d9:6b:23:84:19:a9:a0:e3:44: de:21:eb:4a:1e:95:5c:76:e8:ff:1e:8c:22:de:63:7a:64:d5: 23:13:4e:7d:07:c8:69:55:52:4e:c5:6e:69:63:b9:d3:ed:c1: ff:f2:01:c7:d1:b3:76:22:47:ce:5c:68:0e:bb:10:50:8c:23: 88:cc:67:83:7a:79:b3:f6:09:82:2c:b7:83:80:e7:b0:59:30: 09:30:db:82:ab:cc:69:4f:4c:e9:a8:e5:2a:7d:af:05:78:79: 47:a8:f7:4a:7b:e2:32:70:c2:62:0d:a3:6d:c1:65:ca:10:7a: 1d:21:08:f8:e9:0b:d7:97:a2:4e:f9:f1:31:fb:62:d0:c4:a9: 4e:59:80:6e:b1:09:77:04:66:cc:f1:28:25:f5:cb:ea:6a:0c: 79:57:35:ca:49:e8:dd:7f:d0:cd:52:15:04:ff:ce:ec:a4:5b: 78:59:f5:17:fc:13:e7:75:62:71:b6:68:5e:d0:06:7e:4b:2c: 46:79:37:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+qqeLNKjaKnhCoazmp6yw+YZuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCN0FBQjQ4MzU1QTk4Qzc2MUREMjdBNTg5REY2MDJB NEQzOEUzRDAeFw0yNTExMDIwOTI2MzBaFw0yNTExMDUxMzQ2MzBaMDMxMTAvBgNV BAMTKERCN0NDMzE3MDVDMjVBN0U5NjcwMkJEMTAwNUQ0QTc1NTBBREQyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxMnIMV2OnO23FHX6MgfheCyO /TpEFvaW6OH9YYKEDo4hUpfzFmS+IC7fZz+qW16L5YgsTzzOUu4gLPfi0k+p3aq5 /rdt8RiJCuHyybxkfq0YTuqR0u/1uHkIlzRU6ZsucTzM5zAczkT+eEw/z3yWYzJd weE7yLatwUjxLfA5DQitKVFmvZIW7X+n8nkLD9+hDcwsftV/LCAudxKZE/fjC9UQ DntypbcgBCo9ldZPLlF2+yIY+ds6JVuw4CwX3yob8z/aZS/knz6NJ5i925ycnuUJ VoIu11j1RK3C+VaCRRXLYWNfGpPmeh6wSW3X/vrGPYUDzfcGBx7YdtoYplzzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU23zDFwXCWn6WcCvRAF1KdVCt0lAwHwYDVR0j BBgwFoAUFbeqtINVqYx2HdJ6WJ32AqTTjj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODY1OTlhNi1kODZiLTQ3MWEtYTA1Yi1hOWZhZmUzYmI2OWEvMC8xNUI3QUFCNDgz NTVBOThDNzYxREQyN0E1ODlERjYwMkE0RDM4RTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCN0FBQjQ4MzU1QTk4Qzc2MUREMjdBNTg5REY2MDJBNEQz OEUzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg2NTk5YTYtZDg2Yi00NzFhLWEw NWItYTlmYWZlM2JiNjlhLzAvMTVCN0FBQjQ4MzU1QTk4Qzc2MUREMjdBNTg5REY2 MDJBNEQzOEUzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJePKBUSA6+21XsVW1TOHpXrHFIjwRz+J2h6 obGXNU9LzS85mwfBn01EstfZsp1T+G5FXfAWQBZfzUqWqV7bHtlrI4QZqaDjRN4h 60oelVx26P8ejCLeY3pk1SMTTn0HyGlVUk7FbmljudPtwf/yAcfRs3YiR85caA67 EFCMI4jMZ4N6ebP2CYIst4OA57BZMAkw24KrzGlPTOmo5Sp9rwV4eUeo90p74jJw wmINo23BZcoQeh0hCPjpC9eXok758TH7YtDEqU5ZgG6xCXcEZszxKCX1y+pqDHlX NcpJ6N1/0M1SFQT/zuykW3hZ9Rf8E+d1YnG2aF7QBn5LLEZ5N/s= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:41 2025 by rpki-client