$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json) Hash identifier: AexffPlYraCVBmv88YLDTc8rhjS+VO0z3nYuRu5KHOY= Subject key identifier: C9:E5:A3:FD:1F:4B:E9:80:5C:7D:FE:A3:BE:12:69:6D:D5:85:8A:53 Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Certificate serial: 4D8E24E022C518A036FDC9517DC97E71D6729A59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft Manifest number: 0448 Signing time: Sun 07 Sep 2025 20:50:36 +0000 Manifest this update: Sun 07 Sep 2025 20:45:36 +0000 Manifest next update: Thu 11 Sep 2025 00:57:36 +0000 Files and hashes: 1: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: 7RWhZV5MYXUYiYNkd85RAVyLOukc5sAyXZ6ueOU8ZdQ=) 2: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: FPq/J2wRAjS89GyiaYlBp0d9JuDryTtq4ncVN9be0LA=) 3: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: M7rTu+x3u6qUQ5YcgymxtkFlr+zcSjgyy/tqc60RCYc=) 4: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: hvScsFU3gyKuZF4ZLSU+Pil08L9tuR9DBWDpcMUJ6M8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 00:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8e:24:e0:22:c5:18:a0:36:fd:c9:51:7d:c9:7e:71:d6:72:9a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Validity Not Before: Sep 7 20:45:36 2025 GMT Not After : Sep 11 00:57:36 2025 GMT Subject: CN=C9E5A3FD1F4BE9805C7DFEA3BE12696DD5858A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a8:83:2d:3f:e4:c4:17:5d:45:d3:bb:ab:01: 37:d9:81:fd:bd:a9:f3:29:81:da:93:3b:40:f9:a4: e4:ec:87:d1:01:a2:6c:51:69:e5:45:f2:df:30:5a: 26:b4:74:75:d4:4c:ac:47:3f:14:9a:96:92:7b:5c: 55:3f:e4:27:80:ab:8d:5d:11:90:a3:55:af:19:b9: 96:5f:6e:77:9f:ef:44:4b:d4:78:07:99:40:42:31: bb:bb:af:71:94:d0:34:59:17:20:58:f7:66:49:f7: 32:55:5f:20:1a:83:94:6f:58:8d:da:3b:ae:c4:b3: c3:f5:9a:33:ee:14:57:38:b7:64:49:5a:95:96:d6: ce:ec:8b:83:17:14:70:18:ec:1b:da:3d:15:5c:a0: 8c:ad:83:af:19:ab:93:31:e5:b5:66:87:bb:8a:80: 7f:a1:82:3a:8a:85:0f:93:56:25:f4:2c:73:da:2c: 37:68:bf:c1:fc:5d:bb:a8:6c:1c:d4:97:76:eb:d8: 38:21:9a:c0:70:8e:41:ce:06:e2:80:3a:52:e6:f8: 29:99:22:f5:14:bf:1d:4a:59:86:28:91:7c:76:fd: 5d:b5:4f:4b:43:3c:a7:aa:93:9e:38:9f:c5:a2:59: ee:19:d1:06:b3:5b:7b:ee:b7:a5:1e:c5:97:81:36: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E5:A3:FD:1F:4B:E9:80:5C:7D:FE:A3:BE:12:69:6D:D5:85:8A:53 X509v3 Authority Key Identifier: keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8f:a2:4d:71:0f:e4:1b:2d:ca:1d:c3:f9:a6:91:14:14:32: 3c:a9:6a:da:24:bf:b1:6e:b4:b3:1d:98:63:5a:25:04:52:39: 06:6d:22:46:d6:de:41:36:f6:ed:af:c1:67:1e:bf:c2:7a:ec: c6:70:c4:d7:4a:10:5f:d7:46:ca:a7:a8:dc:34:cf:be:1e:67: 0e:3c:78:0d:69:8c:e8:fa:ff:4b:b3:b1:ec:1c:6e:93:69:70: 43:8c:d3:f7:92:5a:7d:b5:44:cd:14:4a:ab:8f:59:a6:b3:90: 0b:6d:25:20:8c:be:54:f6:a9:7f:5e:2a:1a:4c:be:80:e9:44: bd:2a:e8:58:de:9f:10:5f:61:0d:b7:08:fa:15:bf:60:02:1c: 13:f6:6f:20:7f:e0:ce:9b:7b:c3:40:95:32:a8:f2:5e:fe:f3: 34:30:38:53:8e:fb:40:3f:df:d4:3a:75:ec:20:77:cd:a7:f7: b6:51:a2:18:12:07:15:18:8a:25:9d:ca:43:d4:48:52:1b:af: b3:7e:bb:5d:d0:cb:2e:8f:a8:ca:4e:98:cd:dc:bb:2e:bd:94: 3d:e7:bf:ab:6a:8c:c9:7c:4f:58:be:f8:d5:30:a2:3e:e7:b2: 32:1f:f7:24:01:6d:8e:cf:d9:44:2b:a8:de:eb:61:2e:21:3f: 9a:41:be:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTY4k4CLFGKA2/clRfcl+cdZymlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1 Qzc3RTJDMTAeFw0yNTA5MDcyMDQ1MzZaFw0yNTA5MTEwMDU3MzZaMDMxMTAvBgNV BAMTKEM5RTVBM0ZEMUY0QkU5ODA1QzdERkVBM0JFMTI2OTZERDU4NThBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfqIMtP+TEF11F07urATfZgf29 qfMpgdqTO0D5pOTsh9EBomxRaeVF8t8wWia0dHXUTKxHPxSalpJ7XFU/5CeAq41d EZCjVa8ZuZZfbnef70RL1HgHmUBCMbu7r3GU0DRZFyBY92ZJ9zJVXyAag5RvWI3a O67Es8P1mjPuFFc4t2RJWpWW1s7si4MXFHAY7BvaPRVcoIytg68Zq5Mx5bVmh7uK gH+hgjqKhQ+TViX0LHPaLDdov8H8XbuobBzUl3br2DghmsBwjkHOBuKAOlLm+CmZ IvUUvx1KWYYokXx2/V21T0tDPKeqk544n8WiWe4Z0QazW3vut6UexZeBNjOdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyeWj/R9L6YBcff6jvhJpbdWFilMwHwYDVR0j BBgwFoAUcV3G3qgP5dif3GgsGcezD1x34sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMC83MTVEQzZERUE4 MEZFNUQ4OUZEQzY4MkMxOUM3QjMwRjVDNzdFMkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1Qzc3 RTJDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0Iz MEY1Qzc3RTJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOPok1xD+QbLcodw/mmkRQUMjypatokv7Fu tLMdmGNaJQRSOQZtIkbW3kE29u2vwWcev8J67MZwxNdKEF/XRsqnqNw0z74eZw48 eA1pjOj6/0uzsewcbpNpcEOM0/eSWn21RM0USquPWaazkAttJSCMvlT2qX9eKhpM voDpRL0q6FjenxBfYQ23CPoVv2ACHBP2byB/4M6be8NAlTKo8l7+8zQwOFOO+0A/ 39Q6dewgd82n97ZRohgSBxUYiiWdykPUSFIbr7N+u13Qyy6PqMpOmM3cuy69lD3n v6tqjMl8T1i++NUwoj7nsjIf9yQBbY7P2UQrqN7rYS4hP5pBvpo= -----END CERTIFICATE-----Generated at Tue Sep 9 01:20:07 2025 by rpki-client