$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft File: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft (raw, json) Hash identifier: hnNktoiCep3dV/EarpK7+5MbKyy+z64A2ynwadUFaY0= Subject key identifier: E9:16:5B:CB:3E:79:44:F1:71:2B:21:AC:29:76:00:53:25:15:C8:DE Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Certificate serial: 33C77FBD06A4ED5B5D2C99D4A6A575E967DC9C73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft Manifest number: 04C1 Signing time: Tue 04 Nov 2025 14:51:17 +0000 Manifest this update: Tue 04 Nov 2025 14:46:17 +0000 Manifest next update: Fri 07 Nov 2025 19:49:17 +0000 Files and hashes: 1: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl (hash: 6Tm+2v2xkCnf3IrFnF1qDYPSFipMg6tI164rgy6EUHQ=) 2: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: MItE47EaO9IAk0e+oiW0dyxlfEYvief1VP6PIxAt77c=) 3: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: AO7wu2Q7QW+RPhPuz6APgWm6cf6PGEEupVDtRJV53rE=) 4: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: yIuwDJ7Q95tfvD77KhegvlF4CTHEd3Lu6i61741Xn4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 19:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c7:7f:bd:06:a4:ed:5b:5d:2c:99:d4:a6:a5:75:e9:67:dc:9c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Validity Not Before: Nov 4 14:46:17 2025 GMT Not After : Nov 7 19:49:17 2025 GMT Subject: CN=E9165BCB3E7944F1712B21AC297600532515C8DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:09:45:4b:53:cc:c9:8f:c3:fb:8d:24:0f:66: 06:2b:bf:25:1f:0a:4a:b6:6f:14:f1:87:b8:a0:5e: 0a:06:78:78:55:99:bb:f6:28:65:25:51:94:eb:37: 8d:2c:85:70:8c:3e:44:fc:45:31:72:56:e6:49:9b: 01:81:fb:d1:08:13:d7:8b:a1:68:b4:b8:9b:76:74: ff:1e:7e:6e:6a:e2:23:10:55:41:07:e0:0d:46:83: 13:69:02:92:e8:fe:a4:dc:25:98:95:67:9b:de:00: 67:f7:a1:eb:7d:ba:f3:de:33:8a:cc:89:9d:d3:7e: 43:20:0d:89:8c:1d:31:52:ad:26:4b:a7:be:a0:49: 8c:e7:9d:36:61:b8:5e:74:bc:bd:b4:5d:4e:88:05: ed:1f:5f:5c:5e:b5:5d:c3:15:26:67:ad:38:92:a4: 5f:94:b1:b8:30:92:b3:00:0b:44:77:b4:a5:91:40: 58:3e:42:f5:d1:13:67:20:40:27:a6:3b:77:b7:14: 4c:da:7f:7a:29:14:ca:ae:3c:39:5b:83:b6:b0:d8: 4b:eb:f3:0e:0d:02:41:0f:0f:67:43:0d:37:ac:51: 2b:c7:5b:69:5c:25:38:64:6b:59:b7:fc:2b:e3:94: 1f:64:a4:d9:62:02:ca:52:80:28:2f:d0:7d:5c:a4: 54:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:16:5B:CB:3E:79:44:F1:71:2B:21:AC:29:76:00:53:25:15:C8:DE X509v3 Authority Key Identifier: keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:41:1a:9c:15:ee:c9:10:a5:b8:c4:15:40:1f:ac:81:61:70: bc:20:d7:0d:2c:72:9c:52:bd:f7:03:40:ac:34:0f:2b:34:73: 70:a0:d9:e8:5f:1f:e8:f9:37:ce:1f:9b:28:41:41:fa:c8:02: d4:44:2a:7a:23:3e:34:5b:84:c0:5f:4a:09:9f:60:ce:be:fd: 82:c2:bf:1d:7c:64:f9:46:7c:a5:37:17:33:40:94:c0:53:72: 84:8a:a3:8b:0b:ab:99:de:80:9b:79:88:b0:f3:0e:01:29:a5: 44:96:f2:b7:a1:cc:e2:0b:04:f3:0f:60:18:2a:04:1d:6e:a9: d4:4c:94:a2:e5:8b:29:8c:28:cb:56:ba:7a:8d:0a:db:fd:23: 5e:ec:1f:a4:9d:72:de:6d:a4:e1:c1:10:ca:4d:50:a5:e7:a7: 39:02:ec:70:35:57:1f:ac:7b:79:2e:83:d9:9d:5b:df:7d:c4: 17:25:58:e4:f9:b8:47:cf:09:3e:23:57:af:b8:f7:98:73:be: 32:83:61:9a:fc:eb:29:d8:ca:f1:c5:5d:ba:2a:ac:f9:e3:a1: 64:18:ce:34:08:8a:b4:67:f3:21:a4:b5:7e:bd:ca:6d:3a:69: 29:59:9e:2d:c2:8f:95:4a:7b:c8:57:72:42:e6:e6:d5:75:7c: 73:eb:3c:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8d/vQak7VtdLJnUpqV16WfcnHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3 QjQ1Q0IzNTAeFw0yNTExMDQxNDQ2MTdaFw0yNTExMDcxOTQ5MTdaMDMxMTAvBgNV BAMTKEU5MTY1QkNCM0U3OTQ0RjE3MTJCMjFBQzI5NzYwMDUzMjUxNUM4REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeCUVLU8zJj8P7jSQPZgYrvyUf Ckq2bxTxh7igXgoGeHhVmbv2KGUlUZTrN40shXCMPkT8RTFyVuZJmwGB+9EIE9eL oWi0uJt2dP8efm5q4iMQVUEH4A1GgxNpApLo/qTcJZiVZ5veAGf3oet9uvPeM4rM iZ3TfkMgDYmMHTFSrSZLp76gSYznnTZhuF50vL20XU6IBe0fX1xetV3DFSZnrTiS pF+UsbgwkrMAC0R3tKWRQFg+QvXRE2cgQCemO3e3FEzaf3opFMquPDlbg7aw2Evr 8w4NAkEPD2dDDTesUSvHW2lcJThka1m3/CvjlB9kpNliAspSgCgv0H1cpFR/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6RZbyz55RPFxKyGsKXYAUyUVyN4wHwYDVR0j BBgwFoAUFbfr+Ss1/bW8aZC7jsosKXtFyzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjU1MWFiOS04MDQxLTRhOWEtOWI1MC1jN2M2ZGVjMjE2NmYvMC8xNUI3RUJGOTJC MzVGREI1QkM2OTkwQkI4RUNBMkMyOTdCNDVDQjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3QjQ1 Q0IzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJD Mjk3QjQ1Q0IzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxBGpwV7skQpbjEFUAfrIFhcLwg1w0scpxS vfcDQKw0Dys0c3Cg2ehfH+j5N84fmyhBQfrIAtREKnojPjRbhMBfSgmfYM6+/YLC vx18ZPlGfKU3FzNAlMBTcoSKo4sLq5negJt5iLDzDgEppUSW8rehzOILBPMPYBgq BB1uqdRMlKLliymMKMtWunqNCtv9I17sH6Sdct5tpOHBEMpNUKXnpzkC7HA1Vx+s e3kug9mdW999xBclWOT5uEfPCT4jV6+495hzvjKDYZr86ynYyvHFXboqrPnjoWQY zjQIirRn8yGktX69ym06aSlZni3Cj5VKe8hXckLm5tV1fHPrPC8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:26:42 2025 by rpki-client