$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: KsBRU8AyQ9JRMqPWjDKU5m4Zz94BtxRCigCMesjIBGg= Subject key identifier: 4F:88:88:22:7C:16:3C:44:93:E4:60:4D:22:5F:8E:2E:73:5E:CE:00 Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 3BB68DE30432E6EAD5C810225CC105D3233F9740 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 0188 Signing time: Mon 03 Nov 2025 12:31:43 +0000 Manifest this update: Mon 03 Nov 2025 12:26:43 +0000 Manifest next update: Thu 06 Nov 2025 22:14:43 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: E4T0PDjwEBHhZ8rTA7NcZIYLEz1fBZeS9wMtn/x/Srs=) 2: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: eebbaU9D24srRwLLDjhH3Gb9Ffk+0AMZdq/x3Fci1NA=) 3: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: uhx7f62Ggz5l/cVcfH9jWzm2ztUkrcmwRgsCgq9+JQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b6:8d:e3:04:32:e6:ea:d5:c8:10:22:5c:c1:05:d3:23:3f:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: Nov 3 12:26:43 2025 GMT Not After : Nov 6 22:14:43 2025 GMT Subject: CN=4F8888227C163C4493E4604D225F8E2E735ECE00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:53:29:74:3c:76:f8:6e:ff:ec:5e:bc:17:e1: 64:d1:50:bf:95:62:1e:cc:6b:32:22:e8:65:49:13: bb:de:70:b5:91:4b:6c:2f:d6:81:6b:7d:ff:b8:df: 2c:9d:52:cf:9e:ed:e0:b5:b6:59:54:a1:54:22:fc: cc:aa:cb:e8:a9:dd:ee:56:89:c0:f7:71:12:40:d3: e1:5e:7f:bb:34:b7:61:1a:a2:5b:f6:35:7b:91:62: d3:58:b0:86:74:27:13:5e:26:4d:e8:75:49:00:27: 1a:97:dd:d5:6a:14:b1:fe:2d:49:cf:0c:af:24:fb: 51:97:0c:c8:8d:81:0b:47:09:f2:b2:eb:60:4b:a1: 4e:fe:b2:6a:1b:40:b5:2e:8e:2e:22:fd:fe:06:9c: a4:81:22:fe:89:46:ee:d7:09:e2:1e:22:43:e5:a6: c2:ab:bf:09:e1:e0:f4:8c:be:b9:52:f9:b7:12:ae: b2:55:bf:46:3a:0c:60:b0:fc:de:00:7a:2e:1d:3c: 76:0a:e5:a5:e0:8e:0a:d8:d9:68:0a:0e:07:d2:09: ac:1b:4e:bd:13:ec:f1:93:2f:ad:35:16:82:51:5c: d4:1b:66:a9:79:4b:f6:bc:0f:fa:90:4f:04:a4:73: 1a:ea:ae:c3:e5:49:ad:6d:cc:ce:80:1e:0e:ac:a2: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:88:88:22:7C:16:3C:44:93:E4:60:4D:22:5F:8E:2E:73:5E:CE:00 X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:20:0f:f0:07:e2:84:99:aa:53:ee:3f:b6:2f:cd:36:10:54: 40:66:9b:a5:cd:bd:a0:fb:7b:d0:5b:65:ec:74:ac:72:54:be: 40:9b:fc:76:1f:90:1b:1d:2b:9a:be:e5:76:7a:c2:b7:57:0a: 0d:9a:b0:f9:9d:f4:cf:01:33:ef:99:ca:7b:dc:c8:cb:48:f6: c4:ac:fa:66:02:ef:71:e9:59:d9:ad:ab:f1:37:bd:91:cc:1c: dc:e2:b6:2f:b1:f8:68:dc:c4:b5:34:a2:38:9a:f4:88:38:18: 93:52:0a:7f:bd:37:e5:7d:9e:7a:00:bb:cf:cb:ec:ef:43:11: 91:cb:68:87:a8:4d:4d:43:60:e7:19:83:f2:5d:a7:83:cc:3e: 94:78:91:c5:01:3b:8a:42:b6:cc:08:64:9e:ba:9c:05:5d:6d: 05:f7:28:7f:c5:f2:e7:b8:09:37:fe:6e:27:96:65:f3:30:90: 5c:00:82:04:8d:4f:2b:23:83:60:3c:db:94:30:f7:54:d9:95: 94:db:48:e8:e5:a8:f0:d3:f3:75:ad:d0:6a:e3:54:7f:b5:22: 2e:4c:5a:91:b3:06:3f:f2:08:9a:f8:25:26:a7:58:fa:b9:b5: 16:8d:f8:34:49:e3:c3:c8:3b:69:3c:41:42:33:35:f3:62:7b: bb:07:01:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7aN4wQy5urVyBAiXMEF0yM/l0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2 QUNEODcxNzAeFw0yNTExMDMxMjI2NDNaFw0yNTExMDYyMjE0NDNaMDMxMTAvBgNV BAMTKDRGODg4ODIyN0MxNjNDNDQ5M0U0NjA0RDIyNUY4RTJFNzM1RUNFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUyl0PHb4bv/sXrwX4WTRUL+V Yh7MazIi6GVJE7vecLWRS2wv1oFrff+43yydUs+e7eC1tllUoVQi/Myqy+ip3e5W icD3cRJA0+Fef7s0t2Eaolv2NXuRYtNYsIZ0JxNeJk3odUkAJxqX3dVqFLH+LUnP DK8k+1GXDMiNgQtHCfKy62BLoU7+smobQLUuji4i/f4GnKSBIv6JRu7XCeIeIkPl psKrvwnh4PSMvrlS+bcSrrJVv0Y6DGCw/N4Aei4dPHYK5aXgjgrY2WgKDgfSCawb Tr0T7PGTL601FoJRXNQbZql5S/a8D/qQTwSkcxrqrsPlSa1tzM6AHg6sohklAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT4iIInwWPEST5GBNIl+OLnNezgAwHwYDVR0j BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHogD/AH4oSZqlPuP7YvzTYQVEBmm6XNvaD7 e9BbZex0rHJUvkCb/HYfkBsdK5q+5XZ6wrdXCg2asPmd9M8BM++ZynvcyMtI9sSs +mYC73HpWdmtq/E3vZHMHNziti+x+GjcxLU0ojia9Ig4GJNSCn+9N+V9nnoAu8/L 7O9DEZHLaIeoTU1DYOcZg/Jdp4PMPpR4kcUBO4pCtswIZJ66nAVdbQX3KH/F8ue4 CTf+bieWZfMwkFwAggSNTysjg2A825Qw91TZlZTbSOjlqPDT83Wt0GrjVH+1Ii5M WpGzBj/yCJr4JSanWPq5tRaN+DRJ48PIO2k8QUIzNfNie7sHAdE= -----END CERTIFICATE-----Generated at Wed Nov 5 00:38:23 2025 by rpki-client