$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: XZSDrkaicHioPGvsNssVNQo2s6PDC6EEtcaStD553/c= Subject key identifier: 0A:47:75:B5:34:5D:B7:67:77:14:C0:83:2F:AD:63:D2:4A:BE:1E:2B Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 23400383017B15A2AAAB89DCA4C532546FE7F860 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: F1 Signing time: Sun 02 Nov 2025 22:31:34 +0000 Manifest this update: Sun 02 Nov 2025 22:26:34 +0000 Manifest next update: Thu 06 Nov 2025 09:13:34 +0000 Files and hashes: 1: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: QQpr+eFgDnDV6dW0jBe6UZBlNBi/9bplH6NmwOQToWM=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 93YYxDDq8+f/Khx/2GnLN/kmjkNijzZ2VSNum/bWLqg=) 3: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: 5HetFGZszR8N+jVJsMmxP9KoRUdy7YyfVMX9PkmHTvY=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: THBM8LqDnCB9g6mrX4v3sCaW9RltHiaa0G5I3swxXAw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:40:03:83:01:7b:15:a2:aa:ab:89:dc:a4:c5:32:54:6f:e7:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Nov 2 22:26:34 2025 GMT Not After : Nov 6 09:13:34 2025 GMT Subject: CN=0A4775B5345DB7677714C0832FAD63D24ABE1E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:86:6f:18:78:7e:48:17:ad:c0:8b:da:47:f1: ec:aa:53:0b:41:82:86:cc:7d:55:ae:4c:61:01:1c: ff:cf:3d:be:6e:08:7a:bb:2c:f1:78:8a:ef:ca:4f: 99:67:95:04:7f:0e:9f:40:92:cb:c0:36:e5:3c:54: 37:34:83:94:21:ed:ec:99:08:a1:5a:a9:5c:71:4e: b8:b6:e8:fc:71:bd:48:a7:e4:6a:35:fc:21:d8:a3: 67:90:93:db:dc:18:55:2a:dd:1b:aa:af:be:89:37: a7:4d:45:96:ca:30:f8:8a:4a:71:20:d6:fa:2e:83: 97:65:f1:51:4f:04:f0:78:9f:00:58:93:24:80:89: 64:d0:d0:99:e4:64:cd:b0:a3:76:3f:a2:9d:18:35: 4e:69:42:6d:b1:aa:8e:ac:c7:70:d8:5f:41:8a:1f: 01:ad:5e:8c:5b:f0:40:89:b6:6a:06:f1:e8:29:c2: d6:d8:f2:bf:40:ce:19:e3:fa:36:fb:ea:a9:3f:5a: 7e:ec:5d:04:c9:8e:af:8d:2a:cc:fa:cb:c9:d0:b0: 5a:c4:94:ac:4f:0c:c7:f8:43:2a:21:35:17:90:12: 3a:cb:3a:24:01:90:99:73:f4:6c:66:98:04:39:58: 33:12:3b:c3:22:4e:00:84:73:de:75:ad:95:f9:96: 67:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:47:75:B5:34:5D:B7:67:77:14:C0:83:2F:AD:63:D2:4A:BE:1E:2B X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c0:01:cc:f7:1f:cf:6b:3f:95:b8:5b:67:e5:9f:23:4c:ac: 15:b3:ea:2c:f1:e7:1e:eb:48:1e:b8:a6:3a:88:9d:58:02:c9: 59:c9:a6:ae:b6:34:4e:7b:08:45:09:b5:d6:95:a0:cb:89:c7: f9:1c:19:ff:4b:97:71:9d:b0:0b:3e:28:d3:69:45:a6:19:32: e0:61:d8:e4:29:b7:26:eb:1b:6f:85:75:a7:a7:2d:55:2b:cf: c4:9c:ce:1f:39:33:d9:c8:14:06:34:ff:55:a4:a9:04:c3:df: ef:25:be:d3:ee:20:8a:79:a7:de:04:2d:ea:21:eb:e5:4b:ea: 7f:f9:3e:c5:19:0b:25:ff:d5:af:a6:82:a3:67:b1:ca:cb:cb: 8f:ab:a6:29:4e:00:02:50:19:e2:15:00:1a:12:c0:c5:f3:e9: bf:d1:e9:15:a2:6e:4b:33:12:96:3c:ea:0c:d7:fc:a5:74:30: 41:d0:22:b8:03:eb:9f:75:0f:b6:73:03:79:7b:55:13:c8:64: 73:cf:e5:d0:55:0e:3d:3f:68:d3:ad:e4:f2:06:05:09:67:37: 7a:03:e5:53:57:04:f9:ec:72:3f:11:a0:66:1a:26:4d:b9:28: db:1e:9f:cb:d8:28:32:d8:61:55:3e:6a:33:ad:0c:2a:b9:05: 95:36:d9:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0ADgwF7FaKqq4ncpMUyVG/n+GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNTExMDIyMjI2MzRaFw0yNTExMDYwOTEzMzRaMDMxMTAvBgNV BAMTKDBBNDc3NUI1MzQ1REI3Njc3NzE0QzA4MzJGQUQ2M0QyNEFCRTFFMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhm8YeH5IF63Ai9pH8eyqUwtB gobMfVWuTGEBHP/PPb5uCHq7LPF4iu/KT5lnlQR/Dp9AksvANuU8VDc0g5Qh7eyZ CKFaqVxxTri26PxxvUin5Go1/CHYo2eQk9vcGFUq3Ruqr76JN6dNRZbKMPiKSnEg 1voug5dl8VFPBPB4nwBYkySAiWTQ0JnkZM2wo3Y/op0YNU5pQm2xqo6sx3DYX0GK HwGtXoxb8ECJtmoG8egpwtbY8r9Azhnj+jb76qk/Wn7sXQTJjq+NKsz6y8nQsFrE lKxPDMf4QyohNReQEjrLOiQBkJlz9GxmmAQ5WDMSO8MiTgCEc951rZX5lmdRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCkd1tTRdt2d3FMCDL61j0kq+HiswHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/AAcz3H89rP5W4W2flnyNMrBWz6izx5x7r SB64pjqInVgCyVnJpq62NE57CEUJtdaVoMuJx/kcGf9Ll3GdsAs+KNNpRaYZMuBh 2OQptybrG2+FdaenLVUrz8Sczh85M9nIFAY0/1WkqQTD3+8lvtPuIIp5p94ELeoh 6+VL6n/5PsUZCyX/1a+mgqNnscrLy4+rpilOAAJQGeIVABoSwMXz6b/R6RWibksz EpY86gzX/KV0MEHQIrgD6591D7ZzA3l7VRPIZHPP5dBVDj0/aNOt5PIGBQlnN3oD 5VNXBPnscj8RoGYaJk25KNsen8vYKDLYYVU+ajOtDCq5BZU22Uw= -----END CERTIFICATE-----Generated at Wed Nov 5 03:39:03 2025 by rpki-client