$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json) Hash identifier: uIQqiqmzNkzeEXyFkW9qnx108jd7KPGJLpraaLwJkDI= Subject key identifier: 61:7B:FE:71:92:A6:E6:C7:F0:C7:A5:79:6F:23:7D:B8:48:E5:62:64 Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Certificate serial: 43693495DC41AD3C0269E211ECCCEB6E33C7D487 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft Manifest number: 045E Signing time: Mon 27 Oct 2025 00:20:38 +0000 Manifest this update: Mon 27 Oct 2025 00:15:38 +0000 Manifest next update: Thu 30 Oct 2025 03:24:38 +0000 Files and hashes: 1: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: KGskRiaq/+lRAEP6f41FobsVw96uMstK/fLzsAVB4eg=) 2: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: AfMNHpqxnTJAtYDpiMETj2IF9fyE+lYtYwH/siDWtUE=) 3: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: inNvDvxX4hbCC8+Dho69jFxrO3UdsZFxdsWq+NYPKcc=) 4: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: ghtilaMZ6RJAQvHOL9rJ7eLcuLTYk5ZeH+7mykIlzjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:69:34:95:dc:41:ad:3c:02:69:e2:11:ec:cc:eb:6e:33:c7:d4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Validity Not Before: Oct 27 00:15:38 2025 GMT Not After : Oct 30 03:24:38 2025 GMT Subject: CN=617BFE7192A6E6C7F0C7A5796F237DB848E56264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:5c:ba:cf:08:7f:4a:65:7f:4e:b4:2a:dd: c9:02:d2:d1:38:00:f6:e2:c4:ad:b4:99:c2:03:ae: 49:aa:45:48:2d:7e:11:e3:f0:4c:9f:fe:7a:55:10: 7b:64:98:11:fe:dd:82:42:95:fc:e6:8e:22:92:6f: f0:d9:be:d6:0c:1d:4f:cd:68:22:99:14:13:c3:30: 8f:09:ff:88:8f:1c:e2:67:38:04:b5:48:21:0e:f0: 19:cc:05:7a:dd:2c:e8:e5:a6:b4:6d:b9:66:f5:e8: f9:61:aa:58:3b:4d:74:64:1c:cc:6d:ff:76:ad:83: 04:12:8c:a6:f7:f0:2a:c2:c4:ca:8f:76:cb:8a:65: eb:9a:9c:8b:53:f6:86:62:ef:b6:20:92:9c:c1:5e: 68:2c:fc:07:6b:ed:81:96:73:53:e7:b3:9e:10:77: e7:bd:99:4a:eb:34:70:79:d1:3d:2d:69:bf:e3:99: 6a:0b:e1:c6:c9:66:60:eb:f8:48:a1:af:68:3d:b7: 6a:b2:ed:61:50:97:69:30:1a:1e:3a:88:4c:d7:e1: 09:85:a9:b7:99:e3:36:28:b0:85:83:1d:bb:97:8e: 91:28:0f:22:c4:d2:1a:8a:a6:b1:36:84:a9:7f:6f: 7a:10:b1:7a:7e:ec:99:76:57:d6:b3:83:f6:bd:23: 29:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7B:FE:71:92:A6:E6:C7:F0:C7:A5:79:6F:23:7D:B8:48:E5:62:64 X509v3 Authority Key Identifier: keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:4d:b9:6b:0a:20:39:10:d0:1e:26:3a:fc:6f:d6:40:94:71: f9:4f:87:db:39:44:81:7a:14:50:43:b6:14:38:5b:19:ac:97: b2:ab:ce:ff:01:ba:59:b8:2b:87:7b:2c:a0:bd:b4:c4:86:79: 0b:63:5a:d2:5c:5b:42:d5:8a:43:f4:df:eb:4c:3b:c5:9a:b9: d6:73:4f:76:28:d2:9c:af:f6:43:ef:9d:91:95:db:be:3f:3c: c9:b0:83:da:24:9f:f8:0a:b2:90:85:7b:82:77:e2:58:e4:35: 55:dc:7e:53:51:03:ed:84:8e:06:72:c2:44:34:88:d5:81:e7: 0b:a9:d0:10:59:c3:84:e1:09:d8:d9:0f:2d:ba:20:87:36:a9: be:81:19:9c:fb:dd:7a:7e:ed:cb:96:2e:61:9e:cb:de:fd:d8: 29:af:26:d6:3e:aa:c4:37:73:84:d7:82:fe:3f:8d:1b:02:bc: 72:17:ab:16:48:c2:c8:03:f1:d5:de:4b:de:e0:e4:66:ba:95: 72:7d:9f:6d:a3:df:58:f4:8b:69:10:33:8e:0e:73:36:a6:41: 4b:91:a9:2e:35:fd:54:e3:9e:b7:b3:ec:18:16:7d:e6:2f:81: 0b:b8:ef:28:66:d5:67:fe:2f:eb:d4:97:1c:29:2c:72:fd:f0: 6d:81:e3:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ2k0ldxBrTwCaeIR7MzrbjPH1IcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1 Qzc3RTJDMTAeFw0yNTEwMjcwMDE1MzhaFw0yNTEwMzAwMzI0MzhaMDMxMTAvBgNV BAMTKDYxN0JGRTcxOTJBNkU2QzdGMEM3QTU3OTZGMjM3REI4NDhFNTYyNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONVy6zwh/SmV/TrQq3ckC0tE4 APbixK20mcIDrkmqRUgtfhHj8Eyf/npVEHtkmBH+3YJClfzmjiKSb/DZvtYMHU/N aCKZFBPDMI8J/4iPHOJnOAS1SCEO8BnMBXrdLOjlprRtuWb16Plhqlg7TXRkHMxt /3atgwQSjKb38CrCxMqPdsuKZeuanItT9oZi77YgkpzBXmgs/Adr7YGWc1Pns54Q d+e9mUrrNHB50T0tab/jmWoL4cbJZmDr+Eihr2g9t2qy7WFQl2kwGh46iEzX4QmF qbeZ4zYosIWDHbuXjpEoDyLE0hqKprE2hKl/b3oQsXp+7Jl2V9azg/a9IynvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYXv+cZKm5sfwx6V5byN9uEjlYmQwHwYDVR0j BBgwFoAUcV3G3qgP5dif3GgsGcezD1x34sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMC83MTVEQzZERUE4 MEZFNUQ4OUZEQzY4MkMxOUM3QjMwRjVDNzdFMkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1Qzc3 RTJDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0Iz MEY1Qzc3RTJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRNuWsKIDkQ0B4mOvxv1kCUcflPh9s5RIF6 FFBDthQ4Wxmsl7Krzv8Bulm4K4d7LKC9tMSGeQtjWtJcW0LVikP03+tMO8WaudZz T3Yo0pyv9kPvnZGV274/PMmwg9okn/gKspCFe4J34ljkNVXcflNRA+2EjgZywkQ0 iNWB5wup0BBZw4ThCdjZDy26IIc2qb6BGZz73Xp+7cuWLmGey9792CmvJtY+qsQ3 c4TXgv4/jRsCvHIXqxZIwsgD8dXeS97g5Ga6lXJ9n22j31j0i2kQM44OczamQUuR qS41/VTjnrez7BgWfeYvgQu47yhm1Wf+L+vUlxwpLHL98G2B4ys= -----END CERTIFICATE-----Generated at Tue Oct 28 08:33:06 2025 by rpki-client