$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: eWYtZcYuJoAX6ex/XJzJYU2/RJ16actqxdt99xCwiG0= Subject key identifier: 23:DC:47:4D:A9:BD:FF:A1:47:2E:62:B7:30:DA:CE:3A:00:5D:A5:FA Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 19AB5C4D9BB0590A5DC8E0BC96CD4417FE4A2DB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: 0138 Signing time: Tue 11 Nov 2025 16:41:06 +0000 Manifest this update: Tue 11 Nov 2025 16:36:06 +0000 Manifest next update: Sat 15 Nov 2025 04:35:06 +0000 Files and hashes: 1: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: SFHm4nAQrT9CUu/YYpbFcRgXI0ac6eGIej4JJTDrzqs=) 2: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: k7T1WAVGcP47xdl7c6BR+kqOTO8TZ63OjE6rrNOkvf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 20:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ab:5c:4d:9b:b0:59:0a:5d:c8:e0:bc:96:cd:44:17:fe:4a:2d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Nov 11 16:36:06 2025 GMT Not After : Nov 15 04:35:06 2025 GMT Subject: CN=23DC474DA9BDFFA1472E62B730DACE3A005DA5FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:20:44:25:b9:71:8f:ed:18:2b:52:a3:3a:69: 0f:09:97:c2:e2:a0:6d:fc:80:a6:5d:81:a9:5d:0e: 86:9d:14:66:7c:0e:1d:aa:88:57:4b:3a:80:03:c9: 8d:eb:05:90:fb:1d:ec:38:78:97:3d:33:ca:a5:c3: 49:e5:47:86:2e:21:ba:3c:ec:8d:ea:74:c8:de:66: 8e:4a:6d:a6:f4:bf:00:a3:f4:b3:d1:d4:fc:56:0e: 02:a3:12:6e:ab:38:67:20:40:8d:28:2d:27:9d:76: 96:eb:57:9a:9b:c4:69:32:a1:a9:5c:dd:2d:76:dd: 17:5e:16:62:40:ab:e0:4b:97:cb:70:f8:ad:93:98: 26:7f:89:a0:5d:1a:62:2a:c0:9f:11:90:92:2a:25: 23:32:d6:d8:48:2e:01:f0:c8:fa:eb:f6:45:69:2e: c3:1e:a3:52:40:1c:30:09:ea:e5:a4:fe:43:40:6a: 56:6e:52:41:e7:19:57:86:fb:bf:32:20:f9:58:61: f0:2b:8a:6b:bf:85:5c:4c:8b:2f:16:48:6b:26:89: b6:0e:74:75:43:4e:e8:37:74:ea:16:5b:f2:4d:88: 00:f3:2d:32:14:af:56:35:f2:80:a3:0b:f4:e3:75: 9c:dc:41:b3:a2:e5:f0:18:68:ae:69:ca:9b:d4:09: ee:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DC:47:4D:A9:BD:FF:A1:47:2E:62:B7:30:DA:CE:3A:00:5D:A5:FA X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ad:ac:d1:f7:4c:58:d8:20:b5:14:1b:e3:97:e8:67:4b:04: 01:4a:24:17:4b:15:d6:1d:f2:0a:a9:7e:33:07:2f:a2:1a:0a: eb:57:4f:82:72:7e:ff:04:7e:27:10:d6:ba:08:3b:4e:91:84: 17:4c:8e:fd:45:92:b5:01:5d:99:5b:3e:96:07:6f:8d:e7:76: 64:a8:a6:cd:eb:7d:70:e5:0c:1d:70:f6:73:33:52:72:17:f0: 08:44:3b:cb:a6:fa:1d:63:2a:e0:f4:4c:c2:e0:09:3f:b2:78: f6:78:54:26:c5:1f:2b:39:3f:6d:11:b6:ea:f0:20:3e:2d:67: d0:d9:7f:8c:21:02:ed:60:d4:a7:36:f4:e9:a7:4a:73:6a:a1: aa:f7:5e:01:35:b0:e3:7c:93:1e:68:1d:fd:27:31:b0:c5:3e: 7a:e6:ce:71:ad:bb:19:35:ce:d5:60:0e:b6:17:d6:d1:87:cf: f6:df:e0:e5:4d:76:b2:f7:60:72:01:04:1e:5a:50:a9:1e:cf: 9d:db:ee:ac:29:0e:ce:c3:57:64:38:37:5d:45:44:cd:a4:45: 3c:f9:c6:d3:86:fe:a3:d0:77:45:ba:19:5f:1f:0f:35:c5:59: ed:f5:ee:76:7f:04:8a:59:27:4b:ab:66:36:68:3e:2d:c3:ec: ad:12:0e:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGatcTZuwWQpdyOC8ls1EF/5KLbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNTExMTExNjM2MDZaFw0yNTExMTUwNDM1MDZaMDMxMTAvBgNV BAMTKDIzREM0NzREQTlCREZGQTE0NzJFNjJCNzMwREFDRTNBMDA1REE1RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWIEQluXGP7RgrUqM6aQ8Jl8Li oG38gKZdgaldDoadFGZ8Dh2qiFdLOoADyY3rBZD7Hew4eJc9M8qlw0nlR4YuIbo8 7I3qdMjeZo5Kbab0vwCj9LPR1PxWDgKjEm6rOGcgQI0oLSeddpbrV5qbxGkyoalc 3S123RdeFmJAq+BLl8tw+K2TmCZ/iaBdGmIqwJ8RkJIqJSMy1thILgHwyPrr9kVp LsMeo1JAHDAJ6uWk/kNAalZuUkHnGVeG+78yIPlYYfArimu/hVxMiy8WSGsmibYO dHVDTug3dOoWW/JNiADzLTIUr1Y18oCjC/TjdZzcQbOi5fAYaK5pypvUCe5bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI9xHTam9/6FHLmK3MNrOOgBdpfowHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmtrNH3TFjYILUUG+OX6GdLBAFKJBdLFdYd 8gqpfjMHL6IaCutXT4Jyfv8EficQ1roIO06RhBdMjv1FkrUBXZlbPpYHb43ndmSo ps3rfXDlDB1w9nMzUnIX8AhEO8um+h1jKuD0TMLgCT+yePZ4VCbFHys5P20Rturw ID4tZ9DZf4whAu1g1Kc29OmnSnNqoar3XgE1sON8kx5oHf0nMbDFPnrmznGtuxk1 ztVgDrYX1tGHz/bf4OVNdrL3YHIBBB5aUKkez53b7qwpDs7DV2Q4N11FRM2kRTz5 xtOG/qPQd0W6GV8fDzXFWe317nZ/BIpZJ0urZjZoPi3D7K0SDio= -----END CERTIFICATE-----Generated at Tue Nov 11 22:03:36 2025 by rpki-client