$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: HPs5dG9EYegr2nYALGTuB8ho//E/+ojFqpPzjpU2Ob4= Subject key identifier: 8F:64:7A:92:5D:82:77:5C:E6:09:09:E3:65:AB:00:98:37:FF:47:C8 Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 080442E8249E9302A310389E6D7E64C2ADA4C48E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 0160 Signing time: Tue 05 Aug 2025 15:51:43 +0000 Manifest this update: Tue 05 Aug 2025 15:46:43 +0000 Manifest next update: Fri 08 Aug 2025 16:02:43 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: E4T0PDjwEBHhZ8rTA7NcZIYLEz1fBZeS9wMtn/x/Srs=) 2: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: eebbaU9D24srRwLLDjhH3Gb9Ffk+0AMZdq/x3Fci1NA=) 3: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: DCMR2a8lucezyNbkN/QcU35QBKFgFnykooOFaw5G+70=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 16:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:04:42:e8:24:9e:93:02:a3:10:38:9e:6d:7e:64:c2:ad:a4:c4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: Aug 5 15:46:43 2025 GMT Not After : Aug 8 16:02:43 2025 GMT Subject: CN=8F647A925D82775CE60909E365AB009837FF47C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:3c:7c:02:24:ee:46:0c:41:5f:fc:c4:89: 7d:a0:63:0c:ee:82:f1:f3:19:ae:04:14:bd:b0:d4: ff:dd:9b:ef:97:19:e3:6a:76:52:72:f6:9c:41:cb: 4e:f8:7a:a8:d6:d3:58:d0:d6:86:81:cd:7c:b0:f4: c5:9b:08:10:b9:47:25:85:3d:6b:86:dc:3c:66:ea: dd:6d:60:28:64:1e:8b:82:dc:d3:98:0f:cb:f7:76: 44:85:8b:90:ac:4f:25:95:9d:b6:c0:83:a9:16:55: 23:ef:08:37:d6:73:88:b4:70:4d:ca:90:90:8b:90: e2:fb:46:95:36:0e:8f:f0:7f:af:3b:46:ca:47:0b: 01:d7:75:2b:10:6f:c7:ff:cc:bc:db:d3:ad:88:e4: bd:02:5b:e3:7d:8d:d5:47:46:e6:08:30:7c:9f:a7: 08:73:e7:fa:15:86:87:e5:da:14:fb:6f:5f:60:de: e6:51:50:4f:97:1c:6f:58:00:52:71:6a:ca:54:8c: 80:f5:6d:47:ff:fa:3c:73:d3:5f:4a:71:56:a6:c9: a1:e5:cc:76:ad:cf:3c:79:3f:ec:f1:42:ca:55:5e: 68:47:28:86:32:88:7e:47:e8:2f:97:a2:ca:0c:4f: 4c:61:c4:6b:bf:d5:41:08:12:40:07:71:b7:44:b0: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:64:7A:92:5D:82:77:5C:E6:09:09:E3:65:AB:00:98:37:FF:47:C8 X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d3:8a:36:79:09:4f:27:e8:d9:d3:2d:a0:07:97:24:cd:b5: 6f:12:9d:2c:33:f9:49:b4:57:5b:1e:60:04:09:69:e3:22:e4: 47:84:69:4f:09:93:4f:91:b6:e1:0e:8f:7e:15:eb:b0:f5:c1: d4:96:c3:8c:b4:c1:33:ff:d7:ce:ec:8d:6c:cb:3a:ea:a9:a0: 08:69:81:c0:e9:52:95:18:05:6f:1e:83:a0:28:de:9d:ed:8b: b5:71:45:e7:6d:ef:9e:c8:aa:28:c3:ed:30:e9:31:74:70:2d: 5e:66:55:27:94:98:84:f1:17:7d:23:05:77:d8:d7:db:38:b0: 6c:70:1f:7e:75:08:66:d8:dc:9c:6e:85:37:ab:23:d8:7d:c1: e3:8b:c1:20:0a:36:4f:b4:18:8b:45:0b:cd:17:02:e8:1f:6e: af:f2:ac:e9:ab:21:e1:23:2a:c8:db:ee:55:7e:ab:7d:ca:35: 9d:5a:5c:d2:ea:ef:ec:04:b6:2f:8a:5c:aa:ac:59:61:c8:b2: a0:02:c4:22:46:01:4e:19:97:5e:1f:d0:87:67:69:f3:87:15: b4:50:dd:7a:9c:df:10:25:8d:fe:38:89:6a:57:dd:09:c3:a3: 9d:21:8b:21:59:2b:10:de:4e:15:17:db:75:78:12:95:b4:a7: b3:c8:26:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCARC6CSekwKjEDiebX5kwq2kxI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2 QUNEODcxNzAeFw0yNTA4MDUxNTQ2NDNaFw0yNTA4MDgxNjAyNDNaMDMxMTAvBgNV BAMTKDhGNjQ3QTkyNUQ4Mjc3NUNFNjA5MDlFMzY1QUIwMDk4MzdGRjQ3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCydjx8AiTuRgxBX/zEiX2gYwzu gvHzGa4EFL2w1P/dm++XGeNqdlJy9pxBy074eqjW01jQ1oaBzXyw9MWbCBC5RyWF PWuG3Dxm6t1tYChkHouC3NOYD8v3dkSFi5CsTyWVnbbAg6kWVSPvCDfWc4i0cE3K kJCLkOL7RpU2Do/wf687RspHCwHXdSsQb8f/zLzb062I5L0CW+N9jdVHRuYIMHyf pwhz5/oVhofl2hT7b19g3uZRUE+XHG9YAFJxaspUjID1bUf/+jxz019KcVamyaHl zHatzzx5P+zxQspVXmhHKIYyiH5H6C+XosoMT0xhxGu/1UEIEkAHcbdEsEvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj2R6kl2Cd1zmCQnjZasAmDf/R8gwHwYDVR0j BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLTijZ5CU8n6NnTLaAHlyTNtW8SnSwz+Um0 V1seYAQJaeMi5EeEaU8Jk0+RtuEOj34V67D1wdSWw4y0wTP/187sjWzLOuqpoAhp gcDpUpUYBW8eg6Ao3p3ti7VxRedt757IqijD7TDpMXRwLV5mVSeUmITxF30jBXfY 19s4sGxwH351CGbY3JxuhTerI9h9weOLwSAKNk+0GItFC80XAugfbq/yrOmrIeEj Ksjb7lV+q33KNZ1aXNLq7+wEti+KXKqsWWHIsqACxCJGAU4Zl14f0IdnafOHFbRQ 3Xqc3xAljf44iWpX3QnDo50hiyFZKxDeThUX23V4EpW0p7PIJlU= -----END CERTIFICATE-----Generated at Thu Aug 7 11:07:04 2025 by rpki-client